MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904b0

VS_FIXEDFILEINFO

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Code Signing PCA
serial: 330000013FBFE82DC1EE0D270500010000013F

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:00:00:c6:78:80:36:01:75:1a:69:72:00:00:00:00:00:c6
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA
        Validity
            Not Before: Sep  7 17:58:53 2016 GMT
            Not After : Sep  7 17:58:53 2018 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, OU=nCipher DSE ESN:F528-3777-8A76, CN=Microsoft Time-Stamp Service
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0b:23:1b:a8:ca:88:28:14:36:e3:c3:68:5d:
                    06:84:28:75:41:87:12:a8:9c:a9:34:02:60:a1:ad:
                    46:b6:0a:0d:ac:a5:d3:0d:46:45:e8:af:9e:1c:f3:
                    73:5e:ff:6f:fc:b6:98:2d:95:f6:1b:23:88:f6:51:
                    b3:e7:9b:57:56:fd:4d:cb:a2:35:b9:e5:61:cb:67:
                    14:02:17:44:f8:89:15:47:a0:2d:0a:8f:00:af:cb:
                    87:c0:4a:64:c9:38:be:e1:8c:2b:ea:c3:86:33:b6:
                    2b:c0:1a:b0:f9:27:9a:06:30:70:38:df:bc:13:c4:
                    80:cf:4a:60:98:71:e3:e1:c3:6f:b7:90:3a:47:e2:
                    10:0b:ab:72:88:5c:7e:24:43:0e:d6:aa:a7:21:34:
                    88:da:ac:77:90:e5:e1:0f:7c:93:17:86:23:8d:19:
                    d3:c7:71:c6:a5:f6:b0:50:2c:9f:5a:cc:5a:b0:01:
                    c7:94:82:c4:01:fb:15:02:65:ec:6e:be:17:00:2d:
                    87:05:91:8a:5e:8d:37:8c:09:9f:be:66:e0:6e:6d:
                    d5:e0:a0:4a:db:de:94:9e:7a:7d:d9:16:66:c0:01:
                    2a:2f:4f:27:fa:5a:e5:f8:f1:1d:eb:0e:04:f6:6b:
                    45:1e:14:7d:c0:64:96:db:d0:b9:ff:46:ce:6a:bf:
                    73:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D4:BF:F6:32:B0:88:31:0F:E6:19:94:F1:3E:BF:31:FA:5B:02:0F:09
            X509v3 Authority Key Identifier: 
                keyid:23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt

            X509v3 Extended Key Usage: 
                Time Stamping
    Signature Algorithm: sha1WithRSAEncryption
         98:5b:00:dc:ef:a3:48:8b:e4:50:39:67:94:24:c0:6f:8f:be:
         40:df:39:a6:2c:4d:89:2c:a8:59:3e:32:0a:6a:cc:fc:5c:17:
         04:98:30:4f:d2:ff:0c:a2:85:de:25:c2:04:3a:08:f7:4e:e4:
         01:b3:de:6e:43:65:4e:e0:3d:2e:45:70:29:75:d2:4f:69:4f:
         16:78:b3:ce:7b:3e:ef:19:ac:4d:b1:ae:75:32:52:24:05:97:
         90:d8:48:da:e8:44:fb:90:61:16:59:5e:cd:b1:2b:55:95:9f:
         52:5c:c1:c0:30:27:07:ee:d6:4c:27:79:b3:c3:f7:4a:35:0d:
         19:4d:a3:31:c5:dc:d3:1a:22:8d:27:09:34:40:37:ce:9e:48:
         1c:8a:75:8a:43:9d:d8:29:54:b4:a8:37:6c:14:9e:c8:78:6c:
         b7:19:aa:87:78:a3:37:64:be:01:92:ec:dd:40:7f:5f:11:10:
         54:94:05:5a:da:7f:b3:28:4b:12:9e:34:82:8b:2f:28:60:37:
         10:f1:67:1a:d4:82:73:db:df:32:fb:df:33:a3:e3:40:35:21:
         bc:37:5b:32:68:6f:cb:d8:2b:e8:01:61:63:91:97:88:e6:ea:
         f0:b0:02:af:f9:f7:5c:fc:df:81:c3:34:7e:b4:51:dd:1b:1f:
         ec:52:ec:fa

