MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

TLS

StringTable 040904E4

VS_FIXEDFILEINFO

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Code Signing PCA
serial: 330000010A2C79AED7797BA6AC00010000010A

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:00:00:99:aa:c5:81:9f:8c:a2:7d:8a:00:00:00:00:00:99
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA
        Validity
            Not Before: Mar 30 19:21:28 2016 GMT
            Not After : Jun 30 19:21:28 2017 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, OU=nCipher DSE ESN:98FD-C61E-E641, CN=Microsoft Time-Stamp Service
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:8a:90:ad:87:ce:85:46:ed:72:ae:db:0f:bb:63:
                    4b:49:5e:e7:bf:a0:3f:a1:50:1c:bc:6a:c6:ed:54:
                    30:46:7f:b0:1a:55:eb:05:fe:27:ca:2c:9b:1c:69:
                    fd:33:1b:81:f6:ee:04:32:f1:fc:b3:be:5d:92:de:
                    f7:59:3e:e5:18:84:f5:c8:22:21:f5:50:bd:76:cd:
                    62:59:f9:b1:1d:9b:58:ba:d5:0e:33:dd:be:6b:6d:
                    ae:91:05:b4:d1:3f:14:db:2a:30:67:a1:9a:bf:84:
                    3b:fb:d3:35:52:b3:e7:89:95:c3:c0:cd:d6:aa:6d:
                    30:92:49:66:c1:f8:04:12:6f:b2:c8:26:cc:90:d4:
                    45:48:21:bd:3c:8c:d9:aa:6e:82:b8:1b:dd:8e:2f:
                    67:32:f7:ee:4e:5a:b1:69:66:da:16:05:51:6a:09:
                    61:cf:ef:de:2c:94:f5:7b:8e:40:b0:69:e2:f5:79:
                    23:28:be:95:26:b6:9b:c5:10:18:cc:43:30:e2:a4:
                    96:b2:1a:07:b0:48:76:3c:3d:62:b8:a8:cb:bd:8b:
                    29:5a:fe:04:04:24:0f:3c:83:a9:19:83:b1:a4:c5:
                    91:ab:4b:7f:82:a0:be:a0:99:d7:80:7c:3a:0f:97:
                    d9:d8:27:2a:9a:ee:3f:bb:77:0d:fd:a0:2d:fb:db:
                    b0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                76:D6:12:F8:BA:05:56:F0:B1:C7:B2:C2:F9:63:20:2B:68:B7:04:11
            X509v3 Authority Key Identifier: 
                23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt
            X509v3 Extended Key Usage: 
                Time Stamping
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        16:cd:60:c3:2d:dc:98:df:30:09:ed:8d:08:47:ac:ec:f8:69:
        49:3d:ef:47:ff:84:9c:35:8c:b7:d8:b2:91:69:ab:e1:a4:5b:
        78:cc:91:4b:b7:19:eb:ff:3e:34:65:af:fa:c3:b1:e1:48:31:
        71:2a:da:d1:1f:ff:2a:7b:d9:e9:7a:72:09:45:07:5f:dc:6d:
        f0:dc:76:29:8b:40:3e:96:3d:94:32:01:fa:e9:11:c7:02:2d:
        aa:2e:7f:b9:b3:f4:31:90:d1:bf:42:fa:16:bd:dd:76:68:9d:
        3c:0f:a9:69:a9:e5:d7:3e:62:24:e9:78:02:9c:d6:f6:a8:d3:
        ea:ee:fd:fb:99:44:e7:b1:f1:97:7d:f6:be:9e:a1:9c:74:b5:
        42:31:68:0e:6c:4d:63:16:e9:8f:b4:e6:f6:4d:dc:e9:3c:ff:
        e8:70:a8:c9:70:80:d4:7f:36:75:40:3a:0d:a2:b2:4f:70:a3:
        1f:52:d6:8c:98:f5:a4:73:6b:58:c8:e3:a7:db:98:2f:3c:cf:
        de:38:10:27:cb:af:d8:23:6b:75:0a:44:c9:01:dc:fd:b8:ea:
        5b:6c:88:7d:5f:cf:49:05:02:af:e5:d9:eb:ab:99:fa:04:9e:
        18:3c:9f:73:87:63:96:bf:67:3a:34:f9:6f:6c:d7:29:5f:51:
        e7:28:67:85

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0a
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA
        Validity
            Not Before: Jun  4 17:42:45 2015 GMT
            Not After : Sep  4 17:42:45 2016 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, CN=Microsoft Corporation
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:92:fc:6f:36:bb:e1:03:b9:28:d6:46:d1:a2:61:
                    ba:a5:46:fb:63:16:3e:2e:f9:47:d2:c7:ec:ed:c7:
                    99:b1:26:51:75:bd:da:cc:0f:06:14:11:a4:6c:19:
                    9e:c0:5f:4d:54:89:e4:4d:50:d8:8d:cd:a1:61:a5:
                    77:13:9a:1c:a7:ed:0d:74:f7:a7:56:79:e8:28:f7:
                    53:d2:b1:7a:63:e0:f5:94:97:b7:ec:d9:47:f8:6c:
                    3d:f3:25:88:b3:bc:0a:c5:04:a7:8e:7c:85:48:76:
                    1c:61:46:aa:19:c4:7a:62:8b:c1:c2:35:aa:fb:58:
                    6f:c5:63:0b:93:49:30:81:1b:7b:df:7f:7c:4f:b4:
                    47:6d:5f:78:1c:af:b6:f7:96:13:52:ef:b9:d1:4d:
                    39:e5:73:de:48:4e:3c:14:aa:97:0d:39:cc:8b:51:
                    e1:5c:d1:3b:f0:8e:67:ea:30:60:a9:4d:5a:9d:43:
                    bd:db:23:ba:c0:0f:d7:4b:10:9d:9c:4d:f0:51:a2:
                    84:aa:e4:9c:a7:3d:d6:a3:ef:0a:18:48:a8:fa:b1:
                    4e:a5:98:0e:4b:bf:f0:14:f3:00:c8:b0:48:d6:5b:
                    fe:38:d7:89:11:2d:05:ba:43:02:4f:22:00:96:25:
                    ad:7d:35:6e:84:68:ab:20:18:38:28:fe:1c:a2:10:
                    b1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Subject Key Identifier: 
                89:FE:0A:31:EA:26:CD:E6:6D:C7:91:91:B9:94:8C:A2:18:61:37:34
            X509v3 Subject Alternative Name: 
                DirName:/OU=MOPR/serialNumber=31595\+04079350-16fa-4c60-b6bf-9d2b1cd05984
            X509v3 Authority Key Identifier: 
                CB:11:E8:CA:D2:B4:16:58:01:C9:37:2E:33:16:16:B9:4C:9A:0A:1F
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        a6:a8:53:91:df:3b:01:fe:61:5d:06:5a:eb:66:f0:0c:d8:f7:
        d9:84:d3:00:51:0e:10:d1:a4:d1:17:28:e7:8c:33:38:2b:d8:
        43:c6:03:8b:75:eb:33:92:f4:a9:e2:67:fd:02:db:a5:1d:4e:
        43:45:5d:1b:49:e3:e0:4f:16:f0:7e:8f:f0:88:11:ca:82:ad:
        a4:fb:a6:a9:5f:f5:97:60:c8:7b:c4:bf:7c:9b:69:ed:1f:82:
        c1:f1:cd:8e:78:4b:62:f5:d7:0d:1c:d7:53:12:d6:96:52:ef:
        35:bd:19:8e:a0:40:93:a1:0a:a5:2d:16:9c:c2:46:74:08:eb:
        db:f4:d8:a5:49:36:54:12:11:55:03:b3:7b:16:fb:47:fe:fb:
        68:fc:c0:45:5c:e2:3f:12:79:33:a2:ef:82:c5:de:40:19:07:
        ee:15:c5:0a:9b:59:05:41:a9:d0:97:9e:81:9e:03:5b:fc:4a:
        e3:1a:2e:05:ac:50:47:2f:8c:fa:79:d8:1e:20:f8:05:fb:29:
        6b:18:14:fa:72:04:b7:0b:a7:9a:64:ec:11:5d:4f:45:49:8d:
        29:1a:2d:fb:d0:b6:09:53:5f:34:94:e0:16:c4:b9:ea:73:35:
        e8:57:ef:e1:eb:16:c3:18:c7:06:b3:3b:cf:61:84:e2:b6:44:
        89:94:a3:86

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:33:26:1a:00:00:00:00:00:31
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
        Validity
            Not Before: Aug 31 22:19:32 2010 GMT
            Not After : Aug 31 22:29:32 2020 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b2:72:59:5c:19:30:64:bf:1d:9a:60:20:20:42:
                    99:76:53:6c:3e:1b:d6:6f:cc:cb:f1:ea:6b:fe:97:
                    16:10:e0:df:3a:74:83:1a:b7:2f:a0:32:ec:ff:de:
                    c2:42:4e:23:d5:72:00:db:35:57:0a:89:ca:ae:20:
                    49:f4:f0:68:ac:4d:4b:8d:a5:bd:79:4b:71:9b:47:
                    07:da:fd:25:df:9d:75:88:cf:aa:73:44:7f:d7:81:
                    db:f3:bd:f2:36:a4:c9:5c:45:dc:af:ad:3d:e0:28:
                    68:97:1a:a7:a5:72:73:56:f1:17:94:e4:fd:35:94:
                    72:a0:d6:76:5f:1e:77:45:83:85:38:16:d0:73:5b:
                    05:ba:67:52:8d:a5:b2:69:2f:da:19:0b:fe:92:74:
                    29:e2:76:2f:54:dd:14:30:59:f8:d2:8d:62:fd:cb:
                    c9:5f:46:31:50:b9:27:13:e4:40:30:cf:72:29:10:
                    28:22:c7:37:4e:3d:a0:32:3d:90:cd:a1:38:06:85:
                    5c:4e:56:82:28:2a:05:32:b7:4b:d7:4f:63:e7:d2:
                    2d:62:f1:45:3d:e7:ac:08:00:f6:46:a1:9e:d1:5b:
                    8c:26:53:e8:7a:aa:4a:f2:46:cf:37:3c:38:9e:b4:
                    77:5c:a5:17:9e:8d:cb:11:8f:56:3c:c1:ac:09:5f:
                    03:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                CB:11:E8:CA:D2:B4:16:58:01:C9:37:2E:33:16:16:B9:4C:9A:0A:1F
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            1.3.6.1.4.1.311.21.1: 
                .....
            1.3.6.1.4.1.311.21.2: 
                ....1N.&....`;.1o.<..-
            1.3.6.1.4.1.311.20.2: 
                .
.S.u.b.C.A
            X509v3 Authority Key Identifier: 
                0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        59:39:3e:7f:26:46:af:eb:6f:40:b1:32:b5:6a:eb:0e:2f:6e:
        a8:49:f7:eb:5f:75:ed:4c:3b:2d:d7:43:ad:0b:fe:cb:e9:2d:
        31:a3:23:cc:7c:50:98:80:21:5d:ac:3d:2f:4c:ba:a2:a8:56:
        9c:e3:70:bb:b8:b4:f8:79:b5:49:72:f7:3e:ea:41:7f:ca:e1:
        0c:17:69:cb:a5:9c:20:2d:fa:0b:50:c4:56:cd:2d:e3:4a:d2:
        bc:70:e7:a8:0d:a2:03:a5:56:e0:b8:8a:4b:57:f2:95:42:9c:
        f1:f3:ef:ee:e3:86:1f:34:3c:b8:56:9a:f0:53:23:85:2a:a4:
        82:1c:93:e2:94:07:1d:f2:e2:4e:f8:8c:a1:ca:e8:13:a5:91:
        4e:c8:1b:d2:8f:72:95:2a:71:6d:9b:1a:f8:1c:f0:53:d6:67:
        cc:22:ff:5c:1d:cd:a2:8c:bd:27:b2:79:63:56:44:a2:51:cd:
        f9:e9:a3:58:56:dd:9b:02:45:44:2f:5f:f4:da:ae:d4:82:32:
        6e:fc:a4:95:13:e4:eb:69:e7:a9:a2:2c:be:c8:2b:10:0e:65:
        8e:99:db:f5:a2:fa:12:26:09:65:38:94:f1:7a:1f:4a:bb:d1:
        e1:56:e8:d0:78:96:18:5c:c9:35:16:5f:dd:93:1d:49:8e:2d:
        be:ad:34:44:1c:ee:10:15:1a:00:5d:dd:35:5b:21:ce:98:c7:
        09:ee:85:0e:8c:4f:6d:0e:13:4e:3d:7c:29:48:9c:72:d1:f3:
        6c:ca:c1:ec:70:a3:57:92:57:7d:94:8d:a0:1b:48:03:5a:f7:
        cf:a3:67:0a:74:a5:36:ed:2d:2f:17:c8:e6:72:37:12:f4:6f:
        b1:3c:67:82:f9:52:b2:8d:33:16:65:1e:0e:8a:dd:10:de:64:
        f4:6f:ce:46:d4:d3:17:e9:79:c4:04:b4:d3:fb:2c:df:1f:8a:
        9e:ac:0a:fb:13:27:40:ad:e4:f9:e1:a9:7f:46:bb:07:60:47:
        65:60:40:4e:b0:42:ec:4e:ed:b3:76:79:d8:0a:34:09:6d:1c:
        80:31:1f:e2:0e:54:dd:e5:a1:fb:e5:47:10:ad:64:98:ff:50:
        16:2e:7c:bf:05:21:7a:e2:95:41:27:69:c3:93:8f:95:c9:8d:
        d8:9b:21:ae:0d:5c:9c:f0:a2:ae:86:68:83:0c:6a:2d:bb:76:
        6b:00:1d:96:ad:f2:16:7b:f6:16:83:24:b9:88:cf:6a:a8:47:
        31:2f:9a:dc:e3:71:3d:d7:00:7e:62:47:d1:ce:88:c9:b8:18:
        fa:0e:72:8d:c1:a3:3d:af:02:40:6a:ff:69:9b:96:e2:10:a8:
        10:b4:37:50:08:d6:c3:3d

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:16:68:34:00:00:00:00:00:1c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
        Validity
            Not Before: Apr  3 12:53:09 2007 GMT
            Not After : Apr  3 13:03:09 2021 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:9f:a1:6c:b1:df:db:48:92:2a:7c:6b:2e:19:e1:
                    bd:e2:e3:c5:99:51:23:50:ad:ce:dd:18:4e:24:0f:
                    ee:d1:a7:d1:4c:ad:74:30:20:11:eb:07:d5:54:95:
                    15:49:94:1b:42:92:ae:98:5c:30:26:da:00:6b:e8:
                    7b:bd:ec:89:07:0f:f7:0e:04:98:f0:89:cc:1f:cb:
                    33:24:87:9d:f2:f4:67:1c:2c:fc:7b:e7:88:1d:ea:
                    e7:4e:a3:a1:c1:23:53:ca:8d:fa:45:cf:09:d0:5e:
                    af:d0:b0:42:04:a2:f9:a6:6c:93:67:d7:28:dc:46:
                    53:b0:86:d0:e5:28:46:2e:27:ac:86:4f:55:52:0c:
                    e4:03:2c:fb:6a:90:90:30:6e:87:f3:59:30:9d:fa:
                    7e:d6:97:b3:e8:21:97:7e:f8:d2:13:f3:08:b7:53:
                    6d:52:b4:45:90:9f:48:00:4a:47:66:11:27:29:66:
                    a8:97:e4:d3:06:81:4a:a2:f9:84:a7:11:47:14:09:
                    82:9f:84:ed:55:78:fe:01:9a:1d:50:08:85:00:10:
                    30:46:ed:b7:de:23:46:bb:c4:2d:54:9f:af:1e:78:
                    41:31:77:cc:9b:df:3b:83:93:a1:61:02:b5:1d:0d:
                    b1:fc:f7:9b:b2:01:ce:22:4b:54:ff:f9:05:c3:c2:
                    20:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Authority Key Identifier: 
                keyid:0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4
                DirName:/DC=com/DC=microsoft/CN=Microsoft Root Certificate Authority
                serial:79:AD:16:A1:4A:A0:A5:AD:4C:73:58:F4:07:13:2E:65
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt
            X509v3 Extended Key Usage: 
                Time Stamping
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        10:97:8a:c3:5c:03:44:36:dd:e9:b4:ad:77:db:ce:79:51:4d:
        01:b1:2e:74:71:5b:6d:0c:13:ab:ce:be:7b:8f:b8:2e:d4:12:
        a2:8c:6d:62:b8:57:02:cb:4e:20:13:50:99:dd:7a:40:e2:57:
        bb:af:58:9a:1c:e1:1d:01:86:ac:bb:78:f2:8b:d0:ec:3b:01:
        ee:e2:be:8f:0a:05:c8:8d:48:e2:f0:53:15:dd:4f:ab:92:e4:
        e7:8d:6a:d5:80:c1:e6:94:f2:06:2f:85:03:e9:91:2a:24:22:
        70:fb:f6:fc:e4:78:99:2e:0d:f7:07:e2:70:bc:18:4e:9d:8e:
        6b:0a:72:95:b8:a1:39:9c:67:2d:c5:51:0e:ea:62:5c:3f:16:
        98:8b:20:3f:e2:07:1a:32:f9:cc:31:4a:76:31:3d:2b:72:0b:
        c8:ea:70:3d:ff:85:0a:13:df:c2:0a:61:8e:f0:d7:b8:17:eb:
        4e:8b:7f:c5:35:2b:5e:a3:bf:eb:bc:7d:0b:42:7b:d4:53:72:
        21:ee:30:ca:bb:78:65:5c:5b:01:17:0a:14:0e:d2:da:14:98:
        f5:3c:b9:66:58:b3:2d:2f:e7:f9:85:86:cc:51:56:e8:9d:70:
        94:6c:ac:39:4c:d4:f6:79:bf:aa:18:7a:62:29:ef:a2:9b:29:
        34:06:77:1a:62:c9:3d:1e:6d:1f:82:f0:0b:c7:2c:bb:cf:43:
        b3:e5:f9:ec:7d:b5:e3:a4:a8:74:35:b8:4e:c5:71:23:12:26:
        76:0b:3c:52:8c:71:5a:46:43:14:bc:b3:b3:b0:4d:67:c8:9f:
        42:ff:80:79:21:80:9e:15:30:66:e8:42:12:5e:1a:c8:9e:22:
        21:d0:43:e9:2b:e9:bb:f4:48:cc:2c:d4:d8:32:80:4c:26:2a:
        48:24:5f:5a:ea:56:ef:a6:de:99:9d:ca:3a:6f:bd:81:27:74:
        06:11:ee:76:21:bf:9b:82:c1:27:54:b6:b1:6a:3d:89:a1:76:
        61:b4:6e:a1:13:a6:bf:aa:47:f0:12:6f:fd:8a:32:6c:b2:fe:
        df:51:c8:8c:23:c9:66:bd:9d:1d:87:12:64:02:3d:2d:af:59:
        8f:b8:e4:21:e5:b5:b0:ca:63:b4:78:54:05:d4:41:2e:50:ac:
        94:b0:a5:78:ab:b3:a0:96:75:1a:d9:92:87:13:75:22:2f:32:
        a8:08:6e:a0:5b:8c:25:bf:a0:ef:84:ca:21:d6:eb:1e:4f:c9:
        9a:ee:49:e0:f7:01:65:6f:89:0b:7d:c8:69:c8:e6:6e:ea:a7:
        97:ce:31:29:ff:0e:c5:5b:5c:d8:4d:1b:a1:d8:fa:2f:9e:3f:
        2e:55:16:6b:c9:13:a3:fd

undefined method `first' for #

offsetsizetypecomment
0506880EXE10/13/2015 22:59:40#
15c115HTM#
6ae5825696PNG(256 x 256)#
7bc0041208488BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 41715368 bytes (40 MiB)


--
Type = PE
Physical Size = 41715368
CPU = x86
Characteristics = Executable 32-bit RemovableRun NetRun
Created = 2015-10-13 22:59:40
Headers Size = 1024
Checksum = 41750739
Image Size = 528384
Section Alignment = 4096
File Alignment = 512
Code Size = 297984
Initialized Data Size = 207872
Uninitialized Data Size = 0
Linker Version = 14.0
OS Version = 5.1
Image Version = 0.0
Subsystem Version = 5.1
Subsystem = Windows GUI
DLL Characteristics = Relocated NX-Compatible TerminalServerAware
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
Comment = FileVersion: 1.1.622.2
ProductVersion: 1.1.622.2
InternalName: setup
----
Path = [0]
Size = 41192424
Packed Size = 41192424
Virtual Size = 41192424
Offset = 506880
--
Path = [0]
Type = Cab
WARNINGS:
There are data after the end of archive
Physical Size = 1977503
Tail Size = 39214921
Method = MSZip
Blocks = 1
Volumes = 1
Volume Index = 0
ID = 0

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2016-06-21 17:38:58 ....A        42453               0
2015-10-13 15:59:52 ....A       112128               u0
2015-10-13 15:59:48 ....A        81920               u1
2015-10-13 15:59:54 ....A       175616               u2
2015-10-13 15:58:06 ....A         2158               u3
2015-10-13 15:58:06 ....A         2167               u4
2015-10-13 15:58:06 ....A         2428               u5
2015-10-13 15:58:06 ....A         2584               u6
2015-10-13 15:58:06 ....A         3542               u7
2015-10-13 15:58:06 ....A         2377               u8
2015-10-13 15:58:06 ....A         2448               u9
2015-10-13 15:58:06 ....A         2534               u10
2015-10-13 15:58:06 ....A         2687               u11
2015-10-13 15:58:06 ....A         2378               u12
2015-10-13 15:58:06 ....A         2454               u13
2015-10-13 15:58:06 ....A         2313               u14
2015-10-13 15:58:06 ....A         2510               u15
2015-10-13 15:58:06 ....A         2289               u16
2015-10-13 15:58:06 ....A         3022               u17
2015-10-13 15:58:06 ....A         2476               u18
2015-10-13 15:58:06 ....A         2342               u19
2015-10-13 15:58:06 ....A         2122               u20
2015-10-13 15:58:06 ....A         2353               u21
2015-10-13 15:58:06 ....A         2542               u22
2015-12-15 23:28:40 ....A       867648               u23
2015-12-15 23:28:40 ....A       495920               u24
2015-10-10 21:02:42 ....A          897               u25
2015-10-10 21:02:42 ....A         6004               u26
2015-10-10 21:13:34 ....A       226456               u27
2015-11-23 20:24:00 ....A        49968               u28
2015-12-15 20:12:10 ....A       200992               u29
2015-11-23 20:24:12 ....A       387408               u30
2015-10-10 22:18:00 ....A       430080               u31
2015-11-23 20:24:12 ....A       180464               u32
2015-11-23 20:24:12 ....A        55112               u33
2015-11-23 20:24:12 ....A       157976               u34
2015-12-15 23:28:52 ....A        86928               u35
2015-12-15 23:29:20 ....A        83966               u36
2015-12-15 23:51:38 ....A        69464               u37
2015-12-15 23:29:24 ....A        84641               u38
2015-12-15 23:51:38 ....A        73720               u39
2015-12-15 23:29:38 ....A        92901               u40
2015-12-15 23:51:38 ....A        77808               u41
2015-12-15 23:29:24 ....A        95067               u42
2015-12-15 23:51:38 ....A        77808               u43
2015-12-15 23:29:28 ....A        92954               u44
2015-12-15 23:51:38 ....A        77816               u45
2015-12-15 23:29:30 ....A        95851               u46
2015-12-15 23:51:38 ....A        77808               u47
2015-12-15 23:29:32 ....A        93036               u48
2015-12-15 23:51:38 ....A        77808               u49
2015-12-15 23:29:32 ....A       106461               u50
2015-12-15 23:51:38 ....A        81912               u51
2015-10-13 15:58:06 ....A         3915               u52
2015-12-15 23:29:34 ....A        94359               u53
2015-12-15 23:51:38 ....A        77816               u54
2015-12-15 23:29:38 ....A        95365               u55
2015-10-13 15:58:06 ....A         2446               u56
2015-10-13 15:58:06 ....A         2274               u57
2015-10-13 15:58:06 ....A         2445               u58
2015-12-15 23:51:38 ....A        77808               u59
2015-12-15 23:29:38 ....A        91850               u60
2015-12-15 23:51:38 ....A        77816               u61
2015-12-15 23:29:36 ....A       119240               u62
2015-12-15 23:51:38 ....A        90096               u63
2015-12-15 23:29:40 ....A        91577               u64
2015-12-15 23:51:38 ....A        73712               u65
2015-10-10 21:02:42 ....A         4279               u66
2015-10-10 21:02:42 ....A         8615               u67
2015-10-10 21:02:42 ....A         8719               u68
2015-10-13 15:58:06 ....A          797               u69
2015-10-13 15:58:06 ....A         2600               u70
2016-06-21 17:38:54 ....A        47712               u71
------------------- ----- ------------ ------------  ------------------------
2016-06-21 17:38:58            5940158     41715368  73 files

Warnings: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] ignoring invalid PEdump::BITMAPINFOHEADER