filenamer.exe
size488024 (0x77258)
md5241381997d1e542c850fc7245afb229d
typePE32 executable (console) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe0

Rich Header

lib idversiontimes used
150204131
1493072927
13130729116
147307299
10168
13230729118
148307291
145307291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x52160b5e
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x122
Magic0x10b
LinkerVersion9.0
SizeOfCode0x61c00
SizeOfInitializedData0x31e00
SizeOfUninitializedData0
AddressOfEntryPoint0x56a8b
BaseOfCode0x1000
BaseOfData0x63000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0x97000
SizeOfHeaders0x400
CheckSum0x7ccd2
Subsystem3
DllCharacteristics0x8140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x61b630x61c00R-X CODE
.rdata0x630000x67f80x6800R-- IDATA
.data0x6a0000x202a40x2000RW- IDATA
.rsrc0x8b0000x79800x7a00R-- IDATA
.reloc0x930000x36680x3800R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x6896c0x64
RESOURCE0x8b0000x7980
EXCEPTION00
SECURITY0x75a000x1858
BASERELOC0x930000x2750
DEBUG0x633000x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x663c80x40
Bound_IAT00
IAT0x630000x284
Delay_IAT00
CLR_Header00
typenamesizecp
STRING#1881120
STRING#1895260
STRING#190800
STRING#1914640
STRING#1927060
STRING#1936840
STRING#1946880
STRING#1958520
STRING#1967200
STRING#1977960
STRING#1988080
STRING#1997580
STRING#2008160
STRING#2018080
STRING#2028060
STRING#2037740
STRING#2049240
STRING#2058380
STRING#2067220
STRING#2074420
STRING#2083520
STRING#2093740
STRING#2104520
STRING#2114240
STRING#2123860
STRING#2132960
STRING#2144720
STRING#2154580
STRING#2163900
STRING#2174840
STRING#2184100
STRING#2192300
STRING#2203380
STRING#2212660
STRING#2221320
STRING#2233440
STRING#2242480
STRING#2254700
STRING#2265080
STRING#2275900
STRING#2286320
STRING#2295860
STRING#2307060
STRING#2314280
STRING#2326260
STRING#2335860
STRING#2346380
STRING#2354480
STRING#2366280
STRING#2371220
VERSION#16880
MANIFEST#113350
idlangstring
30021033_Yes_No
30041033_Yes_No_All
30061033_Yes_No_All_nEver_Quit
30081033_Yes_No_All_nEver_Rename_Quit
30101033_Continue_Quit
30121033_Retry_Abort
30141033RAR %s Copyright (c) 1993-%d Alexander Roshal %d %s %d
30161033Registered to %s
30181033Trial version Type RAR -? for help
30201033UNRAR %s freeware Copyright (c) 1993-%d Alexander Roshal
30221033beta
30241033Jan
30261033Feb
30281033Mar
30301033Apr
30321033May
30341033Jun
30361033Jul
30381033Aug
30401033Sep
30421033Oct
30441033Nov
30461033Dec
30481033Usage: rar <command> -<switch 1> -<switch N> <archive> <files...>
30501033Usage: unrar <command> -<switch 1> -<switch N> <archive> <files...>
30521033<@listfiles...> <path_to_extract\>
30541033<Commands>
30561033a Add files to archive
30581033c Add archive comment
30601033ch Change archive parameters
30621033cw Write archive comment to file
30641033d Delete files from archive
30661033e Extract files without archived paths
30681033f Freshen files in archive
30701033i[par]=<str> Find string in archives
30721033k Lock archive
30741033l[t[a],b] List archive contents [technical[all], bare]
30761033m[f] Move to archive [files only]
30781033p Print file to stdout
30801033r Repair archive
30821033rc Reconstruct missing volumes
30841033rn Rename archived files
30861033rr[N] Add data recovery record
30881033rv[N] Create recovery volumes
30901033s[name|-] Convert archive to or from SFX
30921033t Test archive files
30941033u Update files in archive
30961033v[t[a],b] Verbosely list archive contents [technical[all],bare]
30981033x Extract files with full path
31001033<Switches>
31021033- Stop switches scanning
31041033@[+] Disable [enable] file lists
31061033ac Clear Archive attribute after compression or extraction
31081033ad Append archive name to destination path
31101033ag[format] Generate archive name using the current date
31121033ai Ignore file attributes
31141033ao Add files with Archive attribute set
31161033ap<path> Set path inside archive
31181033as Synchronize archive contents
31201033c- Disable comments show
31221033cfg- Disable read configuration
31241033cl Convert names to lower case
31261033cu Convert names to upper case
31281033df Delete files after archiving
31301033dh Open shared files
31321033dr Delete files to Recycle Bin
31341033ds Disable name sort for solid archive
31361033dw Wipe files after archiving
31381033e[+]<attr> Set file exclude and include attributes
31401033ed Do not add empty directories
31421033ee Do not save and extract extended attributes
31441033en Do not put 'end of archive' block
31461033ep Exclude paths from names
31481033ep1 Exclude base directory from names
31501033ep2 Expand paths to full
31521033ep3 Expand paths to full including the drive letter
31541033f Freshen files
31561033hp[password] Encrypt both file data and headers
31581033ht[b|c] Select hash type [BLAKE2,CRC32] for file checksum
31601033id[c,d,p,q] Disable messages
31621033ieml[addr] Send archive by email
31641033ierr Send all messages to stderr
31661033ilog[name] Log errors to file (registered versions only)
31681033inul Disable all messages
31701033ioff Turn PC off after completing an operation
31721033isnd Enable sound
31741033k Lock archive
31761033kb Keep broken extracted files
31781033log[f][=name] Write names to log file
31801033m<0..5> Set compression level (0-store...3-default...5-maximal)
31821033ma[4|5] Specify a version of archiving format
31841033mc<par> Set advanced compression parameters
31861033md<n>[k,m,g] Dictionary size in KB, MB or GB
31881033ms[ext;ext] Specify file types to store
31901033mt<threads> Set the number of threads
31921033n<file> Additionally filter included files
31941033n@ Read additional filter masks from stdin
31961033n@<list> Read additional filter masks from list file
31981033o[+|-] Set the overwrite mode
32001033oc Set NTFS Compressed attribute
32021033oh Save hard links as the link instead of the file
32041033oi[0-4][:min] Save identical files as references
32061033ol Save symbolic links as the link instead of the file
32081033or Rename files automatically
32101033os Save NTFS streams
32121033ow Save or restore file owner and group
32141033p[password] Set password
32161033p- Do not query password
32181033qo[-|+] Add quick open information [none|force]
32201033r Recurse subdirectories
32221033r- Disable recursion
32241033r0 Recurse subdirectories for wildcard names only
32261033ri<P>[:<S>] Set priority (0-default,1-min..15-max) and sleep time in ms
32281033rr[N] Add data recovery record
32301033rv[N] Create recovery volumes
32321033s[<N>,v[-],e] Create solid archive
32341033s- Disable solid archiving
32361033sc<chr>[obj] Specify the character set
32381033sfx[name] Create SFX archive
32401033si[name] Read data from standard input (stdin)
32421033sl<size> Process files with size less than specified
32441033sm<size> Process files with size more than specified
32461033t Test files after archiving
32481033tk Keep original archive time
32501033tl Set archive time to latest file
32521033tn<time> Process files newer than <time>