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:00:01:3f:bf:e8:2d:c1:ee:0d:27:05:00:01:00:00:01:3f
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA
        Validity
            Not Before: Aug 18 20:17:16 2016 GMT
            Not After : Nov  2 20:17:16 2017 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=AOC, CN=Microsoft Corporation
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:62:68:26:aa:78:52:d7:e3:81:9d:1d:82:8f:
                    6e:18:be:7d:bf:66:2e:f6:33:c4:a8:92:d2:87:98:
                    07:5e:44:27:b8:c4:6b:2b:af:00:c3:52:df:2b:1b:
                    5d:9c:0a:79:79:86:83:22:52:b4:9d:c2:60:f7:40:
                    4d:f0:b4:34:86:ee:cf:50:87:92:12:08:72:58:8b:
                    c2:24:b2:ab:d3:40:b1:94:8a:61:ec:5c:ad:1e:23:
                    63:c7:e5:8c:6f:a9:36:f3:e6:38:88:84:84:a6:68:
                    20:2f:0f:25:90:f7:29:35:06:d6:06:8a:a1:4a:20:
                    31:8f:45:0f:99:05:8b:70:0d:24:ba:4b:c6:cf:c9:
                    89:03:cf:3b:38:39:7d:8b:9b:29:e8:6d:2e:a9:9b:
                    74:7e:b3:e6:93:80:e2:1f:77:d2:16:08:cc:c4:84:
                    ba:52:64:86:75:95:76:0b:f7:03:99:5a:89:a0:43:
                    6d:56:a5:1a:22:a2:9f:8c:37:cd:ba:1c:de:ef:bf:
                    2c:20:b4:88:53:d9:64:fa:ec:80:81:1e:82:6b:03:
                    4a:76:45:4a:8d:7d:f8:1c:41:7a:01:b2:00:26:3a:
                    29:7c:32:6f:aa:99:b0:1c:0a:e7:98:ed:10:15:8e:
                    d9:06:7d:95:26:5c:91:38:00:1d:3f:48:21:ea:64:
                    9a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Subject Key Identifier: 
                33:A5:05:39:B4:7C:27:0D:CF:73:B5:65:B7:73:03:AD:E1:88:48:1E
            X509v3 Subject Alternative Name: 
                DirName:/OU=AOC/serialNumber=229803+f785b1c0-5d9f-4316-8d6a-74ae642dde1c
            X509v3 Authority Key Identifier: 
                keyid:CB:11:E8:CA:D2:B4:16:58:01:C9:37:2E:33:16:16:B9:4C:9A:0A:1F

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt

    Signature Algorithm: sha1WithRSAEncryption
         4d:1f:c6:38:3c:24:58:38:6d:08:3d:b8:62:b5:e1:b0:03:ef:
         ff:86:7d:1b:10:f8:01:b7:00:2f:d7:8a:96:d3:b9:e5:66:f9:
         59:5a:e5:2b:c0:63:de:7e:05:93:e2:ba:4d:0e:b2:db:88:2e:
         2d:67:92:3e:59:b8:cf:52:d8:49:c4:31:4e:15:24:b5:b5:b7:
         cd:26:62:b3:a9:83:4a:8d:16:92:b6:4e:02:44:fa:7d:13:08:
         5b:88:21:a6:27:bc:de:3a:01:34:69:6d:00:01:ad:33:e1:dd:
         7f:18:11:aa:e8:53:df:c7:48:2b:90:31:4d:d2:62:25:58:d2:
         25:22:9f:ce:04:29:fc:30:dd:29:10:4b:45:5a:be:65:e0:7d:
         61:b4:63:25:7b:2a:92:59:df:d2:61:b0:2e:bd:4d:ab:71:37:
         7d:fe:aa:29:1b:70:fe:0a:82:77:68:d3:ba:cb:0e:7d:7e:bb:
         c0:e2:43:b2:df:c1:45:fb:f1:2d:98:17:68:a6:79:91:82:ae:
         2d:38:af:be:5d:3e:99:a0:f8:36:cf:d0:0a:90:29:01:f4:89:
         d7:90:56:dc:7d:a8:d1:1d:a6:e5:dd:06:41:b0:08:7a:f4:2a:
         29:ff:b2:1c:90:69:23:b1:a8:d6:65:ca:fe:ff:77:dc:34:d0:
         29:ab:d9:e9

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:33:26:1a:00:00:00:00:00:31
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
        Validity
            Not Before: Aug 31 22:19:32 2010 GMT
            Not After : Aug 31 22:29:32 2020 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:72:59:5c:19:30:64:bf:1d:9a:60:20:20:42:
                    99:76:53:6c:3e:1b:d6:6f:cc:cb:f1:ea:6b:fe:97:
                    16:10:e0:df:3a:74:83:1a:b7:2f:a0:32:ec:ff:de:
                    c2:42:4e:23:d5:72:00:db:35:57:0a:89:ca:ae:20:
                    49:f4:f0:68:ac:4d:4b:8d:a5:bd:79:4b:71:9b:47:
                    07:da:fd:25:df:9d:75:88:cf:aa:73:44:7f:d7:81:
                    db:f3:bd:f2:36:a4:c9:5c:45:dc:af:ad:3d:e0:28:
                    68:97:1a:a7:a5:72:73:56:f1:17:94:e4:fd:35:94:
                    72:a0:d6:76:5f:1e:77:45:83:85:38:16:d0:73:5b:
                    05:ba:67:52:8d:a5:b2:69:2f:da:19:0b:fe:92:74:
                    29:e2:76:2f:54:dd:14:30:59:f8:d2:8d:62:fd:cb:
                    c9:5f:46:31:50:b9:27:13:e4:40:30:cf:72:29:10:
                    28:22:c7:37:4e:3d:a0:32:3d:90:cd:a1:38:06:85:
                    5c:4e:56:82:28:2a:05:32:b7:4b:d7:4f:63:e7:d2:
                    2d:62:f1:45:3d:e7:ac:08:00:f6:46:a1:9e:d1:5b:
                    8c:26:53:e8:7a:aa:4a:f2:46:cf:37:3c:38:9e:b4:
                    77:5c:a5:17:9e:8d:cb:11:8f:56:3c:c1:ac:09:5f:
                    03:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                CB:11:E8:CA:D2:B4:16:58:01:C9:37:2E:33:16:16:B9:4C:9A:0A:1F
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            1.3.6.1.4.1.311.21.1: 
                .....
            1.3.6.1.4.1.311.21.2: 
                ....1N.&....`;.1o.<..-
            1.3.6.1.4.1.311.20.2: 
                .
.S.u.b.C.A
            X509v3 Authority Key Identifier: 
                keyid:0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt

    Signature Algorithm: sha1WithRSAEncryption
         59:39:3e:7f:26:46:af:eb:6f:40:b1:32:b5:6a:eb:0e:2f:6e:
         a8:49:f7:eb:5f:75:ed:4c:3b:2d:d7:43:ad:0b:fe:cb:e9:2d:
         31:a3:23:cc:7c:50:98:80:21:5d:ac:3d:2f:4c:ba:a2:a8:56:
         9c:e3:70:bb:b8:b4:f8:79:b5:49:72:f7:3e:ea:41:7f:ca:e1:
         0c:17:69:cb:a5:9c:20:2d:fa:0b:50:c4:56:cd:2d:e3:4a:d2:
         bc:70:e7:a8:0d:a2:03:a5:56:e0:b8:8a:4b:57:f2:95:42:9c:
         f1:f3:ef:ee:e3:86:1f:34:3c:b8:56:9a:f0:53:23:85:2a:a4:
         82:1c:93:e2:94:07:1d:f2:e2:4e:f8:8c:a1:ca:e8:13:a5:91:
         4e:c8:1b:d2:8f:72:95:2a:71:6d:9b:1a:f8:1c:f0:53:d6:67:
         cc:22:ff:5c:1d:cd:a2:8c:bd:27:b2:79:63:56:44:a2:51:cd:
         f9:e9:a3:58:56:dd:9b:02:45:44:2f:5f:f4:da:ae:d4:82:32:
         6e:fc:a4:95:13:e4:eb:69:e7:a9:a2:2c:be:c8:2b:10:0e:65:
         8e:99:db:f5:a2:fa:12:26:09:65:38:94:f1:7a:1f:4a:bb:d1:
         e1:56:e8:d0:78:96:18:5c:c9:35:16:5f:dd:93:1d:49:8e:2d:
         be:ad:34:44:1c:ee:10:15:1a:00:5d:dd:35:5b:21:ce:98:c7:
         09:ee:85:0e:8c:4f:6d:0e:13:4e:3d:7c:29:48:9c:72:d1:f3:
         6c:ca:c1:ec:70:a3:57:92:57:7d:94:8d:a0:1b:48:03:5a:f7:
         cf:a3:67:0a:74:a5:36:ed:2d:2f:17:c8:e6:72:37:12:f4:6f:
         b1:3c:67:82:f9:52:b2:8d:33:16:65:1e:0e:8a:dd:10:de:64:
         f4:6f:ce:46:d4:d3:17:e9:79:c4:04:b4:d3:fb:2c:df:1f:8a:
         9e:ac:0a:fb:13:27:40:ad:e4:f9:e1:a9:7f:46:bb:07:60:47:
         65:60:40:4e:b0:42:ec:4e:ed:b3:76:79:d8:0a:34:09:6d:1c:
         80:31:1f:e2:0e:54:dd:e5:a1:fb:e5:47:10:ad:64:98:ff:50:
         16:2e:7c:bf:05:21:7a:e2:95:41:27:69:c3:93:8f:95:c9:8d:
         d8:9b:21:ae:0d:5c:9c:f0:a2:ae:86:68:83:0c:6a:2d:bb:76:
         6b:00:1d:96:ad:f2:16:7b:f6:16:83:24:b9:88:cf:6a:a8:47:
         31:2f:9a:dc:e3:71:3d:d7:00:7e:62:47:d1:ce:88:c9:b8:18:
         fa:0e:72:8d:c1:a3:3d:af:02:40:6a:ff:69:9b:96:e2:10:a8:
         10:b4:37:50:08:d6:c3:3d

