CitrixReceiverWeb.exe - CitrixReceiver.exe

info
MZ
PE
resources
imports
foremost
7zip
version info
signature
hexdump
disasm
log
discuss
donate

filename	CitrixReceiverWeb.exe
size	48486512 (0x2e3d870)
md5	f266c2600cde0ba492527bef4ed7f3e7

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf0

Rich Header

lib id	version	times used
95	4035	6
93	4035	25
1	0	485
125	50727	23
109	50727	146
110	50727	108
124	50727	1
120	50727	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x571e27a0
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	8.0
SizeOfCode	0x52000
SizeOfInitializedData	0x2de7000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x256cf
BaseOfCode	0x1000
BaseOfData	0x53000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x2e3e000
SizeOfHeaders	0x1000
CheckSum	0x2e479a9
Subsystem	2
DllCharacteristics	0x140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x5159c	0x52000	R-X CODE
.rdata	0x53000	0x115f0	0x12000	R-- IDATA
.data	0x65000	0x6378	0x3000	RW- IDATA
.rsrc	0x6c000	0x2db6ccc	0x2db7000	R-- IDATA
.reloc	0x2e23000	0x1aef8	0x1b000	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x61e24	0x104
RESOURCE	0x6c000	0x2db6ccc
EXCEPTION	0	0
SECURITY	0x2e3a000	0x3870
BASERELOC	0x2e23000	0x4b34
DEBUG	0x53860	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x5be30	0x40
Bound_IAT	0	0
IAT	0x53000	0x7c4
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
ICON	#1	2216	1252
ICON	#2	1384	1252
ICON	#3	67624	1252
ICON	#4	16936	1252
ICON	#5	9640	1252
ICON	#6	4264	1252
ICON	#7	1128	1252
RCDATA	CTX_UPDATE_PACKAGE	47829401	1252
GROUP_ICON	IDI_ICAICON	104	1252
VERSION	#1	800	1252
MANIFEST	#1	437	1252

module_name	hint	ord	function_name
KERNEL32.dll	938		WritePrivateProfileStringW
KERNEL32.dll	413		GetPrivateProfileStringW
KERNEL32.dll	321		GetCurrentDirectoryW
KERNEL32.dll	789		SetErrorMode
KERNEL32.dll	625		MoveFileW
KERNEL32.dll	444		GetStringTypeExW
KERNEL32.dll	964		lstrcmpiW
KERNEL32.dll	693		ReadFile
KERNEL32.dll	795		SetFilePointer
KERNEL32.dll	238		FlushFileBuffers
KERNEL32.dll	611		LockFile
KERNEL32.dll	879		UnlockFile
KERNEL32.dll	784		SetEndOfFile
KERNEL32.dll	355		GetFileSize
KERNEL32.dll	147		DuplicateHandle
KERNEL32.dll	322		GetCurrentProcess
KERNEL32.dll	492		GetVolumeInformationW
KERNEL32.dll	362		GetFullPathNameW
KERNEL32.dll	196		FileTimeToLocalFileTime
KERNEL32.dll	602		LocalFileTimeToFileTime
KERNEL32.dll	799		SetFileTime
KERNEL32.dll	794		SetFileAttributesW
KERNEL32.dll	357		GetFileTime
KERNEL32.dll	490		GetVersionExW
KERNEL32.dll	440		GetStartupInfoW
KERNEL32.dll	727		RtlUnwind
KERNEL32.dll	186		ExitThread
KERNEL32.dll	111		CreateThread
KERNEL32.dll	185		ExitProcess
KERNEL32.dll	842		SetUnhandledExceptionFilter
KERNEL32.dll	441		GetStdHandle
KERNEL32.dll	381		GetModuleFileNameA
KERNEL32.dll	246		FreeEnvironmentStringsA
KERNEL32.dll	341		GetEnvironmentStrings
KERNEL32.dll	247		FreeEnvironmentStringsW
KERNEL32.dll	343		GetEnvironmentStringsW
KERNEL32.dll	272		GetCommandLineA
KERNEL32.dll	407		GetPrivateProfileIntW
KERNEL32.dll	358		GetFileType
KERNEL32.dll	439		GetStartupInfoA
KERNEL32.dll	530		HeapCreate
KERNEL32.dll	899		VirtualFree
KERNEL32.dll	675		QueryPerformanceCounter
KERNEL32.dll	479		GetTickCount
KERNEL32.dll	458		GetSystemTimeAsFileTime
KERNEL32.dll	192		FatalAppExitA
KERNEL32.dll	897		VirtualAlloc
KERNEL32.dll	862		TerminateProcess
KERNEL32.dll	878		UnhandledExceptionFilter
KERNEL32.dll	569		IsDebuggerPresent
KERNEL32.dll	750		SetConsoleCtrlHandler
KERNEL32.dll	482		GetTimeZoneInformation
KERNEL32.dll	260		GetCPInfo
KERNEL32.dll	253		GetACP
KERNEL32.dll	403		GetOEMCP
KERNEL32.dll	575		IsValidCodePage
KERNEL32.dll	290		GetConsoleCP
KERNEL32.dll	307		GetConsoleMode
KERNEL32.dll	372		GetLocaleInfoA
KERNEL32.dll	480		GetTimeFormatA
KERNEL32.dll	327		GetDateFormatA
KERNEL32.dll	483		GetUserDefaultLCID
KERNEL32.dll	175		EnumSystemLocalesA
KERNEL32.dll	577		IsValidLocale
KERNEL32.dll	442		GetStringTypeA
KERNEL32.dll	445		GetStringTypeW
KERNEL32.dll	580		LCMapStringA
KERNEL32.dll	581		LCMapStringW
KERNEL32.dll	823		SetStdHandle
KERNEL32.dll	921		WriteConsoleA
KERNEL32.dll	309		GetConsoleOutputCP
KERNEL32.dll	931		WriteConsoleW
KERNEL32.dll	83		CreateFileA
KERNEL32.dll	787		SetEnvironmentVariableA
KERNEL32.dll	325		GetCurrentThread
KERNEL32.dll	63		ConvertDefaultLocale
KERNEL32.dll	164		EnumResourceLanguagesW
KERNEL32.dll	373		GetLocaleInfoW
KERNEL32.dll	58		CompareStringA
KERNEL32.dll	553		InterlockedExchange
KERNEL32.dll	383		GetModuleHandleA
KERNEL32.dll	510		GlobalFlags
KERNEL32.dll	859		SystemTimeToFileTime
KERNEL32.dll	197		FileTimeToSystemTime
KERNEL32.dll	474		GetThreadLocale
KERNEL32.dll	972		lstrlenA
KERNEL32.dll	960		lstrcmpA
KERNEL32.dll	255		GetAtomNameW
KERNEL32.dll	513		GlobalGetAtomNameW
KERNEL32.dll	250		FreeResource
KERNEL32.dll	503		GlobalAddAtomW
KERNEL32.dll	508		GlobalFindAtomW
KERNEL32.dll	506		GlobalDeleteAtom
KERNEL32.dll	597		LoadLibraryW
KERNEL32.dll	59		CompareStringW
KERNEL32.dll	594		LoadLibraryA
KERNEL32.dll	961		lstrcmpW
KERNEL32.dll	488		GetVersion
KERNEL32.dll	556		InterlockedIncrement
KERNEL32.dll	629		MultiByteToWideChar
KERNEL32.dll	80		CreateEventW
KERNEL32.dll	856		SuspendThread
KERNEL32.dll	790		SetEvent
KERNEL32.dll	326		GetCurrentThreadId
KERNEL32.dll	722		ResumeThread
KERNEL32.dll	836		SetThreadPriority
KERNEL32.dll	70		CopyFileW
KERNEL32.dll	519		GlobalSize
KERNEL32.dll	244		FormatMessageW
KERNEL32.dll	628		MulDiv
KERNEL32.dll	248		FreeLibrary
KERNEL32.dll	552		InterlockedDecrement
KERNEL32.dll	386		GetModuleHandleW
KERNEL32.dll	416		GetProcAddress
KERNEL32.dll	868		TlsFree
KERNEL32.dll	511		GlobalFree
KERNEL32.dll	607		LocalReAlloc
KERNEL32.dll	870		TlsSetValue
KERNEL32.dll	867		TlsAlloc
KERNEL32.dll	504		GlobalAlloc
KERNEL32.dll	514		GlobalHandle
KERNEL32.dll	522		GlobalUnlock
KERNEL32.dll	518		GlobalReAlloc
KERNEL32.dll	515		GlobalLock
KERNEL32.dll	869		TlsGetValue
KERNEL32.dll	604		LocalFree
KERNEL32.dll	600		LocalAlloc
KERNEL32.dll	973		lstrlenW
KERNEL32.dll	916		WideCharToMultiByte
KERNEL32.dll	323		GetCurrentProcessId
KERNEL32.dll	808		SetLastError
KERNEL32.dll	419		GetProcessHeap
KERNEL32.dll	540		HeapSize
KERNEL32.dll	538		HeapReAlloc
KERNEL32.dll	534		HeapFree
KERNEL32.dll	528		HeapAlloc
KERNEL32.dll	532		HeapDestroy
KERNEL32.dll	489		GetVersionExA
KERNEL32.dll	129		DeleteCriticalSection
KERNEL32.dll	547		InitializeCriticalSection
KERNEL32.dll	593		LeaveCriticalSection
KERNEL32.dll	152		EnterCriticalSection
KERNEL32.dll	679		RaiseException
KERNEL32.dll	139		DisableThreadLibraryCalls
KERNEL32.dll	382		GetModuleFileNameW
KERNEL32.dll	273		GetCommandLineW
KERNEL32.dll	78		CreateDirectoryW
KERNEL32.dll	105		CreateProcessW
KERNEL32.dll	912		WaitForSingleObject
KERNEL32.dll	346		GetExitCodeProcess
KERNEL32.dll	470		GetTempPathW
KERNEL32.dll	438		GetShortPathNameW
KERNEL32.dll	854		Sleep
KERNEL32.dll	353		GetFileAttributesW
KERNEL32.dll	213		FindFirstFileW
KERNEL32.dll	132		DeleteFileW
KERNEL32.dll	624		MoveFileExW
KERNEL32.dll	221		FindNextFileW
KERNEL32.dll	206		FindClose
KERNEL32.dll	709		RemoveDirectoryW
KERNEL32.dll	369		GetLastError
KERNEL32.dll	86		CreateFileW
KERNEL32.dll	932		WriteFile
KERNEL32.dll	52		CloseHandle
KERNEL32.dll	654		OutputDebugStringW
KERNEL32.dll	229		FindResourceExW
KERNEL32.dll	230		FindResourceW
KERNEL32.dll	599		LoadResource
KERNEL32.dll	613		LockResource
KERNEL32.dll	804		SetHandleCount
KERNEL32.dll	853		SizeofResource
USER32.dll	190		DrawTextExW
USER32.dll	191		DrawTextW
USER32.dll	668		TabbedTextOutW
USER32.dll	226		FillRect
USER32.dll	666		SystemParametersInfoW
USER32.dll	151		DestroyMenu
USER32.dll	309		GetMenuItemInfoW
USER32.dll	394		InflateRect
USER32.dll	270		GetDesktopWindow
USER32.dll	64		ClientToScreen
USER32.dll	565		ScrollWindowEx
USER32.dll	658		ShowWindow
USER32.dll	492		MoveWindow
USER32.dll	647		SetWindowTextW
USER32.dll	418		IsDialogMessageW
USER32.dll	419		IsDlgButtonChecked
USER32.dll	596		SetDlgItemTextW
USER32.dll	594		SetDlgItemInt
USER32.dll	276		GetDlgItemTextW
USER32.dll	274		GetDlgItemInt
USER32.dll	59		CheckRadioButton
USER32.dll	56		CheckDlgButton
USER32.dll	552		RegisterWindowMessageW
USER32.dll	447		LoadIconW
USER32.dll	567		SendDlgItemMessageW
USER32.dll	566		SendDlgItemMessageA
USER32.dll	722		WinHelpW
USER32.dll	414		IsChild
USER32.dll	243		GetCapture
USER32.dll	251		GetClassLongW
USER32.dll	253		GetClassNameW
USER32.dll	619		SetPropW
USER32.dll	331		GetPropW
USER32.dll	557		RemovePropW
USER32.dll	429		IsWindow
USER32.dll	598		SetFocus
USER32.dll	377		GetWindowTextLengthW
USER32.dll	378		GetWindowTextW
USER32.dll	279		GetForegroundWindow
USER32.dll	579		SetActiveWindow
USER32.dll	12		BeginDeferWindowPos
USER32.dll	197		EndDeferWindowPos
USER32.dll	273		GetDlgItem
USER32.dll	382		GrayStringW
USER32.dll	153		DestroyWindow
USER32.dll	317		GetMessageTime
USER32.dll	316		GetMessagePos
USER32.dll	474		MapWindowPoints
USER32.dll	564		ScrollWindow
USER32.dll	677		TrackPopupMenuEx
USER32.dll	676		TrackPopupMenu
USER32.dll	624		SetScrollRange
USER32.dll	623		SetScrollPos
USER32.dll	342		GetScrollPos
USER32.dll	599		SetForegroundWindow
USER32.dll	656		ShowScrollBar
USER32.dll	700		UpdateWindow
USER32.dll	255		GetClientRect
USER32.dll	300		GetMenu
USER32.dll	515		PostMessageW
USER32.dll	97		CreateWindowExW
USER32.dll	248		GetClassInfoExW
USER32.dll	249		GetClassInfoW
USER32.dll	537		RegisterClassW
USER32.dll	2		AdjustWindowRectEx
USER32.dll	561		ScreenToClient
USER32.dll	223		EqualRect
USER32.dll	144		DeferWindowPos
USER32.dll	341		GetScrollInfo
USER32.dll	622		SetScrollInfo
USER32.dll	74		CopyRect
USER32.dll	524		PtInRect
USER32.dll	691		UnregisterClassA
USER32.dll	364		GetWindowDC
USER32.dll	13		BeginPaint
USER32.dll	200		EndPaint
USER32.dll	516		PostQuitMessage
USER32.dll	343		GetScrollRange
USER32.dll	642		SetWindowPlacement
USER32.dll	272		GetDlgCtrlID
USER32.dll	143		DefWindowProcW
USER32.dll	28		CallWindowProcW
USER32.dll	641		SetWindowLongW
USER32.dll	643		SetWindowPos
USER32.dll	501		OffsetRect
USER32.dll	402		IntersectRect
USER32.dll	665		SystemParametersInfoA
USER32.dll	422		IsIconic
USER32.dll	371		GetWindowPlacement
USER32.dll	372		GetWindowRect
USER32.dll	362		GetWindow
USER32.dll	589		SetCursor
USER32.dll	655		ShowOwnedPopups
USER32.dll	145		DeleteMenu
USER32.dll	55		CharUpperW
USER32.dll	150		DestroyIcon
USER32.dll	198		EndDialog
USER32.dll	323		GetNextDlgTabItem
USER32.dll	271		GetDialogBaseUnits
USER32.dll	355		GetTopWindow
USER32.dll	84		CreateDialogIndirectParamW
USER32.dll	486		MessageBoxW
USER32.dll	196		EnableWindow
USER32.dll	430		IsWindowEnabled
USER32.dll	296		GetLastActivePopup
USER32.dll	367		GetWindowLongW
USER32.dll	325		GetParent
USER32.dll	576		SendMessageW
USER32.dll	379		GetWindowThreadProcessId
USER32.dll	686		UnhookWindowsHookEx
USER32.dll	555		RemoveMenu
USER32.dll	345		GetSubMenu
USER32.dll	306		GetMenuItemCount
USER32.dll	400		InsertMenuW
USER32.dll	609		SetMenuItemBitmaps
USER32.dll	302		GetMenuCheckMarkDimensions
USER32.dll	441		LoadBitmapW
USER32.dll	278		GetFocus
USER32.dll	488		ModifyMenuW
USER32.dll	194		EnableMenuItem
USER32.dll	57		CheckMenuItem
USER32.dll	445		LoadCursorW
USER32.dll	349		GetSystemMetrics
USER32.dll	268		GetDC
USER32.dll	554		ReleaseDC
USER32.dll	346		GetSysColor
USER32.dll	347		GetSysColorBrush
USER32.dll	692		UnregisterClassW
USER32.dll	651		SetWindowsHookExW
USER32.dll	26		CallNextHookEx
USER32.dll	318		GetMessageW
USER32.dll	682		TranslateMessage
USER32.dll	162		DispatchMessageW
USER32.dll	235		GetActiveWindow
USER32.dll	433		IsWindowVisible
USER32.dll	289		GetKeyState
USER32.dll	513		PeekMessageW
USER32.dll	267		GetCursorPos
USER32.dll	708		ValidateRect
USER32.dll	311		GetMenuState
USER32.dll	313		GetMenuStringW
USER32.dll	9		AppendMenuW
USER32.dll	307		GetMenuItemID
GDI32.dll	12		ArcTo
GDI32.dll	487		PolyDraw
GDI32.dll	495		PolylineTo
GDI32.dll	486		PolyBezierTo
GDI32.dll	220		ExtSelectClipRgn
GDI32.dll	140		DeleteDC
GDI32.dll	497		PtVisible
GDI32.dll	49		CreateDIBPatternBrushPt
GDI32.dll	70		CreatePatternBrush
GDI32.dll	421		GetStockObject
GDI32.dll	527		SelectPalette
GDI32.dll	483		PlayMetaFileRecord
GDI32.dll	406		GetObjectType
GDI32.dll	357		GetCurrentPositionEx
GDI32.dll	482		PlayMetaFile
GDI32.dll	71		CreatePen
GDI32.dll	216		ExtCreatePen
GDI32.dll	80		CreateSolidBrush
GDI32.dll	64		CreateHatchBrush
GDI32.dll	76		CreateRectRgnIndirect
GDI32.dll	566		SetRectRgn
GDI32.dll	33		CombineRgn
GDI32.dll	397		GetMapMode
GDI32.dll	477		PatBlt
GDI32.dll	81		DPtoLP
GDI32.dll	445		GetTextMetricsW
GDI32.dll	521		ScaleWindowExtEx
GDI32.dll	578		SetWindowExtEx
GDI32.dll	470		OffsetWindowOrgEx
GDI32.dll	579		SetWindowOrgEx
GDI32.dll	520		ScaleViewportExtEx
GDI32.dll	574		SetViewportExtEx
GDI32.dll	469		OffsetViewportOrgEx
GDI32.dll	575		SetViewportOrgEx
GDI32.dll	526		SelectObject
GDI32.dll	212		Escape
GDI32.dll	591		TextOutW
GDI32.dll	209		EnumMetaFile
GDI32.dll	363		GetDeviceCaps
GDI32.dll	582		StartDocW
GDI32.dll	412		GetPixel
GDI32.dll	450		GetWindowExtEx
GDI32.dll	447		GetViewportExtEx
GDI32.dll	523		SelectClipPath
GDI32.dll	75		CreateRectRgn
GDI32.dll	353		GetClipRgn
GDI32.dll	524		SelectClipRgn
GDI32.dll	538		SetColorAdjustment
GDI32.dll	529		SetArcDirection
GDI32.dll	556		SetMapperFlags
GDI32.dll	571		SetTextCharacterExtra
GDI32.dll	573		SetTextJustification
GDI32.dll	570		SetTextAlign
GDI32.dll	465		MoveToEx
GDI32.dll	461		LineTo
GDI32.dll	467		OffsetClipRgn
GDI32.dll	455		IntersectClipRect
GDI32.dll	215		ExcludeClipRect
GDI32.dll	555		SetMapMode
GDI32.dll	464		ModifyWorldTransform
GDI32.dll	580		SetWorldTransform
GDI32.dll	548		SetGraphicsMode
GDI32.dll	568		SetStretchBltMode
GDI32.dll	565		SetROP2
GDI32.dll	564		SetPolyFillMode
GDI32.dll	534		SetBkMode
GDI32.dll	512		RestoreDC
GDI32.dll	519		SaveDC
GDI32.dll	437		GetTextExtentPoint32W
GDI32.dll	222		ExtTextOutW
GDI32.dll	18		BitBlt
GDI32.dll	45		CreateCompatibleDC
GDI32.dll	61		CreateFontIndirectW
GDI32.dll	143		DeleteObject
GDI32.dll	407		GetObjectW
GDI32.dll	533		SetBkColor
GDI32.dll	572		SetTextColor
GDI32.dll	352		GetClipBox
GDI32.dll	359		GetDCOrgEx
GDI32.dll	39		CreateBitmap
GDI32.dll	47		CreateDCW
GDI32.dll	38		CopyMetaFileW
GDI32.dll	501		RectVisible
WINSPOOL.DRV	71		DocumentPropertiesW
WINSPOOL.DRV	126		OpenPrinterW
WINSPOOL.DRV	27		ClosePrinter
comdlg32.dll	8		GetFileTitleW
ADVAPI32.dll	505		RegQueryValueW
ADVAPI32.dll	480		RegEnumKeyW
ADVAPI32.dll	471		RegDeleteKeyW
ADVAPI32.dll	473		RegDeleteValueW
ADVAPI32.dll	517		RegSetValueExW
ADVAPI32.dll	466		RegCreateKeyExW
ADVAPI32.dll	494		RegOpenKeyW
ADVAPI32.dll	518		RegSetValueW
ADVAPI32.dll	504		RegQueryValueExW
ADVAPI32.dll	493		RegOpenKeyExW
ADVAPI32.dll	459		RegCloseKey
ADVAPI32.dll	467		RegCreateKeyW
SHELL32.dll		680
SHELL32.dll	173		SHGetFileInfoW
SHELL32.dll	49		ExtractIconW
SHELL32.dll	134		SHCreateDirectoryExW
ole32.dll	308		StringFromCLSID
ole32.dll	100		CoTaskMemAlloc
ole32.dll	276		ReleaseStgMedium
ole32.dll	118		CreateBindCtx
ole32.dll	270		ReadClassStg
ole32.dll	272		ReadFmtUserTypeStg
ole32.dll	104		CoTreatAsClass
ole32.dll	320		WriteClassStg
ole32.dll	322		WriteFmtUserTypeStg
ole32.dll	286		SetConvertStg
ole32.dll	101		CoTaskMemFree
ole32.dll	309		StringFromGUID2
ole32.dll	15		CoCreateGuid
ole32.dll	232		OleDuplicateData
ole32.dll	21		CoDisconnectObject
ole32.dll	16		CoCreateInstance
ole32.dll	8		CLSIDFromString
ole32.dll	252		OleRegGetUserType
OLEAUT32.dll		4
OLEAUT32.dll		9
OLEAUT32.dll		12
OLEAUT32.dll		8
OLEAUT32.dll		24
OLEAUT32.dll		23
OLEAUT32.dll		19
OLEAUT32.dll		20
OLEAUT32.dll		18
OLEAUT32.dll		17
OLEAUT32.dll		15
OLEAUT32.dll		40
OLEAUT32.dll		10
OLEAUT32.dll		37
OLEAUT32.dll		36
OLEAUT32.dll		27
OLEAUT32.dll		149
OLEAUT32.dll		148
OLEAUT32.dll		26
OLEAUT32.dll		21
OLEAUT32.dll		22
OLEAUT32.dll		16
OLEAUT32.dll		39
OLEAUT32.dll		38
OLEAUT32.dll		185
OLEAUT32.dll		184
OLEAUT32.dll		94
OLEAUT32.dll		5
OLEAUT32.dll		104
OLEAUT32.dll		113
OLEAUT32.dll		232
OLEAUT32.dll		197
OLEAUT32.dll		114
OLEAUT32.dll		150
OLEAUT32.dll		7
OLEAUT32.dll		6
OLEAUT32.dll		25
OLEACC.dll	19		LresultFromObject
OLEACC.dll	3		AccessibleObjectFromWindow
OLEACC.dll	4		CreateStdAccessibleObject
SHLWAPI.dll	48		PathFindExtensionW
SHLWAPI.dll	98		PathMatchSpecW
SHLWAPI.dll	68		PathIsDirectoryW
SHLWAPI.dll	36		PathCombineW
SHLWAPI.dll	112		PathRemoveExtensionW
SHLWAPI.dll	50		PathFindFileNameW
SHLWAPI.dll	126		PathStripToRootW
SHLWAPI.dll	90		PathIsUNCW
SHLWAPI.dll	46		PathFileExistsW
SETUPAPI.dll	452		SetupIterateCabinetW

StringTable 040904B0

CompanyName	Citrix Systems, Inc.
FileDescription	Citrix Receiver
FileVersion	14.4.1000.16
InternalName	WebPk
LegalCopyright	Copyright (c) 1990-2015 Citrix Systems, Inc.
OriginalFilename	CitrixReceiver.exe
ProductName	Citrix Receiver
ProductVersion	14.4.1000

VS_FIXEDFILEINFO

FileVersion	14.4.1000.16
ProductVersion	14.4.1000.16
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Code Signing 2010 CA

serial: 2380D25FE96FB1215AE4B410034A64C7

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:80:d2:5f:e9:6f:b1:21:5a:e4:b4:10:03:4a:64:c7
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Validity
            Not Before: May 26 00:00:00 2015 GMT
            Not After : Jul 24 23:59:59 2016 GMT
        Subject: C=US, ST=California, L=Santa Clara, O=Citrix Systems, Inc., OU=LCM(client), CN=Citrix Systems, Inc.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3e:f8:2c:26:79:dd:11:0c:09:7f:7e:56:56:
                    8f:34:86:69:cf:31:71:36:64:2b:54:7e:5e:2e:53:
                    6e:86:e9:ff:3c:b1:32:23:2a:25:f4:c4:5c:74:c2:
                    e7:af:48:ce:73:be:06:94:93:43:1d:98:34:a9:15:
                    11:1c:8d:9c:7a:bf:11:81:61:f6:ed:03:9b:59:0f:
                    f6:e0:a4:78:99:26:63:d4:42:17:dc:93:47:d0:59:
                    0a:1d:0b:1c:ed:48:0f:60:8f:58:bf:8d:fa:60:15:
                    cf:09:0c:4f:8e:4f:92:c4:47:c9:0a:3b:84:3b:29:
                    16:f0:c4:48:d4:23:9d:3e:46:a2:a1:5f:6e:58:d7:
                    4c:87:ca:91:68:fa:82:2d:f5:46:9a:46:7b:65:1f:
                    ac:3b:b3:83:5f:b7:f3:b7:3c:65:98:24:da:fa:3d:
                    d6:b5:48:ba:86:93:14:c5:6f:d8:90:79:14:ed:30:
                    8d:da:56:9e:c0:db:54:c6:8b:f8:4c:4c:e3:e1:52:
                    f2:52:c1:f4:b4:23:0e:5e:f8:a6:ef:46:72:53:f6:
                    19:5b:54:77:02:b1:77:9c:de:64:20:d8:81:9d:68:
                    0d:82:d3:ac:1c:4a:be:c6:fe:e5:21:2f:db:d6:05:
                    bc:30:81:3b:5e:e2:17:12:33:7c:02:90:e9:8d:42:
                    f8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://sf.symcb.com/sf.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://d.symcb.com/cps
                  User Notice:
                    Explicit Text: https://d.symcb.com/rpa

            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://sf.symcd.com
                CA Issuers - URI:http://sf.symcb.com/sf.crt

            X509v3 Authority Key Identifier: 
                keyid:CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D

            X509v3 Subject Key Identifier: 
                61:F6:74:AC:9E:65:D3:1E:1F:4F:F4:93:56:12:56:80:BE:01:CF:62
    Signature Algorithm: sha1WithRSAEncryption
         e3:f4:4a:68:2e:e0:ba:8f:32:65:cd:3c:e5:bb:2a:65:97:4c:
         68:11:02:7e:99:00:95:17:08:93:15:12:a6:47:24:5f:e2:67:
         71:37:01:17:bc:c9:ff:f6:d0:ff:1e:56:03:1a:e8:f6:97:22:
         71:72:20:33:05:04:4c:7b:56:7d:a9:75:e0:e7:f8:4f:c1:cd:
         de:f9:f8:9d:f9:3f:99:68:c4:f7:93:1e:72:c3:e7:82:33:69:
         51:3c:b6:78:1b:fa:c9:5c:68:00:e5:9c:af:13:7f:88:7e:80:
         c8:2d:e5:d9:f7:8a:73:28:aa:e9:ba:2d:df:7d:d0:ee:a2:e9:
         c9:62:71:83:94:a3:49:55:d7:52:f6:d2:55:aa:65:5a:e1:a5:
         23:c0:4c:b2:57:57:10:34:25:b6:ef:2a:00:56:a9:80:c0:50:
         fe:95:0b:52:91:c3:fb:78:66:41:af:ef:6c:bd:0e:4d:29:07:
         10:22:77:8f:7c:f7:76:01:72:ed:f2:10:a5:0f:f5:26:1f:12:
         99:87:c7:83:f2:a9:d6:30:5e:38:81:ac:b8:e5:b5:ae:4b:d9:
         1c:92:b6:d0:88:8b:f2:a7:89:14:55:46:c8:67:0d:e6:17:85:
         cc:81:13:10:95:27:01:e9:fd:74:00:58:34:ad:d5:db:64:65:
         4a:a1:58:ff

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:23:4b:5e:a5:d7:8a:bb:32:e9:d4:57:f7:ef:
                    e4:c7:26:7e:ad:19:98:fe:a8:9d:7d:94:f6:36:6b:
                    10:d7:75:81:30:7f:04:68:7f:cb:2b:75:1e:cd:1d:
                    08:8c:df:69:94:a7:37:a3:9c:7b:80:e0:99:e1:ee:
                    37:4d:5f:ce:3b:14:ee:86:d4:d0:f5:27:35:bc:25:
                    0b:38:a7:8c:63:9d:17:a3:08:a5:ab:b0:fb:cd:6a:
                    62:82:4c:d5:21:da:1b:d9:f1:e3:84:3b:8a:2a:4f:
                    85:5b:90:01:4f:c9:a7:76:10:7f:27:03:7c:be:ae:
                    7e:7d:c1:dd:f9:05:bc:1b:48:9c:69:e7:c0:a4:3c:
                    3c:41:00:3e:df:96:e5:c5:e4:94:71:d6:55:01:c7:
                    00:26:4a:40:3c:b5:a1:26:a9:0c:a7:6d:80:8e:90:
                    25:7b:cf:bf:3f:1c:eb:2f:96:fa:e5:87:77:c6:b5:
                    56:b2:7a:3b:54:30:53:1b:df:62:34:ff:1e:d1:f4:
                    5a:93:28:85:e5:4c:17:4e:7e:5b:fd:a4:93:99:7f:
                    df:cd:ef:a4:75:ef:ef:15:f6:47:e7:f8:19:72:d8:
                    2e:34:1a:a6:b4:a7:4c:7e:bd:bb:4f:0c:3d:57:f1:
                    30:d6:a6:36:8e:d6:80:76:d7:19:2e:a5:cd:7e:34:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/pca3-g5.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-8
            X509v3 Subject Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            X509v3 Authority Key Identifier: 
                keyid:7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33

    Signature Algorithm: sha1WithRSAEncryption
         56:22:e6:34:a4:c4:61:cb:48:b9:01:ad:56:a8:64:0f:d9:8c:
         91:c4:bb:cc:0c:e5:ad:7a:a0:22:7f:df:47:38:4a:2d:6c:d1:
         7f:71:1a:7c:ec:70:a9:b1:f0:4f:e4:0f:0c:53:fa:15:5e:fe:
         74:98:49:24:85:81:26:1c:91:14:47:b0:4c:63:8c:bb:a1:34:
         d4:c6:45:e8:0d:85:26:73:03:d0:a9:8c:64:6d:dc:71:92:e6:
         45:05:60:15:59:51:39:fc:58:14:6b:fe:d4:a4:ed:79:6b:08:
         0c:41:72:e7:37:22:06:09:be:23:e9:3f:44:9a:1e:e9:61:9d:
         cc:b1:90:5c:fc:3d:d2:8d:ac:42:3d:65:36:d4:b4:3d:40:28:
         8f:9b:10:cf:23:26:cc:4b:20:cb:90:1f:5d:8c:4c:34:ca:3c:
         d8:e5:37:d6:6f:a5:20:bd:34:eb:26:d9:ae:0d:e7:c5:9a:f7:
         a1:b4:21:91:33:6f:86:e8:58:bb:25:7c:74:0e:58:fe:75:1b:
         63:3f:ce:31:7c:9b:8f:1b:96:9e:c5:53:76:84:5b:9c:ad:91:
         fa:ac:ed:93:ba:5d:c8:21:53:c2:82:53:63:af:12:0d:50:87:
         11:1b:3d:54:52:96:8a:2c:9c:3d:92:1a:08:9a:05:2e:c7:93:
         a5:48:91:d3

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA1

76 30 9f 30 8f de db f3 b5 93 c3 ec ab 09 92 60 |v0.0...........`| fd 49 de 77 |.I.w |

Certificates
- Certificate #0
  - 2
    - 23:80:D2:5F:E9:6F:B1:21:5A:E4:B4:10:03:4A:64:C7
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)10
      - CN: VeriSign Class 3 Code Signing 2010 CA
    - 2015-05-26 00:00:00 UTC: 2016-07-24 23:59:59 UTC
    - Subject
      - C: US
      - ST: California
      - L: Santa Clara
      - O: Citrix Systems, Inc.
      - OU: LCM(client)
      - CN: Citrix Systems, Inc.
    - #5
      - rsaEncryption: nil
      - E0:3E:F8:2C:26:79:DD:11:0C:09:7F:7E:56:56:8F:34:
        86:69:CF:31:71:36:64:2B:54:7E:5E:2E:53:6E:86:E9:
        FF:3C:B1:32:23:2A:25:F4:C4:5C:74:C2:E7:AF:48:CE:
        73:BE:06:94:93:43:1D:98:34:A9:15:11:1C:8D:9C:7A:
        BF:11:81:61:F6:ED:03:9B:59:0F:F6:E0:A4:78:99:26:
        63:D4:42:17:DC:93:47:D0:59:0A:1D:0B:1C:ED:48:0F:
        60:8F:58:BF:8D:FA:60:15:CF:09:0C:4F:8E:4F:92:C4:
        47:C9:0A:3B:84:3B:29:16:F0:C4:48:D4:23:9D:3E:46:
        A2:A1:5F:6E:58:D7:4C:87:CA:91:68:FA:82:2D:F5:46:
        9A:46:7B:65:1F:AC:3B:B3:83:5F:B7:F3:B7:3C:65:98:
        24:DA:FA:3D:D6:B5:48:BA:86:93:14:C5:6F:D8:90:79:
        14:ED:30:8D:DA:56:9E:C0:DB:54:C6:8B:F8:4C:4C:E3:
        E1:52:F2:52:C1:F4:B4:23:0E:5E:F8:A6:EF:46:72:53:
        F6:19:5B:54:77:02:B1:77:9C:DE:64:20:D8:81:9D:68:
        0D:82:D3:AC:1C:4A:BE:C6:FE:E5:21:2F:DB:D6:05:BC:
        30:81:3B:5E:E2:17:12:33:7C:02:90:E9:8D:42:F8:DB: 0x010001
    - X509v3 extensions
      - basicConstraints
        nil
      - keyUsage: true, 0x80
      - crlDistributionPoints: http://sf.symcb.com/sf.crl
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://d.symcb.com/cps
        id-qt-unotice: https://d.symcb.com/rpa
      - extendedKeyUsage: codeSigning
      - authorityInfoAccess
        #0
        OCSP: http://sf.symcd.com
        caIssuers: http://sf.symcb.com/sf.crt
      - authorityKeyIdentifier:
        cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... |
      - subjectKeyIdentifier:
        61 f6 74 ac 9e 65 d3 1e 1f 4f f4 93 56 12 56 80 |a.t..e...O..V.V.| be 01 cf 62 |...b |
  - RSA-SHA1:
```
e3 f4 4a 68 2e e0 ba 8f  32 65 cd 3c e5 bb 2a 65  |..Jh....2e.<..*e|
97 4c 68 11 02 7e 99 00  95 17 08 93 15 12 a6 47  |.Lh..~.........G|
24 5f e2 67 71 37 01 17  bc c9 ff f6 d0 ff 1e 56  |$_.gq7.........V|
03 1a e8 f6 97 22 71 72  20 33 05 04 4c 7b 56 7d  |....."qr 3..L{V}|
a9 75 e0 e7 f8 4f c1 cd  de f9 f8 9d f9 3f 99 68  |.u...O.......?.h|
c4 f7 93 1e 72 c3 e7 82  33 69 51 3c b6 78 1b fa  |....r...3iQ<.x..|
c9 5c 68 00 e5 9c af 13  7f 88 7e 80 c8 2d e5 d9  |.\h.......~..-..|
f7 8a 73 28 aa e9 ba 2d  df 7d d0 ee a2 e9 c9 62  |..s(...-.}.....b|
71 83 94 a3 49 55 d7 52  f6 d2 55 aa 65 5a e1 a5  |q...IU.R..U.eZ..|
23 c0 4c b2 57 57 10 34  25 b6 ef 2a 00 56 a9 80  |#.L.WW.4%..*.V..|
c0 50 fe 95 0b 52 91 c3  fb 78 66 41 af ef 6c bd  |.P...R...xfA..l.|
0e 4d 29 07 10 22 77 8f  7c f7 76 01 72 ed f2 10  |.M).."w.|.v.r...|
a5 0f f5 26 1f 12 99 87  c7 83 f2 a9 d6 30 5e 38  |...&.........0^8|
81 ac b8 e5 b5 ae 4b d9  1c 92 b6 d0 88 8b f2 a7  |......K.........|
89 14 55 46 c8 67 0d e6  17 85 cc 81 13 10 95 27  |..UF.g.........'|
01 e9 fd 74 00 58 34 ad  d5 db 64 65 4a a1 58 ff  |...t.X4...deJ.X.|
```
- Certificate #1
  - 2
    - 52:00:E5:AA:25:56:FC:1A:86:ED:96:C9:D4:4B:33:C7
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: (c) 2006 VeriSign, Inc. - For authorized use only
      - CN: VeriSign Class 3 Public Primary Certification Authority - G5
    - 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
    - Subject
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)10
      - CN: VeriSign Class 3 Code Signing 2010 CA
    - #5
      - rsaEncryption: nil
      - F5:23:4B:5E:A5:D7:8A:BB:32:E9:D4:57:F7:EF:E4:C7:
        26:7E:AD:19:98:FE:A8:9D:7D:94:F6:36:6B:10:D7:75:
        81:30:7F:04:68:7F:CB:2B:75:1E:CD:1D:08:8C:DF:69:
        94:A7:37:A3:9C:7B:80:E0:99:E1:EE:37:4D:5F:CE:3B:
        14:EE:86:D4:D0:F5:27:35:BC:25:0B:38:A7:8C:63:9D:
        17:A3:08:A5:AB:B0:FB:CD:6A:62:82:4C:D5:21:DA:1B:
        D9:F1:E3:84:3B:8A:2A:4F:85:5B:90:01:4F:C9:A7:76:
        10:7F:27:03:7C:BE:AE:7E:7D:C1:DD:F9:05:BC:1B:48:
        9C:69:E7:C0:A4:3C:3C:41:00:3E:DF:96:E5:C5:E4:94:
        71:D6:55:01:C7:00:26:4A:40:3C:B5:A1:26:A9:0C:A7:
        6D:80:8E:90:25:7B:CF:BF:3F:1C:EB:2F:96:FA:E5:87:
        77:C6:B5:56:B2:7A:3B:54:30:53:1B:DF:62:34:FF:1E:
        D1:F4:5A:93:28:85:E5:4C:17:4E:7E:5B:FD:A4:93:99:
        7F:DF:CD:EF:A4:75:EF:EF:15:F6:47:E7:F8:19:72:D8:
        2E:34:1A:A6:B4:A7:4C:7E:BD:BB:4F:0C:3D:57:F1:30:
        D6:A6:36:8E:D6:80:76:D7:19:2E:A5:CD:7E:34:2D:89: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        true: 0
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://www.verisign.com/cps
        id-qt-unotice: https://www.verisign.com/rpa
      - keyUsage: true, 6
      - 1.3.6.1.5.5.7.1.12
        image/gif
        SHA1:
        8f e5 d3 1a 86 ac 8d 8e 6b c3 cf 80 6a d4 48 18 |........k...j.H.| 2c 7b 19 2e |,{.. |
        http://logo.verisign.com/vslogo.gif
      - crlDistributionPoints: http://crl.verisign.com/pca3-g5.crl
      - authorityInfoAccess
        OCSP: http://ocsp.verisign.com
      - extendedKeyUsage
        clientAuth: codeSigning
      - subjectAltName
        CN: VeriSignMPKI-2-8
      - subjectKeyIdentifier:
        cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... |
      - authorityKeyIdentifier:
        7f d3 65 a7 c2 dd ec bb f0 30 09 f3 43 39 fa 02 |..e......0..C9..| af 33 31 33 |.313 |
  - RSA-SHA1:
```
56 22 e6 34 a4 c4 61 cb  48 b9 01 ad 56 a8 64 0f  |V".4..a.H...V.d.|
d9 8c 91 c4 bb cc 0c e5  ad 7a a0 22 7f df 47 38  |.........z."..G8|
4a 2d 6c d1 7f 71 1a 7c  ec 70 a9 b1 f0 4f e4 0f  |J-l..q.|.p...O..|
0c 53 fa 15 5e fe 74 98  49 24 85 81 26 1c 91 14  |.S..^.t.I$..&...|
47 b0 4c 63 8c bb a1 34  d4 c6 45 e8 0d 85 26 73  |G.Lc...4..E...&s|
03 d0 a9 8c 64 6d dc 71  92 e6 45 05 60 15 59 51  |....dm.q..E.`.YQ|
39 fc 58 14 6b fe d4 a4  ed 79 6b 08 0c 41 72 e7  |9.X.k....yk..Ar.|
37 22 06 09 be 23 e9 3f  44 9a 1e e9 61 9d cc b1  |7"...#.?D...a...|
90 5c fc 3d d2 8d ac 42  3d 65 36 d4 b4 3d 40 28  |.\.=...B=e6..=@(|
8f 9b 10 cf 23 26 cc 4b  20 cb 90 1f 5d 8c 4c 34  |....#&.K ...].L4|
ca 3c d8 e5 37 d6 6f a5  20 bd 34 eb 26 d9 ae 0d  |.<..7.o. .4.&...|
e7 c5 9a f7 a1 b4 21 91  33 6f 86 e8 58 bb 25 7c  |......!.3o..X.%||
74 0e 58 fe 75 1b 63 3f  ce 31 7c 9b 8f 1b 96 9e  |t.X.u.c?.1|.....|
c5 53 76 84 5b 9c ad 91  fa ac ed 93 ba 5d c8 21  |.Sv.[........].!|
53 c2 82 53 63 af 12 0d  50 87 11 1b 3d 54 52 96  |S..Sc...P...=TR.|
8a 2c 9c 3d 92 1a 08 9a  05 2e c7 93 a5 48 91 d3  |.,.=.........H..|
```

Signer

1
unnamed
- #0
  - C: US
  - O: VeriSign, Inc.
  - OU: VeriSign Trust Network
  - OU: Terms of use at https://www.verisign.com/rpa (c)10
  - CN: VeriSign Class 3 Code Signing 2010 CA
- 23:80:D2:5F:E9:6F:B1:21:5A:E4:B4:10:03:4A:64:C7
SHA1: nil

contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

ee 15 00 d3 6e 26 56 f5  71 42 17 f8 c2 9d b1 34  |....n&V.qB.....4|
58 9f a6 c4                                       |X...            |

1.3.6.1.4.1.311.2.1.12

00 43 00 69 00 74 00 72 00 69 00 78 00 52 00 65 |.C.i.t.r.i.x.R.e| 00 63 00 65 00 69 00 76 00 65 00 72 |.c.e.i.v.e.r |
: http://www.citrix.com

rsaEncryption:

c5 94 e4 8b ff 80 16 19  26 ed b6 be 16 84 e6 4a  |........&......J|
fc 6e 0b 10 ee 99 91 03  56 4e 60 62 63 8d cb b6  |.n......VN`bc...|
ec 60 5d 2c e8 b2 a8 b5  d8 be 6c fb ac 45 3d 4c  |.`],......l..E=L|
3d 3f 3e c1 6b 14 18 ad  bc 58 cb 03 2b 9e f9 fe  |=?>.k....X..+...|
de ae cd d4 7b 09 16 19  02 4e d0 24 2b 90 3b 6f  |....{....N.$+.;o|
58 d7 7e 25 fd 07 88 a1  1a 8d 95 8b bc 58 79 d9  |X.~%.........Xy.|
be 38 2c 34 cb a2 e4 58  fd 54 a0 f9 98 cc 88 36  |.8,4...X.T.....6|
b1 0a 59 73 6b 7f da 89  a1 d9 49 f1 40 6d c5 eb  |..Ysk.....I.@m..|
2d eb 58 1d 6f 0a ac 39  98 69 93 5f 7c ce 87 e2  |-.X.o..9.i._|...|
c4 d2 1e 4f e4 74 37 1c  4c 38 79 74 3e 16 58 ed  |...O.t7.L8yt>.X.|
f5 80 16 4d 0e 53 5f f8  c3 8e af 5f d4 ff 21 84  |...M.S_...._..!.|
d8 d4 69 d2 a5 70 55 18  13 72 c7 21 0d 5a ed 96  |..i..pU..r.!.Z..|
2b fe 81 c5 c5 ac b2 9b  67 be 5b f5 32 98 63 30  |+.......g.[.2.c0|
ab c1 f6 fb fc 9a 57 79  e1 90 dc cd c0 61 d8 7b  |......Wy.....a.{|
91 a2 48 98 db d2 09 29  8c c1 cb 66 8a 7d b8 f3  |..H....)...f.}..|
d5 01 83 c3 da ea a3 a6  9e 04 48 f6 eb 23 ef 04  |..........H..#..|

1.3.6.1.4.1.311.3.3.1

pkcs7-signedData

SHA1: nil

id-smime-ct-TSTInfo

1.1.2

SHA1

85 aa 4b 7c 8b ec 7a 5e 09 2d 50 c0 ad c0 92 7a |..K|..z^.-P....z| 3c 88 10 13 |<... |

0x18B6CF26
2016-04-25 14:20:28 UTC
0x3C
#5
- C: US
- O: GeoTrust Inc
- CN: GeoTrust 2048-bit Timestamping Signer 1

Certificates
- Certificate #0
  - 2
    - 5F:D6:93:FA:B0:98:E3:F4:67:7B:B8:CB:67:2C:22:9E
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services CA - G2
    - 2015-06-11 00:00:00 UTC: 2020-12-29 23:59:59 UTC
    - Subject
      - C: US
      - O: GeoTrust Inc
      - CN: GeoTrust 2048-bit Timestamping Signer 1
    - #5
      - rsaEncryption: nil
      - BF:89:FD:38:90:9C:84:18:12:8D:4B:3D:EE:F8:13:9C:
        9C:B5:51:5F:A4:FA:69:C9:93:48:B0:13:15:27:ED:93:
        A5:1C:06:D1:81:82:82:3C:36:89:FC:65:18:D3:7F:9C:
        AF:06:4C:5E:05:E6:55:68:B2:19:6C:6B:10:45:49:4E:
        66:13:4B:63:6E:93:0A:96:18:99:71:E5:4C:EA:21:5A:
        06:21:D1:F3:24:C7:59:C4:D8:E0:2B:0A:84:4B:02:9C:
        3D:3E:32:BF:C6:FE:BC:15:8E:11:81:98:E6:A8:2F:75:
        51:53:00:B3:25:D4:7D:85:38:9C:88:68:7C:D9:E4:D2:
        07:E6:B5:8F:9F:9E:A7:5D:4E:13:8E:7A:9F:49:A9:BD:
        EC:3E:3E:4A:82:EA:4D:40:47:28:4C:62:3E:A9:09:2C:
        71:00:66:31:D0:C2:55:99:B9:4D:CB:0E:84:3B:F8:64:
        94:08:97:26:E3:A9:8D:66:4C:74:8C:5F:52:EC:64:1E:
        EA:B6:21:AA:53:31:EA:94:4A:FA:E3:C1:C3:C3:93:55:
        00:49:F8:33:A8:D7:9B:9B:44:97:6F:80:01:11:B8:15:
        84:2A:56:33:36:88:EC:D8:34:3C:36:FF:8E:16:4C:C3:
        84:B4:70:48:56:E7:76:FD:7A:C6:6C:AC:02:73:AF:15: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        nil
      - crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
      - extendedKeyUsage: true, timeStamping
      - keyUsage: true, 0x80
      - subjectKeyIdentifier:
        9c a1 a8 de bf a4 b3 98 ef fd 12 6e 55 1e 25 64 |...........nU.%d| b4 c0 d0 06 |.... |
      - authorityInfoAccess
        #0
        OCSP: http://ts-ocsp.ws.symantec.com
        caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
      - authorityKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
  - RSA-SHA1:
```
8b 5d 90 cd 89 29 35 b0  33 fd fd 6c 34 12 0e 71  |.]...)5.3..l4..q|
4e 02 0c 5d f4 7b 5a 09  62 69 20 c5 04 d0 6b 3f  |N..].{Z.bi ...k?|
60 dd 8d 39 9f 97 2a 22  e9 d1 26 69 5b be 81 08  |`..9..*"..&i[...|
b8 4f 29 cb 55 17 e1 f3  98 2f 35 78 44 2a 02 82  |.O).U..../5xD*..|
d5 5d 1b 37 ca f8 8f 0b  40 6a e4 9a a4 06 fe 5c  |.].7....@j.....\|
67 1c 39 ef 89 8f 43 2a  3b a4 0d 0f c0 99 7e 26  |g.9...C*;.....~&|
4d 94 02 b5 fe 71 fd 41  06 80 48 45 af b6 29 51  |M....q.A..HE..)Q|
61 34 fa e9 b4 0c 57 55  11 5d c5 18 d9 af 6b 75  |a4....WU.]....ku|
ce 79 55 96 15 9d 77 ba  f0 c0 45 74 50 b6 40 9b  |.yU...w...EtP.@.|
83 ae e0 51 94 cf e1 5d  85 d7 0f e0 20 fb 26 68  |...Q...].... .&h|
2f b2 24 37 85 1d 5f 52  c3 18 a6 ae 48 fd e1 92  |/.$7.._R....H...|
99 a8 ca 28 fa 32 5b 02  9f 89 fb ff 7e d8 ea 8a  |...(.2[.....~...|
19 ca 99 73 a3 10 50 98  e8 a7 83 17 8f 42 8c 2d  |...s..P......B.-|
63 28 43 97 87 e8 2a 56  ad b4 34 f0 ca b7 c0 83  |c(C...*V..4.....|
96 26 a7 d2 08 69 26 b0  9e e3 16 4b 8c 97 8f 44  |.&...i&....K...D|
8f f3 09 45 d4 4b 63 ca  1f 27 5f ce 01 f8 90 b3  |...E.Kc..'_.....|
```
- Certificate #1
  - 2
    - 0
    - RSA-MD5: nil
    - Issuer
      - C: ZA
      - ST: Western Cape
      - L: Durbanville
      - O: Thawte
      - OU: Thawte Certification
      - CN: Thawte Timestamping CA
    - 1997-01-01 00:00:00 UTC: 2020-12-31 23:59:59 UTC
    - Subject
      - C: ZA
      - ST: Western Cape
      - L: Durbanville
      - O: Thawte
      - OU: Thawte Certification
      - CN: Thawte Timestamping CA
    - #5
      - rsaEncryption: nil
      - D6:2B:58:78:61:45:86:53:EA:34:7B:51:9C:ED:B0:E6:
        2E:18:0E:FE:E0:5F:A8:27:D3:B4:C9:E0:7C:59:4E:16:
        0E:73:54:60:C1:7F:F6:9F:2E:E9:3A:85:24:15:3C:DB:
        47:04:63:C3:9E:C4:94:1A:5A:DF:4C:7A:F3:D9:43:1D:
        3C:10:7A:79:25:DB:90:FE:F0:51:E7:30:D6:41:00:FD:
        9F:28:DF:79:BE:94:BB:9D:B6:14:E3:23:85:D7:A9:41:
        E0:4C:A4:79:B0:2B:1A:8B:F2:F8:3B:8A:3E:45:AC:71:
        92:00:B4:90:41:98:FB:5F:ED:FA:B7:2E:8A:F8:88:37: 0x010001
    - basicConstraints: true, true
  - RSA-MD5:
```
67 db e2 c2 e6 87 3d 40  83 86 37 35 7d 1f ce 9a  |g.....=@..75}...|
c3 0c 66 20 a8 ba aa 04  89 86 c2 f5 10 08 0d bf  |..f ............|
cb a2 05 8a d0 4d 36 3e  f4 d7 ef 69 c6 5e e4 b0  |.....M6>...i.^..|
94 6f 4a b9 e7 de 5b 88  b6 7b db e3 27 e5 76 c3  |.oJ...[..{..'.v.|
f0 35 c1 cb b5 27 9b 33  79 dc 90 a6 00 9e 77 fa  |.5...'.3y.....w.|
fc cd 27 94 42 16 9c d3  1c 68 ec bf 5c dd e5 a9  |..'.B....h..\...|
7b 10 0a 32 74 54 13 31  8b 85 03 84 91 b7 58 01  |{..2tT.1......X.|
30 14 38 af 28 ca fc b1  50 19 19 09 ac 89 49 d3  |0.8.(...P.....I.|
```
- Certificate #2
  - 2
    - 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
    - RSA-SHA1: nil
    - Issuer
      - C: ZA
      - ST: Western Cape
      - L: Durbanville
      - O: Thawte
      - OU: Thawte Certification
      - CN: Thawte Timestamping CA
    - 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services CA - G2
    - #5
      - rsaEncryption: nil
      - B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
        2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
        C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
        74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
        6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
        2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
        61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
        99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
        79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
        9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
        DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
        27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
        27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
        E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
        48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
        64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71: 0x010001
    - #6
      - subjectKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
      - authorityInfoAccess
        OCSP: http://ocsp.thawte.com
      - basicConstraints
        true
        true: 0
      - crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
      - extendedKeyUsage: timeStamping
      - keyUsage: true, 6
      - subjectAltName
        CN: TimeStamp-2048-1
  - RSA-SHA1:
```
03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
```

unnamed
- #0
  - C: US
  - O: Symantec Corporation
  - CN: Symantec Time Stamping Services CA - G2
- 5F:D6:93:FA:B0:98:E3:F4:67:7B:B8:CB:67:2C:22:9E
SHA1: nil

contentType: id-smime-ct-TSTInfo
signingTime: 2016-04-25 14:20:28 UTC

messageDigest:

74 03 04 1b 6c 93 60 e9  f2 14 20 38 0d d6 49 bd  |t...l.`... 8..I.|
90 32 d6 5a                                       |.2.Z            |

id-smime-aa-signingCertificate:

d7 1d 45 62 c6 33 36 7c  34 e3 66 cf b7 6f b9 7b  |..Eb.36|4.f..o.{|
05 af 34 b4                                       |..4.            |

rsaEncryption:

2f 56 74 b1 a3 4e 4b 9d  a2 60 f0 6b 42 d1 f3 d5  |/Vt..NK..`.kB...|
cf 7d 03 7f cb cc 9c 19  73 c3 5d b0 18 92 42 75  |.}......s.]...Bu|
1c 4e 16 de a4 0b 1a 7f  4a 62 85 48 7d 47 59 77  |.N......Jb.H}GYw|
b5 5e 69 d1 9b fc c3 95  3c 3b f5 37 50 96 bf ad  |.^i.....<;.7P...|
f4 37 44 c4 69 6f 06 5b  0e f3 14 83 45 c4 a9 39  |.7D.io.[....E..9|
91 a6 29 5c 56 68 57 70  4a 70 50 46 a1 53 9f 5c  |..)\VhWpJpPF.S.\|
3f 4a 29 e1 8e e7 d6 89  88 22 0a 01 02 5d 18 be  |?J)......"...]..|
56 8d 6a cd 74 80 97 5b  ab 24 d6 ad 01 24 49 a5  |V.j.t..[.$...$I.|
46 ce a6 a8 b3 32 69 b6  c8 c1 1b 0f bf 7b 55 1e  |F....2i......{U.|
89 8f 6d 6d 42 5b bd 09  22 97 38 e3 b3 f6 96 20  |..mmB[..".8.... |
84 86 fa 7c 61 a1 29 51  18 aa 4d f4 2e 4a a1 ba  |...|a.)Q..M..J..|
18 e9 0b b4 39 af b1 01  ca 70 4f 79 b7 95 7f 50  |....9....pOy...P|
31 f4 e7 b3 60 b3 79 d8  44 f2 0d 6c 67 d4 9e 65  |1...`.y.D..lg..e|
04 d5 f5 34 10 0e e6 13  52 74 90 7e c1 5f 40 f7  |...4....Rt.~._@.|
94 3d 80 ce 7d 31 c7 26  fc 69 d4 3e 24 a6 36 01  |.=..}1.&.i.>$.6.|
0f ea d6 f3 11 4b 25 72  77 ee 9c d9 d2 81 c0 3b  |.....K%rw......;|

1.3.6.1.4.1.311.2.4.1

pkcs7-signedData

SHA256: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA256

60 93 3c 44 35 2a a1 34  5b 0d 7e 88 3a 4d 20 3d  |`.

Certificates
- Certificate #0
  - 2
    - 56:E4:5B:E3:A7:36:70:4E:8A:CE:D0:11:AA:5E:ED:F9
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: Symantec Corporation
      - OU: Symantec Trust Network
      - CN: Symantec Class 3 SHA256 Code Signing CA
    - 2015-12-09 00:00:00 UTC: 2017-03-09 23:59:59 UTC
    - Subject
      - C: US
      - ST: California
      - L: Santa Clara
      - O: Citrix Systems, Inc.
      - OU: LCM(ClientSHA256)
      - CN: Citrix Systems, Inc.
    - #5
      - rsaEncryption: nil
      - C3:2C:07:41:77:B0:41:13:07:02:0F:A2:B1:0D:A8:EB:
        7A:CF:6B:C6:BE:C7:45:2D:2B:5D:C5:D4:B0:E7:AC:0E:
        24:08:CC:B5:E8:A4:68:31:DA:F3:8D:D8:7C:A5:EB:78:
        40:65:06:CF:72:11:E8:92:14:B6:F3:B3:E1:B4:DC:7E:
        0F:A5:0F:DC:FA:5A:15:4C:A7:9E:18:CF:B0:7D:98:AD:
        67:A0:A2:D0:51:B1:35:11:20:A9:A8:8F:F1:6A:77:D6:
        67:5E:4B:3D:3A:39:74:91:A4:C0:CB:F0:C4:15:43:E2:
        B5:1C:96:11:CD:98:15:43:CC:CD:78:F3:B5:15:78:E7:
        0B:F5:DE:FE:9F:60:56:BB:D3:97:31:6E:55:E2:9C:12:
        DE:6E:4F:3C:1D:6A:C8:1C:B4:79:37:89:64:5F:00:67:
        35:D4:09:D3:C8:CD:4A:A6:8D:27:3D:6D:D4:14:C0:C7:
        69:4C:A7:1F:40:39:DD:A4:0A:AA:28:19:3A:CE:B1:D5:
        25:2A:CD:C3:7F:F9:81:D6:DA:6A:DD:77:5E:28:E7:A4:
        20:85:2D:70:0A:2C:8C:15:E4:23:AD:AB:30:8A:74:91:
        6F:5C:52:E0:6C:49:A8:98:1F:9A:4D:05:62:BE:7C:80:
        48:D0:B0:73:4E:D5:97:DD:95:54:92:DA:41:F7:58:ED: 0x010001
    - X509v3 extensions
      - basicConstraints
        nil
      - keyUsage: true, 0x80
      - crlDistributionPoints: http://sv.symcb.com/sv.crl
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://d.symcb.com/cps
        id-qt-unotice: https://d.symcb.com/rpa
      - extendedKeyUsage: codeSigning
      - authorityInfoAccess
        #0
        OCSP: http://sv.symcd.com
        caIssuers: http://sv.symcb.com/sv.crt
      - authorityKeyIdentifier:
        96 3b 53 f0 79 33 97 af 7d 83 ef 2e 2b cc ca b7 |.;S.y3..}...+...| 86 1e 72 66 |..rf |
      - subjectKeyIdentifier:
        e3 75 5a 00 77 39 d2 1e c0 70 f0 63 01 3c d0 ba |.uZ.w9...p.c.<..| e2 d6 b2 f0 |.... |
  - RSA-SHA256:
```
81 52 aa f8 58 2b f3 c2  6b 64 12 55 88 c4 d3 52  |.R..X+..kd.U...R|
12 c1 10 1d 41 05 af 7b  02 16 4a a2 71 8a 55 d2  |....A..{..J.q.U.|
27 8b bc b2 11 e3 6a f4  37 0c 8b a1 62 c5 6e 5b  |'.....j.7...b.n[|
99 38 a5 e1 01 8d cd 23  9f 63 04 15 a2 54 13 9e  |.8.....#.c...T..|
6d 4d cf 2a 2f 42 91 cb  c2 33 45 99 4f fc 76 da  |mM.*/B...3E.O.v.|
d0 ea 83 b3 aa a7 cc 45  0f 9a b9 99 70 e4 bb 3a  |.......E....p..:|
4c db 96 8e 6d 1d dd 8a  f3 5a 2f 07 58 f5 da 92  |L...m....Z/.X...|
20 3e ee d9 cc 98 3c f9  f8 30 17 be d5 dc c6 b2  | >....<..0......|
24 2a 4d 0d ed 4d 68 73  2e df bd 39 30 aa eb 0e  |$*M..Mhs...90...|
54 a9 ad c6 38 bb 20 b4  e3 98 8d 8d 0b f5 38 a7  |T...8. .......8.|
ec ff 58 96 0c bb 26 15  aa 49 21 2f 63 0d c6 8a  |..X...&..I!/c...|
40 92 b5 93 b7 29 56 be  e6 4b 51 62 05 7e 34 56  |@....)V..KQb.~4V|
6c f4 ca 4a ed b7 7d 3d  71 28 ad c4 89 55 9a b8  |l..J..}=q(...U..|
c8 2c bc 8a 39 7d 07 fb  a6 1b 01 58 68 2d f2 25  |.,..9}.....Xh-.%|
c2 e2 50 18 15 11 99 dd  67 c1 d0 d6 c1 0e 4a 85  |..P.....g.....J.|
a3 53 53 fc 91 e7 55 3c  68 72 53 7d 93 20 e1 a5  |.SS...U
```
- Certificate #1
  - 2
    - 3D:78:D7:F9:76:49:60:B2:61:7D:F4:F0:1E:CA:86:2A
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: (c) 2006 VeriSign, Inc. - For authorized use only
      - CN: VeriSign Class 3 Public Primary Certification Authority - G5
    - 2013-12-10 00:00:00 UTC: 2023-12-09 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - OU: Symantec Trust Network
      - CN: Symantec Class 3 SHA256 Code Signing CA
    - #5
      - rsaEncryption: nil
      - 97:83:1E:00:16:AF:2C:B1:D2:08:C4:D7:68:93:51:60:
        1E:71:F6:E2:47:B4:DB:58:4D:23:62:6A:B4:BF:5A:1B:
        51:F7:A3:0D:18:77:68:BB:D8:36:AB:2F:21:50:DA:9E:
        F3:E7:5F:27:4E:0B:C2:97:C8:09:70:93:A9:DA:5C:0D:
        4E:A4:0D:91:A0:B4:EC:14:CE:91:72:54:2E:CE:A3:DB:
        44:E9:52:1B:3F:41:3C:CA:4A:E4:AA:C0:E8:39:AB:53:
        CC:21:D0:CC:CF:7F:9B:E6:C2:CC:58:6A:82:15:EE:3D:
        36:CF:1C:C5:97:07:24:8E:F1:7B:BE:31:2D:3D:6E:DC:
        B5:99:42:9F:4B:61:95:5F:1C:70:EE:17:7D:DB:8B:E5:
        61:89:78:C7:68:1B:AF:11:78:1A:98:AE:C4:55:47:53:
        D9:B3:32:D6:A1:0E:46:40:C5:97:92:8A:D1:53:A7:99:
        5B:85:35:57:D3:EA:93:62:61:20:0A:C7:30:77:24:11:
        4D:62:83:B6:BA:7B:68:82:31:EE:65:CA:DF:F9:D5:8D:
        B2:35:DC:8C:2B:6F:6A:72:5C:60:84:9C:F2:0C:94:5E:
        C0:56:52:00:48:CC:D3:F8:A5:7D:DE:2F:D7:13:E4:38:
        A8:84:D5:46:B8:13:86:C2:1B:9D:EA:5A:38:DD:9B:DB: 0x010001
    - X509v3 extensions
      - authorityInfoAccess
        OCSP: http://s2.symcb.com
      - basicConstraints
        true
        true: 0
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: http://www.symauth.com/cps
        id-qt-unotice: http://www.symauth.com/rpa
      - crlDistributionPoints: http://s1.symcb.com/pca3-g5.crl
      - extendedKeyUsage
        clientAuth: codeSigning
      - keyUsage: true, 6
      - subjectAltName
        CN: SymantecPKI-1-567
      - subjectKeyIdentifier:
        96 3b 53 f0 79 33 97 af 7d 83 ef 2e 2b cc ca b7 |.;S.y3..}...+...| 86 1e 72 66 |..rf |
      - authorityKeyIdentifier:
        7f d3 65 a7 c2 dd ec bb f0 30 09 f3 43 39 fa 02 |..e......0..C9..| af 33 31 33 |.313 |
  - RSA-SHA256:
```
13 85 1a 1e 69 a9 37 f7  a0 bd a4 af 7e 1d 61 53  |....i.7.....~.aS|
fe 9d 8c 5e 0c a6 75 1e  78 17 23 dd fd ec 1a 03  |...^..u.x.#.....|
55 39 fb 71 95 c7 65 5a  a7 8e 30 d2 44 5a 61 db  |U9.q..eZ..0.DZa.|
70 6f da 21 05 c2 2e 73  ba 49 f1 d1 93 fe 5d c9  |po.!...s.I....].|
cd 5e 03 e0 89 9e 3f 74  1e d7 f7 38 8b a9 d6 cf  |.^....?t...8....|
bb 35 2f 33 58 a8 92 56  d1 c8 4d 3b 82 e6 79 84  |.5/3X..V..M;..y.|
16 fc 28 b0 b1 47 f3 1d  a2 3e ee 87 d9 a6 7f a4  |..(..G...>......|
56 a5 3f ad 84 2e 29 de  7c bc a8 aa a3 3d 04 01  |V.?...).|....=..|
ea ba 93 a2 0e 50 22 29  17 4c 87 e4 3a 11 5f d6  |.....P").L..:._.|
a4 25 89 9b 05 6b 2f b4  c9 01 4c 27 7b 0b ac 19  |.%...k/...L'{...|
05 22 a0 60 15 3f da c9  fb 4d 4c 8f fb 72 67 77  |.".`.?...ML..rgw|
fd 27 94 c7 ba 35 0e 88  49 fe 8d fd 28 af 4a 12  |.'...5..I...(.J.|
bd 0d b3 97 05 de 44 0c  15 fa 36 2b 03 dc c1 50  |......D...6+...P|
01 f1 a1 11 5d 14 e5 e2  bd 27 4b 54 be 2b 84 5e  |....]....'KT.+.^|
0f a6 c3 74 05 0a ef 97  c3 89 22 b1 1f 77 f3 bd  |...t......"..w..|
cd 43 d4 f1 4c a9 3f b5  8b 84 af 64 f2 d0 14 21  |.C..L.?....d...!|
```

Signer

1
unnamed
- #0
  - C: US
  - O: Symantec Corporation
  - OU: Symantec Trust Network
  - CN: Symantec Class 3 SHA256 Code Signing CA
- 56:E4:5B:E3:A7:36:70:4E:8A:CE:D0:11:AA:5E:ED:F9
SHA256: nil

1.2.840.113549.1.9.25.4: 1
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

1d 7b 07 b5 8e 1c ae 1f  a8 5e 98 6c 6f 8b 5c 6e  |.{.......^.lo.\n|
97 b0 ea d0 a3 28 e6 67  97 43 8a 13 b9 f5 5b 52  |.....(.g.C....[R|

1.3.6.1.4.1.311.2.1.12

00 43 00 69 00 74 00 72 00 69 00 78 00 52 00 65 |.C.i.t.r.i.x.R.e| 00 63 00 65 00 69 00 76 00 65 00 72 |.c.e.i.v.e.r |
: http://www.citrix.com

rsaEncryption:

6b 34 c0 8e 4c 43 79 5c  7d 27 b7 06 a7 8e 98 71  |k4..LCy\}'.....q|
51 83 83 30 b3 83 85 87  b8 31 2e bb 47 a6 cf d4  |Q..0.....1..G...|
df 7f f0 f9 99 50 98 33  08 f3 22 bc 6c 96 96 e6  |.....P.3..".l...|
db 87 61 a9 5b bc 00 42  23 73 3d b0 bd 93 f9 a1  |..a.[..B#s=.....|
e3 c9 04 13 27 9b 46 93  6d 28 73 b2 a1 53 64 81  |....'.F.m(s..Sd.|
8c 83 7f 74 de e8 75 3b  2c 06 89 c5 f3 e8 f2 a9  |...t..u;,.......|
6e 7d bf c4 d0 69 95 7c  75 68 dc db 9b 51 e6 22  |n}...i.|uh...Q."|
b9 83 71 7c c3 71 86 a3  1f fe dd 4f f3 d0 6a 60  |..q|.q.....O..j`|
3f b1 d3 3e e7 f6 2f d4  98 1d f7 a6 8a 42 2a 56  |?..>../......B*V|
7b 1d b0 b8 1d 8a b4 03  66 00 98 fe 03 df 49 65  |{.......f.....Ie|
ab d0 33 87 03 fd 2d 17  c5 d0 da a6 58 ef 82 5d  |..3...-.....X..]|
7c 92 48 03 b9 ac f1 d0  cd 04 71 74 79 9b cf 86  ||.H.......qty...|
89 48 31 f9 b6 f8 85 9c  36 06 09 3a bd f3 fc d0  |.H1.....6..:....|
d6 71 99 40 15 18 5c 9e  ce a1 59 fe 07 c9 6e de  |.q.@..\...Y...n.|
4d 24 d8 35 7d 6d 89 d9  b0 df ea b2 c5 3c d7 86  |M$.5}m.......<..|
62 8e c4 43 10 86 44 c5  30 52 88 21 49 5c 4b 8e  |b..C..D.0R.!I\K.|

1.3.6.1.4.1.311.3.3.1

pkcs7-signedData

SHA1: nil

id-smime-ct-TSTInfo

1.1.2

SHA256

30 bc 51 19 0d 01 d5 cb 78 08 88 4a b3 88 74 d4 |0.Q.....x..J..t.| b9 4c f8 b0 c0 56 68 60 be 31 79 10 d3 51 d7 1c |.L...Vh`.1y..Q..|

0x24A78689
2016-04-25 14:20:34 UTC
0x3C
#5
- C: US
- O: GeoTrust Inc
- CN: GeoTrust 2048-bit Timestamping Signer 2

Certificates
- Certificate #0
  - 2
    - 2D:4E:86:50:85:BE:E0:0E:13:72:28:B3:D0:B1:32:E9
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services CA - G2
    - 2015-06-11 00:00:00 UTC: 2020-12-29 23:59:59 UTC
    - Subject
      - C: US
      - O: GeoTrust Inc
      - CN: GeoTrust 2048-bit Timestamping Signer 2
    - #5
      - rsaEncryption: nil
      - AE:D7:CE:36:E2:BC:3E:C3:D4:84:42:7A:4C:D4:39:A4:
        80:51:28:F0:48:1F:3B:7A:C0:9A:90:9B:7F:91:35:39:
        DD:C5:01:F5:87:09:BC:31:E9:2B:8B:60:97:59:7D:24:
        40:F2:FE:F0:2D:66:95:7D:DC:A9:88:5C:89:93:E5:75:
        ED:42:6C:6B:27:2B:30:FE:95:19:7E:05:7A:96:E6:91:
        75:41:C2:82:D7:6C:EC:84:19:DF:21:81:D6:B6:9C:3F:
        23:E9:C1:48:32:7C:26:F2:CB:B8:88:41:DF:C2:61:4B:
        21:79:5F:A1:70:81:E3:12:F6:91:88:D2:AD:F0:6F:31:
        98:AE:D8:69:4D:28:AB:11:8F:1D:D8:A5:49:DD:4D:87:
        18:76:D2:15:35:CC:08:85:A6:74:5C:5D:B5:50:2A:47:
        E6:AA:00:2D:73:50:7F:C8:36:B5:19:BB:23:62:16:4C:
        20:04:21:52:F7:F3:18:16:83:38:68:34:15:3E:5D:0B:
        90:9E:A1:09:A0:06:9B:0D:25:DC:A2:46:23:E2:3D:5D:
        86:8D:76:43:0F:33:71:A7:35:31:D9:A2:B5:8F:20:6D:
        F5:18:26:56:D6:EE:0D:29:E9:26:24:48:1A:05:DD:8B:
        65:7B:74:C4:44:FA:DD:C2:9B:D3:98:3B:5D:92:FE:E5: 0x010001
    - X509v3 extensions
      - authorityInfoAccess
        #0
        OCSP: http://ts-ocsp.ws.symantec.com
        caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
      - basicConstraints
        true
        nil
      - crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
      - extendedKeyUsage: true, timeStamping
      - keyUsage: true, 0x80
      - subjectKeyIdentifier:
        7f a0 84 06 21 03 80 4c ff f6 18 91 6a 38 18 09 |....!..L....j8..| 1d d6 c4 b5 |.... |
      - authorityKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
  - RSA-SHA1:
```
33 cd 68 90 2f 5a 6b 23  01 86 95 da 14 6d 72 86  |3.h./Zk#.....mr.|
f3 61 cd cf 36 1d 08 82  c7 09 61 fb a0 f1 36 e8  |.a..6.....a...6.|
4d 41 5b 2d 0b d5 f7 cf  ba 8f 61 dc 98 38 67 79  |MA[-......a..8gy|
d6 5d 6b 30 50 be db c6  94 6e 0c 32 be 85 6e 8c  |.]k0P....n.2..n.|
6c 55 70 60 85 36 fb dc  ee c5 ec f1 38 ba 0a 7e  |lUp`.6......8..~|
5a 92 90 a7 a1 40 9a 61  0f b1 94 d6 86 a4 64 78  |Z....@.a......dx|
60 9a 30 a9 0d 0a f5 86  93 15 6a c6 6a 4f a9 9c  |`.0.......j.jO..|
77 40 1b db 1a 09 fe 33  a3 e2 03 7c 0c bf 40 0b  |w@.....3...|..@.|
2a 1a 8d 73 c5 a2 e1 ba  ba 64 2f 37 a9 78 23 23  |*..s.....d/7.x##|
38 57 a3 bd ae d5 ef c4  83 eb 1c 92 4b 58 c8 1b  |8W..........KX..|
93 45 85 ef 4e 42 22 6e  04 ce 8a b0 ce 0a f3 e1  |.E..NB"n........|
2a b8 8f 86 13 ed d3 77  21 b9 87 03 20 59 bc 62  |*......w!... Y.b|
fb a2 e9 c1 5e bd 14 eb  e0 b0 b9 0c 3e b2 9f 00  |....^.......>...|
91 a4 f8 e1 40 2b b9 09  6a 95 d7 66 7c 26 62 d0  |....@+..j..f|&b.|
4a 9c bd 04 6b 39 63 27  30 23 60 40 e9 16 bf dd  |J...k9c'0#`@....|
17 fa a3 c1 e2 4c a4 27  de bb 83 d4 4c e7 37 fa  |.....L.'....L.7.|
```
- Certificate #1
  - 2
    - 0
    - RSA-MD5: nil
    - Issuer
      - C: ZA
      - ST: Western Cape
      - L: Durbanville
      - O: Thawte
      - OU: Thawte Certification
      - CN: Thawte Timestamping CA
    - 1997-01-01 00:00:00 UTC: 2020-12-31 23:59:59 UTC
    - Subject
      - C: ZA
      - ST: Western Cape
      - L: Durbanville
      - O: Thawte
      - OU: Thawte Certification
      - CN: Thawte Timestamping CA
    - #5
      - rsaEncryption: nil
      - D6:2B:58:78:61:45:86:53:EA:34:7B:51:9C:ED:B0:E6:
        2E:18:0E:FE:E0:5F:A8:27:D3:B4:C9:E0:7C:59:4E:16:
        0E:73:54:60:C1:7F:F6:9F:2E:E9:3A:85:24:15:3C:DB:
        47:04:63:C3:9E:C4:94:1A:5A:DF:4C:7A:F3:D9:43:1D:
        3C:10:7A:79:25:DB:90:FE:F0:51:E7:30:D6:41:00:FD:
        9F:28:DF:79:BE:94:BB:9D:B6:14:E3:23:85:D7:A9:41:
        E0:4C:A4:79:B0:2B:1A:8B:F2:F8:3B:8A:3E:45:AC:71:
        92:00:B4:90:41:98:FB:5F:ED:FA:B7:2E:8A:F8:88:37: 0x010001
    - basicConstraints: true, true
  - RSA-MD5:
```
67 db e2 c2 e6 87 3d 40  83 86 37 35 7d 1f ce 9a  |g.....=@..75}...|
c3 0c 66 20 a8 ba aa 04  89 86 c2 f5 10 08 0d bf  |..f ............|
cb a2 05 8a d0 4d 36 3e  f4 d7 ef 69 c6 5e e4 b0  |.....M6>...i.^..|
94 6f 4a b9 e7 de 5b 88  b6 7b db e3 27 e5 76 c3  |.oJ...[..{..'.v.|
f0 35 c1 cb b5 27 9b 33  79 dc 90 a6 00 9e 77 fa  |.5...'.3y.....w.|
fc cd 27 94 42 16 9c d3  1c 68 ec bf 5c dd e5 a9  |..'.B....h..\...|
7b 10 0a 32 74 54 13 31  8b 85 03 84 91 b7 58 01  |{..2tT.1......X.|
30 14 38 af 28 ca fc b1  50 19 19 09 ac 89 49 d3  |0.8.(...P.....I.|
```
- Certificate #2
  - 2
    - 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
    - RSA-SHA1: nil
    - Issuer
      - C: ZA
      - ST: Western Cape
      - L: Durbanville
      - O: Thawte
      - OU: Thawte Certification
      - CN: Thawte Timestamping CA
    - 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services CA - G2
    - #5
      - rsaEncryption: nil
      - B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
        2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
        C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
        74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
        6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
        2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
        61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
        99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
        79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
        9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
        DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
        27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
        27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
        E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
        48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
        64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71: 0x010001
    - #6
      - subjectKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
      - authorityInfoAccess
        OCSP: http://ocsp.thawte.com
      - basicConstraints
        true
        true: 0
      - crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
      - extendedKeyUsage: timeStamping
      - keyUsage: true, 6
      - subjectAltName
        CN: TimeStamp-2048-1
  - RSA-SHA1:
```
03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
```

unnamed
- #0
  - C: US
  - O: Symantec Corporation
  - CN: Symantec Time Stamping Services CA - G2
- 2D:4E:86:50:85:BE:E0:0E:13:72:28:B3:D0:B1:32:E9
SHA1: nil

contentType: id-smime-ct-TSTInfo
signingTime: 2016-04-25 14:20:34 UTC

messageDigest:

c5 76 d0 8c 7a d0 5f a8  43 4c b0 91 32 18 63 da  |.v..z._.CL..2.c.|
a4 81 68 96                                       |..h.            |

id-smime-aa-signingCertificate:

ce 31 18 b4 cd 65 0c 83  d9 14 3c c2 4a 19 1b 41  |.1...e....<.J..A|
e8 a6 f5 00                                       |....            |

rsaEncryption:

7c c1 0d d0 69 3b ae c0  27 1f 28 fe aa 4e 92 c3  ||...i;..'.(..N..|
fb 11 0b 44 43 0e f3 ee  b0 f9 a9 e1 7b 94 01 d2  |...DC.......{...|
a5 63 2b 8b 73 8c 45 31  57 3e 55 c5 24 58 9a 6f  |.c+.s.E1W>U.$X.o|
1b 4d 5a 75 f8 47 d2 95  c5 2e 92 fe 7a d5 7e 83  |.MZu.G......z.~.|
b6 4e 56 c2 7c b1 ce 1f  8c 79 c8 af 97 5f e1 97  |.NV.|....y..._..|
34 fc 36 d3 fe 52 1b 27  c5 0a 6d 0b 76 50 d8 ee  |4.6..R.'..m.vP..|
d1 e4 e2 b0 96 c3 34 1e  12 e1 d7 97 a8 74 c8 97  |......4......t..|
8b 60 35 d3 df 38 31 dd  91 98 3e d6 9c 44 9e 72  |.`5..81...>..D.r|
62 78 99 da 0a d1 e2 61  69 6d 89 71 53 d8 ca 5d  |bx.....aim.qS..]|
ac 46 f2 89 c5 ef 7d 4f  49 c9 07 7e a4 77 07 42  |.F....}OI..~.w.B|
47 20 d7 45 f4 26 f7 76  c3 f5 49 92 3a cd 15 3d  |G .E.&.v..I.:..=|
fd ac 80 8f 0f 76 38 74  5b 20 52 c7 72 6b 1b 7e  |.....v8t[ R.rk.~|
9b 3f 66 2f b6 c6 97 3a  12 09 65 0d ab 86 dc 57  |.?f/...:..e....W|
b8 cd 17 93 57 64 88 24  b7 85 f8 99 b7 bd 47 2e  |....Wd.$......G.|
4f 74 4d e0 19 af 64 45  1f 95 b2 87 14 d7 af 6d  |OtM...dE.......m|
d2 55 2f 6b bd b5 f0 6f  ce 8b 6b f1 61 c4 89 80  |.U/k...o..k.a...|

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	48480928	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 48486512 bytes (47 MiB)


--
Type = PE
Physical Size = 48486512
CPU = x86
Characteristics = Executable 32-bit
Created = 2016-04-25 14:20:16
Headers Size = 4096
Checksum = 48527785
Name = CitrixReceiver.exe
Image Size = 48488448
Section Alignment = 4096
File Alignment = 4096
Code Size = 335872
Initialized Data Size = 48132096
Uninitialized Data Size = 0
Linker Version = 8.0
OS Version = 4.0
Image Version = 0.0
Subsystem Version = 4.0
Subsystem = Windows GUI
DLL Characteristics = Relocated NX-Compatible
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
Comment = FileVersion: 14.4.1000.16
ProductVersion: 14.4.1000.16
ProductVersion: 14.4.1000
CompanyName: Citrix Systems, Inc.
FileDescription: Citrix Receiver
InternalName: WebPk
LegalCopyright: Copyright (c) 1990-2015 Citrix Systems, Inc.
OriginalFilename: CitrixReceiver.exe
ProductName: Citrix Receiver
----
Path = .rsrc/RCDATA/CTX_UPDATE_PACKAGE
Size = 47829401
Packed Size = 47829401
--
Path = .rsrc/RCDATA/CTX_UPDATE_PACKAGE
Type = Cab
WARNINGS:
There are data after the end of archive
Physical Size = 47814961
Tail Size = 14440
Method = LZX:21
Blocks = 1
Volumes = 1
Volume Index = 0
ID = 0

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2016-02-18 08:46:28 ....A         5977               Localized_de.xml
2016-02-18 08:46:28 ....A         5592               Localized_en.xml
2016-02-18 08:46:28 ....A         5969               Localized_es.xml
2016-02-18 08:46:28 ....A         6019               Localized_fr.xml
2016-02-18 08:46:28 ....A         6408               Localized_ja.xml
2016-02-18 08:46:28 ....A         5853               Localized_ko.xml
2016-02-18 08:46:30 ....A         7116               Localized_ru.xml
2016-02-18 08:46:30 ....A         5332               Localized_zh-CN.xml
2016-02-18 08:46:30 ....A         5329               Localized_zh-TW.xml
2016-01-27 04:17:54 ....A         8345               EULA_de.rtf
2016-01-27 04:17:54 ....A         7010               EULA_en.rtf
2016-01-27 04:17:54 ....A         8381               EULA_es.rtf
2016-01-27 04:17:54 ....A         8637               EULA_fr.rtf
2016-01-27 04:17:54 ....A        22618               EULA_ja.rtf
2016-01-27 04:17:54 ....A         2271               EULA_ko.rtf
2016-01-27 04:17:54 ....A        26540               EULA_ru.rtf
2016-01-27 04:17:54 ....A        13515               EULA_zh-CN.rtf
2016-01-27 04:17:54 ....A        13268               EULA_zh-TW.rtf
2016-04-25 07:18:26 ....A         4071               Global.xml
2016-02-18 08:46:30 ....A         9860               Preserve.xml
2016-04-25 07:19:30 ....A        15373               dualpk.cab
2016-02-18 08:46:28 ....A         9574               HeaderLogo.bmp
2016-02-18 08:46:30 ....A        54358               SideBarBackground.bmp
2016-04-25 07:17:32 ....A      3432448               GenericUSB.msi
2016-04-25 06:57:52 ....A      1306112               DesktopViewer.msi
2016-04-25 07:09:56 ....A     20238336               ICAWebWrapper.msi
2016-03-17 07:29:42 ....A      6242304               AuthManager.msi
2016-04-25 06:08:36 ....A      6234112               SelfServicePlugin.msi
2016-04-25 07:15:14 ....A      1990144               SSONWrapper.msi
2016-04-25 06:35:56 ....A      1713152               CitrixHDXMediaStreamForFlash-ClientInstall.msi
2016-04-25 07:18:10 ....A       902656               Vd3dClient.msi
2016-04-25 06:08:32 ....A      8731136               RIInstaller.msi
2016-04-25 06:26:14 ....A      1710208               TrolleyExpress.exe
2016-04-25 06:15:44 ....A       493696               TrolleyExpressUI_de.dll
2016-04-25 06:15:42 ....A       489600               TrolleyExpressUI_en.dll
2016-04-25 06:15:44 ....A       493696               TrolleyExpressUI_es.dll
2016-04-25 06:15:46 ....A       493696               TrolleyExpressUI_fr.dll
2016-04-25 06:15:46 ....A       485504               TrolleyExpressUI_ja.dll
2016-04-25 06:15:52 ....A       485504               TrolleyExpressUI_ko.dll
2016-04-25 06:15:46 ....A       489600               TrolleyExpressUI_ru.dll
2016-04-25 06:15:50 ....A       481408               TrolleyExpressUI_zh-CN.dll
2016-04-25 06:15:52 ....A       481408               TrolleyExpressUI_zh-TW.dll
2016-04-25 06:25:08 ....A        47216               EnvInfo.dll
2016-04-25 06:24:58 ....A        48752               DllWrapper.dll
2016-04-25 06:25:04 ....A       100464               Interop.WUApiLib.dll
2016-02-18 08:46:30 ....A          211               TrolleyExpress.exe.config
2016-04-25 06:08:36 ....A       380928               WebHelper.msi
2016-01-27 04:17:58 ....A       595584               ReceiverCleanupUtility.exe
2016-03-17 01:53:00 ....A        95576               DSETUP.dll
2016-03-17 01:53:00 ....A      1566040               dsetup32.dll
2016-03-17 01:53:00 ....A        97152               dxupdate.cab
2016-03-17 01:53:00 ....A       517976               DXSETUP.exe
2016-03-17 01:53:00 ....A       768036               Jun2010_d3dx9_43_x86.cab
2016-04-25 07:19:30 ....A        15373               dualpk.cab
------------------- ----- ------------ ------------  ------------------------
2016-04-25 07:19:30           61385444     48486512  54 files

Warnings: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

CitrixReceiverWeb.exe- CitrixReceiver.exe - Citrix Receiver

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

Signers (1)

Certificates (2)

CitrixReceiverWeb.exe
- CitrixReceiver.exe - Citrix Receiver