32541033to<time> Process files older than <time>
32561033ta<date> Process files modified after <date> in YYYYMMDDHHMMSS format
32581033tb<date> Process files modified before <date> in YYYYMMDDHHMMSS format
32601033ts<m,c,a>[N] Save or restore file time (modification, creation, access)
32621033u Update files
32641033v Create volumes with size autodetection or list all volumes
32661033v List all volumes
32681033v<size>[k,b] Create volumes with size=<size>*1000 [*1024, *1]
32701033vd Erase disk contents before creating volume
32721033ver[n] File version control
32741033vn Use the old style volume naming scheme
32761033vp Pause before each volume
32781033w<path> Assign work directory
32801033x<file> Exclude specified file
32821033x@ Read file names to exclude from stdin
32841033x@<list> Exclude files listed in specified list file
32861033y Assume Yes on all queries
32881033z[file] Read archive comment from file
32901033ERROR: Bad archive %s
32921033Enter password (will not be echoed)
32941033Enter password (will not be echoed) for %s:
32961033Reenter password:
32981033ERROR: Passwords do not match
33001033Write error in the file %s
33021033Read error in the file %s
33041033Seek error in the file %s
33061033Cannot close the file %s
33081033Not enough memory
33101033Corrupt archive - use 'Repair' command
33121033Program aborted
33141033Cannot rename %s to %s
33161033Cannot find volume %s
33181033User break
33201033Create next volume ?
33221033Disk full. Insert next
33241033Creating %sarchive %s
33261033Insert disk with %s
33281033Testing archive %s
33301033Extracting from %s
33321033Converting %s
33341033Convert archives to SFX
33361033Removing SFX module
33381033%s is not SFX archive
33401033%s is not RAR archive
33421033%s is not the first volume
33441033%s - cannot convert to SFX archive with old format
33461033Cannot create %s
33481033Cannot open %s
33501033Unknown method in %s
33521033You need RAR %d.%d to unpack it
33541033Unsupported archive format. Please update RAR to a newer version.
33561033OK
33581033Done
33601033Locking archive
33621033ERROR: Cannot modify old format archive
33641033ERROR: Locked archive
33661033ERROR: Cannot modify volume
33681033Evaluation copy. Please register.
33701033Creating %sarchive %s
33721033Updating %sarchive %s
33741033solid
33761033Adding %-58s
33781033Updating %-58s
33801033... %-58s
33821033ERROR: Cannot update solid archives with password
33841033Deleting files %s...
33861033and directories
33881033Deleting %-30s
33901033deleted
33921033NOT DELETED
33941033Clearing attributes...
33961033Deleting directory %-30s
33981033WARNING: Cannot open %d %s
34001033files
34021033file
34041033WARNING: No files
34061033%s: encrypted
34081033Cannot modify solid archive containing encrypted files
34101033Analyzing archived files:
34121033Repacking archived files:
34141033%-20s - checksum error
34161033Testing archive %s
34181033Extracting from %s
34201033%s - use current password ?
34221033Creating %-56s
34241033Skipping %-56s
34261033Testing %-56s
34281033Extracting %-56s
34301033... %-56s
34321033Cannot create directory %s
34341033------ Printing %s
34361033Checksum error in the encrypted file %s. Corrupt file or wrong password.
34381033No files to extract
34401033All OK
34421033Total errors: %ld
34441033%s already exists. Overwrite it ?
34461033Overwrite %s ?
34481033Enter new name:
34501033Corrupt header is found
34521033Main archive header is corrupt
34541033%s - the file header is corrupt
34561033The comment header is corrupt
34581033The data recovery header is corrupt
34601033Reading comment from stdin
34621033Reading comment from %s
34641033Deleting comment from %s
34661033Adding comment to %s
34681033Adding file comments
34701033Reading comment for %s : %s from stdin
34721033The archive comment is corrupt
34741033Press 'Enter' to continue or 'Q' to quit:
34761033Write comment to %s
34781033Comment is not present
34801033Deleting from %s
34821033Deleting %s
34841033Erasing empty archive %s
34861033No files to delete
34881033-------- %2d %s %d, archive %s
34901033ERROR: Path too long
34921033Archive
34941033Details
34961033solid
34981033SFX
35001033volume
35021033recovery record
35041033lock
35061033encrypted
35081033encrypted headers
35101033Attributes Size Date Time Name
35121033Attributes Size Packed Ratio Date Time Checksum Name
35141033Name
35161033Type
35181033File
35201033Directory
35221033Unix symbolic link
35241033Windows symbolic link
35261033NTFS junction point
35281033Hard link
35301033File copy
35321033NTFS alternate data stream
35341033Target
35361033Size
35381033Packed size
35401033Ratio
35421033mtime
35441033ctime
35461033atime
35481033Attributes
35501033Flags
35521033Compression
35541033Host OS
35561033File version
35581033Service
35601033OS/2 extended attributes
35621033Unix Owner/Group data: %-14s %-14s
35641033BeOS extended attributes
35661033NTFS security data
35681033NTFS stream: %s
35701033Unknown subheader type: 0x%04x
35721033Comment:
35741033Yes
35761033No
357810330 files
35801033Reconstructing %s
35821033Building %s
35841033Cannot repair archive with old format
35861033Found %s
35881033The archive header is corrupt. Mark archive as solid ?
35901033No files found
35921033Unexpected end of archive
35941033Reconstruct archive structure ?
35961033Scanning...
35981033Data recovery record not found
36001033Data recovery record found
36021033Sector %ld (offsets %lX...%lX) damaged
36041033- data recovered
36061033- cannot recover data
36081033Adding data recovery record
36101033Erasing contents of drive %c:
36121033WARNING: Cannot get %s owner and group
36141033WARNING: Cannot get owner %s ID
36161033WARNING: Cannot get group %s ID
36181033ERROR: %s group and owner data are corrupt
36201033WARNING: Cannot set %s owner and group
36221033WARNING: Cannot read symbolic link %s
36241033WARNING: Symbolic link %s already exists
36261033Cannot create %s. Retry ?
36281033Mac OS file type: %c%c%c%c ;
36301033file creator: %c%c%c%c
36321033%-20s : packed data checksum error in volume %s
36341033%s is read-only
36361033WARNING: Cannot get %s security data
36381033WARNING: Cannot set %s security data
36401033ERROR: %s security data are corrupt
36421033WARNING: Unknown format of %s security data
36441033ERROR: %s stream data are corrupt
36461033WARNING: Unknown format of %s stream data
36481033ERROR: Invalid file name %s
36501033ERROR: %s extended attributes are corrupt
36521033WARNING: %s - unknown format of extended attributes
36541033WARNING: cannot set extended attributes to %s
36561033ERROR: Cannot get extended attributes of %s
36581033(+EA)
36601033...skipping extended attributes
36621033Processing archive %s
36641033File search errors, cannot synchronize archive
36661033WARNING: Attempting to correct the invalid file name
36681033WARNING: You need to start extraction from a previous volume to unpack %s
36701033ERROR: Unknown option: %s
36721033ERROR: Corrupt data header found, ignored
36741033WARNING: Unknown data header format, ignored
36761033ERROR: Corrupt %s data block
36781033Data header type: %s
36801033Cannot read contents of %s
36821033%s is not volume
36841033ERROR: %s and %s belong to different sets
36861033%d volumes missing
36881033%d recovery volumes found
36901033Nothing to reconstruct
36921033Reconstruction impossible
36941033Reconstructing...
36961033Creating %s
36981033Renaming %s to %s
37001033Write error: only NTFS file system supports files larger than 4 GB
37021033WARNING: Cannot change attributes of %s
37041033ERROR: default SFX module does not support RAR %d.%d archives
37061033Cannot encrypt archive already contained encrypted files
37081033Cannot email the file %s
37101033RAR SFX archive
37121033<Commands>
37141033-x Extract from archive (default)
37161033-t Test archive files
37181033-v Verbosely list contents of archive
37201033Total path and file name length must not exceed %d characters
37221033Total number of usual and recovery volumes must not exceed %d
37241033volume %d
37261033Cannot delete %s
37281033Calculating the checksum
37301033WARNING: Too large SFX archive. Windows cannot run the executable file exceeding 4 GB.
37321033Calculating checksums of all volumes.
37341033ERROR: Not enough disk space for %s.
37361033You may need a newer version of RAR.
37381033Unknown encryption method in %s
37401033The specified password is incorrect.
37421033Repairing
37441033Corrupt %d bytes at %08x %08x
37461033%d blocks recovered.
37481033Recovery record is corrupt.
37501033Testing the recovery record
37521033Failed
37541033%s switch is not supported for RAR %d.x archive format.
37561033Searching for identical files
37581033%d found.
37601033Unknown extra field in %s.
37621033Cannot copy %s to %s.
37641033You need to unpack the entire archive to create file copy entries.
37661033Copying data
37681033Cannot create symbolic link %s
37701033Cannot create hard link %s
37721033You may need to run RAR as administrator
37741033Not enough memory for %d MB compression dictionary, changed to %d MB.
37761033Please use a smaller compression dictionary.
module_namehintordfunction_name
KERNEL32.dll514GetLastError
KERNEL32.dll1202Sleep
KERNEL32.dll1069SetConsoleCtrlHandler
KERNEL32.dll840LocalFree
KERNEL32.dll350FormatMessageW
KERNEL32.dll147CreateHardLinkW
KERNEL32.dll143CreateFileW
KERNEL32.dll82CloseHandle
KERNEL32.dll24BackupRead
KERNEL32.dll448GetCurrentProcess
KERNEL32.dll25BackupSeek
KERNEL32.dll1130SetFileTime
KERNEL32.dll221DeviceIoControl
KERNEL32.dll302FindClose
KERNEL32.dll313FindFirstFileW
KERNEL32.dll214DeleteFileW
KERNEL32.dll1027RemoveDirectoryW
KERNEL32.dll129CreateDirectoryW
KERNEL32.dll867MoveFileW
KERNEL32.dll609GetShortPathNameW
KERNEL32.dll527GetLongPathNameW
KERNEL32.dll343FlushFileBuffers
KERNEL32.dll1126SetFilePointer
KERNEL32.dll1107SetEndOfFile
KERNEL32.dll498GetFileTime
KERNEL32.dll960ReadFile
KERNEL32.dll467GetDriveTypeW
KERNEL32.dll462GetDiskFreeSpaceExW
KERNEL32.dll679GetVolumeInformationW
KERNEL32.dll490GetFileAttributesW
KERNEL32.dll1121SetFileAttributesW
KERNEL32.dll285ExpandEnvironmentStringsW
KERNEL32.dll325FindNextFileW
KERNEL32.dll676GetVersionExW
KERNEL32.dll532GetModuleFileNameW
KERNEL32.dll507GetFullPathNameW
KERNEL32.dll1112SetErrorMode
KERNEL32.dll354FreeLibrary
KERNEL32.dll831LoadLibraryW
KERNEL32.dll830LoadLibraryExW
KERNEL32.dll449GetCurrentProcessId
KERNEL32.dll447GetCurrentDirectoryW
KERNEL32.dll1177SetThreadPriority
KERNEL32.dll452GetCurrentThread
KERNEL32.dll1149SetPriorityClass
KERNEL32.dll1101SetCurrentDirectoryW
KERNEL32.dll504GetFullPathNameA
KERNEL32.dll181CreateThread
KERNEL32.dll238EnterCriticalSection
KERNEL32.dll825LeaveCriticalSection
KERNEL32.dll1273WaitForSingleObject
KERNEL32.dll582GetProcessAffinityMask
KERNEL32.dll1022ReleaseSemaphore
KERNEL32.dll1039ResetEvent
KERNEL32.dll209DeleteCriticalSection
KERNEL32.dll1113SetEvent
KERNEL32.dll738InitializeCriticalSection
KERNEL32.dll133CreateEventW
KERNEL32.dll174CreateSemaphoreW
KERNEL32.dll1213SystemTimeToFileTime
KERNEL32.dll631GetSystemTime
KERNEL32.dll293FileTimeToSystemTime
KERNEL32.dll292FileTimeToLocalFileTime
KERNEL32.dll838LocalFileTimeToFileTime
KERNEL32.dll1297WideCharToMultiByte
KERNEL32.dll871MultiByteToWideChar
KERNEL32.dll100CompareStringW
KERNEL32.dll766IsDBCSLeadByte
KERNEL32.dll370GetCPInfo
KERNEL32.dll432GetConsoleOutputCP
KERNEL32.dll136CreateFileA
KERNEL32.dll1306WriteConsoleA
KERNEL32.dll1110SetEnvironmentVariableA
KERNEL32.dll516GetLocaleInfoA
KERNEL32.dll617GetStringTypeW
KERNEL32.dll1317WriteFile
KERNEL32.dll1316WriteConsoleW
KERNEL32.dll1085SetConsoleMode
KERNEL32.dll958ReadConsoleW
KERNEL32.dll612GetStdHandle
KERNEL32.dll499GetFileType
KERNEL32.dll428GetConsoleMode
KERNEL32.dll391GetCommandLineW
KERNEL32.dll536GetModuleHandleW
KERNEL32.dll581GetProcAddress
KERNEL32.dll1139SetLastError
KERNEL32.dll97CompareStringA
KERNEL32.dll492GetFileInformationByHandle
KERNEL32.dll614GetStringTypeA
KERNEL32.dll659GetTickCount
KERNEL32.dll935QueryPerformanceCounter
KERNEL32.dll474GetEnvironmentStringsW
KERNEL32.dll353FreeEnvironmentStringsW
KERNEL32.dll719HeapFree
KERNEL32.dll722HeapReAlloc
KERNEL32.dll715HeapAlloc
KERNEL32.dll1048RtlUnwind
KERNEL32.dll945RaiseException
KERNEL32.dll633GetSystemTimeAsFileTime
KERNEL32.dll281ExitProcess
KERNEL32.dll390GetCommandLineA
KERNEL32.dll1216TerminateProcess
KERNEL32.dll1235UnhandledExceptionFilter
KERNEL32.dll1189SetUnhandledExceptionFilter
KERNEL32.dll768IsDebuggerPresent
KERNEL32.dll717HeapCreate
KERNEL32.dll1260VirtualFree
KERNEL32.dll1257VirtualAlloc
KERNEL32.dll1223TlsGetValue
KERNEL32.dll1221TlsAlloc
KERNEL32.dll1224TlsSetValue
KERNEL32.dll1222TlsFree
KERNEL32.dll751InterlockedIncrement
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll747InterlockedDecrement
KERNEL32.dll531GetModuleFileNameA
KERNEL32.dll360GetACP
KERNEL32.dll567GetOEMCP
KERNEL32.dll778IsValidCodePage
KERNEL32.dll1135SetHandleCount
KERNEL32.dll610GetStartupInfoA
KERNEL32.dll1159SetStdHandle
KERNEL32.dll410GetConsoleCP
KERNEL32.dll724HeapSize
KERNEL32.dll828LoadLibraryA
KERNEL32.dll739InitializeCriticalSectionAndSpinCount
KERNEL32.dll811LCMapStringA
KERNEL32.dll813LCMapStringW
KERNEL32.dll352FreeEnvironmentStringsA
KERNEL32.dll472GetEnvironmentStrings
USER32.dll60CharUpperW
USER32.dll46CharLowerW
USER32.dll245ExitWindowsEx
USER32.dll43CharLowerA
USER32.dll506LoadStringW
USER32.dll55CharToOemBuffW
USER32.dll525MessageBeep
USER32.dll53CharToOemA
USER32.dll546OemToCharBuffA
USER32.dll545OemToCharA
USER32.dll54CharToOemBuffA
ADVAPI32.dll622RegQueryValueExW
ADVAPI32.dll560RegCloseKey
ADVAPI32.dll682SetFileSecurityW
ADVAPI32.dll304GetFileSecurityW
ADVAPI32.dll330GetSecurityDescriptorLength
ADVAPI32.dll503OpenProcessToken
ADVAPI32.dll407LookupPrivilegeValueW
ADVAPI32.dll31AdjustTokenPrivileges
ADVAPI32.dll177CryptAcquireContextW
ADVAPI32.dll193CryptGenRandom
ADVAPI32.dll203CryptReleaseContext
ADVAPI32.dll609RegOpenKeyExW
SHELL32.dll207SHGetMalloc
SHELL32.dll223SHGetSpecialFolderLocation
SHELL32.dll215SHGetPathFromIDListW
SHELL32.dll172SHFileOperationW

StringTable 040904E4

ProductNameWinRAR
CompanyNameAlexander Roshal
FileDescriptionCommand line RAR
FileVersion5.0.0
ProductVersion5.0.0
InternalNameCommand line RAR
LegalCopyrightCopyright © Alexander Roshal 1993-2013

VS_FIXEDFILEINFO

FileVersion5.0.0.0
ProductVersion5.0.0.0
StrucVersion0x10000
FileFlagsMask0
FileFlags0
FileOS4
FileType1
FileSubtype0

Signers (1)

issuer: /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO Code Signing CA 2
serial: 75953FA54DD12DD9CA6B948C17BFD67C

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
        Validity
            Not Before: Jun  7 08:09:10 2005 GMT
            Not After : May 30 10:48:38 2020 GMT
        Subject: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:aa:81:3f:a3:a3:61:78:aa:31:00:55:95:11:
                    9e:27:0f:1f:1c:df:3a:9b:82:68:30:c0:4a:61:1d:
                    f1:2f:0e:fa:be:79:f7:a5:23:ef:55:51:96:84:cd:
                    db:e3:b9:6e:3e:31:d8:0a:20:67:c7:f4:d9:bf:94:
                    eb:47:04:3e:02:ce:2a:a2:5d:87:04:09:f6:30:9d:
                    18:8a:97:b2:aa:1c:fc:41:d2:a1:36:cb:fb:3d:91:
                    ba:e7:d9:70:35:fa:e4:e7:90:c3:9b:a3:9b:d3:3c:
                    f5:12:99:77:b1:b7:09:e0:68:e6:1c:b8:f3:94:63:
                    88:6a:6a:fe:0b:76:c9:be:f4:22:e4:67:b9:ab:1a:
                    5e:77:c1:85:07:dd:0d:6c:bf:ee:06:c7:77:6a:41:
                    9e:a7:0f:d7:fb:ee:94:17:b7:fc:85:be:a4:ab:c4:
                    1c:31:dd:d7:b6:d1:e4:f0:ef:df:16:8f:b2:52:93:
                    d7:a1:d4:89:a1:07:2e:bf:e1:01:12:42:1e:1a:e1:
                    d8:95:34:db:64:79:28:ff:ba:2e:11:c2:e5:e8:5b:
                    92:48:fb:47:0b:c2:6c:da:ad:32:83:41:f3:a5:e5:
                    41:70:fd:65:90:6d:fa:fa:51:c4:f9:bd:96:2b:19:
                    04:2c:d3:6d:a7:dc:f0:7f:6f:83:65:e2:6a:ab:87:
                    86:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:AD:BD:98:7A:34:B4:26:F7:FA:C4:26:54:EF:03:BD:E0:24:CB:54:1A

            X509v3 Subject Key Identifier: 
                DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.usertrust.com/AddTrustExternalCARoot.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.usertrust.com

    Signature Algorithm: sha1WithRSAEncryption
         4d:42:2f:a6:c1:8a:eb:07:80:90:58:46:8c:f8:19:39:66:2a:
         3c:5a:2c:6d:cf:d4:d9:87:55:8d:79:0b:12:88:7b:40:8f:d5:
         c7:f8:4b:8d:55:16:63:ad:b7:57:dc:3b:2b:bd:d3:c1:4f:1e:
         03:87:4b:44:9b:e3:e2:40:45:26:f3:26:49:2b:6a:84:f1:54:
         7a:d4:42:da:fc:d3:6a:bb:66:7e:ca:9e:ea:e9:bb:dc:07:c7:
         c3:92:4e:83:3c:81:49:9f:92:d5:32:09:ea:49:2e:a1:11:71:
         9a:36:d2:c5:4e:68:b6:cb:0e:1b:25:16:af:6c:de:5d:76:d8:
         1f:72:b1:93:26:86:17:db:18:de:af:45:e9:df:fb:98:af:14:
         18:ed:a4:5e:f6:89:94:45:f0:55:04:4a:dd:ff:27:dd:06:4a:
         40:f6:b4:bc:f1:e4:0f:99:02:bb:fd:5d:0e:2e:28:c1:be:3b:
         5f:1a:3f:97:10:84:bc:16:3e:d8:a3:9c:63:1d:66:cb:5c:5f:
         da:3e:f3:0f:0a:09:35:22:db:db:c0:3f:00:f9:e6:0d:5d:67:
         d1:fd:a0:1e:03:2b:d9:40:f7:be:cc:87:66:54:80:a6:a3:b8:
         f5:19:62:d5:d2:26:b1:98:26:ee:9a:cb:44:a7:45:5a:81:95:
         15:1a:f5:51
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: May 10 00:00:00 2010 GMT
            Not After : May 10 23:59:59 2015 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping Signer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:35:a0:36:70:22:81:11:c3:b2:83:b9:d3:28:
                    c6:36:cd:25:6b:a9:7b:b2:1c:f6:9b:51:9c:ef:35:
                    f4:ed:08:8e:5e:38:08:f8:77:3c:0a:42:e0:f3:70:
                    dc:a3:d7:ca:f5:4c:0b:cf:ff:22:9c:0a:7e:68:d6:
                    09:a2:2a:84:7b:a6:9d:b4:a9:c1:33:e2:ef:1f:17:
                    48:ca:3a:cd:46:e6:c5:aa:77:bd:e3:77:9a:fa:47:
                    53:40:28:59:43:93:f1:a4:81:ea:ef:80:b5:4f:a7:
                    08:ce:ba:6e:bc:ca:76:0c:97:64:59:86:24:bb:3d:
                    82:90:a8:55:b1:92:d3:a0:a7:05:ac:9f:53:25:08:
                    10:47:99:cd:98:de:68:e5:b4:50:78:a3:af:01:cc:
                    59:43:58:e4:76:6e:7e:ac:c7:e2:9e:1f:4f:b0:47:
                    2d:c8:0c:a3:49:27:80:75:8c:bb:06:91:65:0f:90:
                    9b:f4:ba:d1:81:c8:5c:6a:ec:14:e9:25:09:bf:23:
                    16:f4:95:46:40:40:21:bb:83:96:fd:86:1f:7a:c8:
                    0d:10:8e:a2:f8:19:07:58:7f:9f:bd:37:02:60:f2:
                    a4:e9:9d:44:3f:30:05:e4:a7:70:99:51:9a:e8:17:
                    f1:55:ca:b2:61:89:65:46:a7:6a:f2:58:46:7e:aa:
                    a0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8

            X509v3 Subject Key Identifier: 
                2E:2D:B0:0A:44:4A:D3:87:C0:02:07:CE:97:7D:50:62:20:FD:0F:83
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.usertrust.com

    Signature Algorithm: sha1WithRSAEncryption
         c8:fb:63:f8:0b:75:75:2c:3a:f1:f2:13:a7:2d:b6:a3:1a:9c:
         ad:01:07:d3:34:8e:77:e0:c2:6e:ae:02:5d:48:4f:a4:d2:21:
         b6:36:fd:2a:35:43:7c:6b:df:80:87:0b:15:f0:76:32:00:b4:
         ce:b5:67:a4:2f:2f:20:1b:9c:54:9e:83:3f:1f:5f:14:95:62:
         82:0f:22:41:22:1f:70:b3:f3:f7:42:de:6c:51:cd:4b:f8:21:
         ac:9b:3b:8c:b1:e5:e6:28:8f:ce:2a:8a:f9:aa:52:4d:8c:5b:
         77:ba:4d:5a:58:db:bb:6a:04:cc:52:1e:9d:e2:28:37:0e:bb:
         e7:0e:91:c7:f8:db:f1:81:98:eb:cd:37:b3:0e:ab:65:d3:62:
         ec:3a:a5:76:eb:13:a8:35:93:c9:2e:0a:01:ec:c0:e8:cc:3d:
         7e:b6:eb:e2:c1:ec:d3:14:92:82:66:87:50:dc:fd:50:97:ac:
         b3:4a:76:73:06:c4:86:11:3a:b3:5f:43:04:52:6f:ea:b3:d0:
         74:36:4c:ca:f1:1b:79:84:37:70:63:ad:74:b9:aa:0e:f3:98:
         b0:86:08:eb:db:e0:1f:8c:10:f2:39:64:9b:ae:4f:0a:2c:92:
         8a:4f:18:b5:91:e5:8d:1a:93:5f:1f:ae:f1:a6:f0:2e:97:d0:
         d2:f6:2b:3c
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: Aug 24 00:00:00 2011 GMT
            Not After : May 30 10:48:38 2020 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Code Signing CA 2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f8:e7:a7:e8:f1:97:28:40:68:80:37:d2:c8:
                    3f:8e:92:8a:92:37:87:47:80:ea:4c:99:cf:6e:f9:
                    15:47:bd:ee:75:f4:44:ac:d0:c3:d4:4d:f7:19:c0:
                    d3:3c:4d:c1:47:b9:59:65:16:93:8c:d9:0a:84:9b:
                    9f:e8:f6:6a:63:58:fe:5f:dc:d1:7f:4b:51:9f:00:
                    1c:00:87:54:20:07:57:a0:82:c9:2f:98:af:33:8a:
                    bb:7b:80:22:25:6a:6c:af:c2:2c:6c:79:13:bd:a3:
                    2a:48:d6:b5:8e:61:55:e9:6b:e8:3d:80:bf:14:03:
                    85:18:8e:7e:4c:e9:c2:19:88:73:92:72:cd:fa:ff:
                    50:4d:cb:2c:a6:7b:1a:73:b1:00:90:2c:d9:32:e2:
                    fb:fd:ac:95:42:36:ec:34:c5:13:53:68:b2:c1:9f:
                    40:9f:da:7b:c8:9d:62:6c:93:a2:42:d7:79:9f:97:
                    4f:31:5b:50:21:a1:ab:af:d9:1c:b2:ce:75:be:5b:
                    2c:56:00:24:8d:11:c1:75:1f:f0:fe:d2:95:fe:f0:
                    e1:31:23:18:67:c0:5b:13:fd:5a:98:94:94:ff:ff:
                    59:02:1f:00:ac:e6:f1:f2:fa:3a:73:b3:1d:42:fc:
                    54:75:cf:51:31:2f:e3:db:81:d9:77:23:2a:4f:59:
                    ce:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8