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:16:68:34:00:00:00:00:00:1c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
        Validity
            Not Before: Apr  3 12:53:09 2007 GMT
            Not After : Apr  3 13:03:09 2021 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a1:6c:b1:df:db:48:92:2a:7c:6b:2e:19:e1:
                    bd:e2:e3:c5:99:51:23:50:ad:ce:dd:18:4e:24:0f:
                    ee:d1:a7:d1:4c:ad:74:30:20:11:eb:07:d5:54:95:
                    15:49:94:1b:42:92:ae:98:5c:30:26:da:00:6b:e8:
                    7b:bd:ec:89:07:0f:f7:0e:04:98:f0:89:cc:1f:cb:
                    33:24:87:9d:f2:f4:67:1c:2c:fc:7b:e7:88:1d:ea:
                    e7:4e:a3:a1:c1:23:53:ca:8d:fa:45:cf:09:d0:5e:
                    af:d0:b0:42:04:a2:f9:a6:6c:93:67:d7:28:dc:46:
                    53:b0:86:d0:e5:28:46:2e:27:ac:86:4f:55:52:0c:
                    e4:03:2c:fb:6a:90:90:30:6e:87:f3:59:30:9d:fa:
                    7e:d6:97:b3:e8:21:97:7e:f8:d2:13:f3:08:b7:53:
                    6d:52:b4:45:90:9f:48:00:4a:47:66:11:27:29:66:
                    a8:97:e4:d3:06:81:4a:a2:f9:84:a7:11:47:14:09:
                    82:9f:84:ed:55:78:fe:01:9a:1d:50:08:85:00:10:
                    30:46:ed:b7:de:23:46:bb:c4:2d:54:9f:af:1e:78:
                    41:31:77:cc:9b:df:3b:83:93:a1:61:02:b5:1d:0d:
                    b1:fc:f7:9b:b2:01:ce:22:4b:54:ff:f9:05:c3:c2:
                    20:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Authority Key Identifier: 
                keyid:0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4
                DirName:/DC=com/DC=microsoft/CN=Microsoft Root Certificate Authority
                serial:79:AD:16:A1:4A:A0:A5:AD:4C:73:58:F4:07:13:2E:65

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt

            X509v3 Extended Key Usage: 
                Time Stamping
    Signature Algorithm: sha1WithRSAEncryption
         10:97:8a:c3:5c:03:44:36:dd:e9:b4:ad:77:db:ce:79:51:4d:
         01:b1:2e:74:71:5b:6d:0c:13:ab:ce:be:7b:8f:b8:2e:d4:12:
         a2:8c:6d:62:b8:57:02:cb:4e:20:13:50:99:dd:7a:40:e2:57:
         bb:af:58:9a:1c:e1:1d:01:86:ac:bb:78:f2:8b:d0:ec:3b:01:
         ee:e2:be:8f:0a:05:c8:8d:48:e2:f0:53:15:dd:4f:ab:92:e4:
         e7:8d:6a:d5:80:c1:e6:94:f2:06:2f:85:03:e9:91:2a:24:22:
         70:fb:f6:fc:e4:78:99:2e:0d:f7:07:e2:70:bc:18:4e:9d:8e:
         6b:0a:72:95:b8:a1:39:9c:67:2d:c5:51:0e:ea:62:5c:3f:16:
         98:8b:20:3f:e2:07:1a:32:f9:cc:31:4a:76:31:3d:2b:72:0b:
         c8:ea:70:3d:ff:85:0a:13:df:c2:0a:61:8e:f0:d7:b8:17:eb:
         4e:8b:7f:c5:35:2b:5e:a3:bf:eb:bc:7d:0b:42:7b:d4:53:72:
         21:ee:30:ca:bb:78:65:5c:5b:01:17:0a:14:0e:d2:da:14:98:
         f5:3c:b9:66:58:b3:2d:2f:e7:f9:85:86:cc:51:56:e8:9d:70:
         94:6c:ac:39:4c:d4:f6:79:bf:aa:18:7a:62:29:ef:a2:9b:29:
         34:06:77:1a:62:c9:3d:1e:6d:1f:82:f0:0b:c7:2c:bb:cf:43:
         b3:e5:f9:ec:7d:b5:e3:a4:a8:74:35:b8:4e:c5:71:23:12:26:
         76:0b:3c:52:8c:71:5a:46:43:14:bc:b3:b3:b0:4d:67:c8:9f:
         42:ff:80:79:21:80:9e:15:30:66:e8:42:12:5e:1a:c8:9e:22:
         21:d0:43:e9:2b:e9:bb:f4:48:cc:2c:d4:d8:32:80:4c:26:2a:
         48:24:5f:5a:ea:56:ef:a6:de:99:9d:ca:3a:6f:bd:81:27:74:
         06:11:ee:76:21:bf:9b:82:c1:27:54:b6:b1:6a:3d:89:a1:76:
         61:b4:6e:a1:13:a6:bf:aa:47:f0:12:6f:fd:8a:32:6c:b2:fe:
         df:51:c8:8c:23:c9:66:bd:9d:1d:87:12:64:02:3d:2d:af:59:
         8f:b8:e4:21:e5:b5:b0:ca:63:b4:78:54:05:d4:41:2e:50:ac:
         94:b0:a5:78:ab:b3:a0:96:75:1a:d9:92:87:13:75:22:2f:32:
         a8:08:6e:a0:5b:8c:25:bf:a0:ef:84:ca:21:d6:eb:1e:4f:c9:
         9a:ee:49:e0:f7:01:65:6f:89:0b:7d:c8:69:c8:e6:6e:ea:a7:
         97:ce:31:29:ff:0e:c5:5b:5c:d8:4d:1b:a1:d8:fa:2f:9e:3f:
         2e:55:16:6b:c9:13:a3:fd

undefined method `first' for #

offsetsizetypecomment
15c115HTM#
15d05869896BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 5875480 bytes (5738 KiB)


--
Type = PE
Physical Size = 5875480
CPU = x64
64-bit = +
Characteristics = Executable LargeAddress
Created = 2016-10-25 15:40:45
Headers Size = 1024
Checksum = 5925916
Name = mpas-fe_bd.exe
Image Size = 5873664
Section Alignment = 4096
File Alignment = 512
Code Size = 126976
Initialized Data Size = 5731840
Uninitialized Data Size = 0
Linker Version = 14.0
OS Version = 10.0
Image Version = 10.0
Subsystem Version = 5.2
Subsystem = Windows GUI
DLL Characteristics = Relocated NX-Compatible TerminalServerAware 0x4020
Stack Reserve = 524288
Stack Commit = 8192
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 5368709120
Comment = FileVersion: 1.231.396.0
ProductVersion: 1.231.396.0
CompanyName: Microsoft Corporation
FileDescription: AntiMalware Definition Update
InternalName: mpas-fe_bd.exe
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: mpas-fe_bd.exe
ProductName: Microsoft Malware Protection
EngineVersion: 1.1.13202.0
----
Path = .rsrc/0/CABINET/SFX.CAB
Size = 5658161
Packed Size = 5658161
--
Path = .rsrc/0/CABINET/SFX.CAB
Type = Cab
Physical Size = 5658161
Method = LZX:21
Blocks = 1
Volumes = 1
Volume Index = 0
ID = 5393

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2016-07-26 14:24:24 .R..A       504488               MPSigStub.exe
2016-10-25 07:34:00 ....A       711952               mpasdlta.vdm
2016-10-19 12:14:24 .R..A      1021957               mpasbase.vdm._p
2016-10-19 12:14:02 .R..A      3722398               mpengine.dll._p
------------------- ----- ------------ ------------  ------------------------
2016-10-25 07:34:00            5960795      5875480  4 files
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

everything is OK