MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 000004b0

VS_FIXEDFILEINFO

Signers (1)

issuer: /C=US/O=thawte, Inc./CN=thawte SHA256 Code Signing CA - G2
serial: 5821499C775314DC773DE210C0E1B8FB

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl
            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
        4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
        6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
        11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
        d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
        40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
        3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
        7e:b6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
        18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
        dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
        33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
        c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
        bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
        29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
        0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
        69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
        13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
        15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
        88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
        eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
        3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
        1c:d8:04:75

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:21:49:9c:77:53:14:dc:77:3d:e2:10:c0:e1:b8:fb
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=thawte, Inc., CN=thawte SHA256 Code Signing CA - G2
        Validity
            Not Before: Oct 26 00:00:00 2015 GMT
            Not After : Jun 25 23:59:59 2016 GMT
        Subject: C=PA, ST=Panama, L=Panama, O=Torch Media Inc., OU=DEV, CN=Torch Media Inc.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bc:48:d0:dd:dc:3d:9a:78:87:9c:0e:7b:62:73:
                    00:23:d0:db:3e:5a:48:39:11:8e:8b:73:bc:90:e7:
                    96:f2:ba:b5:70:35:f5:f7:71:c3:fe:b4:6a:d1:c5:
                    12:49:90:b8:aa:92:b9:6a:0d:64:7a:63:ba:a5:b2:
                    73:89:a1:05:46:aa:c8:0c:a6:40:65:ae:36:21:b6:
                    02:40:7a:67:19:fc:e7:7e:76:0b:3a:8e:3f:ab:85:
                    14:36:fb:43:af:cc:53:ff:d5:4d:d0:fc:16:a0:b2:
                    c4:50:ce:45:11:74:ac:34:fb:c0:72:aa:a7:bf:bc:
                    04:bd:22:92:67:e8:32:04:59:7d:09:6c:da:64:79:
                    1e:fb:f2:44:18:77:a4:16:1e:b0:bd:0d:a3:48:19:
                    70:c2:11:90:70:3c:d6:67:4b:a9:d9:aa:46:fd:e2:
                    06:fb:17:ea:49:5f:18:ee:64:5a:47:e6:b0:51:55:
                    a6:bd:93:46:04:6e:e3:65:fd:7e:2f:d3:aa:e0:2a:
                    3b:bf:9f:00:d0:23:0c:99:dd:79:73:aa:75:02:82:
                    02:fb:b2:94:3f:37:54:7d:69:74:b9:52:a1:2e:32:
                    56:c0:26:5d:69:46:ba:8a:61:3f:1c:a9:9c:75:9f:
                    21:4c:cc:59:8d:7e:24:26:c4:4b:26:d0:8f:c8:68:
                    df:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Authority Key Identifier: 
                70:F6:A8:73:3A:50:F2:5B:0A:70:CD:11:C1:68:0A:76:F0:3D:A5:56
            X509v3 Subject Key Identifier: 
                4A:78:06:D7:37:61:C8:C6:06:6B:43:03:7E:AE:89:63:30:C4:60:14
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://to.symcb.com/to.crl
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.48.2
                  CPS: https://www.thawte.com/cps
                  User Notice:
                    Explicit Text: https://www.thawte.com/repository
            2.5.29.4: 
                0.0.0..
+.....7.......
            Authority Information Access: 
                OCSP - URI:http://to.symcd.com
                CA Issuers - URI:http://to.symcb.com/to.crt
            Netscape Cert Type: 
                Object Signing
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        1f:b6:80:28:3d:8b:8d:b0:c4:60:c0:39:f9:c8:2f:be:f3:29:
        a4:77:c7:2a:b4:5e:9c:df:a0:f8:95:d9:26:82:51:89:94:51:
        5b:78:1e:8d:7a:b7:53:a7:57:69:fe:67:65:73:6a:0f:f1:e1:
        7d:07:ba:2b:22:b6:9b:a9:3d:14:16:45:c8:f7:ab:d4:41:55:
        ac:56:7d:9f:20:01:79:7d:e2:13:db:9e:32:f0:0d:ca:39:5c:
        2a:11:4c:fd:39:73:b2:8a:94:5b:75:2d:38:1f:9e:18:a8:f8:
        95:20:2b:69:1e:6d:4f:a5:3d:a6:a7:30:35:33:7b:ce:66:cb:
        3a:ae:b0:d1:c5:9c:c7:7f:e8:06:9a:0d:21:8e:14:73:3b:a5:
        1d:05:6a:f5:f2:cb:57:89:20:c1:91:a3:72:d0:24:99:9f:c6:
        f0:bf:61:1d:82:b7:a9:cb:53:71:75:a8:02:1e:76:f8:02:b4:
        a5:c1:89:ba:58:5c:33:2f:21:48:29:00:a7:6c:3c:8b:69:7f:
        20:40:0c:d0:82:e8:82:1a:00:88:5d:ed:f7:3b:c1:71:8c:42:
        bd:e5:cf:42:e2:3c:42:6f:53:a6:80:e4:2c:b5:ce:85:ff:cf:
        62:65:90:57:ea:7d:75:7b:52:8a:a2:8b:83:64:18:09:2a:a9:
        e4:b2:9b:95

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f3:cc:63:cf:04:30:4d:47:c3:b5:87:04:9f:a8:07
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2008 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA - G3
        Validity
            Not Before: Jul 22 00:00:00 2014 GMT
            Not After : Jul 21 23:59:59 2024 GMT
        Subject: C=US, O=thawte, Inc., CN=thawte SHA256 Code Signing CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d9:56:af:ca:ad:69:35:de:3b:06:56:01:75:35:
                    97:d2:53:7c:49:b6:fe:0c:18:f0:b6:3c:43:6f:72:
                    1b:9c:48:34:f0:ac:c9:b2:d9:97:7d:0c:13:b9:ce:
                    85:0c:2e:b9:f6:96:cc:49:e6:23:a0:27:58:32:18:
                    41:59:6d:87:be:82:35:64:86:e8:b1:3a:e4:8f:74:
                    e4:ce:36:92:ae:bc:b5:76:25:ea:f9:24:66:b3:78:
                    ee:83:a1:a3:fe:d1:03:55:55:10:ae:21:e8:b1:95:
                    94:02:b5:2c:d9:c5:f4:08:23:00:fe:09:8d:2b:17:
                    08:29:8c:0b:16:0e:58:1a:d9:0c:3a:e4:de:99:6d:
                    22:ff:bd:1b:94:2a:34:cb:19:7a:a6:2f:e3:2b:d0:
                    e6:79:98:4a:d8:eb:4b:98:64:bb:b7:e1:10:c6:53:
                    d9:ab:84:75:63:0c:69:b7:f0:c9:1b:a5:f7:55:91:
                    21:62:5a:67:81:3f:0f:79:16:57:d0:ed:ef:6c:1a:
                    35:5b:6d:41:6e:6d:98:3a:fd:4c:99:43:cd:ea:b1:
                    29:69:99:35:06:e7:6c:f6:06:54:e3:56:79:d2:f5:
                    6a:cb:c9:66:4a:ee:6b:bf:5f:a7:e9:8f:fb:f7:ee:
                    72:db:d6:fb:21:f5:2d:63:e0:e8:3b:8d:47:17:11:
                    d8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://t.symcd.com
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.48.2
                  CPS: https://www.thawte.com/cps
                  User Notice:
                    Explicit Text: https://www.thawte.com/repository
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://t.symcb.com/ThawtePCA-G3.crl
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=SymantecPKI-1-725
            X509v3 Subject Key Identifier: 
                70:F6:A8:73:3A:50:F2:5B:0A:70:CD:11:C1:68:0A:76:F0:3D:A5:56
            X509v3 Authority Key Identifier: 
                AD:6C:AA:94:60:9C:ED:E4:FF:FA:3E:0A:74:2B:63:03:F7:B6:59:BF
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        62:58:66:5d:36:2f:ec:7f:f5:c7:ab:08:35:83:0a:13:54:bb:
        70:8b:e1:7a:28:80:56:db:ac:20:c1:2a:1b:70:10:76:fd:08:
        5f:09:a5:8b:a6:60:1f:f4:ea:ed:11:36:a7:d5:a0:e1:55:d2:
        15:27:79:d1:ba:0e:69:6c:87:c5:e7:09:5a:08:86:bf:cc:6b:
        1c:8a:2c:57:6e:52:cd:d1:98:52:73:28:f5:35:e3:25:c0:ab:
        6b:5c:28:35:b9:75:43:0c:55:8d:de:47:cb:5f:94:3d:19:71:
        57:33:34:dd:73:c5:58:d2:eb:ae:cc:e5:c2:fa:90:99:fd:03:
        f1:8b:31:7b:50:81:e3:2b:77:68:01:7b:27:79:cf:05:32:21:
        ad:84:40:f2:f5:19:03:c6:04:0a:ae:51:d5:c8:35:22:39:c2:
        27:7c:c1:8a:55:4b:06:21:cf:60:61:2a:28:c8:f6:82:ec:4e:
        c7:01:bc:aa:de:0b:12:c6:ae:3a:f3:82:46:27:b3:18:b6:e9:
        9d:9e:4d:4a:02:77:ab:29:96:77:14:e5:d8:c2:1e:e6:4b:60:
        d8:b8:b2:83:24:c0:57:73:5b:12:c9:d2:c0:56:27:0b:93:71:
        53:e8:8e:55:52:37:b1:c7:5a:2b:4d:ad:68:54:0a:8e:ce:ac:
        51:33:1c:8c
pkcs7-signedData
  • 1
    • SHA256: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
            00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • SHA256
          • 85 d1 6b d1 27 44 14 91  4f 81 33 57 f5 16 b1 38  |..k.'D..O.3W...8|
            b4 ca 48 89 d1 88 e8 06  ba e7 03 12 a4 42 26 c2  |..H..........B&.|
    • Certificates
      • Certificate #0
        • 2
          • 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
          • RSA-SHA1: nil
          • Issuer
            • C: ZA
            • ST: Western Cape
            • L: Durbanville
            • O: Thawte
            • OU: Thawte Certification
            • CN: Thawte Timestamping CA
          • 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services CA - G2
          • #5
            • rsaEncryption: nil
            • B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
              2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
              C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
              74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
              6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
              2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
              61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
              99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
              79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
              9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
              DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
              27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
              27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
              E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
              48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
              64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71
              : 0x010001
          • #6
            • subjectKeyIdentifier:
              5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
              4c 80 2e dd                                       |L...            |
            • authorityInfoAccess
              • OCSP: http://ocsp.thawte.com
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
            • extendedKeyUsage: timeStamping
            • keyUsage: true, 6
            • subjectAltName
              • CN: TimeStamp-2048-1
        • RSA-SHA1:
          03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
          1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
          09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
          12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
          59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
          e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
          c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
          87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
      • Certificate #1
        • 2
          • 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services CA - G2
          • 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services Signer - G4
          • #5
            • rsaEncryption: nil
            • A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
              61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
              53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
              0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
              C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
              64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
              CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
              28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
              92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
              CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
              D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
              2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
              74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
              3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
              8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
              83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD
              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: true, timeStamping
            • keyUsage: true, 0x80
            • authorityInfoAccess
              • #0
                • OCSP: http://ts-ocsp.ws.symantec.com
                • caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
            • crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
            • subjectAltName
              • CN: TimeStamp-2048-2
            • subjectKeyIdentifier:
              46 c6 69 a3 0e 4a 14 1e  d5 4c da 52 63 17 3f 5e  |F.i..J...L.Rc.?^|
              36 bc 0d e6                                       |6...            |
            • authorityKeyIdentifier:
              5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
              4c 80 2e dd                                       |L...            |
        • RSA-SHA1:
          78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
          07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
          9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
          6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
          f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
          c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
          78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
          d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
          ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
          69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
          16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
          5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
          94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
          2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
          57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
          bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
      • Certificate #2
        • 2
          • 58:21:49:9C:77:53:14:DC:77:3D:E2:10:C0:E1:B8:FB
          • RSA-SHA256: nil
          • Issuer
            • C: US
            • O: thawte, Inc.
            • CN: thawte SHA256 Code Signing CA - G2
          • 2015-10-26 00:00:00 UTC: 2016-06-25 23:59:59 UTC
          • Subject
            • C: PA
            • ST: Panama
            • L: Panama
            • O: Torch Media Inc.
            • OU: DEV
            • CN: Torch Media Inc.
          • #5
            • rsaEncryption: nil
            • BC:48:D0:DD:DC:3D:9A:78:87:9C:0E:7B:62:73:00:23:
              D0:DB:3E:5A:48:39:11:8E:8B:73:BC:90:E7:96:F2:BA:
              B5:70:35:F5:F7:71:C3:FE:B4:6A:D1:C5:12:49:90:B8:
              AA:92:B9:6A:0D:64:7A:63:BA:A5:B2:73:89:A1:05:46:
              AA:C8:0C:A6:40:65:AE:36:21:B6:02:40:7A:67:19:FC:
              E7:7E:76:0B:3A:8E:3F:AB:85:14:36:FB:43:AF:CC:53:
              FF:D5:4D:D0:FC:16:A0:B2:C4:50:CE:45:11:74:AC:34:
              FB:C0:72:AA:A7:BF:BC:04:BD:22:92:67:E8:32:04:59:
              7D:09:6C:DA:64:79:1E:FB:F2:44:18:77:A4:16:1E:B0:
              BD:0D:A3:48:19:70:C2:11:90:70:3C:D6:67:4B:A9:D9:
              AA:46:FD:E2:06:FB:17:EA:49:5F:18:EE:64:5A:47:E6:
              B0:51:55:A6:BD:93:46:04:6E:E3:65:FD:7E:2F:D3:AA:
              E0:2A:3B:BF:9F:00:D0:23:0C:99:DD:79:73:AA:75:02:
              82:02:FB:B2:94:3F:37:54:7D:69:74:B9:52:A1:2E:32:
              56:C0:26:5D:69:46:BA:8A:61:3F:1C:A9:9C:75:9F:21:
              4C:CC:59:8D:7E:24:26:C4:4B:26:D0:8F:C8:68:DF:1D
              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • nil
            • authorityKeyIdentifier:
              70 f6 a8 73 3a 50 f2 5b  0a 70 cd 11 c1 68 0a 76  |p..s:P.[.p...h.v|
              f0 3d a5 56                                       |.=.V            |
            • subjectKeyIdentifier:
              4a 78 06 d7 37 61 c8 c6  06 6b 43 03 7e ae 89 63  |Jx..7a...kC.~..c|
              30 c4 60 14                                       |0.`.            |
            • crlDistributionPoints: http://to.symcb.com/to.crl
            • keyUsage: true, 0x80
            • extendedKeyUsage: codeSigning
            • certificatePolicies
              • 2.16.840.1.113733.1.7.48.2
                • #0
                  • id-qt-cps: https://www.thawte.com/cps
                  • id-qt-unotice: https://www.thawte.com/repository
            • 2.5.29.4
              • msCodeCom: 0x80
            • authorityInfoAccess
              • #0
                • OCSP: http://to.symcd.com
                • caIssuers: http://to.symcb.com/to.crt
            • nsCertType: 0x10
        • RSA-SHA256:
          1f b6 80 28 3d 8b 8d b0  c4 60 c0 39 f9 c8 2f be  |...(=....`.9../.|
          f3 29 a4 77 c7 2a b4 5e  9c df a0 f8 95 d9 26 82  |.).w.*.^......&.|
          51 89 94 51 5b 78 1e 8d  7a b7 53 a7 57 69 fe 67  |Q..Q[x..z.S.Wi.g|
          65 73 6a 0f f1 e1 7d 07  ba 2b 22 b6 9b a9 3d 14  |esj...}..+"...=.|
          16 45 c8 f7 ab d4 41 55  ac 56 7d 9f 20 01 79 7d  |.E....AU.V}. .y}|
          e2 13 db 9e 32 f0 0d ca  39 5c 2a 11 4c fd 39 73  |....2...9\*.L.9s|
          b2 8a 94 5b 75 2d 38 1f  9e 18 a8 f8 95 20 2b 69  |...[u-8...... +i|
          1e 6d 4f a5 3d a6 a7 30  35 33 7b ce 66 cb 3a ae  |.mO.=..053{.f.:.|
          b0 d1 c5 9c c7 7f e8 06  9a 0d 21 8e 14 73 3b a5  |..........!..s;.|
          1d 05 6a f5 f2 cb 57 89  20 c1 91 a3 72 d0 24 99  |..j...W. ...r.$.|
          9f c6 f0 bf 61 1d 82 b7  a9 cb 53 71 75 a8 02 1e  |....a.....Squ...|
          76 f8 02 b4 a5 c1 89 ba  58 5c 33 2f 21 48 29 00  |v.......X\3/!H).|
          a7 6c 3c 8b 69 7f 20 40  0c d0 82 e8 82 1a 00 88  |.l<.i. @........|
          5d ed f7 3b c1 71 8c 42  bd e5 cf 42 e2 3c 42 6f  |]..;.q.B...B.
      • Certificate #3
        • 2
          • 0B:F3:CC:63:CF:04:30:4D:47:C3:B5:87:04:9F:A8:07
          • RSA-SHA256: nil
          • Issuer
            • C: US
            • O: thawte, Inc.
            • OU: Certification Services Division
            • OU: (c) 2008 thawte, Inc. - For authorized use only
            • CN: thawte Primary Root CA - G3
          • 2014-07-22 00:00:00 UTC: 2024-07-21 23:59:59 UTC
          • Subject
            • C: US
            • O: thawte, Inc.
            • CN: thawte SHA256 Code Signing CA - G2
          • #5
            • rsaEncryption: nil
            • D9:56:AF:CA:AD:69:35:DE:3B:06:56:01:75:35:97:D2:
              53:7C:49:B6:FE:0C:18:F0:B6:3C:43:6F:72:1B:9C:48:
              34:F0:AC:C9:B2:D9:97:7D:0C:13:B9:CE:85:0C:2E:B9:
              F6:96:CC:49:E6:23:A0:27:58:32:18:41:59:6D:87:BE:
              82:35:64:86:E8:B1:3A:E4:8F:74:E4:CE:36:92:AE:BC:
              B5:76:25:EA:F9:24:66:B3:78:EE:83:A1:A3:FE:D1:03:
              55:55:10:AE:21:E8:B1:95:94:02:B5:2C:D9:C5:F4:08:
              23:00:FE:09:8D:2B:17:08:29:8C:0B:16:0E:58:1A:D9:
              0C:3A:E4:DE:99:6D:22:FF:BD:1B:94:2A:34:CB:19:7A:
              A6:2F:E3:2B:D0:E6:79:98:4A:D8:EB:4B:98:64:BB:B7:
              E1:10:C6:53:D9:AB:84:75:63:0C:69:B7:F0:C9:1B:A5:
              F7:55:91:21:62:5A:67:81:3F:0F:79:16:57:D0:ED:EF:
              6C:1A:35:5B:6D:41:6E:6D:98:3A:FD:4C:99:43:CD:EA:
              B1:29:69:99:35:06:E7:6C:F6:06:54:E3:56:79:D2:F5:
              6A:CB:C9:66:4A:EE:6B:BF:5F:A7:E9:8F:FB:F7:EE:72:
              DB:D6:FB:21:F5:2D:63:E0:E8:3B:8D:47:17:11:D8:55
              : 0x010001
          • X509v3 extensions
            • authorityInfoAccess
              • OCSP: http://t.symcd.com
            • basicConstraints
              • true
              • true: 0
            • certificatePolicies
              • 2.16.840.1.113733.1.7.48.2
                • #0
                  • id-qt-cps: https://www.thawte.com/cps
                  • id-qt-unotice: https://www.thawte.com/repository
            • crlDistributionPoints: http://t.symcb.com/ThawtePCA-G3.crl
            • extendedKeyUsage: codeSigning
            • keyUsage: true, 6
            • subjectAltName
              • CN: SymantecPKI-1-725
            • subjectKeyIdentifier:
              70 f6 a8 73 3a 50 f2 5b  0a 70 cd 11 c1 68 0a 76  |p..s:P.[.p...h.v|
              f0 3d a5 56                                       |.=.V            |
            • authorityKeyIdentifier:
              ad 6c aa 94 60 9c ed e4  ff fa 3e 0a 74 2b 63 03  |.l..`.....>.t+c.|
              f7 b6 59 bf                                       |..Y.            |
        • RSA-SHA256:
          62 58 66 5d 36 2f ec 7f  f5 c7 ab 08 35 83 0a 13  |bXf]6/......5...|
          54 bb 70 8b e1 7a 28 80  56 db ac 20 c1 2a 1b 70  |T.p..z(.V.. .*.p|
          10 76 fd 08 5f 09 a5 8b  a6 60 1f f4 ea ed 11 36  |.v.._....`.....6|
          a7 d5 a0 e1 55 d2 15 27  79 d1 ba 0e 69 6c 87 c5  |....U..'y...il..|
          e7 09 5a 08 86 bf cc 6b  1c 8a 2c 57 6e 52 cd d1  |..Z....k..,WnR..|
          98 52 73 28 f5 35 e3 25  c0 ab 6b 5c 28 35 b9 75  |.Rs(.5.%..k\(5.u|
          43 0c 55 8d de 47 cb 5f  94 3d 19 71 57 33 34 dd  |C.U..G._.=.qW34.|
          73 c5 58 d2 eb ae cc e5  c2 fa 90 99 fd 03 f1 8b  |s.X.............|
          31 7b 50 81 e3 2b 77 68  01 7b 27 79 cf 05 32 21  |1{P..+wh.{'y..2!|
          ad 84 40 f2 f5 19 03 c6  04 0a ae 51 d5 c8 35 22  |..@........Q..5"|
          39 c2 27 7c c1 8a 55 4b  06 21 cf 60 61 2a 28 c8  |9.'|..UK.!.`a*(.|
          f6 82 ec 4e c7 01 bc aa  de 0b 12 c6 ae 3a f3 82  |...N.........:..|
          46 27 b3 18 b6 e9 9d 9e  4d 4a 02 77 ab 29 96 77  |F'......MJ.w.).w|
          14 e5 d8 c2 1e e6 4b 60  d8 b8 b2 83 24 c0 57 73  |......K`....$.Ws|
          5b 12 c9 d2 c0 56 27 0b  93 71 53 e8 8e 55 52 37  |[....V'..qS..UR7|
          b1 c7 5a 2b 4d ad 68 54  0a 8e ce ac 51 33 1c 8c  |..Z+M.hT....Q3..|
    • 1
      • unnamed
        • #0
          • C: US
          • O: thawte, Inc.
          • CN: thawte SHA256 Code Signing CA - G2
        • 58:21:49:9C:77:53:14:DC:77:3D:E2:10:C0:E1:B8:FB
      • SHA256: nil
      • #2
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeCom
        • messageDigest:
          41 ab 7b 50 7f 16 02 ed  fd 30 06 00 0a 52 e3 ab  |A.{P.....0...R..|
          dc 1c 1c 54 27 9a 27 f3  ac 37 9c 92 59 51 51 8e  |...T'.'..7..YQQ.|
      • rsaEncryption:
        89 12 0a fa 32 ab 9f fd  ad e6 b2 84 37 8b a4 7a  |....2.......7..z|
        28 e0 3d 2f 83 8d 43 8b  0e 2e 89 2f 9e e7 8f ad  |(.=/..C..../....|
        ef 38 57 99 90 94 ba 58  7d b6 1c 18 5b 7c 24 f9  |.8W....X}...[|$.|
        91 01 7a 46 3b 7f 26 ba  a8 f2 48 c9 47 63 ad 96  |..zF;.&...H.Gc..|
        f6 53 7f d0 df 8b 98 9c  92 f3 19 1a 1a a7 77 54  |.S............wT|
        5f d6 bd e4 95 90 d5 39  e8 c1 96 61 b5 c4 6c 60  |_......9...a..l`|
        08 9b bb 2e 86 c0 50 32  6e 05 c9 b0 38 a5 1c 89  |......P2n...8...|
        1d a1 b3 26 66 42 6c a7  a5 5a f2 0b 5e 6e ba 2e  |...&fBl..Z..^n..|
        fd 53 a4 87 12 ee 76 7b  c5 dc 9c bf 91 27 a2 75  |.S....v{.....'.u|
        44 ef 7f 4d 48 73 a1 96  b9 18 53 84 a6 bb 30 27  |D..MHs....S...0'|
        ad bc 4d 5c 2d af 85 cd  69 e8 a5 42 44 ff 49 f2  |..M\-...i..BD.I.|
        ef 61 e2 be de cf a2 d2  46 20 0b 4b b9 0e be d8  |.a......F .K....|
        e2 8d bf de de dd fa b2  d7 15 79 4b 29 cc c0 ab  |..........yK)...|
        b4 71 2e 18 36 7d a9 e4  12 a0 94 83 f2 e9 67 4d  |.q..6}........gM|
        48 d3 d3 be 78 50 79 33  25 cb 0d 20 ee 26 f7 11  |H...xPy3%.. .&..|
        d0 fe ab f0 3b dc 48 a4  41 76 b6 0e 8a 83 53 fb  |....;.H.Av....S.|
      • countersignature
        • 1
          • unnamed
            • #0
              • C: US
              • O: Symantec Corporation
              • CN: Symantec Time Stamping Services CA - G2
            • 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2016-06-15 20:55:27 UTC
            • messageDigest:
              aa 78 35 a7 ba e4 90 72  ca bd 2d e0 a3 de e9 be  |.x5....r..-.....|
              f8 30 fa 73                                       |.0.s            |
          • rsaEncryption:
            1e 92 cd 74 50 6a b9 80  2d b4 23 ac 45 9b 40 4f  |...tPj..-.#.E.@O|
            78 6a ce 4a 91 a3 a9 0b  68 ac 33 e2 58 31 c2 20  |xj.J....h.3.X1. |
            2f 84 9b b6 82 05 c6 9e  c6 21 82 6b 01 73 bb b0  |/........!.k.s..|
            bc 3a e4 56 76 ae b5 f7  aa 97 c0 ea 08 8c c8 18  |.:.Vv...........|
            24 ee 03 80 9f 85 2a b0  3f 3f 9f a4 25 1a 46 c6  |$.....*.??..%.F.|
            00 35 5d f4 c3 bb 10 4f  b1 03 71 e8 ff ec 0c 64  |.5]....O..q....d|
            cd 85 ef 21 99 6e ae c2  92 d5 19 22 1e 4d a5 6a  |...!.n.....".M.j|
            b4 e1 93 b7 b1 73 df 5a  94 14 ad 0c 27 ab 95 b2  |.....s.Z....'...|
            51 69 5f be 02 17 7a f7  29 fb 34 bf 45 fb b9 77  |Qi_...z.).4.E..w|
            1b a4 69 9d aa bf ff 61  97 ba 91 a8 a7 dc e9 f4  |..i....a........|
            f1 9b d3 49 fb 62 68 25  7d 99 4e b6 ed 4e c4 ee  |...I.bh%}.N..N..|
            eb 48 65 3e 50 45 c4 60  f9 cc d1 8c 7d 46 94 bc  |.He>PE.`....}F..|
            51 1d 75 64 5c 46 8d 01  e2 76 74 f6 87 18 7d 4c  |Q.ud\F...vt...}L|
            26 f8 8b ee 1a 0a 08 e6  4e 2a 81 ec 8b e3 00 6b  |&.......N*.....k|
            31 22 2e 49 13 97 58 4b  6d e2 69 54 7e 3a 13 a7  |1".I..XKm.iT~:..|
            ea ab 83 91 a4 5d e1 86  54 33 73 01 48 03 ff e4  |.....]..T3s.H...|
offsetsizetypecomment
051200EXE02/24/2012 19:20:04#
15c115HTM#
c80077829992BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 77881192 bytes (75 MiB)


--
Type = PE
Physical Size = 77881192
CPU = x86
Characteristics = Executable 32-bit
Created = 2012-02-24 19:20:04
Headers Size = 1024
Checksum = 77917537
Image Size = 4993024
Section Alignment = 4096
File Alignment = 512
Code Size = 29696
Initialized Data Size = 489984
Uninitialized Data Size = 16896
Linker Version = 10.0
OS Version = 5.0
Image Version = 6.0
Subsystem Version = 5.0
Subsystem = Windows GUI
DLL Characteristics = Relocated NX-Compatible NoSEH TerminalServerAware
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
----
Path = [0]
Size = 77823984
Packed Size = 77823984
Virtual Size = 77823984
Offset = 51200
--
Path = [0]
Type = Nsis
Offset = 33280
Physical Size = 77790704
Method = Deflate
Solid = -
Headers Size = 398258
Embedded Stub Size = 0
SubType = NSIS-Park-3 Unicode log

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
                    .....                      6396  $PLUGINSDIR/System.dll
                    .....                      7587  $PLUGINSDIR/UAC.dll
                    .....                      1382  $PLUGINSDIR/InvokeShellVerb.dll
                    .....                      5201  $PLUGINSDIR/nsisXML.dll
                    .....                      3378  $PLUGINSDIR/nsExec.dll
                    .....                     13340  $PLUGINSDIR/registry.dll
                    .....                      2788  $PLUGINSDIR/MoreInfo.dll
2015-11-02 22:35:46 .....                      1822  $PLUGINSDIR/modern-header.bmp
                    .....                      4630  $PLUGINSDIR/nsDialogs.dll
2016-06-15 17:35:08 .....                    489181  $R1/$_1_/TorchInstaller.dll
2016-06-15 20:55:16 .....                    154781  $R1/$_1_/Uninstall.exe
2015-11-02 22:35:46 .....                     76366  $R1/$_1_/Banner0.jpg
2015-11-02 22:35:46 .....                     94942  $R1/$_1_/Banner1.jpg
2015-11-02 22:35:46 .....                     85704  $R1/$_1_/Banner2.jpg
2015-11-02 22:35:46 .....                     97171  $R1/$_1_/Banner3.jpg
2015-11-02 22:35:46 .....                     19122  $R1/$_1_/Banner4.jpg
2015-11-02 22:35:46 .....                     79274  $R1/$_1_/Banner5.jpg
                    .....                     15711  $PLUGINSDIR/FindProcDLL.dll
                    .....                     14507  $PLUGINSDIR/KillProcDLL.dll
                    .....                      1335  $PLUGINSDIR/UserInfo.dll
2016-06-15 20:54:46 .....                  76213658  $R1/$_11_/pack.exe
2015-11-02 22:35:58 .....            1            1  Plugins/Hola/hola_plugin.exe
2015-11-02 22:35:58 .....            1            1  Plugins/Hola/hola_plugin_x64.exe
2015-11-02 22:35:46 .....                       655  Update/47E20003-E0E4-44C4-93B0-BC391C02A0BF
2015-11-02 22:35:46 .....                     34375  Association.ico
2016-05-30 07:00:38 .....                    175673  User Data/icons_db
2015-11-02 22:35:46 .....                     74688  Free Games.ico
2015-11-02 22:35:58 .....                     72838  Free Music.ico
------------------- ----- ------------ ------------  ------------------------
2016-06-15 20:55:16                  2     77746507  28 files
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] can't find file_offset of VA 0x86000