            X509v3 Subject Key Identifier: 
                1E:C5:B1:2C:7D:87:DA:02:68:7C:25:BC:0C:07:84:3F:B6:CF:DE:F1
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl

            Authority Information Access: 
                CA Issuers - URI:http://crt.usertrust.com/UTNAddTrustObject_CA.crt
                OCSP - URI:http://ocsp.usertrust.com

    Signature Algorithm: sha1WithRSAEncryption
         95:89:77:93:68:01:5e:7c:d9:2d:37:07:90:5d:5a:42:5e:0c:
         64:b4:36:b5:0f:f6:ab:d5:39:27:de:22:46:a4:49:1c:66:4b:
         46:19:59:2e:79:49:03:f6:9c:92:df:6d:50:35:5c:0c:91:2e:
         60:03:59:d0:f1:64:f7:69:09:f6:7e:fe:eb:34:b3:6d:b1:bf:
         66:9c:a3:ba:31:78:b9:87:35:61:3d:92:31:1b:ef:f4:e8:9e:
         d6:ac:45:fa:0c:36:3c:80:67:bb:bd:ef:2e:c2:90:e1:3d:71:
         2f:3b:c1:b0:58:7e:45:c3:52:71:03:07:f6:f3:39:4d:8b:36:
         21:1b:01:df:d9:da:5e:2b:eb:0e:97:80:1e:44:1c:50:88:f5:
         c6:12:33:4a:a8:4d:a5:8d:2f:94:0c:7b:c6:bf:9a:2c:c3:32:
         cd:bd:8c:27:26:f0:e1:30:03:50:06:82:bc:f4:3b:b3:83:75:
         06:c6:ef:ba:ee:d3:80:f8:52:c6:ac:cb:79:f2:38:9e:7b:b0:
         92:58:42:91:05:c8:96:21:ad:b9:4b:16:81:14:69:f1:37:b0:
         fe:34:f7:dc:b0:df:97:f5:43:10:9b:76:8f:b4:65:f5:e8:9f:
         13:b7:1e:ac:6f:c4:69:8a:5f:ba:3c:61:7e:5e:49:86:23:13:
         2e:af:15:48
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:95:3f:a5:4d:d1:2d:d9:ca:6b:94:8c:17:bf:d6:7c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Code Signing CA 2
        Validity
            Not Before: Jun 13 00:00:00 2013 GMT
            Not After : Jun 13 23:59:59 2015 GMT
        Subject: C=DE/postalCode=10117, ST=Berlin, L=Berlin/street=Schumannstr. 17, O=win.rar GmbH, CN=win.rar GmbH
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4f:22:57:fd:9b:0c:c4:91:b5:4d:59:da:31:
                    de:4a:7d:f5:a2:63:7f:7e:7f:3c:64:91:f7:d7:18:
                    26:65:a5:06:8c:6c:68:a0:99:d7:04:e2:c2:c0:01:
                    21:e7:12:c5:d9:03:b5:68:f4:d3:af:dc:37:c4:dc:
                    4d:72:53:d2:13:9a:b5:c5:57:66:42:21:55:f8:5c:
                    d0:54:e2:ac:99:cf:dd:1d:43:8c:e2:de:1c:f8:71:
                    cb:38:78:4d:97:62:70:5d:e7:f0:f6:59:b0:6b:ec:
                    92:34:35:73:ed:7f:ba:4d:5f:39:80:69:b0:a8:c2:
                    bd:20:bd:d6:91:65:78:d7:c0:e6:e1:4e:cf:e7:c7:
                    2d:c3:e5:c6:9c:17:9b:73:d1:17:3a:7d:19:e0:97:
                    e8:43:10:7c:e0:01:46:ca:29:c1:46:9d:57:0e:e1:
                    b4:fb:0e:28:98:80:f3:aa:54:2f:37:be:1a:db:80:
                    ac:be:fb:f2:59:23:0e:8d:91:2f:7a:16:da:95:3a:
                    32:55:b4:c9:1b:b6:14:d3:d4:b0:f8:3b:f9:c9:a2:
                    d3:e8:c8:8e:31:44:32:1b:80:8d:c4:16:33:56:b0:
                    b5:73:1f:73:ec:57:b2:7f:a4:ee:52:2f:2a:23:9c:
                    5b:97:89:98:2c:eb:0a:5d:c5:b6:82:c2:26:58:a3:
                    be:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:1E:C5:B1:2C:7D:87:DA:02:68:7C:25:BC:0C:07:84:3F:B6:CF:DE:F1

            X509v3 Subject Key Identifier: 
                AB:13:09:6F:AA:AA:E5:C1:97:9C:3B:E7:F4:85:1C:08:EB:1D:CF:4A
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                Code Signing
            Netscape Cert Type: 
                Object Signing
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.1.3.2
                  CPS: https://secure.comodo.net/CPS

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.comodoca.com/COMODOCodeSigningCA2.crl

            Authority Information Access: 
                CA Issuers - URI:http://crt.comodoca.com/COMODOCodeSigningCA2.crt
                OCSP - URI:http://ocsp.comodoca.com

            X509v3 Subject Alternative Name: 
                email:info@win-rar.com
    Signature Algorithm: sha1WithRSAEncryption
         bd:a8:83:f2:df:6f:ea:7b:62:95:56:1a:3d:3e:cf:55:5c:01:
         e2:5b:81:70:09:d6:ad:bb:17:71:af:14:22:b7:29:26:f6:39:
         34:60:d3:25:2f:ef:fa:2c:e0:64:94:cf:a9:d0:d6:19:77:95:
         b1:15:5f:23:14:d9:f9:3e:8e:6d:84:87:c3:70:97:14:19:33:
         c0:86:56:3f:92:1c:ea:a0:26:84:b2:bd:0e:f3:21:0c:73:b0:
         f2:9d:11:2b:6f:31:19:94:2a:b8:81:d5:93:f1:6a:cb:c9:ac:
         5c:93:1d:d4:98:ac:86:8b:a3:2f:1b:43:07:08:7e:c5:8d:03:
         67:33:2f:97:76:00:e9:6c:46:46:7e:2e:4d:88:c4:de:7a:35:
         f9:5d:9f:13:76:d9:8b:13:62:01:4c:43:16:df:ff:9a:72:6e:
         be:45:a7:e0:58:52:0a:77:51:e2:5f:3e:0f:55:96:b0:5d:76:
         2d:ac:06:6a:eb:db:4d:62:c1:cb:25:13:4e:ef:f6:c5:d5:42:
         e1:fb:b7:b8:3e:26:2d:a6:da:05:11:de:6f:4d:f8:9b:5c:18:
         0c:82:fe:05:e2:ac:99:98:64:2a:9c:0b:34:28:8c:8d:11:10:
         d4:b2:76:2c:5f:cb:4e:27:4d:c7:63:73:a1:7a:b7:a4:a1:90:
         fa:c1:28:e3
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • : 
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • SHA1
          • 66 c9 6e 44 48 3d 1b 10  12 ac a9 93 03 ca 31 8c  |f.nDH=........1.|
e7 10 24 5c                                       |..$\            |
    • Certificates
      • Certificate #0
        • 2
          • 42:1A:F2:94:09:84:19:1F:52:0A:4B:C6:24:26:A7:4B
          • RSA-SHA1: nil
          • Issuer
            • C: SE
            • O: AddTrust AB
            • OU: AddTrust External TTP Network
            • CN: AddTrust External CA Root
          • 2005-06-07 08:09:10 UTC: 2020-05-30 10:48:38 UTC
          • Subject
            • C: US
            • ST: UT
            • L: Salt Lake City
            • O: The USERTRUST Network
            • OU: http://www.usertrust.com
            • CN: UTN-USERFirst-Object
          • #5
            • rsaEncryption: nil
            • CE:AA:81:3F:A3:A3:61:78:AA:31:00:55:95:11:9E:27:
              0F:1F:1C:DF:3A:9B:82:68:30:C0:4A:61:1D:F1:2F:0E:
              FA:BE:79:F7:A5:23:EF:55:51:96:84:CD:DB:E3:B9:6E:
              3E:31:D8:0A:20:67:C7:F4:D9:BF:94:EB:47:04:3E:02:
              CE:2A:A2:5D:87:04:09:F6:30:9D:18:8A:97:B2:AA:1C:
              FC:41:D2:A1:36:CB:FB:3D:91:BA:E7:D9:70:35:FA:E4:
              E7:90:C3:9B:A3:9B:D3:3C:F5:12:99:77:B1:B7:09:E0:
              68:E6:1C:B8:F3:94:63:88:6A:6A:FE:0B:76:C9:BE:F4:
              22:E4:67:B9:AB:1A:5E:77:C1:85:07:DD:0D:6C:BF:EE:
              06:C7:77:6A:41:9E:A7:0F:D7:FB:EE:94:17:B7:FC:85:
              BE:A4:AB:C4:1C:31:DD:D7:B6:D1:E4:F0:EF:DF:16:8F:
              B2:52:93:D7:A1:D4:89:A1:07:2E:BF:E1:01:12:42:1E:
              1A:E1:D8:95:34:DB:64:79:28:FF:BA:2E:11:C2:E5:E8:
              5B:92:48:FB:47:0B:C2:6C:DA:AD:32:83:41:F3:A5:E5:
              41:70:FD:65:90:6D:FA:FA:51:C4:F9:BD:96:2B:19:04:
              2C:D3:6D:A7:DC:F0:7F:6F:83:65:E2:6A:AB:87:86:75              : 0x010001
          • #6
            • authorityKeyIdentifier: 
              ad bd 98 7a 34 b4 26 f7  fa c4 26 54 ef 03 bd e0  |...z4.&...&T....|
24 cb 54 1a                                       |$.T.            |
            • subjectKeyIdentifier: 
              da ed 64 74 14 9c 14 3c  ab dd 99 a9 bd 5b 28 4d  |..dt...<.....[(M|
8b 3c c9 d8                                       |.<..            |
            • keyUsage: true, 6
            • basicConstraints: true, true
            • certificatePolicies: anyPolicy
            • crlDistributionPoints: http://crl.usertrust.com/AddTrustExternalCARoot.crl
            • authorityInfoAccess
              • OCSP: http://ocsp.usertrust.com
        • RSA-SHA1: 
          4d 42 2f a6 c1 8a eb 07  80 90 58 46 8c f8 19 39  |MB/.......XF...9|
66 2a 3c 5a 2c 6d cf d4  d9 87 55 8d 79 0b 12 88  |f*...|
63 1d 66 cb 5c 5f da 3e  f3 0f 0a 09 35 22 db db  |c.f.\_.>....5"..|
c0 3f 00 f9 e6 0d 5d 67  d1 fd a0 1e 03 2b d9 40  |.?....]g.....+.@|
f7 be cc 87 66 54 80 a6  a3 b8 f5 19 62 d5 d2 26  |....fT......b..&|
b1 98 26 ee 9a cb 44 a7  45 5a 81 95 15 1a f5 51  |..&...D.EZ.....Q|
      • Certificate #1
        • 2
          • 47:8A:8E:FB:59:E1:D8:3F:0C:E1:42:D2:A2:87:07:BE
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • ST: UT
            • L: Salt Lake City
            • O: The USERTRUST Network
            • OU: http://www.usertrust.com
            • CN: UTN-USERFirst-Object
          • 2010-05-10 00:00:00 UTC: 2015-05-10 23:59:59 UTC
          • Subject
            • C: GB
            • ST: Greater Manchester
            • L: Salford
            • O: COMODO CA Limited
            • CN: COMODO Time Stamping Signer
          • #5
            • rsaEncryption: nil
            • BC:35:A0:36:70:22:81:11:C3:B2:83:B9:D3:28:C6:36:
              CD:25:6B:A9:7B:B2:1C:F6:9B:51:9C:EF:35:F4:ED:08:
              8E:5E:38:08:F8:77:3C:0A:42:E0:F3:70:DC:A3:D7:CA:
              F5:4C:0B:CF:FF:22:9C:0A:7E:68:D6:09:A2:2A:84:7B:
              A6:9D:B4:A9:C1:33:E2:EF:1F:17:48:CA:3A:CD:46:E6:
              C5:AA:77:BD:E3:77:9A:FA:47:53:40:28:59:43:93:F1:
              A4:81:EA:EF:80:B5:4F:A7:08:CE:BA:6E:BC:CA:76:0C:
              97:64:59:86:24:BB:3D:82:90:A8:55:B1:92:D3:A0:A7:
              05:AC:9F:53:25:08:10:47:99:CD:98:DE:68:E5:B4:50:
              78:A3:AF:01:CC:59:43:58:E4:76:6E:7E:AC:C7:E2:9E:
              1F:4F:B0:47:2D:C8:0C:A3:49:27:80:75:8C:BB:06:91:
              65:0F:90:9B:F4:BA:D1:81:C8:5C:6A:EC:14:E9:25:09:
              BF:23:16:F4:95:46:40:40:21:BB:83:96:FD:86:1F:7A:
              C8:0D:10:8E:A2:F8:19:07:58:7F:9F:BD:37:02:60:F2:
              A4:E9:9D:44:3F:30:05:E4:A7:70:99:51:9A:E8:17:F1:
              55:CA:B2:61:89:65:46:A7:6A:F2:58:46:7E:AA:A0:07              : 0x010001
          • #6
            • authorityKeyIdentifier: 
              da ed 64 74 14 9c 14 3c  ab dd 99 a9 bd 5b 28 4d  |..dt...<.....[(M|
8b 3c c9 d8                                       |.<..            |
            • subjectKeyIdentifier: 
              2e 2d b0 0a 44 4a d3 87  c0 02 07 ce 97 7d 50 62  |.-..DJ.......}Pb|
20 fd 0f 83                                       | ...            |
            • keyUsage: true, 0xc0
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: true, timeStamping
            • crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
            • authorityInfoAccess
              • OCSP: http://ocsp.usertrust.com
        • RSA-SHA1: 
          c8 fb 63 f8 0b 75 75 2c  3a f1 f2 13 a7 2d b6 a3  |..c..uu,:....-..|
1a 9c ad 01 07 d3 34 8e  77 e0 c2 6e ae 02 5d 48  |......4.w..n..]H|
4f a4 d2 21 b6 36 fd 2a  35 43 7c 6b df 80 87 0b  |O..!.6.*5C|k....|
15 f0 76 32 00 b4 ce b5  67 a4 2f 2f 20 1b 9c 54  |..v2....g.// ..T|
9e 83 3f 1f 5f 14 95 62  82 0f 22 41 22 1f 70 b3  |..?._..b.."A".p.|
f3 f7 42 de 6c 51 cd 4b  f8 21 ac 9b 3b 8c b1 e5  |..B.lQ.K.!..;...|
e6 28 8f ce 2a 8a f9 aa  52 4d 8c 5b 77 ba 4d 5a  |.(..*...RM.[w.MZ|
58 db bb 6a 04 cc 52 1e  9d e2 28 37 0e bb e7 0e  |X..j..R...(7....|
91 c7 f8 db f1 81 98 eb  cd 37 b3 0e ab 65 d3 62  |.........7...e.b|
ec 3a a5 76 eb 13 a8 35  93 c9 2e 0a 01 ec c0 e8  |.:.v...5........|
cc 3d 7e b6 eb e2 c1 ec  d3 14 92 82 66 87 50 dc  |.=~.........f.P.|
fd 50 97 ac b3 4a 76 73  06 c4 86 11 3a b3 5f 43  |.P...Jvs....:._C|
04 52 6f ea b3 d0 74 36  4c ca f1 1b 79 84 37 70  |.Ro...t6L...y.7p|
63 ad 74 b9 aa 0e f3 98  b0 86 08 eb db e0 1f 8c  |c.t.............|
10 f2 39 64 9b ae 4f 0a  2c 92 8a 4f 18 b5 91 e5  |..9d..O.,..O....|
8d 1a 93 5f 1f ae f1 a6  f0 2e 97 d0 d2 f6 2b 3c  |..._..........+<|
      • Certificate #2
        • 2
          • 10:70:9D:4F:F5:54:08:D7:30:60:01:D8:EA:91:75:BB
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • ST: UT
            • L: Salt Lake City
            • O: The USERTRUST Network
            • OU: http://www.usertrust.com
            • CN: UTN-USERFirst-Object
          • 2011-08-24 00:00:00 UTC: 2020-05-30 10:48:38 UTC
          • Subject
            • C: GB
            • ST: Greater Manchester
            • L: Salford
            • O: COMODO CA Limited
            • CN: COMODO Code Signing CA 2
          • #5
            • rsaEncryption: nil
            • CB:F8:E7:A7:E8:F1:97:28:40:68:80:37:D2:C8:3F:8E:
              92:8A:92:37:87:47:80:EA:4C:99:CF:6E:F9:15:47:BD:
              EE:75:F4:44:AC:D0:C3:D4:4D:F7:19:C0:D3:3C:4D:C1:
              47:B9:59:65:16:93:8C:D9:0A:84:9B:9F:E8:F6:6A:63:
              58:FE:5F:DC:D1:7F:4B:51:9F:00:1C:00:87:54:20:07:
              57:A0:82:C9:2F:98:AF:33:8A:BB:7B:80:22:25:6A:6C:
              AF:C2:2C:6C:79:13:BD:A3:2A:48:D6:B5:8E:61:55:E9:
              6B:E8:3D:80:BF:14:03:85:18:8E:7E:4C:E9:C2:19:88:
              73:92:72:CD:FA:FF:50:4D:CB:2C:A6:7B:1A:73:B1:00:
              90:2C:D9:32:E2:FB:FD:AC:95:42:36:EC:34:C5:13:53:
              68:B2:C1:9F:40:9F:DA:7B:C8:9D:62:6C:93:A2:42:D7:
              79:9F:97:4F:31:5B:50:21:A1:AB:AF:D9:1C:B2:CE:75:
              BE:5B:2C:56:00:24:8D:11:C1:75:1F:F0:FE:D2:95:FE:
              F0:E1:31:23:18:67:C0:5B:13:FD:5A:98:94:94:FF:FF:
              59:02:1F:00:AC:E6:F1:F2:FA:3A:73:B3:1D:42:FC:54:
              75:CF:51:31:2F:E3:DB:81:D9:77:23:2A:4F:59:CE:23              : 0x010001
          • #6
            • authorityKeyIdentifier: 
              da ed 64 74 14 9c 14 3c  ab dd 99 a9 bd 5b 28 4d  |..dt...<.....[(M|
8b 3c c9 d8                                       |.<..            |
            • subjectKeyIdentifier: 
              1e c5 b1 2c 7d 87 da 02  68 7c 25 bc 0c 07 84 3f  |...,}...h|%....?|
b6 cf de f1                                       |....            |
            • keyUsage: true, 6
            • basicConstraints
              • true
              • true: 0
            • extendedKeyUsage: codeSigning
            • certificatePolicies: anyPolicy
            • crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
            • authorityInfoAccess
              • #0
                • caIssuers: http://crt.usertrust.com/UTNAddTrustObject_CA.crt
                • OCSP: http://ocsp.usertrust.com
        • RSA-SHA1: 
          95 89 77 93 68 01 5e 7c  d9 2d 37 07 90 5d 5a 42  |..w.h.^|.-7..]ZB|
5e 0c 64 b4 36 b5 0f f6  ab d5 39 27 de 22 46 a4  |^.d.6.....9'."F.|
49 1c 66 4b 46 19 59 2e  79 49 03 f6 9c 92 df 6d  |I.fKF.Y.yI.....m|
50 35 5c 0c 91 2e 60 03  59 d0 f1 64 f7 69 09 f6  |P5\...`.Y..d.i..|
7e fe eb 34 b3 6d b1 bf  66 9c a3 ba 31 78 b9 87  |~..4.m..f...1x..|
35 61 3d 92 31 1b ef f4  e8 9e d6 ac 45 fa 0c 36  |5a=.1.......E..6|
3c 80 67 bb bd ef 2e c2  90 e1 3d 71 2f 3b c1 b0  |<.g.......=q/;..|
58 7e 45 c3 52 71 03 07  f6 f3 39 4d 8b 36 21 1b  |X~E.Rq....9M.6!.|
01 df d9 da 5e 2b eb 0e  97 80 1e 44 1c 50 88 f5  |....^+.....D.P..|
c6 12 33 4a a8 4d a5 8d  2f 94 0c 7b c6 bf 9a 2c  |..3J.M../..{...,|
c3 32 cd bd 8c 27 26 f0  e1 30 03 50 06 82 bc f4  |.2...'&..0.P....|
3b b3 83 75 06 c6 ef ba  ee d3 80 f8 52 c6 ac cb  |;..u........R...|
79 f2 38 9e 7b b0 92 58  42 91 05 c8 96 21 ad b9  |y.8.{..XB....!..|
4b 16 81 14 69 f1 37 b0  fe 34 f7 dc b0 df 97 f5  |K...i.7..4......|
43 10 9b 76 8f b4 65 f5  e8 9f 13 b7 1e ac 6f c4  |C..v..e.......o.|
69 8a 5f ba 3c 61 7e 5e  49 86 23 13 2e af 15 48  |i._.
      • Certificate #3
        • 2
          • 75:95:3F:A5:4D:D1:2D:D9:CA:6B:94:8C:17:BF:D6:7C
          • RSA-SHA1: nil
          • Issuer
            • C: GB
            • ST: Greater Manchester
            • L: Salford
            • O: COMODO CA Limited
            • CN: COMODO Code Signing CA 2
          • 2013-06-13 00:00:00 UTC: 2015-06-13 23:59:59 UTC
          • Subject
            • C: DE
            • postalCode: 10117
            • ST: Berlin
            • L: Berlin
            • street: Schumannstr. 17
            • O: win.rar GmbH
            • CN: win.rar GmbH
          • #5
            • rsaEncryption: nil
            • 98:4F:22:57:FD:9B:0C:C4:91:B5:4D:59:DA:31:DE:4A:
              7D:F5:A2:63:7F:7E:7F:3C:64:91:F7:D7:18:26:65:A5:
              06:8C:6C:68:A0:99:D7:04:E2:C2:C0:01:21:E7:12:C5:
              D9:03:B5:68:F4:D3:AF:DC:37:C4:DC:4D:72:53:D2:13:
              9A:B5:C5:57:66:42:21:55:F8:5C:D0:54:E2:AC:99:CF:
              DD:1D:43:8C:E2:DE:1C:F8:71:CB:38:78:4D:97:62:70:
              5D:E7:F0:F6:59:B0:6B:EC:92:34:35:73:ED:7F:BA:4D:
              5F:39:80:69:B0:A8:C2:BD:20:BD:D6:91:65:78:D7:C0:
              E6:E1:4E:CF:E7:C7:2D:C3:E5:C6:9C:17:9B:73:D1:17:
              3A:7D:19:E0:97:E8:43:10:7C:E0:01:46:CA:29:C1:46:
              9D:57:0E:E1:B4:FB:0E:28:98:80:F3:AA:54:2F:37:BE:
              1A:DB:80:AC:BE:FB:F2:59:23:0E:8D:91:2F:7A:16:DA:
              95:3A:32:55:B4:C9:1B:B6:14:D3:D4:B0:F8:3B:F9:C9:
              A2:D3:E8:C8:8E:31:44:32:1B:80:8D:C4:16:33:56:B0:
              B5:73:1F:73:EC:57:B2:7F:A4:EE:52:2F:2A:23:9C:5B:
              97:89:98:2C:EB:0A:5D:C5:B6:82:C2:26:58:A3:BE:91              : 0x010001
          • #6
            • authorityKeyIdentifier: 
              1e c5 b1 2c 7d 87 da 02  68 7c 25 bc 0c 07 84 3f  |...,}...h|%....?|
b6 cf de f1                                       |....            |
            • subjectKeyIdentifier: 
              ab 13 09 6f aa aa e5 c1  97 9c 3b e7 f4 85 1c 08  |...o......;.....|
eb 1d cf 4a                                       |...J            |
            • keyUsage: true, 0x80
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: codeSigning
            • nsCertType: 0x10
            • certificatePolicies
              • 1.3.6.1.4.1.6449.1.2.1.3.2
                • id-qt-cps: https://secure.comodo.net/CPS
            • crlDistributionPoints: http://crl.comodoca.com/COMODOCodeSigningCA2.crl
            • authorityInfoAccess
              • #0
                • caIssuers: http://crt.comodoca.com/COMODOCodeSigningCA2.crt
                • OCSP: http://ocsp.comodoca.com
            • subjectAltName: info@win-rar.com
        • RSA-SHA1: 
          bd a8 83 f2 df 6f ea 7b  62 95 56 1a 3d 3e cf 55  |.....o.{b.V.=>.U|
5c 01 e2 5b 81 70 09 d6  ad bb 17 71 af 14 22 b7  |\..[.p.....q..".|
29 26 f6 39 34 60 d3 25  2f ef fa 2c e0 64 94 cf  |)&.94`.%/..,.d..|
a9 d0 d6 19 77 95 b1 15  5f 23 14 d9 f9 3e 8e 6d  |....w..._#...>.m|
84 87 c3 70 97 14 19 33  c0 86 56 3f 92 1c ea a0  |...p...3..V?....|
26 84 b2 bd 0e f3 21 0c  73 b0 f2 9d 11 2b 6f 31  |&.....!.s....+o1|
19 94 2a b8 81 d5 93 f1  6a cb c9 ac 5c 93 1d d4  |..*.....j...\...|
98 ac 86 8b a3 2f 1b 43  07 08 7e c5 8d 03 67 33  |...../.C..~...g3|
2f 97 76 00 e9 6c 46 46  7e 2e 4d 88 c4 de 7a 35  |/.v..lFF~.M...z5|
f9 5d 9f 13 76 d9 8b 13  62 01 4c 43 16 df ff 9a  |.]..v...b.LC....|
72 6e be 45 a7 e0 58 52  0a 77 51 e2 5f 3e 0f 55  |rn.E..XR.wQ._>.U|
96 b0 5d 76 2d ac 06 6a  eb db 4d 62 c1 cb 25 13  |..]v-..j..Mb..%.|
4e ef f6 c5 d5 42 e1 fb  b7 b8 3e 26 2d a6 da 05  |N....B....>&-...|
11 de 6f 4d f8 9b 5c 18  0c 82 fe 05 e2 ac 99 98  |..oM..\.........|
64 2a 9c 0b 34 28 8c 8d  11 10 d4 b2 76 2c 5f cb  |d*..4(......v,_.|
4e 27 4d c7 63 73 a1 7a  b7 a4 a1 90 fa c1 28 e3  |N'M.cs.z......(.|
    • Signer
      • 1
      • unnamed
        • #0
          • C: GB
          • ST: Greater Manchester
          • L: Salford
          • O: COMODO CA Limited
          • CN: COMODO Code Signing CA 2
        • 75:95:3F:A5:4D:D1:2D:D9:CA:6B:94:8C:17:BF:D6:7C
      • SHA1: nil
      • #3
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest: 
          88 13 13 4c 4f 37 15 03  d3 64 00 a5 bc 6e 8a cf  |...LO7...d...n..|
4d 56 63 3e                                       |MVc>            |
      • rsaEncryption: 
        17 47 33 49 f1 70 eb 86  1c 61 a5 23 e6 e4 fd 95  |.G3I.p...a.#....|
2f 56 57 db 1c 4e 69 f4  c0 1b 4e 30 c4 e8 6e c5  |/VW..Ni...N0..n.|
8a 3f ad c3 05 eb 84 2d  cd 34 60 fc bd bb 72 24  |.?.....-.4`...r$|
3e 84 f4 80 f0 fb 84 48  c4 67 e4 22 ca fb f7 87  |>......H.g."....|
32 57 9c 35 45 73 34 6e  69 61 91 ac 8f e8 b1 f7  |2W.5Es4nia......|
a8 32 43 76 aa 5e d4 18  4c 58 b1 a5 4c 06 3d 08  |.2Cv.^..LX..L.=.|
50 b1 cb 4b 07 1f 69 ea  7b fb 91 8e c9 1d 78 27  |P..K..i.{.....x'|
fe e1 05 da bd 12 04 e9  0d dd 1b 9e f1 a4 74 3e  |..............t>|
2e d3 82 5a c7 9b 74 e7  a7 5a 4b 48 ac d5 ad a5  |...Z..t..ZKH....|
60 0a 93 d0 4a 1a b5 d0  82 44 eb b6 ae 74 c9 92  |`...J....D...t..|
4a 29 47 ca eb 52 a2 a7  e1 23 ab ab 06 a5 6a 1c  |J)G..R...#....j.|
0b 3c 41 be 8b 3a 23 a1  52 6a ad 27 8c a2 df e6  |..P&.>.W.....|
26 a4 69 82 d8 b4 59 55  bd f6 b5 e2 19 26 c7 55  |&.i...YU.....&.U|
ee 25 f7 14 66 dc 1e f3  a4 c8 6c 07 ba f8 c2 0d  |.%..f.....l.....|
      • countersignature
        • 0
          • unnamed
            • #0
              • C: US
              • ST: UT
              • L: Salt Lake City
              • O: The USERTRUST Network
              • OU: http://www.usertrust.com
              • CN: UTN-USERFirst-Object
            • 47:8A:8E:FB:59:E1:D8:3F:0C:E1:42:D2:A2:87:07:BE
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2013-08-22 13:01:20 UTC
            • messageDigest: 
              68 3a 11 73 c6 b6 d6 83  d5 a5 fe 29 8d 81 87 bc  |h:.s.......)....|
9a 85 69 f4                                       |..i.            |
          • rsaEncryption: 
            78 ba 7c 55 58 c6 40 20  4c 3e 8c 6c 74 39 20 59  |x.|UX.@ L>.lt9 Y|
c7 c8 e5 7d 50 6d 51 a4  95 28 fe 27 19 f2 a5 04  |...}PmQ..(.'....|
ac 45 97 42 76 85 22 bd  33 b5 8c da aa e0 e4 ef  |.E.Bv.".3.......|
0f 2d bd b2 b7 06 64 bf  db bb 6e 98 39 c1 3a d4  |.-....d...n.9.:.|
07 1b 49 6d 09 e2 64 69  cc f3 04 27 b1 74 4d a2  |..Im..di...'.tM.|
c9 86 69 84 4c 4b 4f 50  86 b1 6b a0 ca fe 68 ec  |..i.LKOP..k...h.|
de ad e4 0e c1 62 49 04  07 fe de a7 45 83 25 52  |.....bI.....E.%R|
67 ab e7 da d9 27 e2 a1  ef c6 23 bb 90 d2 d2 75  |g....'....#....u|
b2 0b 4c 6a 83 15 8f a2  48 79 ae 93 26 b7 7e ad  |..Lj....Hy..&.~.|
77 d6 c7 41 01 3a c2 b7  75 4f 72 26 5f b5 e0 c3  |w..A.:..uOr&_...|
eb 5d d6 74 6a de 92 cd  79 9d 5d 3c 76 54 48 07  |.].tj...y.]
offsetsizetypecomment
0481792EXE08/22/2013 13:00:14#
15c115HTM#
75a006232PKCS7Authenticode Signature#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK