UnRAR.exe - Command line RAR

info
MZ
PE
resources
strings
imports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	UnRAR.exe
size	398552 (0x614d8)
md5	54c613ff0f8f1bdcd7470eff52d19ce5

type	PE32+ executable (console) x86-64, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

Rich Header

lib id	version	times used
241	40116	7
243	40116	130
242	40116	13
199	41118	1
259	24123	8
261	24123	42
260	24123	21
147	30729	11
1	0	167
261	24215	52
255	24210	1
258	24215	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	8
TimeDateStamp	0x5b2fb2ec
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x22
Magic	0x20b
LinkerVersion	14.0
SizeOfCode	0x40e00
SizeOfInitializedData	0x31600
SizeOfUninitializedData	0
AddressOfEntryPoint	0x2de88
BaseOfCode	0x1000
ImageBase	0x140000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.2
ImageVersion	0.0
SubsystemVersion	5.2
Reserved1	0
SizeOfImage	0x77000
SizeOfHeaders	0x400
CheckSum	0x6f721
Subsystem	3
DllCharacteristics	0x8160
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x40cea	0x40e00	R-X CODE
.rdata	0x42000	0x1052a	0x10600	R-- IDATA
.data	0x53000	0x15a9c	0x1400	RW- IDATA
.pdata	0x69000	0x2c34	0x2e00	R-- IDATA
.gfids	0x6c000	0xd8	0x200	R-- IDATA
.tls	0x6d000	9	0x200	RW- IDATA
.rsrc	0x6e000	0x7908	0x7a00	R-- IDATA
.reloc	0x76000	0x6a4	0x800	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x51494	0x78
RESOURCE	0x6e000	0x7908
EXCEPTION	0x69000	0x2c34
SECURITY	0x5e000	0x34d8
BASERELOC	0x76000	0x6a4
DEBUG	0x4d2b0	0x54
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x4d3a8	0x28
LOAD_CONFIG	0x4d310	0x94
Bound_IAT	0	0
IAT	0x42000	0x4c8
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x14006d000	0x14006d008	0x140067e80	0x140042580	0	0x300000

show previews

type	name	size
STRING	#188	112
STRING	#189	610
STRING	#190	82
STRING	#191	214
STRING	#192	706
STRING	#193	706
STRING	#194	742
STRING	#195	768
STRING	#196	736
STRING	#197	762
STRING	#198	770
STRING	#199	670
STRING	#200	838
STRING	#201	906
STRING	#202	684
STRING	#203	780
STRING	#204	840
STRING	#205	1014
STRING	#206	764
STRING	#207	534
STRING	#208	384
STRING	#209	368
STRING	#210	422
STRING	#211	468
STRING	#212	336
STRING	#213	284
STRING	#214	444
STRING	#215	364
STRING	#216	612
STRING	#217	466
STRING	#218	454
STRING	#219	232
STRING	#220	368
STRING	#221	272
STRING	#222	134
STRING	#223	280
STRING	#224	286
STRING	#225	470
STRING	#226	508
STRING	#227	604
STRING	#228	606
STRING	#229	666
STRING	#230	398
STRING	#231	734
STRING	#232	562
STRING	#233	678
STRING	#234	498
STRING	#235	586
STRING	#236	262
VERSION	#1	696
MANIFEST	#1	1610

id	lang	string
3002	1033	_Yes_No
3004	1033	_Yes_No_All
3006	1033	_Yes_No_All_nEver_Quit
3008	1033	_Yes_No_All_nEver_Rename_Quit
3010	1033	_Continue_Quit
3012	1033	_Retry_Abort
3014	1033	RAR %s Copyright (c) 1993-%d Alexander Roshal %d %s %d
3016	1033	Registered to %s
3018	1033	Trial version Type 'rar -?' for help
3020	1033	Available license key is valid only for %s
3022	1033	UNRAR %s freeware Copyright (c) 1993-%d Alexander Roshal
3024	1033	beta
3026	1033	x86
3028	1033	x64
3030	1033	Jan
3032	1033	Feb
3034	1033	Mar
3036	1033	Apr
3038	1033	May
3040	1033	Jun
3042	1033	Jul
3044	1033	Aug
3046	1033	Sep
3048	1033	Oct
3050	1033	Nov
3052	1033	Dec
3054	1033	Usage: rar <command> -<switch 1> -<switch N> <archive> <files...>
3056	1033	Usage: unrar <command> -<switch 1> -<switch N> <archive> <files...>
3058	1033	<@listfiles...> <path_to_extract\>
3060	1033	<Commands>
3062	1033	a Add files to archive
3064	1033	c Add archive comment
3066	1033	ch Change archive parameters
3068	1033	cw Write archive comment to file
3070	1033	d Delete files from archive
3072	1033	e Extract files without archived paths
3074	1033	f Freshen files in archive
3076	1033	i[par]=<str> Find string in archives
3078	1033	k Lock archive
3080	1033	l[t[a],b] List archive contents [technical[all], bare]
3082	1033	m[f] Move to archive [files only]
3084	1033	p Print file to stdout
3086	1033	r Repair archive
3088	1033	rc Reconstruct missing volumes
3090	1033	rn Rename archived files
3092	1033	rr[N] Add data recovery record
3094	1033	rv[N] Create recovery volumes
3096	1033	s[name\|-] Convert archive to or from SFX
3098	1033	t Test archive files
3100	1033	u Update files in archive
3102	1033	v[t[a],b] Verbosely list archive contents [technical[all],bare]
3104	1033	x Extract files with full path
3106	1033	<Switches>
3108	1033	- Stop switches scanning
3110	1033	@[+] Disable [enable] file lists
3112	1033	ac Clear Archive attribute after compression or extraction
3114	1033	ad Append archive name to destination path
3116	1033	ag[format] Generate archive name using the current date
3118	1033	ai Ignore file attributes
3120	1033	ao Add files with Archive attribute set
3122	1033	ap<path> Set path inside archive
3124	1033	as Synchronize archive contents
3126	1033	c- Disable comments show
3128	1033	cfg- Disable read configuration
3130	1033	cl Convert names to lower case
3132	1033	cu Convert names to upper case
3134	1033	df Delete files after archiving
3136	1033	dh Open shared files
3138	1033	dr Delete files to Recycle Bin
3140	1033	ds Disable name sort for solid archive
3142	1033	dw Wipe files after archiving
3144	1033	e[+]<attr> Set file exclude and include attributes
3146	1033	ed Do not add empty directories
3148	1033	en Do not put 'end of archive' block
3150	1033	ep Exclude paths from names
3152	1033	ep1 Exclude base directory from names
3154	1033	ep2 Expand paths to full
3156	1033	ep3 Expand paths to full including the drive letter
3158	1033	f Freshen files
3160	1033	hp[password] Encrypt both file data and headers
3162	1033	ht[b\|c] Select hash type [BLAKE2,CRC32] for file checksum
3164	1033	id[c,d,p,q] Disable messages
3166	1033	ieml[addr] Send archive by email
3168	1033	ierr Send all messages to stderr
3170	1033	ilog[name] Log errors to file
3172	1033	inul Disable all messages
3174	1033	ioff[n] Turn PC off after completing an operation
3176	1033	isnd Enable sound
3178	1033	iver Display the version number
3180	1033	k Lock archive
3182	1033	kb Keep broken extracted files
3184	1033	log[f][=name] Write names to log file
3186	1033	m<0..5> Set compression level (0-store...3-default...5-maximal)
3188	1033	ma[4\|5] Specify a version of archiving format
3190	1033	mc<par> Set advanced compression parameters
3192	1033	md<n>[k,m,g] Dictionary size in KB, MB or GB
3194	1033	ms[ext;ext] Specify file types to store
3196	1033	mt<threads> Set the number of threads
3198	1033	n<file> Additionally filter included files
3200	1033	n@ Read additional filter masks from stdin
3202	1033	n@<list> Read additional filter masks from list file
3204	1033	o[+\|-] Set the overwrite mode
3206	1033	oc Set NTFS Compressed attribute
3208	1033	oh Save hard links as the link instead of the file
3210	1033	oi[0-4][:min] Save identical files as references
3212	1033	ol[a] Process symbolic links as the link [absolute paths]
3214	1033	oni Allow potentially incompatible names
3216	1033	or Rename files automatically
3218	1033	os Save NTFS streams
3220	1033	ow Save or restore file owner and group
3222	1033	p[password] Set password
3224	1033	p- Do not query password
3226	1033	qo[-\|+] Add quick open information [none\|force]
3228	1033	r Recurse subdirectories
3230	1033	r- Disable recursion
3232	1033	r0 Recurse subdirectories for wildcard names only
3234	1033	ri<P>[:<S>] Set priority (0-default,1-min..15-max) and sleep time in ms
3236	1033	rr[N] Add data recovery record
3238	1033	rv[N] Create recovery volumes
3240	1033	s[<N>,v[-],e] Create solid archive
3242	1033	s- Disable solid archiving
3244	1033	sc<chr>[obj] Specify the character set
3246	1033	sfx[name] Create SFX archive
3248	1033	si[name] Read data from standard input (stdin)
3250	1033	sl<size> Process files with size less than specified
3252	1033	sm<size> Process files with size more than specified
3254	1033	t Test files after archiving
3256	1033	tk Keep original archive time
3258	1033	tl Set archive time to latest file
3260	1033	tn<time> Process files newer than <time>
3262	1033	to<time> Process files older than <time>
3264	1033	ta<date> Process files modified after <date> in YYYYMMDDHHMMSS format
3266	1033	tb<date> Process files modified before <date> in YYYYMMDDHHMMSS format
3268	1033	ts[m\|c\|a] Save or restore file time (modification, creation, access)
3270	1033	u Update files
3272	1033	v Create volumes with size autodetection or list all volumes
3274	1033	v List all volumes
3276	1033	v<size>[k,b] Create volumes with size=<size>1000 [1024, *1]
3278	1033	vd Erase disk contents before creating volume
3280	1033	ver[n] File version control
3282	1033	vn Use the old style volume naming scheme
3284	1033	vp Pause before each volume
3286	1033	w<path> Assign work directory
3288	1033	x<file> Exclude specified file
3290	1033	x@ Read file names to exclude from stdin
3292	1033	x@<list> Exclude files listed in specified list file
3294	1033	y Assume Yes on all queries
3296	1033	z[file] Read archive comment from file
3298	1033	ERROR: Bad archive %s
3300	1033	Enter password (will not be echoed)
3302	1033	Enter password (will not be echoed) for %s:
3304	1033	Reenter password:
3306	1033	ERROR: Passwords do not match
3308	1033	Write error in the file %s
3310	1033	Read error in the file %s
3312	1033	Seek error in the file %s
3314	1033	Cannot close the file %s
3316	1033	Not enough memory
3318	1033	Corrupt archive - use 'Repair' command
3320	1033	Program aborted
3322	1033	Cannot rename %s to %s
3324	1033	Cannot find volume %s
3326	1033	User break
3328	1033	Create next volume ?
3330	1033	Disk full. Insert next
3332	1033	Creating %sarchive %s
3334	1033	Insert disk with %s
3336	1033	Testing archive %s
3338	1033	Extracting from %s
3340	1033	Converting %s
3342	1033	Convert archives to SFX
3344	1033	Removing SFX module
3346	1033	%s is not SFX archive
3348	1033	%s is not RAR archive
3350	1033	%s is not the first volume
3352	1033	%s - cannot convert to SFX archive with old format
3354	1033	Cannot create %s
3356	1033	Cannot open %s
3358	1033	Unknown method in %s
3360	1033	Unsupported archive format. Please update RAR to a newer version.
3362	1033	OK
3364	1033	Done
3366	1033	Locking archive
3368	1033	ERROR: Cannot modify old format archive
3370	1033	ERROR: Locked archive
3372	1033	ERROR: Cannot modify volume
3374	1033	Evaluation copy. Please register.
3376	1033	Creating %sarchive %s
3378	1033	Updating %sarchive %s
3380	1033	solid
3382	1033	Adding %-58s
3384	1033	Updating %-58s
3386	1033	... %-58s
3388	1033	Deleting files %s...
3390	1033	and directories
3392	1033	Deleting %-30s
3394	1033	deleted
3396	1033	NOT DELETED
3398	1033	Clearing attributes...
3400	1033	Deleting directory %-30s
3402	1033	WARNING: Cannot open %d %s
3404	1033	files
3406	1033	file
3408	1033	WARNING: No files
3410	1033	%s: encrypted
3412	1033	Cannot modify solid archive containing encrypted files
3414	1033	Analyzing archived files:
3416	1033	Repacking archived files:
3418	1033	%-20s - checksum error
3420	1033	Testing archive %s
3422	1033	Extracting from %s
3424	1033	%s - use current password ?
3426	1033	Creating %-56s
3428	1033	Skipping %-56s
3430	1033	Testing %-56s
3432	1033	Extracting %-56s
3434	1033	... %-56s
3436	1033	Cannot create directory %s
3438	1033	------ Printing %s
3440	1033	Checksum error in the encrypted file %s. Corrupt file or wrong password.
3442	1033	No files to extract
3444	1033	All OK
3446	1033	Total errors: %ld
3448	1033	Would you like to replace the existing file %s %6s bytes, modified on %s with a new one %6s bytes, modified on %s
3450	1033	Overwrite %s ?
3452	1033	Enter new name:
3454	1033	Corrupt header is found
3456	1033	Main archive header is corrupt
3458	1033	%s - the file header is corrupt
3460	1033	The data recovery header is corrupt
3462	1033	Reading comment from stdin
3464	1033	Reading comment from %s
3466	1033	Deleting comment from %s
3468	1033	Adding comment to %s
3470	1033	Adding file comments
3472	1033	Reading comment for %s : %s from stdin
3474	1033	The archive comment is corrupt
3476	1033	Press 'Enter' to continue or 'Q' to quit:
3478	1033	Write comment to %s
3480	1033	Comment is not present
3482	1033	Deleting from %s
3484	1033	Deleting %s
3486	1033	Erasing empty archive %s
3488	1033	No files to delete
3490	1033	-------- %2d %s %d, archive %s
3492	1033	ERROR: Path too long
3494	1033	Archive
3496	1033	Details
3498	1033	solid
3500	1033	SFX
3502	1033	volume
3504	1033	recovery record
3506	1033	lock
3508	1033	encrypted
3510	1033	encrypted headers
3512	1033	Attributes Size Date Time Name
3514	1033	Attributes Size Packed Ratio Date Time Checksum Name
3516	1033	Name
3518	1033	Type
3520	1033	File
3522	1033	Directory
3524	1033	Unix symbolic link
3526	1033	Windows symbolic link
3528	1033	NTFS junction point
3530	1033	Hard link
3532	1033	File reference
3534	1033	NTFS alternate data stream
3536	1033	Target
3538	1033	Size
3540	1033	Packed size
3542	1033	Ratio
3544	1033	mtime
3546	1033	ctime
3548	1033	atime
3550	1033	Attributes
3552	1033	Flags
3554	1033	Compression
3556	1033	Host OS
3558	1033	File version
3560	1033	Service
3562	1033	Unix Owner/Group data: %-14s %-14s
3564	1033	NTFS security data
3566	1033	NTFS stream: %s
3568	1033	Unknown subheader type: 0x%04x
3570	1033	Comment:
3572	1033	Yes
3574	1033	No
3576	1033	0 files
3578	1033	Reconstructing %s
3580	1033	Building %s
3582	1033	Cannot repair archive with old format
3584	1033	Found %s
3586	1033	The archive header is corrupt. Mark archive as solid ?
3588	1033	No files found
3590	1033	Unexpected end of archive
3592	1033	Reconstruct archive structure ?
3594	1033	Searching for recovery record
3596	1033	Analyzing file data
3598	1033	Data recovery record not found
3600	1033	Data recovery record found
3602	1033	Sector %ld (offsets %lX...%lX) damaged
3604	1033	- data recovered
3606	1033	- cannot recover data
3608	1033	Adding data recovery record
3610	1033	Erasing contents of drive %c:
3612	1033	WARNING: Cannot get %s owner and group
3614	1033	WARNING: Cannot get owner %s ID
3616	1033	WARNING: Cannot get group %s ID
3618	1033	ERROR: %s group and owner data are corrupt
3620	1033	WARNING: Cannot set %s owner and group
3622	1033	WARNING: Cannot read symbolic link %s
3624	1033	WARNING: Symbolic link %s already exists
3626	1033	Cannot create %s. Retry ?
3628	1033	%-20s : packed data checksum error in volume %s
3630	1033	%s is read-only
3632	1033	WARNING: Cannot get %s security data
3634	1033	WARNING: Cannot set %s security data
3636	1033	ERROR: %s security data are corrupt
3638	1033	WARNING: Unknown format of %s security data
3640	1033	ERROR: %s stream data are corrupt
3642	1033	WARNING: Unknown format of %s stream data
3644	1033	ERROR: Invalid file name %s
3646	1033	Processing archive %s
3648	1033	WARNING: Attempting to correct the invalid file name
3650	1033	WARNING: You need to start extraction from a previous volume to unpack %s
3652	1033	ERROR: Unknown option: %s
3654	1033	ERROR: Corrupt data header found, ignored
3656	1033	WARNING: Unknown data header format, ignored
3658	1033	ERROR: Corrupt %s data block
3660	1033	Data header type: %s
3662	1033	Cannot read contents of %s
3664	1033	%s is not volume
3666	1033	ERROR: %s and %s belong to different sets
3668	1033	%d volumes missing
3670	1033	%d recovery volumes found
3672	1033	Nothing to reconstruct
3674	1033	Reconstruction impossible
3676	1033	Reconstructing...
3678	1033	Creating %s
3680	1033	Renaming %s to %s
3682	1033	Write error: only NTFS file system supports files larger than 4 GB
3684	1033	WARNING: FAT32 file system does not support 4 GB or larger files
3686	1033	WARNING: Cannot change attributes of %s
3688	1033	ERROR: default SFX module does not support RAR %d.%d archives
3690	1033	Cannot encrypt archive already containing encrypted files
3692	1033	Cannot email the file %s
3694	1033	RAR SFX archive
3696	1033	<Commands>
3698	1033	-x Extract from archive (default)
3700	1033	-t Test archive files
3702	1033	-v Verbosely list contents of archive
3704	1033	Total number of usual and recovery volumes must not exceed %d
3706	1033	volume %d
3708	1033	Cannot delete %s
3710	1033	Cannot move some files and folders to Recycle Bin
3712	1033	Calculating the checksum
3714	1033	WARNING: Too large SFX archive. Windows cannot run the executable file exceeding 4 GB.
3716	1033	Calculating checksums of all volumes.
3718	1033	ERROR: Not enough disk space for %s.
3720	1033	You may need a newer version of RAR.
3722	1033	Unknown encryption method in %s
3724	1033	The specified password is incorrect.
3726	1033	Corrupt %d bytes at %08x %08x
3728	1033	%u blocks are recovered, %u blocks are relocated
3730	1033	Recovery record is corrupt.
3732	1033	Testing the recovery record
3734	1033	Failed
3736	1033	%s switch is not supported for RAR %d.x archive format.
3738	1033	Searching for identical files
3740	1033	%d found.
3742	1033	Unknown extra field in %s.
3744	1033	Corrupt %s extra field in %s.
3746	1033	Cannot copy %s to %s.
3748	1033	You need to unpack the entire archive to create file reference entries.
3750	1033	Copying data
3752	1033	Cannot create symbolic link %s
3754	1033	Cannot create hard link %s
3756	1033	You need to unpack the link target first
3758	1033	You may need to run RAR as administrator
3760	1033	Not enough memory for %d MB compression dictionary, changed to %d MB.
3762	1033	Please use a smaller compression dictionary.

module_name	hint	function_name
KERNEL32.dll	225	DeviceIoControl
KERNEL32.dll	1144	SetFileTime
KERNEL32.dll	82	CloseHandle
KERNEL32.dll	129	CreateDirectoryW
KERNEL32.dll	1030	RemoveDirectoryW
KERNEL32.dll	143	CreateFileW
KERNEL32.dll	215	DeleteFileW
KERNEL32.dll	147	CreateHardLinkW
KERNEL32.dll	616	GetShortPathNameW
KERNEL32.dll	533	GetLongPathNameW
KERNEL32.dll	869	MoveFileW
KERNEL32.dll	963	ReadFile
KERNEL32.dll	349	FlushFileBuffers
KERNEL32.dll	1121	SetEndOfFile
KERNEL32.dll	1140	SetFilePointer
KERNEL32.dll	474	GetDriveTypeW
KERNEL32.dll	469	GetDiskFreeSpaceExW
KERNEL32.dll	1135	SetFileAttributesW
KERNEL32.dll	497	GetFileAttributesW
KERNEL32.dll	687	GetVolumeInformationW
KERNEL32.dll	291	ExpandEnvironmentStringsW
KERNEL32.dll	308	FindClose
KERNEL32.dll	319	FindFirstFileW
KERNEL32.dll	331	FindNextFileW
KERNEL32.dll	684	GetVersionExW
KERNEL32.dll	538	GetModuleFileNameW
KERNEL32.dll	453	GetCurrentDirectoryW
KERNEL32.dll	514	GetFullPathNameW
KERNEL32.dll	354	FoldStringW
KERNEL32.dll	1126	SetErrorMode
KERNEL32.dll	542	GetModuleHandleW
KERNEL32.dll	360	FreeLibrary
KERNEL32.dll	833	LoadLibraryW
KERNEL32.dll	832	LoadLibraryExW
KERNEL32.dll	588	GetProcAddress
KERNEL32.dll	455	GetCurrentProcessId
KERNEL32.dll	458	GetCurrentThread
KERNEL32.dll	454	GetCurrentProcess
KERNEL32.dll	1184	SetThreadExecutionState
KERNEL32.dll	631	GetSystemDirectoryW
KERNEL32.dll	1162	SetPriorityClass
KERNEL32.dll	589	GetProcessAffinityMask
KERNEL32.dll	180	CreateThread
KERNEL32.dll	746	InitializeCriticalSection
KERNEL32.dll	242	EnterCriticalSection
KERNEL32.dll	827	LeaveCriticalSection
KERNEL32.dll	210	DeleteCriticalSection
KERNEL32.dll	1127	SetEvent
KERNEL32.dll	1042	ResetEvent
KERNEL32.dll	1025	ReleaseSemaphore
KERNEL32.dll	1288	WaitForSingleObject
KERNEL32.dll	133	CreateEventW
KERNEL32.dll	174	CreateSemaphoreW
KERNEL32.dll	638	GetSystemTime
KERNEL32.dll	1228	SystemTimeToTzSpecificLocalTime
KERNEL32.dll	1246	TzSpecificLocalTimeToSystemTime
KERNEL32.dll	1227	SystemTimeToFileTime
KERNEL32.dll	298	FileTimeToLocalFileTime
KERNEL32.dll	840	LocalFileTimeToFileTime
KERNEL32.dll	299	FileTimeToSystemTime
KERNEL32.dll	376	GetCPInfo
KERNEL32.dll	768	IsDBCSLeadByte
KERNEL32.dll	873	MultiByteToWideChar
KERNEL32.dll	1312	WideCharToMultiByte
KERNEL32.dll	100	CompareStringW
KERNEL32.dll	1141	SetFilePointerEx
KERNEL32.dll	593	GetProcessHeap
KERNEL32.dll	732	HeapSize
KERNEL32.dll	1124	SetEnvironmentVariableA
KERNEL32.dll	359	FreeEnvironmentStringsW
KERNEL32.dll	481	GetEnvironmentStringsW
KERNEL32.dll	574	GetOEMCP
KERNEL32.dll	780	IsValidCodePage
KERNEL32.dll	329	FindNextFileA
KERNEL32.dll	1083	SetConsoleCtrlHandler
KERNEL32.dll	356	FormatMessageW
KERNEL32.dll	1216	Sleep
KERNEL32.dll	1152	SetLastError
KERNEL32.dll	520	GetLastError
KERNEL32.dll	1331	WriteConsoleW
KERNEL32.dll	961	ReadConsoleW
KERNEL32.dll	1099	SetConsoleMode
KERNEL32.dll	434	GetConsoleMode
KERNEL32.dll	1332	WriteFile
KERNEL32.dll	619	GetStdHandle
KERNEL32.dll	506	GetFileType
KERNEL32.dll	1190	SetThreadPriority
KERNEL32.dll	397	GetCommandLineW
KERNEL32.dll	313	FindFirstFileExA
KERNEL32.dll	1172	SetStdHandle
KERNEL32.dll	416	GetConsoleCP
KERNEL32.dll	1048	RtlCaptureContext
KERNEL32.dll	1055	RtlLookupFunctionEntry
KERNEL32.dll	1062	RtlVirtualUnwind
KERNEL32.dll	1250	UnhandledExceptionFilter
KERNEL32.dll	1203	SetUnhandledExceptionFilter
KERNEL32.dll	1230	TerminateProcess
KERNEL32.dll	774	IsProcessorFeaturePresent
KERNEL32.dll	1289	WaitForSingleObjectEx
KERNEL32.dll	770	IsDebuggerPresent
KERNEL32.dll	618	GetStartupInfoW
KERNEL32.dll	937	QueryPerformanceCounter
KERNEL32.dll	459	GetCurrentThreadId
KERNEL32.dll	640	GetSystemTimeAsFileTime
KERNEL32.dll	751	InitializeSListHead
KERNEL32.dll	1057	RtlPcToFileHeader
KERNEL32.dll	238	EncodePointer
KERNEL32.dll	948	RaiseException
KERNEL32.dll	1061	RtlUnwindEx
KERNEL32.dll	747	InitializeCriticalSectionAndSpinCount
KERNEL32.dll	1235	TlsAlloc
KERNEL32.dll	1237	TlsGetValue
KERNEL32.dll	1238	TlsSetValue
KERNEL32.dll	1236	TlsFree
KERNEL32.dll	287	ExitProcess
KERNEL32.dll	541	GetModuleHandleExW
KERNEL32.dll	938	QueryPerformanceFrequency
KERNEL32.dll	537	GetModuleFileNameA
KERNEL32.dll	396	GetCommandLineA
KERNEL32.dll	366	GetACP
KERNEL32.dll	727	HeapFree
KERNEL32.dll	723	HeapAlloc
KERNEL32.dll	730	HeapReAlloc
KERNEL32.dll	624	GetStringTypeW
KERNEL32.dll	815	LCMapStringW
USER32.dll	46	CharLowerW
USER32.dll	60	CharUpperW
USER32.dll	529	MessageBeep
USER32.dll	245	ExitWindowsEx
USER32.dll	55	CharToOemBuffW
USER32.dll	53	CharToOemA
USER32.dll	550	OemToCharBuffA
USER32.dll	549	OemToCharA
USER32.dll	510	LoadStringW
ADVAPI32.dll	288	FreeSid
ADVAPI32.dll	32	AllocateAndInitializeSid
ADVAPI32.dll	622	RegQueryValueExW
ADVAPI32.dll	609	RegOpenKeyExW
ADVAPI32.dll	560	RegCloseKey
ADVAPI32.dll	407	LookupPrivilegeValueW
ADVAPI32.dll	682	SetFileSecurityW
ADVAPI32.dll	31	AdjustTokenPrivileges
ADVAPI32.dll	503	OpenProcessToken
ADVAPI32.dll	81	CheckTokenMembership
SHELL32.dll	223	SHGetSpecialFolderLocation
SHELL32.dll	215	SHGetPathFromIDListW
SHELL32.dll	207	SHGetMalloc
POWRPROF.dll	87	SetSuspendState

StringTable 040904E4

ProductName	WinRAR
CompanyName	Alexander Roshal
FileDescription	Command line RAR
FileVersion	5.60.0
ProductVersion	5.60.0
InternalName	Command line RAR
LegalCopyright	Copyright © Alexander Roshal 1993-2018

VS_FIXEDFILEINFO

FileVersion	5.60.0.0
ProductVersion	5.60.0.0
StrucVersion	0x10000
FileFlagsMask	0
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Code Signing CA

serial: 529E3F9FCF7D58D520D607AB74395002

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl
            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
        4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
        6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
        11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
        d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
        40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
        3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
        7e:b6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
        18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
        dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
        33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
        c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
        bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
        29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
        0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
        69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
        13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
        15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
        88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
        eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
        3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
        1c:d8:04:75

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Code Signing CA
        Validity
            Not Before: Jun  2 00:00:00 2017 GMT
            Not After : Jun  1 23:59:59 2020 GMT
        Subject: C=DE/postalCode=10117, ST=Berlin, L=Berlin/street=Marienstrasse 12, O=win.rar GmbH, CN=win.rar GmbH
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:da:6c:b4:9e:19:d5:67:74:56:09:42:7e:60:35:
                    9a:43:05:0d:1b:23:c8:e4:cb:ff:8b:36:70:92:08:
                    29:57:4b:99:81:a5:a9:04:d8:21:77:01:b9:be:66:
                    0a:c8:a2:d5:2e:bd:cc:22:23:0d:96:da:69:e6:1f:
                    f7:0f:9c:99:73:b1:e9:5f:bc:ba:ff:d6:3d:43:65:
                    92:57:a2:ac:a4:9c:46:c2:6d:53:56:a3:4c:c3:29:
                    f4:c7:59:a5:49:f3:0a:e2:13:41:88:46:51:d2:bc:
                    ea:2e:07:6c:f2:b9:34:5a:47:88:17:2b:1f:7f:d9:
                    5d:7f:1f:4b:78:ab:bc:ec:1c:97:9a:66:5b:c6:78:
                    a3:41:54:ef:2d:c2:2b:b0:6c:8e:c2:0b:06:22:01:
                    2c:74:be:92:c8:e1:93:f8:d8:cb:aa:57:5b:9a:6c:
                    e0:0e:d1:d6:a4:58:0f:1a:0e:4b:e5:a9:10:f7:06:
                    3e:4b:c1:11:c4:b7:a1:8e:8f:7b:bd:ca:e6:19:10:
                    ef:fa:5e:20:4f:34:69:34:df:65:57:1c:34:76:41:
                    e9:d9:86:c6:be:b1:8e:a2:d0:b7:c0:5a:01:7d:d4:
                    c4:0f:a3:cc:1e:58:11:8c:66:b7:cd:05:43:09:82:
                    04:39:95:b6:5a:ca:ee:f2:64:63:cb:87:b0:af:16:
                    c7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                29:91:60:FF:8A:4D:FA:EB:F9:A6:6A:B8:CF:F9:E6:4B:BD:49:CE:12
            X509v3 Subject Key Identifier: 
                B7:B9:31:84:AF:37:A0:11:C8:7A:C3:9D:A7:F8:86:63:7C:6E:06:0D
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                Code Signing
            Netscape Cert Type: 
                Object Signing
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.1.3.2
                  CPS: https://secure.comodo.net/CPS
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.comodoca.com/COMODORSACodeSigningCA.crl
            Authority Information Access: 
                CA Issuers - URI:http://crt.comodoca.com/COMODORSACodeSigningCA.crt
                OCSP - URI:http://ocsp.comodoca.com
            X509v3 Subject Alternative Name: 
                email:info@win-rar.com
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        59:d3:91:0a:4e:a9:08:94:77:b9:95:0c:0f:4c:76:5a:b1:43:
        aa:d4:3f:70:e7:10:ce:84:44:61:e7:eb:86:76:b3:31:2e:c7:
        c6:79:04:85:9e:fe:e5:2d:db:ea:c9:54:a8:a8:f2:da:8b:23:
        ad:2c:d8:9f:b9:f4:a8:dc:49:0a:2c:e2:1d:a5:4f:42:75:ba:
        28:b8:e8:b1:40:65:98:4f:81:2a:fa:a9:04:2d:29:88:8f:c0:
        a7:f9:55:42:a2:cc:cc:f2:2b:95:a8:dd:59:6e:38:48:1c:06:
        b6:6f:8c:c8:02:f8:17:95:1e:ab:8d:7f:35:ab:e1:f0:6d:f6:
        81:75:5d:8b:8b:d3:15:a9:2b:21:fa:0b:37:39:42:58:f6:b8:
        fa:7e:c0:d3:6c:f3:ab:36:61:f5:bb:18:d0:d6:6f:e0:cf:b9:
        3d:0f:90:38:4d:07:7d:ca:be:aa:5a:d4:22:fe:2e:42:32:af:
        78:ee:26:39:ec:ca:f8:47:4b:c0:72:8e:03:4f:b3:45:a2:ee:
        58:07:b8:1b:ee:e7:ff:55:d2:f6:09:e3:7c:db:a4:ed:70:e0:
        4f:c1:12:0c:27:3b:86:2d:ed:96:ba:c1:01:78:b5:ee:99:e7:
        0e:f8:e3:14:1e:ea:3c:ae:5a:b6:f9:fd:60:d6:7a:c8:55:d4:
        97:59:70:9f

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority
        Validity
            Not Before: May  9 00:00:00 2013 GMT
            Not After : May  8 23:59:59 2028 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Code Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a6:98:90:63:77:91:34:7f:8a:d1:dd:e9:67:31:
                    11:eb:cc:1e:fd:31:1d:b3:b9:62:57:3f:93:bc:5b:
                    e3:9f:1e:24:32:11:27:6b:bc:51:91:a7:cf:9e:9e:
                    25:b3:5f:81:a8:18:0f:1d:1e:20:30:0e:fb:61:7b:
                    86:09:b3:e3:fd:a2:68:9d:1c:2c:9d:bf:72:e3:e4:
                    75:a0:e5:35:23:8e:c9:8a:ee:1a:0c:64:c7:d8:42:
                    a1:7b:b5:52:03:4b:3a:b0:8e:23:4b:4b:63:e0:22:
                    94:37:7b:d5:79:90:0a:14:18:51:2c:e6:fe:c1:12:
                    f0:1c:3f:61:61:0a:8c:a2:dc:f6:c3:30:aa:cd:28:
                    18:75:48:c1:79:5a:08:cd:bb:8c:55:8c:f7:d4:76:
                    90:3a:33:46:50:73:98:5c:f4:85:4a:6b:0f:80:dd:
                    5e:d6:bd:fd:a9:2f:c0:25:f5:f9:78:d7:8d:5f:10:
                    c2:44:55:3c:90:3c:31:46:cb:70:ae:07:a9:0a:e3:
                    af:c1:01:6f:90:1a:23:e2:5f:38:db:c6:08:5d:47:
                    b3:83:41:f0:2e:00:37:14:b9:12:aa:79:92:52:cd:
                    87:0f:7b:d8:62:29:a4:7e:30:bd:1b:b5:8c:72:b4:
                    48:f2:e3:e8:21:f9:5e:4c:62:79:8b:02:06:9f:7f:
                    d5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                BB:AF:7E:02:3D:FA:A6:F1:3C:84:8E:AD:EE:38:98:EC:D9:32:32:D4
            X509v3 Subject Key Identifier: 
                29:91:60:FF:8A:4D:FA:EB:F9:A6:6A:B8:CF:F9:E6:4B:BD:49:CE:12
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.comodoca.com/COMODORSACertificationAuthority.crl
            Authority Information Access: 
                CA Issuers - URI:http://crt.comodoca.com/COMODORSAAddTrustCA.crt
                OCSP - URI:http://ocsp.comodoca.com
    Signature Algorithm: sha384WithRSAEncryption
    Signature Value:
        02:3f:02:39:c3:ee:f8:ca:3b:89:de:0c:6d:4d:b1:f1:4e:92:
        4f:af:c2:38:2c:04:cc:c5:63:11:ab:09:63:af:ab:a2:d7:02:
        3f:cc:6f:19:c3:3d:d6:1a:08:94:ff:25:d8:a9:88:a7:2b:10:
        1a:e0:9b:b1:07:22:1a:51:1c:3a:d4:e1:e9:09:bf:e6:24:74:
        af:1e:7b:16:31:6e:23:ef:54:51:2d:52:02:e2:75:08:05:4c:
        f1:b7:51:e1:51:00:c6:87:f6:6c:ee:10:44:76:57:6a:f1:df:
        58:6b:21:aa:49:d4:7c:37:4e:bd:ff:b6:75:54:40:18:36:57:
        67:11:cd:4f:02:e4:fe:f3:da:fc:75:17:db:ec:b7:f7:65:09:
        23:49:1f:43:57:83:ea:7e:20:77:61:c8:4d:f2:bb:65:4d:a8:
        f7:85:45:07:af:7a:69:27:65:90:29:40:8b:df:7b:3a:51:39:
        8c:a8:1f:70:79:ad:6d:42:20:a2:cf:0c:6c:03:8c:4c:cd:73:
        07:94:e7:5a:8e:3a:04:ba:a2:a1:7c:1f:cb:63:3a:15:a7:d4:
        15:1b:a7:52:47:32:a9:f4:bf:64:47:d1:aa:1f:53:4e:32:30:
        73:c2:6f:b7:78:82:9d:5c:ff:46:bb:6b:22:1d:88:0b:f8:1b:
        aa:34:a6:fc:8c:f5:dd:7f:65:8c:8c:31:57:31:d0:36:ec:47:
        a1:cf:cb:8b:a8:ef:1c:18:58:c5:06:77:ca:4b:9b:51:af:4c:
        08:4a:7a:8f:e2:a3:52:e2:8e:8e:cc:26:e4:b2:d8:e5:38:c2:
        a8:ed:c6:81:9c:35:6b:a9:58:61:4a:0a:97:b4:4b:42:b6:55:
        9d:be:99:e7:70:6d:59:f8:6d:2a:0c:7f:19:60:5f:0c:9a:88:
        6c:30:ac:52:09:90:16:1b:ff:2b:9d:db:d0:20:ca:89:ea:28:
        7e:32:8e:19:df:7b:48:33:1e:d7:65:f8:ae:c9:f8:83:14:93:
        76:7d:64:d0:8e:ce:be:35:7d:ff:72:31:4d:9f:9e:bd:1e:6c:
        2f:a8:8f:0c:06:50:fb:8c:27:b3:76:c9:f4:e6:d7:c3:34:e2:
        8c:87:21:86:61:fe:bf:55:74:e1:21:77:03:0a:68:6c:bb:e4:
        c9:a9:e6:cf:59:25:eb:7c:ec:45:0e:79:66:68:e8:22:cd:b8:
        ef:98:85:4d:96:11:3c:09:8a:d0:7f:bc:28:28:13:fb:6a:ca:
        54:8d:92:5c:cd:c2:65:98:06:9e:ce:48:5b:d4:b5:37:93:46:
        41:7c:07:dd:cf:fa:43:ef:ba:67:61:ff:7d:49:e0:bb:30:7d:
        5c:80:e3:e6:16:39:4b:a7

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA1

0d 21 67 67 da 0b 1e aa da bd d1 c5 d2 ce 4e d7 |.!gg..........N.| 23 f4 df c6 |#... |

Certificates

Certificate #0
- 2
  - 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
  - RSA-SHA1: nil
  - Issuer
    - C: ZA
    - ST: Western Cape
    - L: Durbanville
    - O: Thawte
    - OU: Thawte Certification
    - CN: Thawte Timestamping CA
  - 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
  - Subject
    - C: US
    - O: Symantec Corporation
    - CN: Symantec Time Stamping Services CA - G2
  - #5
    - rsaEncryption: nil
    - B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
      2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
      C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
      74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
      6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
      2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
      61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
      99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
      79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
      9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
      DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
      27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
      27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
      E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
      48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
      64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71: 0x010001
  - #6
    - subjectKeyIdentifier:
```
5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
4c 80 2e dd                                       |L...            |
```
    - authorityInfoAccess
      - OCSP: http://ocsp.thawte.com
    - basicConstraints
      - true
      - true: 0
    - crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
    - extendedKeyUsage: timeStamping
    - keyUsage: true, 6
    - subjectAltName
      - CN: TimeStamp-2048-1
- RSA-SHA1:
```
03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
```
Certificate #1
- 2
  - 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
  - RSA-SHA1: nil
  - Issuer
    - C: US
    - O: Symantec Corporation
    - CN: Symantec Time Stamping Services CA - G2
  - 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
  - Subject
    - C: US
    - O: Symantec Corporation
    - CN: Symantec Time Stamping Services Signer - G4
  - #5
    - rsaEncryption: nil
    - A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
      61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
      53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
      0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
      C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
      64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
      CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
      28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
      92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
      CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
      D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
      2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
      74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
      3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
      8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
      83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD: 0x010001
  - X509v3 extensions
    - basicConstraints
      - true
      - nil
    - extendedKeyUsage: true, timeStamping
    - keyUsage: true, 0x80
    - authorityInfoAccess
      - #0
        OCSP: http://ts-ocsp.ws.symantec.com
        caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
    - crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
    - subjectAltName
      - CN: TimeStamp-2048-2
    - subjectKeyIdentifier:
```
46 c6 69 a3 0e 4a 14 1e  d5 4c da 52 63 17 3f 5e  |F.i..J...L.Rc.?^|
36 bc 0d e6                                       |6...            |
```
    - authorityKeyIdentifier:
```
5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
4c 80 2e dd                                       |L...            |
```
- RSA-SHA1:
```
78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
```
Certificate #2
- 2
  - 52:9E:3F:9F:CF:7D:58:D5:20:D6:07:AB:74:39:50:02
  - RSA-SHA256: nil
  - Issuer
    - C: GB
    - ST: Greater Manchester
    - L: Salford
    - O: COMODO CA Limited
    - CN: COMODO RSA Code Signing CA
  - 2017-06-02 00:00:00 UTC: 2020-06-01 23:59:59 UTC
  - Subject
    - C: DE
    - postalCode: 10117
    - ST: Berlin
    - L: Berlin
    - street: Marienstrasse 12
    - O: win.rar GmbH
    - CN: win.rar GmbH
  - #5
    - rsaEncryption: nil
    - DA:6C:B4:9E:19:D5:67:74:56:09:42:7E:60:35:9A:43:
      05:0D:1B:23:C8:E4:CB:FF:8B:36:70:92:08:29:57:4B:
      99:81:A5:A9:04:D8:21:77:01:B9:BE:66:0A:C8:A2:D5:
      2E:BD:CC:22:23:0D:96:DA:69:E6:1F:F7:0F:9C:99:73:
      B1:E9:5F:BC:BA:FF:D6:3D:43:65:92:57:A2:AC:A4:9C:
      46:C2:6D:53:56:A3:4C:C3:29:F4:C7:59:A5:49:F3:0A:
      E2:13:41:88:46:51:D2:BC:EA:2E:07:6C:F2:B9:34:5A:
      47:88:17:2B:1F:7F:D9:5D:7F:1F:4B:78:AB:BC:EC:1C:
      97:9A:66:5B:C6:78:A3:41:54:EF:2D:C2:2B:B0:6C:8E:
      C2:0B:06:22:01:2C:74:BE:92:C8:E1:93:F8:D8:CB:AA:
      57:5B:9A:6C:E0:0E:D1:D6:A4:58:0F:1A:0E:4B:E5:A9:
      10:F7:06:3E:4B:C1:11:C4:B7:A1:8E:8F:7B:BD:CA:E6:
      19:10:EF:FA:5E:20:4F:34:69:34:DF:65:57:1C:34:76:
      41:E9:D9:86:C6:BE:B1:8E:A2:D0:B7:C0:5A:01:7D:D4:
      C4:0F:A3:CC:1E:58:11:8C:66:B7:CD:05:43:09:82:04:
      39:95:B6:5A:CA:EE:F2:64:63:CB:87:B0:AF:16:C7:BB: 0x010001
  - #6
    - authorityKeyIdentifier:
```
29 91 60 ff 8a 4d fa eb  f9 a6 6a b8 cf f9 e6 4b  |).`..M....j....K|
bd 49 ce 12                                       |.I..            |
```
    - subjectKeyIdentifier:
```
b7 b9 31 84 af 37 a0 11  c8 7a c3 9d a7 f8 86 63  |..1..7...z.....c|
7c 6e 06 0d                                       ||n..            |
```
    - keyUsage: true, 0x80
    - basicConstraints
      - true
      - nil
    - extendedKeyUsage: codeSigning
    - nsCertType: 0x10
    - certificatePolicies
      - 1.3.6.1.4.1.6449.1.2.1.3.2
        id-qt-cps: https://secure.comodo.net/CPS
    - crlDistributionPoints: http://crl.comodoca.com/COMODORSACodeSigningCA.crl
    - authorityInfoAccess
      - #0
        caIssuers: http://crt.comodoca.com/COMODORSACodeSigningCA.crt
        OCSP: http://ocsp.comodoca.com
    - subjectAltName: info@win-rar.com
- RSA-SHA256:
```
59 d3 91 0a 4e a9 08 94  77 b9 95 0c 0f 4c 76 5a  |Y...N...w....LvZ|
b1 43 aa d4 3f 70 e7 10  ce 84 44 61 e7 eb 86 76  |.C..?p....Da...v|
b3 31 2e c7 c6 79 04 85  9e fe e5 2d db ea c9 54  |.1...y.....-...T|
a8 a8 f2 da 8b 23 ad 2c  d8 9f b9 f4 a8 dc 49 0a  |.....#.,......I.|
2c e2 1d a5 4f 42 75 ba  28 b8 e8 b1 40 65 98 4f  |,...OBu.(...@e.O|
81 2a fa a9 04 2d 29 88  8f c0 a7 f9 55 42 a2 cc  |.*...-).....UB..|
cc f2 2b 95 a8 dd 59 6e  38 48 1c 06 b6 6f 8c c8  |..+...Yn8H...o..|
02 f8 17 95 1e ab 8d 7f  35 ab e1 f0 6d f6 81 75  |........5...m..u|
5d 8b 8b d3 15 a9 2b 21  fa 0b 37 39 42 58 f6 b8  |].....+!..79BX..|
fa 7e c0 d3 6c f3 ab 36  61 f5 bb 18 d0 d6 6f e0  |.~..l..6a.....o.|
cf b9 3d 0f 90 38 4d 07  7d ca be aa 5a d4 22 fe  |..=..8M.}...Z.".|
2e 42 32 af 78 ee 26 39  ec ca f8 47 4b c0 72 8e  |.B2.x.&9...GK.r.|
03 4f b3 45 a2 ee 58 07  b8 1b ee e7 ff 55 d2 f6  |.O.E..X......U..|
09 e3 7c db a4 ed 70 e0  4f c1 12 0c 27 3b 86 2d  |..|...p.O...';.-|
ed 96 ba c1 01 78 b5 ee  99 e7 0e f8 e3 14 1e ea  |.....x..........|
3c ae 5a b6 f9 fd 60 d6  7a c8 55 d4 97 59 70 9f  |<.Z...`.z.U..Yp.|
```

Certificate #3

2
- 2E:7C:87:CC:0E:93:4A:52:FE:94:FD:1C:B7:CD:34:AF
- RSA-SHA384: nil
- Issuer
  - C: GB
  - ST: Greater Manchester
  - L: Salford
  - O: COMODO CA Limited
  - CN: COMODO RSA Certification Authority
- 2013-05-09 00:00:00 UTC: 2028-05-08 23:59:59 UTC
- Subject
  - C: GB
  - ST: Greater Manchester
  - L: Salford
  - O: COMODO CA Limited
  - CN: COMODO RSA Code Signing CA
- #5
  - rsaEncryption: nil
  - A6:98:90:63:77:91:34:7F:8A:D1:DD:E9:67:31:11:EB:
    CC:1E:FD:31:1D:B3:B9:62:57:3F:93:BC:5B:E3:9F:1E:
    24:32:11:27:6B:BC:51:91:A7:CF:9E:9E:25:B3:5F:81:
    A8:18:0F:1D:1E:20:30:0E:FB:61:7B:86:09:B3:E3:FD:
    A2:68:9D:1C:2C:9D:BF:72:E3:E4:75:A0:E5:35:23:8E:
    C9:8A:EE:1A:0C:64:C7:D8:42:A1:7B:B5:52:03:4B:3A:
    B0:8E:23:4B:4B:63:E0:22:94:37:7B:D5:79:90:0A:14:
    18:51:2C:E6:FE:C1:12:F0:1C:3F:61:61:0A:8C:A2:DC:
    F6:C3:30:AA:CD:28:18:75:48:C1:79:5A:08:CD:BB:8C:
    55:8C:F7:D4:76:90:3A:33:46:50:73:98:5C:F4:85:4A:
    6B:0F:80:DD:5E:D6:BD:FD:A9:2F:C0:25:F5:F9:78:D7:
    8D:5F:10:C2:44:55:3C:90:3C:31:46:CB:70:AE:07:A9:
    0A:E3:AF:C1:01:6F:90:1A:23:E2:5F:38:DB:C6:08:5D:
    47:B3:83:41:F0:2E:00:37:14:B9:12:AA:79:92:52:CD:
    87:0F:7B:D8:62:29:A4:7E:30:BD:1B:B5:8C:72:B4:48:
    F2:E3:E8:21:F9:5E:4C:62:79:8B:02:06:9F:7F:D5:0B: 0x010001
- #6
  - authorityKeyIdentifier:
```
bb af 7e 02 3d fa a6 f1  3c 84 8e ad ee 38 98 ec  |..~.=...<....8..|
d9 32 32 d4                                       |.22.            |
```
  - subjectKeyIdentifier:
```
29 91 60 ff 8a 4d fa eb  f9 a6 6a b8 cf f9 e6 4b  |).`..M....j....K|
bd 49 ce 12                                       |.I..            |
```
  - keyUsage: true, 0x86
  - basicConstraints
    - true
    - true: 0
  - extendedKeyUsage: codeSigning
  - certificatePolicies: anyPolicy
  - crlDistributionPoints: http://crl.comodoca.com/COMODORSACertificationAuthority.crl
  - authorityInfoAccess
    - #0
      - caIssuers: http://crt.comodoca.com/COMODORSAAddTrustCA.crt
      - OCSP: http://ocsp.comodoca.com

RSA-SHA384:

02 3f 02 39 c3 ee f8 ca  3b 89 de 0c 6d 4d b1 f1  |.?.9....;...mM..|
4e 92 4f af c2 38 2c 04  cc c5 63 11 ab 09 63 af  |N.O..8,...c...c.|
ab a2 d7 02 3f cc 6f 19  c3 3d d6 1a 08 94 ff 25  |....?.o..=.....%|
d8 a9 88 a7 2b 10 1a e0  9b b1 07 22 1a 51 1c 3a  |....+......".Q.:|
d4 e1 e9 09 bf e6 24 74  af 1e 7b 16 31 6e 23 ef  |......$t..{.1n#.|
54 51 2d 52 02 e2 75 08  05 4c f1 b7 51 e1 51 00  |TQ-R..u..L..Q.Q.|
c6 87 f6 6c ee 10 44 76  57 6a f1 df 58 6b 21 aa  |...l..DvWj..Xk!.|
49 d4 7c 37 4e bd ff b6  75 54 40 18 36 57 67 11  |I.|7N...uT@.6Wg.|
cd 4f 02 e4 fe f3 da fc  75 17 db ec b7 f7 65 09  |.O......u.....e.|
23 49 1f 43 57 83 ea 7e  20 77 61 c8 4d f2 bb 65  |#I.CW..~ wa.M..e|
4d a8 f7 85 45 07 af 7a  69 27 65 90 29 40 8b df  |M...E..zi'e.)@..|
7b 3a 51 39 8c a8 1f 70  79 ad 6d 42 20 a2 cf 0c  |{:Q9...py.mB ...|
6c 03 8c 4c cd 73 07 94  e7 5a 8e 3a 04 ba a2 a1  |l..L.s...Z.:....|
7c 1f cb 63 3a 15 a7 d4  15 1b a7 52 47 32 a9 f4  ||..c:......RG2..|
bf 64 47 d1 aa 1f 53 4e  32 30 73 c2 6f b7 78 82  |.dG...SN20s.o.x.|
9d 5c ff 46 bb 6b 22 1d  88 0b f8 1b aa 34 a6 fc  |.\.F.k"......4..|
8c f5 dd 7f 65 8c 8c 31  57 31 d0 36 ec 47 a1 cf  |....e..1W1.6.G..|
cb 8b a8 ef 1c 18 58 c5  06 77 ca 4b 9b 51 af 4c  |......X..w.K.Q.L|
08 4a 7a 8f e2 a3 52 e2  8e 8e cc 26 e4 b2 d8 e5  |.Jz...R....&....|
38 c2 a8 ed c6 81 9c 35  6b a9 58 61 4a 0a 97 b4  |8......5k.XaJ...|
4b 42 b6 55 9d be 99 e7  70 6d 59 f8 6d 2a 0c 7f  |KB.U....pmY.m*..|
19 60 5f 0c 9a 88 6c 30  ac 52 09 90 16 1b ff 2b  |.`_...l0.R.....+|
9d db d0 20 ca 89 ea 28  7e 32 8e 19 df 7b 48 33  |... ...(~2...{H3|
1e d7 65 f8 ae c9 f8 83  14 93 76 7d 64 d0 8e ce  |..e.......v}d...|
be 35 7d ff 72 31 4d 9f  9e bd 1e 6c 2f a8 8f 0c  |.5}.r1M....l/...|
06 50 fb 8c 27 b3 76 c9  f4 e6 d7 c3 34 e2 8c 87  |.P..'.v.....4...|
21 86 61 fe bf 55 74 e1  21 77 03 0a 68 6c bb e4  |!.a..Ut.!w..hl..|
c9 a9 e6 cf 59 25 eb 7c  ec 45 0e 79 66 68 e8 22  |....Y%.|.E.yfh."|
cd b8 ef 98 85 4d 96 11  3c 09 8a d0 7f bc 28 28  |.....M..<.....((|
13 fb 6a ca 54 8d 92 5c  cd c2 65 98 06 9e ce 48  |..j.T..\..e....H|
5b d4 b5 37 93 46 41 7c  07 dd cf fa 43 ef ba 67  |[..7.FA|....C..g|
61 ff 7d 49 e0 bb 30 7d  5c 80 e3 e6 16 39 4b a7  |a.}I..0}\....9K.|

Signer

1
unnamed
- #0
  - C: GB
  - ST: Greater Manchester
  - L: Salford
  - O: COMODO CA Limited
  - CN: COMODO RSA Code Signing CA
- 52:9E:3F:9F:CF:7D:58:D5:20:D6:07:AB:74:39:50:02
SHA1: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

ce 4e 62 0e 1e 84 1f 88  01 60 fd a7 b7 05 52 59  |.Nb......`....RY|
30 e0 a0 28                                       |0..(            |

rsaEncryption:

52 2f c5 fd a3 41 7f 02  5b 62 c3 22 59 b4 34 37  |R/...A..[b."Y.47|
9d 03 90 3f 2e 19 7b 92  a2 05 7e 6c 70 7d 8e 6f  |...?..{...~lp}.o|
43 e6 60 5a dd 6c 69 cf  70 d7 84 e6 84 b4 45 ee  |C.`Z.li.p.....E.|
4b c6 07 f1 c6 a2 1b 90  c5 8c a4 43 77 b3 92 2c  |K..........Cw..,|
08 f7 ea 2a 5e b0 41 4a  5e c7 f0 76 2a c5 17 13  |...*^.AJ^..v*...|
f2 f6 00 54 e4 ed fd 85  90 b2 04 3b cb 89 3b 1a  |...T.......;..;.|
48 77 15 b4 75 b0 e5 11  80 9f 2f 50 b0 32 cf b0  |Hw..u...../P.2..|
03 4e 05 75 c0 8d df ae  ae 48 02 be 81 71 8c 55  |.N.u.....H...q.U|
81 0c 6c 00 ad f6 98 39  f3 02 f0 0f c7 e2 e1 0f  |..l....9........|
10 d0 76 3f 01 69 c9 8a  27 37 3b 38 a4 de 69 a2  |..v?.i..'7;8..i.|
2b 5d 36 4b 50 ac 1d e4  58 c4 b8 4b 9d a3 c1 2e  |+]6KP...X..K....|
b1 cf ae 2f 8b 7c bb 56  66 8a f4 08 fc 40 ec bd  |.../.|.Vf....@..|
e5 0d 85 ae da 3f bb 27  18 9a 74 b6 b9 b3 5d ab  |.....?.'..t...].|
20 29 41 fe 74 6d 7d fb  93 7a 80 a2 6e f2 ba b0  | )A.tm}..z..n...|
d7 72 04 4e 45 6e 3d 2b  d2 8d 1e 8c b4 11 47 c9  |.r.NEn=+......G.|
ad 66 43 e0 8c f3 5f 59  2f a4 08 86 34 19 eb 9b  |.fC..._Y/...4...|

countersignature

unnamed
- #0
  - C: US
  - O: Symantec Corporation
  - CN: Symantec Time Stamping Services CA - G2
- 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
SHA1: nil

contentType: pkcs7-data
signingTime: 2018-06-24 15:05:02 UTC

messageDigest:

df 71 1a a4 27 f3 13 6a  48 f9 de 6e 39 f0 3a d9  |.q..'..jH..n9.:.|
ad 64 df df                                       |.d..            |

rsaEncryption:

57 9f 52 10 41 c5 52 a0  59 ab b3 3d 54 ce 5a b6  |W.R.A.R.Y..=T.Z.|
56 35 55 25 74 ec 4e 29  0a dd 93 35 b5 b6 70 1a  |V5U%t.N)...5..p.|
8c f7 8e af 99 f1 86 aa  9b 70 5f 3c 04 c7 3c 8f  |.........p_<..<.|
a1 8b 3b bf 79 ee 75 d8  b3 48 1f 38 8b a5 bb 94  |..;.y.u..H.8....|
d2 6e e9 07 f6 ff 2d 81  2d 46 8e d9 f8 f6 cf 00  |.n....-.-F......|
a6 ea 91 f6 b9 60 a9 02  23 cd 05 fb e5 9a 73 bd  |.....`..#.....s.|
e4 d1 dc 0a d7 9f b5 9d  13 41 9b b7 55 9b 1f 82  |.........A..U...|
12 66 51 db 34 de f9 66  69 7b a5 15 26 80 6b 80  |.fQ.4..fi{..&.k.|
13 0e a8 be 1f 1f 0c 5e  71 0a db 5d ff d5 66 2e  |.......^q..]..f.|
a2 4c cf 34 16 b2 1c c5  20 a5 ad 09 3e 50 2d b7  |.L.4.... ...>P-.|
0d 6a ee 7d 50 f7 39 19  65 7a 09 a8 1e 0b bc da  |.j.}P.9.ez......|
b2 02 7f 9c 6c 01 73 7c  a5 5c 5f 73 ac 00 ab be  |....l.s|.\_s....|
4b c7 6f ee 9c a1 05 f1  25 40 06 cc 7f 47 18 f7  |K.o.....%@...G..|
9f fb d6 15 2b 80 95 d9  03 ea b3 31 aa 00 b6 c2  |....+......1....|
6f 1e 75 28 67 5f 21 a5  6d 81 fa ee c7 c0 33 d6  |o.u(g_!.m.....3.|
b3 83 2d 12 a3 ef 56 cf  71 fe 18 c9 08 61 4e 76  |..-...V.q....aNv|

1.3.6.1.4.1.311.2.4.1

pkcs7-signedData

SHA256: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA256

2e b2 ce 20 4b 7b 57 9b 7f 1b 1b 0e 4e 6b 3d 38 |... K{W.....Nk=8| 73 b8 e5 00 21 6a f3 5f bc 68 50 0d c6 6e 33 14 |s...!j._.hP..n3.|

Certificates

Certificate #0
- 2
  - 52:9E:3F:9F:CF:7D:58:D5:20:D6:07:AB:74:39:50:02
  - RSA-SHA256: nil
  - Issuer
    - C: GB
    - ST: Greater Manchester
    - L: Salford
    - O: COMODO CA Limited
    - CN: COMODO RSA Code Signing CA
  - 2017-06-02 00:00:00 UTC: 2020-06-01 23:59:59 UTC
  - Subject
    - C: DE
    - postalCode: 10117
    - ST: Berlin
    - L: Berlin
    - street: Marienstrasse 12
    - O: win.rar GmbH
    - CN: win.rar GmbH
  - #5
    - rsaEncryption: nil
    - DA:6C:B4:9E:19:D5:67:74:56:09:42:7E:60:35:9A:43:
      05:0D:1B:23:C8:E4:CB:FF:8B:36:70:92:08:29:57:4B:
      99:81:A5:A9:04:D8:21:77:01:B9:BE:66:0A:C8:A2:D5:
      2E:BD:CC:22:23:0D:96:DA:69:E6:1F:F7:0F:9C:99:73:
      B1:E9:5F:BC:BA:FF:D6:3D:43:65:92:57:A2:AC:A4:9C:
      46:C2:6D:53:56:A3:4C:C3:29:F4:C7:59:A5:49:F3:0A:
      E2:13:41:88:46:51:D2:BC:EA:2E:07:6C:F2:B9:34:5A:
      47:88:17:2B:1F:7F:D9:5D:7F:1F:4B:78:AB:BC:EC:1C:
      97:9A:66:5B:C6:78:A3:41:54:EF:2D:C2:2B:B0:6C:8E:
      C2:0B:06:22:01:2C:74:BE:92:C8:E1:93:F8:D8:CB:AA:
      57:5B:9A:6C:E0:0E:D1:D6:A4:58:0F:1A:0E:4B:E5:A9:
      10:F7:06:3E:4B:C1:11:C4:B7:A1:8E:8F:7B:BD:CA:E6:
      19:10:EF:FA:5E:20:4F:34:69:34:DF:65:57:1C:34:76:
      41:E9:D9:86:C6:BE:B1:8E:A2:D0:B7:C0:5A:01:7D:D4:
      C4:0F:A3:CC:1E:58:11:8C:66:B7:CD:05:43:09:82:04:
      39:95:B6:5A:CA:EE:F2:64:63:CB:87:B0:AF:16:C7:BB: 0x010001
  - #6
    - authorityKeyIdentifier:
```
29 91 60 ff 8a 4d fa eb  f9 a6 6a b8 cf f9 e6 4b  |).`..M....j....K|
bd 49 ce 12                                       |.I..            |
```
    - subjectKeyIdentifier:
```
b7 b9 31 84 af 37 a0 11  c8 7a c3 9d a7 f8 86 63  |..1..7...z.....c|
7c 6e 06 0d                                       ||n..            |
```
    - keyUsage: true, 0x80
    - basicConstraints
      - true
      - nil
    - extendedKeyUsage: codeSigning
    - nsCertType: 0x10
    - certificatePolicies
      - 1.3.6.1.4.1.6449.1.2.1.3.2
        id-qt-cps: https://secure.comodo.net/CPS
    - crlDistributionPoints: http://crl.comodoca.com/COMODORSACodeSigningCA.crl
    - authorityInfoAccess
      - #0
        caIssuers: http://crt.comodoca.com/COMODORSACodeSigningCA.crt
        OCSP: http://ocsp.comodoca.com
    - subjectAltName: info@win-rar.com
- RSA-SHA256:
```
59 d3 91 0a 4e a9 08 94  77 b9 95 0c 0f 4c 76 5a  |Y...N...w....LvZ|
b1 43 aa d4 3f 70 e7 10  ce 84 44 61 e7 eb 86 76  |.C..?p....Da...v|
b3 31 2e c7 c6 79 04 85  9e fe e5 2d db ea c9 54  |.1...y.....-...T|
a8 a8 f2 da 8b 23 ad 2c  d8 9f b9 f4 a8 dc 49 0a  |.....#.,......I.|
2c e2 1d a5 4f 42 75 ba  28 b8 e8 b1 40 65 98 4f  |,...OBu.(...@e.O|
81 2a fa a9 04 2d 29 88  8f c0 a7 f9 55 42 a2 cc  |.*...-).....UB..|
cc f2 2b 95 a8 dd 59 6e  38 48 1c 06 b6 6f 8c c8  |..+...Yn8H...o..|
02 f8 17 95 1e ab 8d 7f  35 ab e1 f0 6d f6 81 75  |........5...m..u|
5d 8b 8b d3 15 a9 2b 21  fa 0b 37 39 42 58 f6 b8  |].....+!..79BX..|
fa 7e c0 d3 6c f3 ab 36  61 f5 bb 18 d0 d6 6f e0  |.~..l..6a.....o.|
cf b9 3d 0f 90 38 4d 07  7d ca be aa 5a d4 22 fe  |..=..8M.}...Z.".|
2e 42 32 af 78 ee 26 39  ec ca f8 47 4b c0 72 8e  |.B2.x.&9...GK.r.|
03 4f b3 45 a2 ee 58 07  b8 1b ee e7 ff 55 d2 f6  |.O.E..X......U..|
09 e3 7c db a4 ed 70 e0  4f c1 12 0c 27 3b 86 2d  |..|...p.O...';.-|
ed 96 ba c1 01 78 b5 ee  99 e7 0e f8 e3 14 1e ea  |.....x..........|
3c ae 5a b6 f9 fd 60 d6  7a c8 55 d4 97 59 70 9f  |<.Z...`.z.U..Yp.|
```

Certificate #1

2
- 2E:7C:87:CC:0E:93:4A:52:FE:94:FD:1C:B7:CD:34:AF
- RSA-SHA384: nil
- Issuer
  - C: GB
  - ST: Greater Manchester
  - L: Salford
  - O: COMODO CA Limited
  - CN: COMODO RSA Certification Authority
- 2013-05-09 00:00:00 UTC: 2028-05-08 23:59:59 UTC
- Subject
  - C: GB
  - ST: Greater Manchester
  - L: Salford
  - O: COMODO CA Limited
  - CN: COMODO RSA Code Signing CA
- #5
  - rsaEncryption: nil
  - A6:98:90:63:77:91:34:7F:8A:D1:DD:E9:67:31:11:EB:
    CC:1E:FD:31:1D:B3:B9:62:57:3F:93:BC:5B:E3:9F:1E:
    24:32:11:27:6B:BC:51:91:A7:CF:9E:9E:25:B3:5F:81:
    A8:18:0F:1D:1E:20:30:0E:FB:61:7B:86:09:B3:E3:FD:
    A2:68:9D:1C:2C:9D:BF:72:E3:E4:75:A0:E5:35:23:8E:
    C9:8A:EE:1A:0C:64:C7:D8:42:A1:7B:B5:52:03:4B:3A:
    B0:8E:23:4B:4B:63:E0:22:94:37:7B:D5:79:90:0A:14:
    18:51:2C:E6:FE:C1:12:F0:1C:3F:61:61:0A:8C:A2:DC:
    F6:C3:30:AA:CD:28:18:75:48:C1:79:5A:08:CD:BB:8C:
    55:8C:F7:D4:76:90:3A:33:46:50:73:98:5C:F4:85:4A:
    6B:0F:80:DD:5E:D6:BD:FD:A9:2F:C0:25:F5:F9:78:D7:
    8D:5F:10:C2:44:55:3C:90:3C:31:46:CB:70:AE:07:A9:
    0A:E3:AF:C1:01:6F:90:1A:23:E2:5F:38:DB:C6:08:5D:
    47:B3:83:41:F0:2E:00:37:14:B9:12:AA:79:92:52:CD:
    87:0F:7B:D8:62:29:A4:7E:30:BD:1B:B5:8C:72:B4:48:
    F2:E3:E8:21:F9:5E:4C:62:79:8B:02:06:9F:7F:D5:0B: 0x010001
- #6
  - authorityKeyIdentifier:
```
bb af 7e 02 3d fa a6 f1  3c 84 8e ad ee 38 98 ec  |..~.=...<....8..|
d9 32 32 d4                                       |.22.            |
```
  - subjectKeyIdentifier:
```
29 91 60 ff 8a 4d fa eb  f9 a6 6a b8 cf f9 e6 4b  |).`..M....j....K|
bd 49 ce 12                                       |.I..            |
```
  - keyUsage: true, 0x86
  - basicConstraints
    - true
    - true: 0
  - extendedKeyUsage: codeSigning
  - certificatePolicies: anyPolicy
  - crlDistributionPoints: http://crl.comodoca.com/COMODORSACertificationAuthority.crl
  - authorityInfoAccess
    - #0
      - caIssuers: http://crt.comodoca.com/COMODORSAAddTrustCA.crt
      - OCSP: http://ocsp.comodoca.com

RSA-SHA384:

02 3f 02 39 c3 ee f8 ca  3b 89 de 0c 6d 4d b1 f1  |.?.9....;...mM..|
4e 92 4f af c2 38 2c 04  cc c5 63 11 ab 09 63 af  |N.O..8,...c...c.|
ab a2 d7 02 3f cc 6f 19  c3 3d d6 1a 08 94 ff 25  |....?.o..=.....%|
d8 a9 88 a7 2b 10 1a e0  9b b1 07 22 1a 51 1c 3a  |....+......".Q.:|
d4 e1 e9 09 bf e6 24 74  af 1e 7b 16 31 6e 23 ef  |......$t..{.1n#.|
54 51 2d 52 02 e2 75 08  05 4c f1 b7 51 e1 51 00  |TQ-R..u..L..Q.Q.|
c6 87 f6 6c ee 10 44 76  57 6a f1 df 58 6b 21 aa  |...l..DvWj..Xk!.|
49 d4 7c 37 4e bd ff b6  75 54 40 18 36 57 67 11  |I.|7N...uT@.6Wg.|
cd 4f 02 e4 fe f3 da fc  75 17 db ec b7 f7 65 09  |.O......u.....e.|
23 49 1f 43 57 83 ea 7e  20 77 61 c8 4d f2 bb 65  |#I.CW..~ wa.M..e|
4d a8 f7 85 45 07 af 7a  69 27 65 90 29 40 8b df  |M...E..zi'e.)@..|
7b 3a 51 39 8c a8 1f 70  79 ad 6d 42 20 a2 cf 0c  |{:Q9...py.mB ...|
6c 03 8c 4c cd 73 07 94  e7 5a 8e 3a 04 ba a2 a1  |l..L.s...Z.:....|
7c 1f cb 63 3a 15 a7 d4  15 1b a7 52 47 32 a9 f4  ||..c:......RG2..|
bf 64 47 d1 aa 1f 53 4e  32 30 73 c2 6f b7 78 82  |.dG...SN20s.o.x.|
9d 5c ff 46 bb 6b 22 1d  88 0b f8 1b aa 34 a6 fc  |.\.F.k"......4..|
8c f5 dd 7f 65 8c 8c 31  57 31 d0 36 ec 47 a1 cf  |....e..1W1.6.G..|
cb 8b a8 ef 1c 18 58 c5  06 77 ca 4b 9b 51 af 4c  |......X..w.K.Q.L|
08 4a 7a 8f e2 a3 52 e2  8e 8e cc 26 e4 b2 d8 e5  |.Jz...R....&....|
38 c2 a8 ed c6 81 9c 35  6b a9 58 61 4a 0a 97 b4  |8......5k.XaJ...|
4b 42 b6 55 9d be 99 e7  70 6d 59 f8 6d 2a 0c 7f  |KB.U....pmY.m*..|
19 60 5f 0c 9a 88 6c 30  ac 52 09 90 16 1b ff 2b  |.`_...l0.R.....+|
9d db d0 20 ca 89 ea 28  7e 32 8e 19 df 7b 48 33  |... ...(~2...{H3|
1e d7 65 f8 ae c9 f8 83  14 93 76 7d 64 d0 8e ce  |..e.......v}d...|
be 35 7d ff 72 31 4d 9f  9e bd 1e 6c 2f a8 8f 0c  |.5}.r1M....l/...|
06 50 fb 8c 27 b3 76 c9  f4 e6 d7 c3 34 e2 8c 87  |.P..'.v.....4...|
21 86 61 fe bf 55 74 e1  21 77 03 0a 68 6c bb e4  |!.a..Ut.!w..hl..|
c9 a9 e6 cf 59 25 eb 7c  ec 45 0e 79 66 68 e8 22  |....Y%.|.E.yfh."|
cd b8 ef 98 85 4d 96 11  3c 09 8a d0 7f bc 28 28  |.....M..<.....((|
13 fb 6a ca 54 8d 92 5c  cd c2 65 98 06 9e ce 48  |..j.T..\..e....H|
5b d4 b5 37 93 46 41 7c  07 dd cf fa 43 ef ba 67  |[..7.FA|....C..g|
61 ff 7d 49 e0 bb 30 7d  5c 80 e3 e6 16 39 4b a7  |a.}I..0}\....9K.|

Signer

1
unnamed
- #0
  - C: GB
  - ST: Greater Manchester
  - L: Salford
  - O: COMODO CA Limited
  - CN: COMODO RSA Code Signing CA
- 52:9E:3F:9F:CF:7D:58:D5:20:D6:07:AB:74:39:50:02
SHA256: nil

1.3.6.1.4.1.311.2.1.12
- nil
1.2.840.113549.1.9.25.4: 1
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

95 37 55 af 46 b7 69 49  ab 19 17 03 48 97 91 f4  |.7U.F.iI....H...|
d6 97 55 98 f2 0c 9d 2b  a3 65 1b bd 43 ca 51 95  |..U....+.e..C.Q.|

rsaEncryption:

52 3b 75 b4 d6 0d 69 bd  40 36 87 cd f7 3d 49 f0  |R;u...i.@6...=I.|
61 dc a7 e4 dc 36 17 74  c5 4b ef 7c 97 e5 cd c7  |a....6.t.K.|....|
60 5e ed 0a 57 cc 53 29  81 da b3 23 42 1d 59 29  |`^..W.S)...#B.Y)|
21 5f 42 a2 10 7d 98 2f  de a3 21 a2 5e 1c ea 65  |!_B..}./..!.^..e|
62 88 b7 4c 68 29 ee bc  d2 88 5f 8e 57 b7 47 24  |b..Lh)...._.W.G$|
2e f8 f2 ba 4e 3c 4e c5  9f 0c 84 71 34 c2 bc ca  |....N1.3.6.1.4.1.311.3.3.1pkcs7-signedData3SHA256
id-smime-ct-TSTInfo12.16.840.1.113733.1.7.23.3
SHA25696 7a 0e 73 81 e8 44 b5  de bf 84 1d 0c 19 36 85  |.z.s..D.......6.|
fc 54 30 a9 d1 94 48 d4  e1 e6 a8 fc 3f 93 31 bb  |.T0...H.....?.1.|
03:7B:17:56:C7:2D:60:2A:E8:DE:4A:26:A4:26:BF:0C:
C3:EC:88:AF
2018-06-24 15:05:04 UTC
0x1E
#5C: US
O: Symantec Corporation
OU: Symantec Trust Network
CN: Symantec SHA256 TimeStamping Signer - G2
CertificatesCertificate #027B:05:B1:D4:49:68:51:44:F7:C9:89:D2:9C:19:9D:12
RSA-SHA256: nil
IssuerC: US
O: VeriSign, Inc.
OU: VeriSign Trust Network
OU: (c) 2008 VeriSign, Inc. - For authorized use only
CN: VeriSign Universal Root Certification Authority
2016-01-12 00:00:00 UTC: 2031-01-11 23:59:59 UTC
SubjectC: US
O: Symantec Corporation
OU: Symantec Trust Network
CN: Symantec SHA256 TimeStamping CA
#5rsaEncryption: nil
BB:59:9D:59:55:4F:9D:8C:72:5D:1A:81:A2:EB:55:F3:
B0:01:AD:3C:71:AC:32:8F:05:6B:86:9A:27:00:32:97:
6A:4D:C9:64:14:4B:29:BB:C2:D9:29:B9:2E:EC:63:B3:
E1:CF:3F:0B:56:90:F8:62:1B:7E:EB:A6:07:E2:DE:7F:
5E:6D:40:38:D4:91:06:E7:41:7C:79:1C:CB:CB:AD:1B:
BF:D8:95:91:F3:F0:EE:6C:F8:AD:96:39:2E:7F:C1:27:
B8:78:39:C5:84:A5:ED:ED:AF:87:8E:CE:8D:C7:6D:EA:
D2:98:B5:3A:1F:1E:39:9D:C3:F4:9A:A8:F4:84:E1:C4:
D1:7C:71:C6:06:29:B4:3F:E4:83:0D:26:C3:7B:08:3E:
4D:F9:0A:B7:33:49:FF:CA:3B:D4:F5:B2:9B:4B:E1:88:
99:1A:F5:C0:E9:33:14:D6:DF:C7:80:DB:91:EE:FE:BC:
92:57:72:77:F4:CD:A8:CC:FE:09:F5:93:37:BE:95:88:
6A:C5:DC:F4:B1:4B:D4:CE:E8:09:91:5F:B5:84:79:35:
8A:78:AC:19:32:8F:23:C1:32:41:1B:59:0E:A9:3E:B1:
CC:F9:D6:2B:EF:B7:D8:E4:D5:1D:6D:11:3A:92:F6:93:
C9:9C:E3:48:EE:BB:53:0E:D4:36:97:86:78:C5:A1:37: 0x010001
#6keyUsage: true, 6
basicConstraintstrue
true: 0
certificatePolicies2.16.840.1.113733.1.7.23.3#0id-qt-cps: https://d.symcb.com/cps
id-qt-unotice: https://d.symcb.com/rpa
authorityInfoAccessOCSP: http://s.symcd.com
crlDistributionPoints: http://s.symcb.com/universal-root.crl
extendedKeyUsage: timeStamping
subjectAltNameCN: TimeStamp-2048-3
subjectKeyIdentifier: af 63 d6 ca a3 4e 85 72  e0 a7 bc 41 f3 29 a2 38  |.c...N.r...A.).8|
7f 80 75 62                                       |..ub            |
authorityKeyIdentifier: b6 77 fa 69 48 47 9f 53  12 d5 c2 ea 07 32 76 07  |.w.iHG.S.....2v.|
d1 97 07 19                                       |....            |
RSA-SHA256: 75 ea b0 2d d5 34 19 5c  32 45 fe 0e e1 d4 4f a6  |u..-.4.\2E....O.|
78 c1 6f d7 ea dd dc 4f  f3 a1 c8 81 88 f7 a7 8f  |x.o....O........|
15 e6 40 29 ad e6 5d f4  a2 d9 56 64 84 71 30 2a  |..@)..]...Vd.q0*|
dd 1e 61 17 66 20 56 06  98 19 8d 5d 71 f2 f8 97  |..a.f V....]q...|
bc 09 fd 1c 91 47 c9 e2  e8 8d 03 fb cc 90 2f d6  |.....G......../.|
0a 6c 4e 33 ec d6 b4 93  c8 4c 90 63 48 39 40 21  |.lN3.....L.cH9@!|
c4 dd d6 6e 89 98 3c b5  98 97 e8 a9 06 b7 09 c9  |...n..<.........|
8f 53 57 41 90 2f e1 1e  4d 4e dc ca 10 78 6c 42  |.SWA./..MN...xlB|
6e f0 b6 c5 f8 61 5c 52  f5 4e f6 6b 8d f7 4a 7a  |n....a\R.N.k..Jz|
be f3 cd fd 03 d7 d9 f6  03 a8 0f e3 53 f7 0a 75  |............S..u|
ec c6 75 2e aa 66 85 04  99 b7 f8 06 57 e1 c6 0e  |..u..f......W...|
f6 e8 af da ec 9b 18 1f  aa b9 e3 3a 00 bf ce 8a  |...........:....|
94 cb 01 db 9e c7 38 bb  0f 52 ab d1 e3 94 03 60  |......8..R.....`|
0a 4d a0 fe 27 6d 14 32  fc 3f 97 40 e1 bf 99 89  |.M..'m.2.?.@....|
db e4 39 14 bd da e4 d3  c3 ea 2b 5a b3 95 58 55  |..9.......+Z..XU|
04 7d c7 9a ec 23 03 8d  85 2a d2 ff ae a9 61 81  |.}...#...*....a.|
Certificate #1254:58:F2:AA:D7:41:D6:44:BC:84:A9:7B:A0:96:52:E6
RSA-SHA256: nil
IssuerC: US
O: Symantec Corporation
OU: Symantec Trust Network
CN: Symantec SHA256 TimeStamping CA
2017-01-02 00:00:00 UTC: 2028-04-01 23:59:59 UTC
SubjectC: US
O: Symantec Corporation
OU: Symantec Trust Network
CN: Symantec SHA256 TimeStamping Signer - G2
#5rsaEncryption: nil
99:F3:FC:D8:04:09:03:86:F9:D7:5C:A6:93:C0:42:7C:
EA:7C:63:CF:5D:00:E2:8E:F3:C0:90:DF:8F:29:F5:18:
EA:94:B7:92:E5:D7:B0:A0:73:81:E8:E9:0A:9B:4A:7C:
01:FF:9D:8F:A4:39:A7:0E:EA:45:F4:22:0C:3A:70:ED:
39:45:8B:E4:C5:1B:5C:F0:45:68:46:24:05:63:76:9B:
1C:FC:9E:6C:2A:B1:56:E5:8A:7F:52:71:AE:F2:35:D5:
46:23:06:1C:CF:48:2D:1D:B4:CD:B8:D9:76:23:8E:1C:
FF:3E:BF:BB:06:5C:69:07:A6:65:0E:F8:5E:AE:7D:2E:
ED:4D:AE:35:EF:C9:D7:00:42:FD:28:95:0E:9F:5D:72:
42:09:BC:C3:DA:44:D2:ED:CC:47:84:E4:FC:CA:2D:AC:
58:BE:AE:F7:AE:D9:44:0D:08:B7:C2:77:D6:1A:43:70:
D1:6E:03:DE:52:92:C4:10:08:71:D9:BA:22:55:F2:1F:
BC:ED:9B:9D:3B:E2:5E:1D:4C:83:FF:97:0F:7B:0B:E7:
55:83:4E:D2:0D:EB:BE:D7:EC:AE:6E:47:B9:9F:DF:A5:
D6:51:BC:04:55:ED:FF:27:70:4C:C9:ED:2A:4B:13:E1:
B1:B9:4C:0F:C9:01:EE:55:65:5F:69:02:78:66:CB:3F: 0x010001
X509v3 extensionsbasicConstraintstrue
nil
certificatePolicies2.16.840.1.113733.1.7.23.3#0id-qt-cps: https://d.symcb.com/cps
id-qt-unotice: https://d.symcb.com/rpa
crlDistributionPoints: http://ts-crl.ws.symantec.com/sha256-tss-ca.crl
extendedKeyUsage: true, timeStamping
keyUsage: true, 0x80
authorityInfoAccess#0OCSP: http://ts-ocsp.ws.symantec.com
caIssuers: http://ts-aia.ws.symantec.com/sha256-tss-ca.cer
subjectAltNameCN: TimeStamp-2048-5
subjectKeyIdentifier: 09 b5 c1 fe 96 72 97 29  43 9a c9 e0 02 ba ae f8  |.....r.)C.......|
fd 2f ba f6                                       |./..            |
authorityKeyIdentifier: af 63 d6 ca a3 4e 85 72  e0 a7 bc 41 f3 29 a2 38  |.c...N.r...A.).8|
7f 80 75 62                                       |..ub            |
RSA-SHA256: 17 b3 0a 88 e9 5c 5a 5e  20 6b 3b 0a 15 b2 6c c5  |.....\Z^ k;...l.|
a9 8a 32 87 d3 b1 f4 1c  53 ae 85 be 3f 9b ff d7  |..2.....S...?...|
bc b7 94 85 b4 c7 52 7e  94 e8 bd ed 61 b2 d4 a7  |......R~....a...|
99 e4 c3 c9 93 c1 35 3d  0b e8 68 0a 5d 56 98 bd  |......5=..h.]V..|
b1 22 3b d1 44 7a d7 bf  f0 6d 51 32 8a d5 23 df  |.";.Dz...mQ2..#.|
38 01 37 f6 e2 53 2b 7a  2b 11 8f b7 4d 6c 7a 33  |8.7..S+z+...Mlz3|
03 1b 7c 6b 09 94 17 bb  e4 db 58 d4 21 13 65 e7  |..|k......X.!.e.|
ec d1 25 ca 2c 75 9a 9c  7f fc c9 bb 2a 68 ab c4  |..%.,u......*h..|
7d b4 cf a3 c9 6c a7 d9  c4 00 9c 89 0a 77 91 f4  |}....l.......w..|
4d a2 fb 31 3b 86 6e f6  e6 1f 50 03 86 9b bf cb  |M..1;.n...P.....|
42 ab e6 76 9b 72 5a 11  01 8a c6 ef a5 6f 95 e7  |B..v.rZ......o..|
dd ae ba e6 22 65 f0 18  59 1b 11 c9 cd 80 b7 d8  |...."e..Y.......|
97 47 1f 42 08 f8 ac 71  1f b0 46 53 b3 d4 b2 d5  |.G.B...q..FS....|
a3 ab 50 75 48 12 17 82  ad cf e0 41 4f 32 7e cd  |..PuH......AO2~.|
95 1c bf 91 8a 08 3d a4  a7 67 02 96 df 24 4c a5  |......=..g...$L.|
d0 41 c0 82 60 a3 8a 17  32 4b d3 bc cf a4 b4 8c  |.A..`...2K......|
1unnamed#0C: US
O: Symantec Corporation
OU: Symantec Trust Network
CN: Symantec SHA256 TimeStamping CA
54:58:F2:AA:D7:41:D6:44:BC:84:A9:7B:A0:96:52:E6
SHA256
#2contentType: id-smime-ct-TSTInfo
signingTime: 2018-06-24 15:05:04 UTC
messageDigest: c4 c8 1d 17 36 a7 da d6  07 54 86 67 1c 15 30 07  |....6....T.g..0.|
0c ac 99 bd ff e2 c7 da  44 1e be f0 c5 73 d2 2d  |........D....s.-|
id-smime-aa-signingCertificateV2: cf 7a c1 7a d0 47 ec d5  fd c3 68 22 03 1b 12 d4  |.z.z.G....h"....|
ef 07 8b 6f 2b 4c 5e 6b  a4 1f 8f f2 cf 4b ad 67  |...o+L^k.....K.g|
rsaEncryption
32 86 87 d5 97 af 43 e4  91 3c 1a 02 72 7e a5 b5  |2.....C..<..r~..|
4c 18 5c ff 43 dd 09 a2  a8 22 4e d5 cc b1 e0 1c  |L.\.C...."N.....|
03 87 13 55 fd 67 8d 31  6f 78 25 9a ee d1 e8 61  |...U.g.1ox%....a|
38 d8 d8 41 d6 b7 01 d0  dc 54 de aa 66 01 e4 14  |8..A.....T..f...|
07 98 f2 86 2a 20 7c 6e  0f 9f f7 d2 39 60 68 10  |....* |n....9`h.|
7c 6b fe 28 d6 7d 1d 4a  d5 ae 58 34 93 0d 7e 3a  ||k.(.}.J..X4..~:|
14 76 d2 50 6b 90 45 6f  1b 65 6f 20 42 7e 11 3b  |.v.Pk.Eo.eo B~.;|
a9 3a 09 01 04 3e 67 72  63 ef 9e 99 66 45 f8 22  |.:...>grc...fE."|
ff 5e a7 e8 bc ca 3c bc  68 bf e0 53 45 99 9a 16  |.^....<.h..SE...|
ce 19 2a 6a a9 22 53 e9  21 e2 a3 46 3f e6 82 9a  |..*j."S.!..F?...|
26 d4 c3 19 50 e6 ed 6a  2a fe cf 09 3e bf 44 9e  |&...P..j*...>.D.|
cf f7 a2 be 6a ed d6 90  c7 16 5d cf c1 38 f6 84  |....j.....]..8..|
58 be 0c 84 b3 f4 31 1d  52 5e 46 38 b0 f9 35 ad  |X.....1.R^F8..5.|
02 e8 98 e9 ac bd 39 54  61 91 59 d3 9d 2a 49 e6  |......9Ta.Y..*I.|
c7 40 5e 6d e5 16 78 4e  d1 31 58 38 2c a1 d8 65  |.@^m..xN.1X8,..e|
d3 6c f4 bb bf 55 4c 42  22 7d a4 3c 02 8d 0e 82  |.l...ULB"}.<....|

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	392968	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x67e80

UnRAR.exe-

MZ Header

Rich Header

DOS stub

PE Header

Sections

Data Directory

TLS

StringTable 040904E4

VS_FIXEDFILEINFO

Signers (1)

Certificates (4)

UnRAR.exe
-