filenameWinZip165.exe
size360712 (0x58108)
md548e7d637c94a5599afcda89a8e6a6023
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe0

Rich Header

lib idversiontimes used
9530771
2592102
9320672
9321793
1021
10030771
9430521
9030771

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x4ffea381
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion7.10
SizeOfCode0x1c00
SizeOfInitializedData0x55200
SizeOfUninitializedData0
AddressOfEntryPoint0x1000
BaseOfCode0x1000
BaseOfData0x3000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x5a000
SizeOfHeaders0x400
CheckSum0x64c15
Subsystem2
DllCharacteristics0x400
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x1b550x1c00R-X CODE
.rdata0x30000x2c20x400R-- IDATA
.data0x40000x1260x200RW- IDATA
.rsrc0x50000x549640x54a00R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x30980x50
RESOURCE0x50000x54964
EXCEPTION00
SECURITY0x570000x1108
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x30000x60
Delay_IAT00
CLR_Header00
typenamesizecp
BINARY#1442744470
ICON#156720
ICON#237520
ICON#322160
ICON#413840
ICON#5128400
ICON#673360
ICON#732400
ICON#88720
ICON#9169360
ICON#1096400
ICON#1142640
ICON#1211280
GROUP_ICON#1071740
VERSION#16080
MANIFEST#110330
module_namehintordfunction_name
KERNEL32.dll175ExitProcess
KERNEL32.dll458GetTempFileNameW
KERNEL32.dll221FindResourceW
KERNEL32.dll239FreeLibrary
KERNEL32.dll589LoadResource
KERNEL32.dll518HeapAlloc
KERNEL32.dll524HeapFree
KERNEL32.dll378GetModuleHandleW
KERNEL32.dll411GetProcessHeap
KERNEL32.dll916WriteFile
KERNEL32.dll587LoadLibraryW
KERNEL32.dll838SizeofResource
KERNEL32.dll235FormatMessageW
KERNEL32.dll374GetModuleFileNameW
KERNEL32.dll80CreateFileW
KERNEL32.dll408GetProcAddress
KERNEL32.dll603LockResource
KERNEL32.dll46CloseHandle
KERNEL32.dll125DeleteFileW
USER32.dll485MessageBoxW
SHELL32.dll29DoEnvironmentSubstW

StringTable 00000000

CompanyNameWinZip Computing
FileDescriptionWinZip 16.5 Setup
LegalCopyrightCopyright © 2012
ProductNameWinZip 16.5
FileVersion1,18,0,2719
ProductVersion1,18,0,2719

VS_FIXEDFILEINFO

FileVersion1.18.0.2719
ProductVersion1.18.0.2719
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10/CN=VeriSign Class 3 Code Signing 2010 CA
serial: 5E4842AC9691630B45F8266C0ADB1206

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:48:42:ac:96:91:63:0b:45:f8:26:6c:0a:db:12:06
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Validity
            Not Before: Mar 16 00:00:00 2012 GMT
            Not After : Apr 13 23:59:59 2014 GMT
        Subject: C=US, ST=Connecticut, L=Mansfield, O=WinZip Computing, OU=Digital ID Class 3 - Microsoft Software Validation v2, CN=WinZip Computing
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c4:20:9f:33:a0:49:21:c1:8a:d3:9c:b3:4b:69:
                    04:df:3a:66:60:99:7c:f3:42:ae:f6:11:33:42:6e:
                    34:40:d4:11:77:e1:fd:83:b1:8c:72:52:7d:34:56:
                    a3:d9:f4:18:14:f4:17:8e:6e:04:03:7a:aa:18:cc:
                    68:ba:9c:fa:f5:2a:68:bf:c8:6f:43:13:1b:d2:ef:
                    92:23:91:46:8c:fe:95:54:67:db:c6:ab:1c:b2:80:
                    91:93:2d:35:82:f3:88:82:d0:98:ad:76:ef:ca:2b:
                    0b:79:aa:d3:1c:81:2a:5b:ac:25:99:42:fa:b3:ff:
                    20:46:f0:d4:16:08:6e:3e:32:50:c0:0b:17:55:27:
                    ac:2a:ed:cf:61:b1:ba:ae:8d:24:17:8f:47:09:94:
                    fd:47:5a:7d:d6:29:ca:7f:f7:d8:30:21:bc:ae:47:
                    01:8c:ee:af:00:69:45:47:7c:c7:ed:74:a0:a2:a0:
                    11:59:f8:78:a5:81:f2:c8:5a:08:f8:4a:fa:70:41:
                    8f:a2:e6:6e:c3:cf:62:33:fa:6c:50:e3:9c:66:f6:
                    ae:40:10:0a:63:0a:09:9e:47:f1:76:c6:42:98:d7:
                    46:55:3a:9b:a8:f9:6e:b4:38:78:b6:c2:d2:8b:c1:
                    56:3f:2a:70:be:87:5b:ee:71:d5:26:b7:b3:73:c5:
                    c4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://csc3-2010-crl.verisign.com/CSC3-2010.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa
            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
                CA Issuers - URI:http://csc3-2010-aia.verisign.com/CSC3-2010.cer
            X509v3 Authority Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        bb:45:35:a7:bd:5b:10:1f:29:5b:e9:43:02:09:2b:68:f3:cc:
        ac:33:8d:08:04:a1:16:6d:82:90:20:7d:dc:a5:86:2e:5c:c6:
        90:a9:91:9b:80:f8:36:c8:a0:5b:e2:2b:08:4e:dd:51:55:97:
        8b:7d:f1:25:b6:0d:63:b9:54:5f:b4:0d:63:c6:5c:6c:f7:ef:
        61:d3:56:e8:b0:af:98:bd:0d:40:3b:fa:a7:8e:a7:10:19:89:
        8b:8c:12:fc:a7:34:77:57:0d:9a:62:59:b5:30:84:7e:d6:b4:
        f3:ff:dd:50:f0:1a:5d:6b:e0:63:48:bf:50:2d:5b:64:78:6c:
        a1:27:d2:38:92:7e:f2:10:91:54:bf:25:c8:37:b3:82:7d:47:
        e1:75:cf:6b:f8:74:59:9e:c0:e6:49:1c:fb:be:2d:3f:80:a2:
        01:6a:5d:6a:a3:ca:dd:b8:98:d0:08:3f:50:41:4f:dd:3f:3e:
        de:fa:05:da:0b:17:89:3c:13:12:c9:11:1d:19:dc:40:13:9e:
        7c:fc:a6:73:7a:6a:8b:14:bc:26:6f:d0:5c:8b:21:80:5a:00:
        00:85:0f:4f:27:94:7c:1a:bd:6c:41:48:20:20:8a:50:2b:80:
        2f:cf:36:bb:9a:5a:7e:df:e4:ee:80:9b:a6:4f:ac:d4:59:0d:
        d8:97:90:f6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:f5:23:4b:5e:a5:d7:8a:bb:32:e9:d4:57:f7:ef:
                    e4:c7:26:7e:ad:19:98:fe:a8:9d:7d:94:f6:36:6b:
                    10:d7:75:81:30:7f:04:68:7f:cb:2b:75:1e:cd:1d:
                    08:8c:df:69:94:a7:37:a3:9c:7b:80:e0:99:e1:ee:
                    37:4d:5f:ce:3b:14:ee:86:d4:d0:f5:27:35:bc:25:
                    0b:38:a7:8c:63:9d:17:a3:08:a5:ab:b0:fb:cd:6a:
                    62:82:4c:d5:21:da:1b:d9:f1:e3:84:3b:8a:2a:4f:
                    85:5b:90:01:4f:c9:a7:76:10:7f:27:03:7c:be:ae:
                    7e:7d:c1:dd:f9:05:bc:1b:48:9c:69:e7:c0:a4:3c:
                    3c:41:00:3e:df:96:e5:c5:e4:94:71:d6:55:01:c7:
                    00:26:4a:40:3c:b5:a1:26:a9:0c:a7:6d:80:8e:90:
                    25:7b:cf:bf:3f:1c:eb:2f:96:fa:e5:87:77:c6:b5:
                    56:b2:7a:3b:54:30:53:1b:df:62:34:ff:1e:d1:f4:
                    5a:93:28:85:e5:4c:17:4e:7e:5b:fd:a4:93:99:7f:
                    df:cd:ef:a4:75:ef:ef:15:f6:47:e7:f8:19:72:d8:
                    2e:34:1a:a6:b4:a7:4c:7e:bd:bb:4f:0c:3d:57:f1:
                    30:d6:a6:36:8e:d6:80:76:d7:19:2e:a5:cd:7e:34:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.verisign.com/pca3-g5.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-8
            X509v3 Subject Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            X509v3 Authority Key Identifier: 
                7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        56:22:e6:34:a4:c4:61:cb:48:b9:01:ad:56:a8:64:0f:d9:8c:
        91:c4:bb:cc:0c:e5:ad:7a:a0:22:7f:df:47:38:4a:2d:6c:d1:
        7f:71:1a:7c:ec:70:a9:b1:f0:4f:e4:0f:0c:53:fa:15:5e:fe:
        74:98:49:24:85:81:26:1c:91:14:47:b0:4c:63:8c:bb:a1:34:
        d4:c6:45:e8:0d:85:26:73:03:d0:a9:8c:64:6d:dc:71:92:e6:
        45:05:60:15:59:51:39:fc:58:14:6b:fe:d4:a4:ed:79:6b:08:
        0c:41:72:e7:37:22:06:09:be:23:e9:3f:44:9a:1e:e9:61:9d:
        cc:b1:90:5c:fc:3d:d2:8d:ac:42:3d:65:36:d4:b4:3d:40:28:
        8f:9b:10:cf:23:26:cc:4b:20:cb:90:1f:5d:8c:4c:34:ca:3c:
        d8:e5:37:d6:6f:a5:20:bd:34:eb:26:d9:ae:0d:e7:c5:9a:f7:
        a1:b4:21:91:33:6f:86:e8:58:bb:25:7c:74:0e:58:fe:75:1b:
        63:3f:ce:31:7c:9b:8f:1b:96:9e:c5:53:76:84:5b:9c:ad:91:
        fa:ac:ed:93:ba:5d:c8:21:53:c2:82:53:63:af:12:0d:50:87:
        11:1b:3d:54:52:96:8a:2c:9c:3d:92:1a:08:9a:05:2e:c7:93:
        a5:48:91:d3
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • : 
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • SHA1
          • 46 8a f8 31 3d d0 cb 6d  38 30 e4 49 f8 92 ff 69  |F..1=..m80.I...i|
57 d5 41 7c                                       |W.A|            |
    • Certificates
      • Certificate #0
        • 2
          • 5E:48:42:AC:96:91:63:0B:45:F8:26:6C:0A:DB:12:06
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: Terms of use at https://www.verisign.com/rpa (c)10
            • CN: VeriSign Class 3 Code Signing 2010 CA
          • 2012-03-16 00:00:00 UTC: 2014-04-13 23:59:59 UTC
          • Subject
            • C: US
            • ST: Connecticut
            • L: Mansfield
            • O: WinZip Computing
            • OU: Digital ID Class 3 - Microsoft Software Validation v2
            • CN: WinZip Computing
          • #5
            • rsaEncryption: nil
            • C4:20:9F:33:A0:49:21:C1:8A:D3:9C:B3:4B:69:04:DF:
              3A:66:60:99:7C:F3:42:AE:F6:11:33:42:6E:34:40:D4:
              11:77:E1:FD:83:B1:8C:72:52:7D:34:56:A3:D9:F4:18:
              14:F4:17:8E:6E:04:03:7A:AA:18:CC:68:BA:9C:FA:F5:
              2A:68:BF:C8:6F:43:13:1B:D2:EF:92:23:91:46:8C:FE:
              95:54:67:DB:C6:AB:1C:B2:80:91:93:2D:35:82:F3:88:
              82:D0:98:AD:76:EF:CA:2B:0B:79:AA:D3:1C:81:2A:5B:
              AC:25:99:42:FA:B3:FF:20:46:F0:D4:16:08:6E:3E:32:
              50:C0:0B:17:55:27:AC:2A:ED:CF:61:B1:BA:AE:8D:24:
              17:8F:47:09:94:FD:47:5A:7D:D6:29:CA:7F:F7:D8:30:
              21:BC:AE:47:01:8C:EE:AF:00:69:45:47:7C:C7:ED:74:
              A0:A2:A0:11:59:F8:78:A5:81:F2:C8:5A:08:F8:4A:FA:
              70:41:8F:A2:E6:6E:C3:CF:62:33:FA:6C:50:E3:9C:66:
              F6:AE:40:10:0A:63:0A:09:9E:47:F1:76:C6:42:98:D7:
              46:55:3A:9B:A8:F9:6E:B4:38:78:B6:C2:D2:8B:C1:56:
              3F:2A:70:BE:87:5B:EE:71:D5:26:B7:B3:73:C5:C4:41              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • nil
            • keyUsage: true, 0x80
            • crlDistributionPoints: http://csc3-2010-crl.verisign.com/CSC3-2010.crl
            • certificatePolicies
              • 2.16.840.1.113733.1.7.23.3
                • id-qt-cps: https://www.verisign.com/rpa
            • extendedKeyUsage: codeSigning
            • authorityInfoAccess
              • #0
                • OCSP: http://ocsp.verisign.com
                • caIssuers: http://csc3-2010-aia.verisign.com/CSC3-2010.cer
            • authorityKeyIdentifier: 
              cf 99 a9 ea 7b 26 f4 4b  c9 8e 8f d7 f0 05 26 ef  |....{&.K......&.|
e3 d2 a7 9d                                       |....            |
            • nsCertType: 0x10
            • 1.3.6.1.4.1.311.2.1.27
              • false: true
        • RSA-SHA1: 
          bb 45 35 a7 bd 5b 10 1f  29 5b e9 43 02 09 2b 68  |.E5..[..)[.C..+h|
f3 cc ac 33 8d 08 04 a1  16 6d 82 90 20 7d dc a5  |...3.....m.. }..|
86 2e 5c c6 90 a9 91 9b  80 f8 36 c8 a0 5b e2 2b  |..\.......6..[.+|
08 4e dd 51 55 97 8b 7d  f1 25 b6 0d 63 b9 54 5f  |.N.QU..}.%..c.T_|
b4 0d 63 c6 5c 6c f7 ef  61 d3 56 e8 b0 af 98 bd  |..c.\l..a.V.....|
0d 40 3b fa a7 8e a7 10  19 89 8b 8c 12 fc a7 34  |.@;............4|
77 57 0d 9a 62 59 b5 30  84 7e d6 b4 f3 ff dd 50  |wW..bY.0.~.....P|
f0 1a 5d 6b e0 63 48 bf  50 2d 5b 64 78 6c a1 27  |..]k.cH.P-[dxl.'|
d2 38 92 7e f2 10 91 54  bf 25 c8 37 b3 82 7d 47  |.8.~...T.%.7..}G|
e1 75 cf 6b f8 74 59 9e  c0 e6 49 1c fb be 2d 3f  |.u.k.tY...I...-?|
80 a2 01 6a 5d 6a a3 ca  dd b8 98 d0 08 3f 50 41  |...j]j.......?PA|
4f dd 3f 3e de fa 05 da  0b 17 89 3c 13 12 c9 11  |O.?>.......<....|
1d 19 dc 40 13 9e 7c fc  a6 73 7a 6a 8b 14 bc 26  |...@..|..szj...&|
6f d0 5c 8b 21 80 5a 00  00 85 0f 4f 27 94 7c 1a  |o.\.!.Z....O'.|.|
bd 6c 41 48 20 20 8a 50  2b 80 2f cf 36 bb 9a 5a  |.lAH  .P+./.6..Z|
7e df e4 ee 80 9b a6 4f  ac d4 59 0d d8 97 90 f6  |~......O..Y.....|
      • Certificate #1
        • 2
          • 52:00:E5:AA:25:56:FC:1A:86:ED:96:C9:D4:4B:33:C7
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: (c) 2006 VeriSign, Inc. - For authorized use only
            • CN: VeriSign Class 3 Public Primary Certification Authority - G5
          • 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
          • Subject
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: Terms of use at https://www.verisign.com/rpa (c)10
            • CN: VeriSign Class 3 Code Signing 2010 CA
          • #5
            • rsaEncryption: nil
            • F5:23:4B:5E:A5:D7:8A:BB:32:E9:D4:57:F7:EF:E4:C7:
              26:7E:AD:19:98:FE:A8:9D:7D:94:F6:36:6B:10:D7:75:
              81:30:7F:04:68:7F:CB:2B:75:1E:CD:1D:08:8C:DF:69:
              94:A7:37:A3:9C:7B:80:E0:99:E1:EE:37:4D:5F:CE:3B:
              14:EE:86:D4:D0:F5:27:35:BC:25:0B:38:A7:8C:63:9D:
              17:A3:08:A5:AB:B0:FB:CD:6A:62:82:4C:D5:21:DA:1B:
              D9:F1:E3:84:3B:8A:2A:4F:85:5B:90:01:4F:C9:A7:76:
              10:7F:27:03:7C:BE:AE:7E:7D:C1:DD:F9:05:BC:1B:48:
              9C:69:E7:C0:A4:3C:3C:41:00:3E:DF:96:E5:C5:E4:94:
              71:D6:55:01:C7:00:26:4A:40:3C:B5:A1:26:A9:0C:A7:
              6D:80:8E:90:25:7B:CF:BF:3F:1C:EB:2F:96:FA:E5:87:
              77:C6:B5:56:B2:7A:3B:54:30:53:1B:DF:62:34:FF:1E:
              D1:F4:5A:93:28:85:E5:4C:17:4E:7E:5B:FD:A4:93:99:
              7F:DF:CD:EF:A4:75:EF:EF:15:F6:47:E7:F8:19:72:D8:
              2E:34:1A:A6:B4:A7:4C:7E:BD:BB:4F:0C:3D:57:F1:30:
              D6:A6:36:8E:D6:80:76:D7:19:2E:A5:CD:7E:34:2D:89              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • true: 0
            • certificatePolicies
              • 2.16.840.1.113733.1.7.23.3
                • #0
                  • id-qt-cps: https://www.verisign.com/cps
                  • id-qt-unotice: https://www.verisign.com/rpa
            • keyUsage: true, 6
            • 1.3.6.1.5.5.7.1.12
              • image/gif
                • SHA1: 
                  8f e5 d3 1a 86 ac 8d 8e  6b c3 cf 80 6a d4 48 18  |........k...j.H.|
2c 7b 19 2e                                       |,{..            |
                • http://logo.verisign.com/vslogo.gif
            • crlDistributionPoints: http://crl.verisign.com/pca3-g5.crl
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com
            • extendedKeyUsage
              • clientAuth: codeSigning
            • subjectAltName
              • CN: VeriSignMPKI-2-8
            • subjectKeyIdentifier: 
              cf 99 a9 ea 7b 26 f4 4b  c9 8e 8f d7 f0 05 26 ef  |....{&.K......&.|
e3 d2 a7 9d                                       |....            |
            • authorityKeyIdentifier: 
              7f d3 65 a7 c2 dd ec bb  f0 30 09 f3 43 39 fa 02  |..e......0..C9..|
af 33 31 33                                       |.313            |
        • RSA-SHA1: 
          56 22 e6 34 a4 c4 61 cb  48 b9 01 ad 56 a8 64 0f  |V".4..a.H...V.d.|
d9 8c 91 c4 bb cc 0c e5  ad 7a a0 22 7f df 47 38  |.........z."..G8|
4a 2d 6c d1 7f 71 1a 7c  ec 70 a9 b1 f0 4f e4 0f  |J-l..q.|.p...O..|
0c 53 fa 15 5e fe 74 98  49 24 85 81 26 1c 91 14  |.S..^.t.I$..&...|
47 b0 4c 63 8c bb a1 34  d4 c6 45 e8 0d 85 26 73  |G.Lc...4..E...&s|
03 d0 a9 8c 64 6d dc 71  92 e6 45 05 60 15 59 51  |....dm.q..E.`.YQ|
39 fc 58 14 6b fe d4 a4  ed 79 6b 08 0c 41 72 e7  |9.X.k....yk..Ar.|
37 22 06 09 be 23 e9 3f  44 9a 1e e9 61 9d cc b1  |7"...#.?D...a...|
90 5c fc 3d d2 8d ac 42  3d 65 36 d4 b4 3d 40 28  |.\.=...B=e6..=@(|
8f 9b 10 cf 23 26 cc 4b  20 cb 90 1f 5d 8c 4c 34  |....#&.K ...].L4|
ca 3c d8 e5 37 d6 6f a5  20 bd 34 eb 26 d9 ae 0d  |.<..7.o. .4.&...|
e7 c5 9a f7 a1 b4 21 91  33 6f 86 e8 58 bb 25 7c  |......!.3o..X.%||
74 0e 58 fe 75 1b 63 3f  ce 31 7c 9b 8f 1b 96 9e  |t.X.u.c?.1|.....|
c5 53 76 84 5b 9c ad 91  fa ac ed 93 ba 5d c8 21  |.Sv.[........].!|
53 c2 82 53 63 af 12 0d  50 87 11 1b 3d 54 52 96  |S..Sc...P...=TR.|
8a 2c 9c 3d 92 1a 08 9a  05 2e c7 93 a5 48 91 d3  |.,.=.........H..|
    • Signer
      • 1
      • unnamed
        • #0
          • C: US
          • O: VeriSign, Inc.
          • OU: VeriSign Trust Network
          • OU: Terms of use at https://www.verisign.com/rpa (c)10
          • CN: VeriSign Class 3 Code Signing 2010 CA
        • 5E:48:42:AC:96:91:63:0B:45:F8:26:6C:0A:DB:12:06
      • SHA1: nil
      • #3
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest: 
          2f 75 5d 10 d3 ae 2e df  75 ef fa 10 f6 1c df 22  |/u].....u......"|
03 96 31 7d                                       |..1}            |
        • 1.3.6.1.4.1.311.2.1.12
          • 00 57 00 69 00 6e 00 5a  00 69 00 70 00 20 00 31  |.W.i.n.Z.i.p. .1|
00 36 00 2e 00 35                                 |.6...5          |
            : http://www.winzip.com/authenticode.htm
      • rsaEncryption: 
        84 9b 4f 89 14 2e 7f 4e  b2 15 ec 51 81 a4 8f 71  |..O....N...Q...q|
a4 f4 3d 8c 9a af c4 d9  6f ed 7c e2 31 8f 0b 0b  |..=.....o.|.1...|
9a 76 0b e8 a3 24 e1 bf  eb ff 53 0f 32 e9 3c a9  |.v...$....S.2.<.|
7f e5 5e 07 22 ba 77 34  33 91 19 4a 8d d0 b8 ed  |..^.".w43..J....|
9c 8b ca ef f3 5c 73 d0  60 8e fe b8 ac 19 56 ba  |.....\s.`.....V.|
5b 8f 93 23 ba bf 86 b7  de 4b 91 ad 38 3f 76 e2  |[..#.....K..8?v.|
c4 f5 e3 11 38 99 06 7b  ce ae cc 22 2e 22 58 7d  |....8..{..."."X}|
5f 73 41 2d b1 32 6e 53  14 92 0f c7 f3 82 e8 0e  |_sA-.2nS........|
81 a8 ad 1d 5d 9f f9 47  4c 3c 02 64 18 e0 95 cd  |....]..GL<.d....|
42 8d 94 6e d1 b9 9e 73  e5 4a d9 b4 ab 89 d6 77  |B..n...s.J.....w|
3a 1f 41 49 c0 e1 6d c6  1d b7 1d 2e 6c f2 42 18  |:.AI..m.....l.B.|
05 42 53 52 43 a6 44 4c  a4 ac 56 ad bd 07 da bc  |.BSRC.DL..V.....|
49 d5 4b aa f4 02 c1 61  7b bf da 7f c0 95 73 88  |I.K....a{.....s.|
c1 f1 98 3f 4b 0e 71 6f  9a bf 09 24 c4 62 0a 76  |...?K.qo...$.b.v|
a5 1d 3d c6 31 1f 7f 64  f3 8e d4 31 7b 99 ca e9  |..=.1..d...1{...|
ac 98 62 09 ff 4e 31 5e  42 91 ed bb 4a 8f 17 c6  |..b..N1^B...J...|
offsetsizetypecomment
0356352EXE07/12/2012 10:14:25#
15c115HTM#
570004360PKCS7Authenticode Signature#
Scanning the drive for archives:
1 file, 360712 bytes (353 KiB)


--
Type = PE
WARNING = Checksum error
Physical Size = 360712
CPU = x86
Characteristics = Executable 32-bit NoRelocs NoLineNums NoLocalSyms
Created = 2012-07-12 10:14:25
Headers Size = 1024
Checksum = 412693
Image Size = 368640
Section Alignment = 4096
File Alignment = 512
Code Size = 7168
Initialized Data Size = 348672
Uninitialized Data Size = 0
Linker Version = 7.10
OS Version = 4.0
Image Version = 0.0
Subsystem Version = 4.0
Subsystem = Windows GUI
DLL Characteristics = NoSEH
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
Comment = FileVersion: 1.18.0.2719
FileVersion: 1,18,0,2719
ProductVersion: 1.18.0.2719
ProductVersion: 1,18,0,2719
CompanyName: WinZip Computing
FileDescription: WinZip 16.5 Setup
LegalCopyright: Copyright © 2012
ProductName: WinZip 16.5
----
Path = .rsrc/BINARY/144
Size = 274447
Packed Size = 274447
--
Path = .rsrc/BINARY/144
Type = lzma

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
                    .....       825856               144~
------------------- ----- ------------ ------------  ------------------------
                                825856       360712  1 files

Warnings: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK