WcInstaller.exe

info
MZ
PE
resources
strings
imports
foremost
7zip
version info
signature
hexdump
disasm
log
discuss
donate

filename	WcInstaller.exe
size	342368 (0x53960)
md5	0bdcde2079f5084b09c3e55c799a8b25

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe8

Rich Header

lib id	version	times used
14	7299	25
10	9782	64
95	2190	1
1	0	184
93	2179	9
11	9782	77
170	30319	7
158	30319	1
6	1735	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x4ce553f7
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0x19a00
SizeOfInitializedData	0xe600
SizeOfUninitializedData	0
AddressOfEntryPoint	0x14b04
BaseOfCode	0x1000
BaseOfData	0x1b000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x2e000
SizeOfHeaders	0x400
CheckSum	0x5ab62
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x199ea	0x19a00	R-X CODE
.rdata	0x1b000	0x4494	0x4600	R-- IDATA
.data	0x20000	0x5a48	0x3200	RW- IDATA
.sxdata	0x26000	4	0x200	RW- IDATA
.rsrc	0x27000	0x6b0c	0x6c00	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x1e9e4	0x64
RESOURCE	0x27000	0x6b0c
EXCEPTION	0	0
SECURITY	0x52160	0x1800
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x1b000	0x1f8
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
ICON	#1	744	1252
ICON	#2	296	1252
ICON	#3	1128	1252
ICON	#4	2440	1252
ICON	#5	4264	1252
ICON	#6	9640	1252
ICON	#7	6779	1252
DIALOG	#500	184	1252
STRING	#1	148	1252
STRING	#5	52	1252
GROUP_ICON	MAINICON	76	1252
GROUP_ICON	#1	34	1252
VERSION	#1	836	1252

id	lang	string
7	1033	Extraction Failed
8	1033	File is corrupt
9	1033	Cannot create folder '{0}'
69	1033	Extracting

module_name	hint	ord	function_name
OLEAUT32.dll		9
OLEAUT32.dll		2
USER32.dll	570		SendMessageA
USER32.dll	633		SetTimer
USER32.dll	159		DialogBoxParamW
USER32.dll	158		DialogBoxParamA
USER32.dll	639		SetWindowLongA
USER32.dll	366		GetWindowLongA
USER32.dll	646		SetWindowTextW
USER32.dll	445		LoadIconA
USER32.dll	459		LoadStringW
USER32.dll	458		LoadStringA
USER32.dll	55		CharUpperW
USER32.dll	52		CharUpperA
USER32.dll	153		DestroyWindow
USER32.dll	198		EndDialog
USER32.dll	513		PostMessageA
USER32.dll	657		ShowWindow
USER32.dll	485		MessageBoxW
USER32.dll	273		GetDlgItem
USER32.dll	436		KillTimer
USER32.dll	645		SetWindowTextA
SHELL32.dll	265		ShellExecuteExA
KERNEL32.dll	437		GetStringTypeW
KERNEL32.dll	434		GetStringTypeA
KERNEL32.dll	571		LCMapStringW
KERNEL32.dll	570		LCMapStringA
KERNEL32.dll	546		InterlockedIncrement
KERNEL32.dll	542		InterlockedDecrement
KERNEL32.dll	408		GetProcAddress
KERNEL32.dll	395		GetOEMCP
KERNEL32.dll	245		GetACP
KERNEL32.dll	252		GetCPInfo
KERNEL32.dll	550		IsBadCodePtr
KERNEL32.dll	553		IsBadReadPtr
KERNEL32.dll	350		GetFileType
KERNEL32.dll	793		SetHandleCount
KERNEL32.dll	335		GetEnvironmentStringsW
KERNEL32.dll	333		GetEnvironmentStrings
KERNEL32.dll	238		FreeEnvironmentStringsW
KERNEL32.dll	237		FreeEnvironmentStringsA
KERNEL32.dll	866		UnhandledExceptionFilter
KERNEL32.dll	530		HeapSize
KERNEL32.dll	314		GetCurrentProcess
KERNEL32.dll	849		TerminateProcess
KERNEL32.dll	556		IsBadWritePtr
KERNEL32.dll	520		HeapCreate
KERNEL32.dll	522		HeapDestroy
KERNEL32.dll	336		GetEnvironmentVariableA
KERNEL32.dll	829		SetUnhandledExceptionFilter
KERNEL32.dll	854		TlsAlloc
KERNEL32.dll	175		ExitProcess
KERNEL32.dll	478		GetVersion
KERNEL32.dll	264		GetCommandLineA
KERNEL32.dll	431		GetStartupInfoA
KERNEL32.dll	375		GetModuleHandleA
KERNEL32.dll	901		WaitForSingleObject
KERNEL32.dll	46		CloseHandle
KERNEL32.dll	96		CreateProcessA
KERNEL32.dll	767		SetCurrentDirectoryA
KERNEL32.dll	265		GetCommandLineW
KERNEL32.dll	479		GetVersionExA
KERNEL32.dll	583		LeaveCriticalSection
KERNEL32.dll	143		EnterCriticalSection
KERNEL32.dll	122		DeleteCriticalSection
KERNEL32.dll	619		MultiByteToWideChar
KERNEL32.dll	905		WideCharToMultiByte
KERNEL32.dll	361		GetLastError
KERNEL32.dll	584		LoadLibraryA
KERNEL32.dll	11		AreFileApisANSI
KERNEL32.dll	373		GetModuleFileNameA
KERNEL32.dll	374		GetModuleFileNameW
KERNEL32.dll	594		LocalFree
KERNEL32.dll	234		FormatMessageA
KERNEL32.dll	235		FormatMessageW
KERNEL32.dll	489		GetWindowsDirectoryA
KERNEL32.dll	788		SetFileTime
KERNEL32.dll	80		CreateFileW
KERNEL32.dll	797		SetLastError
KERNEL32.dll	782		SetFileAttributesA
KERNEL32.dll	698		RemoveDirectoryA
KERNEL32.dll	783		SetFileAttributesW
KERNEL32.dll	699		RemoveDirectoryW
KERNEL32.dll	69		CreateDirectoryA
KERNEL32.dll	72		CreateDirectoryW
KERNEL32.dll	124		DeleteFileA
KERNEL32.dll	125		DeleteFileW
KERNEL32.dll	959		lstrlenA
KERNEL32.dll	353		GetFullPathNameA
KERNEL32.dll	354		GetFullPathNameW
KERNEL32.dll	312		GetCurrentDirectoryA
KERNEL32.dll	459		GetTempPathA
KERNEL32.dll	457		GetTempFileNameA
KERNEL32.dll	197		FindClose
KERNEL32.dll	201		FindFirstFileA
KERNEL32.dll	204		FindFirstFileW
KERNEL32.dll	211		FindNextFileA
KERNEL32.dll	77		CreateFileA
KERNEL32.dll	347		GetFileSize
KERNEL32.dll	784		SetFilePointer
KERNEL32.dll	683		ReadFile
KERNEL32.dll	919		WriteFile
KERNEL32.dll	773		SetEndOfFile
KERNEL32.dll	433		GetStdHandle
KERNEL32.dll	899		WaitForMultipleObjects
KERNEL32.dll	841		Sleep
KERNEL32.dll	885		VirtualAlloc
KERNEL32.dll	888		VirtualFree
KERNEL32.dll	73		CreateEventA
KERNEL32.dll	779		SetEvent
KERNEL32.dll	708		ResetEvent
KERNEL32.dll	537		InitializeCriticalSection
KERNEL32.dll	716		RtlUnwind
KERNEL32.dll	669		RaiseException
KERNEL32.dll	518		HeapAlloc
KERNEL32.dll	524		HeapFree
KERNEL32.dll	528		HeapReAlloc
KERNEL32.dll	105		CreateThread
KERNEL32.dll	318		GetCurrentThreadId
KERNEL32.dll	857		TlsSetValue
KERNEL32.dll	856		TlsGetValue
KERNEL32.dll	176		ExitThread

StringTable 040904B0

FileVersion	2.3.1439.2793
ProductVersion
.1439.2793	4 Compan
e	LavasoftZFileDescriptionWeb
panion Installer	>Internal�
	Installer.exex)LegalCopyrightc Lavasoft�
ted. All Rights Reserved.	FOriginalFilenameIn�
er.exe	RProductNameWeb Companion Instal�

VS_FIXEDFILEINFO

FileVersion	2.3.1439.2793
ProductVersion	2.3.1439.2793
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 SHA256 Code Signing CA

serial: 35F57ADDEF0015E6FEBE6AE2710D4873

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl
            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
        4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
        6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
        11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
        d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
        40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
        3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
        7e:b6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
        18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
        dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
        33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
        c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
        bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
        29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
        0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
        69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
        13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
        15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
        88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
        eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
        3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
        1c:d8:04:75

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f5:7a:dd:ef:00:15:e6:fe:be:6a:e2:71:0d:48:73
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA
        Validity
            Not Before: Feb 20 00:00:00 2015 GMT
            Not After : Mar 14 23:59:59 2017 GMT
        Subject: C=MT, ST=Malta, L=Sliema, O=Lavasoft Limited, CN=Lavasoft Limited
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a3:75:ae:ed:24:bd:92:21:5d:8f:0a:14:73:71:
                    32:b5:82:02:76:d9:d3:5f:a4:aa:b7:ff:9d:18:29:
                    95:52:a9:de:f7:90:c2:22:64:3c:3c:45:0c:cd:d8:
                    a8:cc:f8:4d:cb:f9:21:1f:b4:3d:c8:c6:3a:3a:6f:
                    b1:f7:ba:1e:c0:17:e7:0b:06:1e:ee:44:b9:d6:29:
                    c1:a2:75:5d:f3:dc:35:a7:ce:f2:aa:ee:61:32:f2:
                    3c:ea:bf:2c:fd:55:83:ff:ea:cd:62:7e:c6:92:68:
                    2e:dd:f4:43:58:c3:d2:e2:18:90:1d:23:33:3b:4a:
                    d0:64:29:9c:63:b8:f6:65:66:1c:2b:43:4d:29:78:
                    8b:c2:fb:4d:d3:7b:99:b1:03:2e:bb:68:46:49:2b:
                    2b:27:ff:06:4f:f6:32:59:bc:18:b1:a1:61:f2:5e:
                    4c:f1:69:fa:d4:39:30:78:7f:2b:5e:a4:f2:12:c6:
                    55:34:52:02:e7:2a:79:88:5b:d9:0b:c3:ee:12:ac:
                    91:b1:8b:35:42:5a:89:97:2a:37:7a:52:b0:df:dd:
                    2c:e0:45:d3:77:fe:d8:44:5d:ac:3b:a0:65:fc:09:
                    67:d0:75:a2:ee:f8:39:00:e4:d5:f4:9f:1f:2f:af:
                    ed:c6:37:07:c5:3f:67:ca:f7:f2:e9:b8:db:01:68:
                    46:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://sv.symcb.com/sv.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://d.symcb.com/cps
                  User Notice:
                    Explicit Text: https://d.symcb.com/rpa
            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://sv.symcd.com
                CA Issuers - URI:http://sv.symcb.com/sv.crt
            X509v3 Authority Key Identifier: 
                96:3B:53:F0:79:33:97:AF:7D:83:EF:2E:2B:CC:CA:B7:86:1E:72:66
            X509v3 Subject Key Identifier: 
                65:41:1C:A3:A9:FB:63:F7:7F:B2:7C:06:34:45:22:8C:CF:EE:8F:F6
            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        30:97:15:4a:2d:7f:05:4d:63:fb:ef:07:fe:04:3c:67:b8:64:
        a8:00:8d:b8:7b:2d:32:a3:a7:0f:9b:11:eb:6d:87:64:8a:55:
        1f:9a:f7:ad:b0:ed:89:46:af:d8:02:71:40:7f:81:83:f9:98:
        d9:73:a9:08:f2:08:13:27:03:c3:5a:3d:47:a7:f9:49:be:b5:
        c5:0d:e3:13:6a:5e:2f:8f:19:c7:59:9b:2d:06:32:f4:8e:c5:
        de:77:2e:1d:11:cd:c6:f9:c3:0f:fd:5f:96:f9:a3:96:b7:17:
        37:2d:cd:a6:3b:33:c5:61:3f:05:22:de:4b:b7:29:c5:0a:f3:
        27:7b:39:b2:98:ae:2c:9d:9c:66:5f:01:45:3c:16:43:60:16:
        ce:2b:32:55:d2:d7:8b:32:50:e4:80:40:0a:52:eb:e2:e4:48:
        7b:d4:fe:1c:0e:f5:ea:5e:68:95:0a:9e:34:bd:1a:ff:f5:d3:
        4a:a9:a1:8c:9b:53:d6:4b:5f:c6:e7:70:fc:35:b1:04:55:96:
        4b:d8:63:7e:1a:5a:2c:a1:de:a2:99:a8:46:4e:a8:07:fe:28:
        44:4e:c4:35:f6:ac:36:66:0b:e7:9e:e0:7c:78:1d:e2:ae:fb:
        7d:ea:88:dd:db:7e:06:1c:4a:a2:17:5c:52:07:1e:e5:d7:b1:
        99:21:ba:67

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Dec 10 00:00:00 2013 GMT
            Not After : Dec  9 23:59:59 2023 GMT
        Subject: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 SHA256 Code Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:97:83:1e:00:16:af:2c:b1:d2:08:c4:d7:68:93:
                    51:60:1e:71:f6:e2:47:b4:db:58:4d:23:62:6a:b4:
                    bf:5a:1b:51:f7:a3:0d:18:77:68:bb:d8:36:ab:2f:
                    21:50:da:9e:f3:e7:5f:27:4e:0b:c2:97:c8:09:70:
                    93:a9:da:5c:0d:4e:a4:0d:91:a0:b4:ec:14:ce:91:
                    72:54:2e:ce:a3:db:44:e9:52:1b:3f:41:3c:ca:4a:
                    e4:aa:c0:e8:39:ab:53:cc:21:d0:cc:cf:7f:9b:e6:
                    c2:cc:58:6a:82:15:ee:3d:36:cf:1c:c5:97:07:24:
                    8e:f1:7b:be:31:2d:3d:6e:dc:b5:99:42:9f:4b:61:
                    95:5f:1c:70:ee:17:7d:db:8b:e5:61:89:78:c7:68:
                    1b:af:11:78:1a:98:ae:c4:55:47:53:d9:b3:32:d6:
                    a1:0e:46:40:c5:97:92:8a:d1:53:a7:99:5b:85:35:
                    57:d3:ea:93:62:61:20:0a:c7:30:77:24:11:4d:62:
                    83:b6:ba:7b:68:82:31:ee:65:ca:df:f9:d5:8d:b2:
                    35:dc:8c:2b:6f:6a:72:5c:60:84:9c:f2:0c:94:5e:
                    c0:56:52:00:48:cc:d3:f8:a5:7d:de:2f:d7:13:e4:
                    38:a8:84:d5:46:b8:13:86:c2:1b:9d:ea:5a:38:dd:
                    9b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://s2.symcb.com
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: http://www.symauth.com/cps
                  User Notice:
                    Explicit Text: http://www.symauth.com/rpa
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://s1.symcb.com/pca3-g5.crl
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=SymantecPKI-1-567
            X509v3 Subject Key Identifier: 
                96:3B:53:F0:79:33:97:AF:7D:83:EF:2E:2B:CC:CA:B7:86:1E:72:66
            X509v3 Authority Key Identifier: 
                7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        13:85:1a:1e:69:a9:37:f7:a0:bd:a4:af:7e:1d:61:53:fe:9d:
        8c:5e:0c:a6:75:1e:78:17:23:dd:fd:ec:1a:03:55:39:fb:71:
        95:c7:65:5a:a7:8e:30:d2:44:5a:61:db:70:6f:da:21:05:c2:
        2e:73:ba:49:f1:d1:93:fe:5d:c9:cd:5e:03:e0:89:9e:3f:74:
        1e:d7:f7:38:8b:a9:d6:cf:bb:35:2f:33:58:a8:92:56:d1:c8:
        4d:3b:82:e6:79:84:16:fc:28:b0:b1:47:f3:1d:a2:3e:ee:87:
        d9:a6:7f:a4:56:a5:3f:ad:84:2e:29:de:7c:bc:a8:aa:a3:3d:
        04:01:ea:ba:93:a2:0e:50:22:29:17:4c:87:e4:3a:11:5f:d6:
        a4:25:89:9b:05:6b:2f:b4:c9:01:4c:27:7b:0b:ac:19:05:22:
        a0:60:15:3f:da:c9:fb:4d:4c:8f:fb:72:67:77:fd:27:94:c7:
        ba:35:0e:88:49:fe:8d:fd:28:af:4a:12:bd:0d:b3:97:05:de:
        44:0c:15:fa:36:2b:03:dc:c1:50:01:f1:a1:11:5d:14:e5:e2:
        bd:27:4b:54:be:2b:84:5e:0f:a6:c3:74:05:0a:ef:97:c3:89:
        22:b1:1f:77:f3:bd:cd:43:d4:f1:4c:a9:3f:b5:8b:84:af:64:
        f2:d0:14:21

pkcs7-signedData

1
- SHA256: nil
- 1.3.6.1.4.1.311.2.1.4
  - #0
    - 1.3.6.1.4.1.311.2.1.15
      - :
    - SHA256
      - bf 11 68 12 c0 21 50 a8 28 b0 f1 33 e4 a2 a1 7a |..h..!P.(..3...z| 0e b4 be aa 2a c5 55 c8 d6 d8 21 0e 42 6b cb 2e |....*.U...!.Bk..|
- Certificates
  - Certificate #0
    - 2
      - 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
      - RSA-SHA1: nil
      - Issuer
        C: ZA
        ST: Western Cape
        L: Durbanville
        O: Thawte
        OU: Thawte Certification
        CN: Thawte Timestamping CA
      - 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
      - Subject
        C: US
        O: Symantec Corporation
        CN: Symantec Time Stamping Services CA - G2
      - #5
        rsaEncryption: nil
        B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
        2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
        C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
        74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
        6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
        2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
        61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
        99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
        79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
        9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
        DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
        27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
        27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
        E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
        48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
        64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71: 0x010001
      - #6
        subjectKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
        authorityInfoAccess
        OCSP: http://ocsp.thawte.com
        basicConstraints
        true
        true: 0
        crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
        extendedKeyUsage: timeStamping
        keyUsage: true, 6
        subjectAltName
        CN: TimeStamp-2048-1
    - RSA-SHA1:
```
03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
```
  - Certificate #1
    - 2
      - 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: Symantec Corporation
        CN: Symantec Time Stamping Services CA - G2
      - 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
      - Subject
        C: US
        O: Symantec Corporation
        CN: Symantec Time Stamping Services Signer - G4
      - #5
        rsaEncryption: nil
        A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
        61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
        53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
        0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
        C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
        64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
        CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
        28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
        92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
        CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
        D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
        2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
        74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
        3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
        8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
        83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD: 0x010001
      - X509v3 extensions
        basicConstraints
        true
        nil
        extendedKeyUsage: true, timeStamping
        keyUsage: true, 0x80
        authorityInfoAccess
        #0
        OCSP: http://ts-ocsp.ws.symantec.com
        caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
        crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
        subjectAltName
        CN: TimeStamp-2048-2
        subjectKeyIdentifier:
        46 c6 69 a3 0e 4a 14 1e d5 4c da 52 63 17 3f 5e |F.i..J...L.Rc.?^| 36 bc 0d e6 |6... |
        authorityKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
    - RSA-SHA1:
```
78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
```
  - Certificate #2
    - 2
      - 35:F5:7A:DD:EF:00:15:E6:FE:BE:6A:E2:71:0D:48:73
      - RSA-SHA256: nil
      - Issuer
        C: US
        O: Symantec Corporation
        OU: Symantec Trust Network
        CN: Symantec Class 3 SHA256 Code Signing CA
      - 2015-02-20 00:00:00 UTC: 2017-03-14 23:59:59 UTC
      - Subject
        C: MT
        ST: Malta
        L: Sliema
        O: Lavasoft Limited
        CN: Lavasoft Limited
      - #5
        rsaEncryption: nil
        A3:75:AE:ED:24:BD:92:21:5D:8F:0A:14:73:71:32:B5:
        82:02:76:D9:D3:5F:A4:AA:B7:FF:9D:18:29:95:52:A9:
        DE:F7:90:C2:22:64:3C:3C:45:0C:CD:D8:A8:CC:F8:4D:
        CB:F9:21:1F:B4:3D:C8:C6:3A:3A:6F:B1:F7:BA:1E:C0:
        17:E7:0B:06:1E:EE:44:B9:D6:29:C1:A2:75:5D:F3:DC:
        35:A7:CE:F2:AA:EE:61:32:F2:3C:EA:BF:2C:FD:55:83:
        FF:EA:CD:62:7E:C6:92:68:2E:DD:F4:43:58:C3:D2:E2:
        18:90:1D:23:33:3B:4A:D0:64:29:9C:63:B8:F6:65:66:
        1C:2B:43:4D:29:78:8B:C2:FB:4D:D3:7B:99:B1:03:2E:
        BB:68:46:49:2B:2B:27:FF:06:4F:F6:32:59:BC:18:B1:
        A1:61:F2:5E:4C:F1:69:FA:D4:39:30:78:7F:2B:5E:A4:
        F2:12:C6:55:34:52:02:E7:2A:79:88:5B:D9:0B:C3:EE:
        12:AC:91:B1:8B:35:42:5A:89:97:2A:37:7A:52:B0:DF:
        DD:2C:E0:45:D3:77:FE:D8:44:5D:AC:3B:A0:65:FC:09:
        67:D0:75:A2:EE:F8:39:00:E4:D5:F4:9F:1F:2F:AF:ED:
        C6:37:07:C5:3F:67:CA:F7:F2:E9:B8:DB:01:68:46:DB: 0x010001
      - X509v3 extensions
        basicConstraints
        nil
        keyUsage: true, 0x80
        crlDistributionPoints: http://sv.symcb.com/sv.crl
        certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://d.symcb.com/cps
        id-qt-unotice: https://d.symcb.com/rpa
        extendedKeyUsage: codeSigning
        authorityInfoAccess
        #0
        OCSP: http://sv.symcd.com
        caIssuers: http://sv.symcb.com/sv.crt
        authorityKeyIdentifier:
        96 3b 53 f0 79 33 97 af 7d 83 ef 2e 2b cc ca b7 |.;S.y3..}...+...| 86 1e 72 66 |..rf |
        subjectKeyIdentifier:
        65 41 1c a3 a9 fb 63 f7 7f b2 7c 06 34 45 22 8c |eA....c...|.4E".| cf ee 8f f6 |.... |
        nsCertType: 0x10
        1.3.6.1.4.1.311.2.1.27
        false: true
    - RSA-SHA256:
```
30 97 15 4a 2d 7f 05 4d  63 fb ef 07 fe 04 3c 67  |0..J-..Mc.....
```
  - Certificate #3
    - 2
      - 3D:78:D7:F9:76:49:60:B2:61:7D:F4:F0:1E:CA:86:2A
      - RSA-SHA256: nil
      - Issuer
        C: US
        O: VeriSign, Inc.
        OU: VeriSign Trust Network
        OU: (c) 2006 VeriSign, Inc. - For authorized use only
        CN: VeriSign Class 3 Public Primary Certification Authority - G5
      - 2013-12-10 00:00:00 UTC: 2023-12-09 23:59:59 UTC
      - Subject
        C: US
        O: Symantec Corporation
        OU: Symantec Trust Network
        CN: Symantec Class 3 SHA256 Code Signing CA
      - #5
        rsaEncryption: nil
        97:83:1E:00:16:AF:2C:B1:D2:08:C4:D7:68:93:51:60:
        1E:71:F6:E2:47:B4:DB:58:4D:23:62:6A:B4:BF:5A:1B:
        51:F7:A3:0D:18:77:68:BB:D8:36:AB:2F:21:50:DA:9E:
        F3:E7:5F:27:4E:0B:C2:97:C8:09:70:93:A9:DA:5C:0D:
        4E:A4:0D:91:A0:B4:EC:14:CE:91:72:54:2E:CE:A3:DB:
        44:E9:52:1B:3F:41:3C:CA:4A:E4:AA:C0:E8:39:AB:53:
        CC:21:D0:CC:CF:7F:9B:E6:C2:CC:58:6A:82:15:EE:3D:
        36:CF:1C:C5:97:07:24:8E:F1:7B:BE:31:2D:3D:6E:DC:
        B5:99:42:9F:4B:61:95:5F:1C:70:EE:17:7D:DB:8B:E5:
        61:89:78:C7:68:1B:AF:11:78:1A:98:AE:C4:55:47:53:
        D9:B3:32:D6:A1:0E:46:40:C5:97:92:8A:D1:53:A7:99:
        5B:85:35:57:D3:EA:93:62:61:20:0A:C7:30:77:24:11:
        4D:62:83:B6:BA:7B:68:82:31:EE:65:CA:DF:F9:D5:8D:
        B2:35:DC:8C:2B:6F:6A:72:5C:60:84:9C:F2:0C:94:5E:
        C0:56:52:00:48:CC:D3:F8:A5:7D:DE:2F:D7:13:E4:38:
        A8:84:D5:46:B8:13:86:C2:1B:9D:EA:5A:38:DD:9B:DB: 0x010001
      - X509v3 extensions
        authorityInfoAccess
        OCSP: http://s2.symcb.com
        basicConstraints
        true
        true: 0
        certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: http://www.symauth.com/cps
        id-qt-unotice: http://www.symauth.com/rpa
        crlDistributionPoints: http://s1.symcb.com/pca3-g5.crl
        extendedKeyUsage
        clientAuth: codeSigning
        keyUsage: true, 6
        subjectAltName
        CN: SymantecPKI-1-567
        subjectKeyIdentifier:
        96 3b 53 f0 79 33 97 af 7d 83 ef 2e 2b cc ca b7 |.;S.y3..}...+...| 86 1e 72 66 |..rf |
        authorityKeyIdentifier:
        7f d3 65 a7 c2 dd ec bb f0 30 09 f3 43 39 fa 02 |..e......0..C9..| af 33 31 33 |.313 |
    - RSA-SHA256:
```
13 85 1a 1e 69 a9 37 f7  a0 bd a4 af 7e 1d 61 53  |....i.7.....~.aS|
fe 9d 8c 5e 0c a6 75 1e  78 17 23 dd fd ec 1a 03  |...^..u.x.#.....|
55 39 fb 71 95 c7 65 5a  a7 8e 30 d2 44 5a 61 db  |U9.q..eZ..0.DZa.|
70 6f da 21 05 c2 2e 73  ba 49 f1 d1 93 fe 5d c9  |po.!...s.I....].|
cd 5e 03 e0 89 9e 3f 74  1e d7 f7 38 8b a9 d6 cf  |.^....?t...8....|
bb 35 2f 33 58 a8 92 56  d1 c8 4d 3b 82 e6 79 84  |.5/3X..V..M;..y.|
16 fc 28 b0 b1 47 f3 1d  a2 3e ee 87 d9 a6 7f a4  |..(..G...>......|
56 a5 3f ad 84 2e 29 de  7c bc a8 aa a3 3d 04 01  |V.?...).|....=..|
ea ba 93 a2 0e 50 22 29  17 4c 87 e4 3a 11 5f d6  |.....P").L..:._.|
a4 25 89 9b 05 6b 2f b4  c9 01 4c 27 7b 0b ac 19  |.%...k/...L'{...|
05 22 a0 60 15 3f da c9  fb 4d 4c 8f fb 72 67 77  |.".`.?...ML..rgw|
fd 27 94 c7 ba 35 0e 88  49 fe 8d fd 28 af 4a 12  |.'...5..I...(.J.|
bd 0d b3 97 05 de 44 0c  15 fa 36 2b 03 dc c1 50  |......D...6+...P|
01 f1 a1 11 5d 14 e5 e2  bd 27 4b 54 be 2b 84 5e  |....]....'KT.+.^|
0f a6 c3 74 05 0a ef 97  c3 89 22 b1 1f 77 f3 bd  |...t......"..w..|
cd 43 d4 f1 4c a9 3f b5  8b 84 af 64 f2 d0 14 21  |.C..L.?....d...!|
```
- Signer
  - 1
  - unnamed
    - #0
      - C: US
      - O: Symantec Corporation
      - OU: Symantec Trust Network
      - CN: Symantec Class 3 SHA256 Code Signing CA
    - 35:F5:7A:DD:EF:00:15:E6:FE:BE:6A:E2:71:0D:48:73
  - SHA256: nil
  - #3
    - contentType: 1.3.6.1.4.1.311.2.1.4
    - 1.3.6.1.4.1.311.2.1.11: msCodeInd
    - 1.3.6.1.4.1.311.2.1.12:
```
00 57 00 65 00 62 00 20  00 43 00 6f 00 6d 00 70  |.W.e.b. .C.o.m.p|
00 61 00 6e 00 69 00 6f  00 6e                    |.a.n.i.o.n      |
```
    - messageDigest:
```
a2 62 23 c7 33 dd 76 d1  87 bd 3f 83 d9 ea 9a 14  |.b#.3.v...?.....|
04 29 64 e9 d3 dd 8d 3b  f7 7f 6e 19 47 a5 2b 44  |.)d....;..n.G.+D|
```
  - rsaEncryption:
```
78 7a 15 e4 35 92 a2 63  08 2e 07 5e f0 35 33 3e  |xz..5..c...^.53>|
d9 45 6a 42 3b 1f 52 e2  72 90 a7 9e a2 9a 95 e8  |.EjB;.R.r.......|
8f 53 c5 9f f7 33 b3 01  8c 31 26 6b ee c0 ef b0  |.S...3...1&k....|
4e 03 ce 94 bf 54 ab f6  02 b6 25 88 cb 4d f8 f9  |N....T....%..M..|
12 4b ad f3 77 fa 64 38  e8 27 69 2f 35 04 e4 93  |.K..w.d8.'i/5...|
35 84 72 6a ac 01 40 2e  48 5f 22 00 5e 5f ad 31  |5.rj..@.H_".^_.1|
44 02 11 13 15 26 57 fe  44 ef 6f e4 48 a6 fa 80  |D....&W.D.o.H...|
a3 7a a7 21 d4 50 c2 79  76 eb 10 36 cf c7 a1 d2  |.z.!.P.yv..6....|
68 ad 78 92 22 b8 73 c9  c1 bc c4 7a 6a 1f 9b 78  |h.x.".s....zj..x|
79 b0 9b 42 9a 1b 43 8e  82 2b da 86 be 31 2e 60  |y..B..C..+...1.`|
24 c7 4f f0 f7 45 00 bf  83 7e 87 a1 9f a7 ea b1  |$.O..E...~......|
ae 10 74 54 fe 42 c5 2a  65 f6 3a 2f c2 29 79 b2  |..tT.B.*e.:/.)y.|
d2 56 20 e8 8f c1 95 34  83 08 36 85 de 7a ec 0f  |.V ....4..6..z..|
25 3a db b9 13 ed ef 8b  0b 33 5c 82 a2 1e 0f 21  |%:.......3\....!|
db a3 94 8a 37 86 c2 f0  7e ff d3 9c e6 6b 9d 82  |....7...~....k..|
57 ef 12 12 14 51 1e 9e  77 22 29 ca a6 36 fc 3d  |W....Q..w")..6.=|
```
  - countersignature
    - 1
      - unnamed
        #0
        C: US
        O: Symantec Corporation
        CN: Symantec Time Stamping Services CA - G2
        0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
      - SHA1: nil
      - #2
        contentType: pkcs7-data
        signingTime: 2016-06-28 18:45:57 UTC
        messageDigest:
        25 66 d5 9b 3d 8a 42 a3 d8 47 ed e9 f1 79 c5 cc |%f..=.B..G...y..| 26 31 98 3d |&1.= |
      - rsaEncryption:
        52 99 6d b2 f1 b7 43 23 00 b7 a1 b6 f1 7b f3 7b |R.m...C#.....{.{| 18 69 1e fd 13 de 7a 7e 39 a2 6c c9 54 7f ab 27 |.i....z~9.l.T..'| b3 3e a2 d8 82 26 4b 13 c2 eb 2d 48 5c b5 2c 5b |.>...&K...-H\.,[| 6c fa 03 18 44 01 f2 0c 69 d3 0c f5 3f 43 d5 ff |l...D...i...?C..| 37 00 85 7a e8 5b f3 5d 4c 66 2e 1d 3f 04 85 bc |7..z.[.]Lf..?...| 60 9d 4f 4c 4f 10 39 f5 4f be 55 5c 79 c4 1e 18 |`.OLO.9.O.U\y...| ae 3e 00 33 04 75 bd a6 38 40 e6 db 7b 6a f5 2e |.>.3.u..8@..{j..| eb 7e c5 df 6a 0e cf df eb 9d b6 d3 82 af 04 9c |.~..j...........| 29 16 c5 67 b4 da a8 b7 39 d2 6f 18 c6 24 5b 18 |)..g....9.o..$[.| e5 dd 13 42 5d ad e5 a6 29 e7 48 07 63 4b 99 05 |...B]...).H.cK..| 07 4a 7a f3 c1 ab a4 15 af a4 d7 57 f7 c0 65 36 |.Jz........W..e6| ae 06 54 d0 79 d8 c0 e5 3b ef d9 50 3c 84 6a eb |..T.y...;..P<.j.| f4 68 f0 37 a0 06 58 7c 79 88 8b 87 11 50 c7 89 |.h.7..X|y....P..| 89 bf c8 2b b9 c3 3a 5b 58 90 c6 01 97 81 d4 37 |...+..:[X......7| ee 40 67 8f 9e 1a d2 43 0c 6b 2b be bd e0 26 f3 |.@g....C.k+...&.| 01 ac 25 bc 44 1f 16 38 50 de 13 2c 71 2b 3c f1 |..%.D..8P..,q+<.|

show previews

offset	size	type	comment
0	164864	EXE	11/18/2010 16:27:35	#
15c1	15	HTM		#
2635c	6779	PNG	(256 x 256)	#
28400	177504	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 342368 bytes (335 KiB)


--
Type = PE
Physical Size = 342368
CPU = x86
Characteristics = Executable 32-bit NoRelocs NoLineNums NoLocalSyms
Created = 2010-11-18 16:27:35
Headers Size = 1024
Checksum = 371554
Name = Installer.exe
Image Size = 188416
Section Alignment = 4096
File Alignment = 512
Code Size = 104960
Initialized Data Size = 58880
Uninitialized Data Size = 0
Linker Version = 6.0
OS Version = 4.0
Image Version = 0.0
Subsystem Version = 4.0
Subsystem = Windows GUI
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
Comment = FileVersion: 2.3.1439.2793
ProductVersion: 2.3.1439.2793
CompanyName: Lavasoft
FileDescription: Web Companion Installer
InternalName: Installer.exe
LegalCopyright: c Lavasoft Limited. All Rights Reserved.
OriginalFilename: Installer.exe
ProductName: Web Companion Installer
----
Path = [0]
Size = 171360
Packed Size = 171360
Virtual Size = 171360
Offset = 164864
--
Path = [0]
Type = 7z
Offset = 126
Physical Size = 171227
Tail Size = 7
Headers Size = 479
Method = LZMA:768k BCJ
Solid = +
Blocks = 2

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2016-06-22 17:05:14 .....         1624          408  WebCompanionInstaller.exe.config
2016-06-22 17:06:28 ....A       300032       170340  WebCompanionInstaller.exe
2016-06-22 17:06:31 ....A       204048               ICSharpCode.SharpZipLib.dll
2016-06-22 17:05:51 ....A         7680               de-DE/WebCompanionInstaller.resources.dll
2016-06-22 17:05:51 ....A         7168               en-US/WebCompanionInstaller.resources.dll
2016-06-22 17:05:51 ....A         7680               es-ES/WebCompanionInstaller.resources.dll
2016-06-22 17:05:51 ....A         7680               fr-CA/WebCompanionInstaller.resources.dll
2016-06-22 17:05:51 ....A         7680               it-IT/WebCompanionInstaller.resources.dll
2016-06-22 17:05:51 ....A         8192               ja-JP/WebCompanionInstaller.resources.dll
2016-06-22 17:05:51 ....A         7680               pt-BR/WebCompanionInstaller.resources.dll
2016-06-22 17:05:51 ....A         8704               ru-RU/WebCompanionInstaller.resources.dll
2016-06-22 17:05:51 ....A         7680               tr-TR/WebCompanionInstaller.resources.dll
2016-06-22 17:05:52 ....A         7168               zh-CHS/WebCompanionInstaller.resources.dll
2016-06-22 17:05:52 D....            0            0  zh-CHS
2016-06-22 17:05:52 D....            0            0  tr-TR
2016-06-22 17:05:52 D....            0            0  ru-RU
2016-06-22 17:05:52 D....            0            0  pt-BR
2016-06-22 17:05:52 D....            0            0  ja-JP
2016-06-22 17:05:52 D....            0            0  it-IT
2016-06-22 17:05:52 D....            0            0  fr-CA
2016-06-22 17:05:52 D....            0            0  es-ES
2016-06-22 17:05:52 D....            0            0  en-US
2016-06-22 17:05:52 D....            0            0  de-DE
------------------- ----- ------------ ------------  ------------------------
2016-06-22 17:06:31             583016       170748  13 files, 10 folders

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] ignoring invalid PEdump::BITMAPINFOHEADER