filenamePfCheckService.exe
size998688 (0xf3d20)
md557d93050fbd84598f28b2d09e064b6b2
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x50
blocks_in_file2
num_relocs0
header_paragraphs4
min_extra_paragraphs0xf
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0x1a
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

SignaturePE
Machine0x14c
NumberOfSections9
TimeDateStamp0x525ca7de
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x818e
Magic0x10b
LinkerVersion2.25
SizeOfCode0x71600
SizeOfInitializedData0x80a00
SizeOfUninitializedData0
AddressOfEntryPoint0x72960
BaseOfCode0x1000
BaseOfData0x73000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0xfd000
SizeOfHeaders0x400
CheckSum0xf4172
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x4000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

Borland Delphi v6.0 - v7.0

Sections

namevavsizeraw sizeflags
.text0x10000x7099c0x70a00R-X CODE
.itext0x720000xb300xc00R-X CODE
.data0x730000x20280x2200RW- IDATA
.bss0x760000x5c380RW-
.idata0x7c0000x2dd80x2e00RW- IDATA
.tls0x7f0000x3c0RW-
.rdata0x800000x180x200R-- IDATA
.reloc0x810000x7da80x7e00R-- IDATA DISCARDABLE
.rsrc0x890000x73a000x73a00R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x7c0000x2dd8
RESOURCE0x890000x73a00
EXCEPTION00
SECURITY0xf24000x1920
BASERELOC0x810000x7da8
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS0x800000x18
LOAD_CONFIG00
Bound_IAT00
IAT0x7c87c0x700
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x47f0000x47f03c0x4737b80x48001000
typenamesizecp
CURSOR#13080
CURSOR#23080
CURSOR#33080
CURSOR#43080
CURSOR#53080
CURSOR#63080
CURSOR#73080
BITMAPBBABORT4640
BITMAPBBALL4840
BITMAPBBCANCEL4640
BITMAPBBCLOSE4640
BITMAPBBHELP4640
BITMAPBBIGNORE4640
BITMAPBBNO4640
BITMAPBBOK4640
BITMAPBBRETRY4640
BITMAPBBYES4640
BITMAPCDROM1920
BITMAPCLOSEDFOLDER2240
BITMAPCURRENTFOLDER2240
BITMAPEXECUTABLE2240
BITMAPFLOPPY1920
BITMAPHARD1920
BITMAPKNOWNFILE2240
BITMAPNETWORK1920
BITMAPOPENFOLDER2240
BITMAPPREVIEWGLYPH2320
BITMAPRAM1920
BITMAPUNKNOWNFILE2240
ICON#12703760
ICON#2676240
ICON#396400
ICON#442640
ICON#524400
ICON#611280
DIALOGDLGTEMPLATE820
DIALOGTEXTFILEDLG820
STRING#40826840
STRING#40831560
STRING#40842320
STRING#40853280
STRING#408611720
STRING#40878160
STRING#408810160
STRING#40898560
STRING#409010160
STRING#40913720
STRING#40922040
STRING#40934760
STRING#40949240
STRING#40958600
STRING#40966880
RCDATACHARTABLE335120
RCDATADVCLAL160
RCDATAPACKAGEINFO9440
RCDATATBUBBLEFORM4610
RCDATATCONFIRMFRAME514050
RCDATATFORMUNINS62140
GROUP_CURSOR#32761200
GROUP_CURSOR#32762200
GROUP_CURSOR#32763200
GROUP_CURSOR#32764200
GROUP_CURSOR#32765200
GROUP_CURSOR#32766200
GROUP_CURSOR#32767200
GROUP_ICONMAINICON900
VERSION#18160
MANIFEST#18500
idlangstring
652960Ctrl+
652970Alt+
652980Clipboard does not support Icons
652990Menu '%s' is already being used by another form
653000Docked control must have a name
653010Error removing control from dock tree
653020 - Dock zone not found
653030 - Dock zone has no control
653040Error loading dock zone from the stream. Expecting version %d, but found %d.
653050ANSI
653060ASCII
653070Unicode
653080Big Endian Unicode
653090UTF-8
653100UTF-7
653120BkSp
653130Tab
653140Esc
653150Enter
653160Space
653170PgUp
653180PgDn
653190End
653200Home
653210Left
653220Up
653230Right
653240Down
653250Ins
653260Del
653270Shift+
653280Warning
653290Error
653300Information
653310Confirm
653320&Yes
653330&No
653340OK
653350Cancel
653360&Help
653370&Abort
653380&Retry
653390&Ignore
653400&All
653410N&o to All
653420Yes to &All
653430&Close
653440A control cannot have itself as its parent
653450OK
653460Cancel
653470&Yes
653480&No
653490&Help
653500&Close
653510&Ignore
653520&Retry
653530Abort
653540&All
653550Cannot drag a form
653560Metafiles
653570Enhanced Metafiles
653580Icons
653590Bitmaps
653600Failed to read ImageList data from stream
653610Failed to write ImageList data to stream
653620Error creating window device context
653630Error creating window class
653640Cannot focus a disabled or invisible window
653650Control '%s' has no parent window
653660Parent given is not a parent of '%s'
653670Cannot hide an MDI Child Form
653680Cannot change Visible in OnShow or OnHide
653690Cannot make a visible window modal
653700Menu index out of range
653710Menu inserted twice
653720Sub-menu is not in menu
653730Not enough timers available
653740GroupIndex cannot be less than a previous menu item's GroupIndex
653750Cannot create form. No MDI forms are currently active
653760Unable to open Index
653770Unable to open Search
653780Unable to find a Table of Contents
653790No topic-based help system installed
653800No help found for %s
653810Bitmap image is not valid
653820Icon image is not valid
653830Metafile is not valid
653840Invalid pixel format
653850Cannot change the size of an icon
653860Unsupported clipboard format
653870Out of system resources
653880Canvas does not allow drawing
653890Invalid image size
653900Invalid ImageList
653910Invalid ImageList Index
653920%s.Seek not implemented
653930Operation not allowed on sorted list
653940%s not in a class registration group
653950Property %s does not exist
653960Stream write error
653970Thread creation error: %s
653980Thread Error: %s (%d)
653990Cannot terminate an externally created thread
654000Cannot wait for an externally created thread
654010No help viewer that supports filters
654020''%s'' is not a valid date
654030''%s'' is not a valid date and time
654040''%s'' is not a valid integer value
654050''%s'' is not a valid time
654060No context-sensitive help installed
654070No help found for context
654080Unable to write to %s
654090Invalid file name - %s
654100Invalid stream format
654110''%s'' is not a valid component name
654120Invalid property path
654130Invalid property value
654140Invalid data type for '%s'
654150List capacity out of bounds (%d)
654160List count out of bounds (%d)
654170List index out of bounds (%d)
654180Out of memory while expanding memory stream
654190Error reading %s%s%s: %s
654200Stream read error
654210Property is read-only
654220Failed to get data for '%s'
654230Resource %s not found
654240Start index out of bounds (%d)
654250Invalid count (%d)
654260Invalid destination index (%d)
654270Invalid code page
654280Ancestor for '%s' not found
654290Cannot assign a %s to a %s
654300Bits index out of range
654310Can't write to a read-only resource stream
654320CheckSynchronize called from thread $%x, which is NOT the main thread
654330Class %s not found
654340A class named %s already exists
654350List does not allow duplicates ($0%x)
654360A component named %s already exists
654370String list does not allow duplicates
654380Cannot create file "%s". %s
654390Cannot open file "%s". %s
654400Tue
654410Wed
654420Thu
654430Fri
654440Sat
654450Sunday
654460Monday
654470Tuesday
654480Wednesday
654490Thursday
654500Friday
654510Saturday
654520Unable to create directory
654530Invalid source array
654540Invalid destination array
654550Character index out of bounds (%d)
654560Nov
654570Dec
654580January
654590February
654600March
654610April
654620May
654630June
654640July
654650August
654660September
654670October
654680November
654690December
654700Sun
654710Mon
654720Monitor support function not initialized
654730%s (%s, line %d)
654740Abstract Error
654750Access violation at address %p in module '%s'. %s of address %p
654760System Error. Code: %d. %s
654770A call to an OS function failed
654780Jan
654790Feb
654800Mar
654810Apr
654820May
654830Jun
654840Jul
654850Aug
654860Sep
654870Oct
654880Variant or safe array is locked
654890Invalid variant type conversion
654900Invalid variant operation
654910Invalid variant operation (%s%.8x) %s
654920Could not convert variant of type (%s) into type (%s)
654930Overflow while converting variant of type (%s) into type (%s)
654940Variant overflow
654950Invalid argument
654960Invalid variant type
654970Operation not supported
654980Unexpected variant error
654990External exception %x
655000Assertion failed
655010Interface not supported
655020Exception in safecall method
655030Object lock not owned
655040Invalid pointer operation
655050Invalid class typecast
655060Access violation at address %p. %s of address %p
655070Access violation
655080Stack overflow
655090Control-C hit
655100Privileged instruction
655110Exception %s in module %s at %p. %s%s
655120Application Error
655130Format '%s' invalid or incompatible with argument
655140No argument for format '%s'
655150Variant method calls not supported
655160Read
655170Write
655180Error creating variant or safe array
655190Variant or safe array index out of bounds
655200'%s' is not a valid floating point value
655210Out of memory
655220I/O error %d
655230File not found
655240Too many open files
655250File access denied
655260Read beyond end of file
655270Disk full
655280Invalid numeric input
655290Division by zero
655300Range check error
655310Integer overflow
655320Invalid floating point operation
655330Floating point division by zero
655340Floating point overflow
655350Floating point underflow
module_namehintordfunction_name
oleaut32.dllSysFreeString
oleaut32.dllSysReAllocStringLen
oleaut32.dllSysAllocStringLen
advapi32.dllRegQueryValueExW
advapi32.dllRegOpenKeyExW
advapi32.dllRegCloseKey
user32.dllGetKeyboardType
user32.dllLoadStringW
user32.dllMessageBoxA
user32.dllCharNextW
kernel32.dllGetACP
kernel32.dllSleep
kernel32.dllVirtualFree
kernel32.dllVirtualAlloc
kernel32.dllGetSystemInfo
kernel32.dllGetVersion
kernel32.dllGetCurrentThreadId
kernel32.dllVirtualQuery
kernel32.dllWideCharToMultiByte
kernel32.dllMultiByteToWideChar
kernel32.dlllstrlenW
kernel32.dlllstrcpynW
kernel32.dllLoadLibraryExW
kernel32.dllGetThreadLocale
kernel32.dllGetStartupInfoA
kernel32.dllGetProcAddress
kernel32.dllGetModuleHandleW
kernel32.dllGetModuleFileNameW
kernel32.dllGetLocaleInfoW
kernel32.dllGetCommandLineW
kernel32.dllFreeLibrary
kernel32.dllFindFirstFileW
kernel32.dllFindClose
kernel32.dllExitProcess
kernel32.dllExitThread
kernel32.dllCreateThread
kernel32.dllCompareStringW
kernel32.dllWriteFile
kernel32.dllUnhandledExceptionFilter
kernel32.dllRtlUnwind
kernel32.dllRaiseException
kernel32.dllGetStdHandle
kernel32.dllCloseHandle
kernel32.dllTlsSetValue
kernel32.dllTlsGetValue
kernel32.dllLocalAlloc
kernel32.dllGetModuleHandleW
user32.dllCreateWindowExW
user32.dllWindowFromPoint
user32.dllWaitMessage
user32.dllUpdateWindow
user32.dllUnregisterClassW
user32.dllUnhookWindowsHookEx
user32.dllTranslateMessage
user32.dllTranslateMDISysAccel
user32.dllTrackPopupMenu
user32.dllSystemParametersInfoW
user32.dllShowWindow
user32.dllShowScrollBar
user32.dllShowOwnedPopups
user32.dllSetWindowRgn
user32.dllSetWindowsHookExW
user32.dllSetWindowTextW
user32.dllSetWindowPos
user32.dllSetWindowPlacement
user32.dllSetWindowLongW
user32.dllSetTimer
user32.dllSetScrollRange
user32.dllSetScrollPos
user32.dllSetScrollInfo
user32.dllSetRect
user32.dllSetPropW
user32.dllSetParent
user32.dllSetMenuItemInfoW
user32.dllSetMenu
user32.dllSetForegroundWindow
user32.dllSetFocus
user32.dllSetCursor
user32.dllSetClassLongW
user32.dllSetCapture
user32.dllSetActiveWindow
user32.dllSendMessageA
user32.dllSendMessageW
user32.dllScrollWindow
user32.dllScreenToClient
user32.dllRemovePropW
user32.dllRemoveMenu
user32.dllReleaseDC
user32.dllReleaseCapture
user32.dllRegisterWindowMessageW
user32.dllRegisterClipboardFormatW
user32.dllRegisterClassW
user32.dllRedrawWindow
user32.dllPostQuitMessage
user32.dllPostMessageW
user32.dllPeekMessageA
user32.dllPeekMessageW
user32.dllOffsetRect
user32.dllMsgWaitForMultipleObjectsEx
user32.dllMsgWaitForMultipleObjects
user32.dllMessageBoxW
user32.dllMapWindowPoints
user32.dllMapVirtualKeyW
user32.dllLoadStringW
user32.dllLoadKeyboardLayoutW
user32.dllLoadIconW
user32.dllLoadCursorW
user32.dllLoadBitmapW
user32.dllKillTimer
user32.dllIsZoomed
user32.dllIsWindowVisible
user32.dllIsWindowUnicode
user32.dllIsWindowEnabled
user32.dllIsWindow
user32.dllIsIconic
user32.dllIsDialogMessageA
user32.dllIsDialogMessageW
user32.dllIsChild
user32.dllInvalidateRect
user32.dllIntersectRect
user32.dllInsertMenuItemW
user32.dllInsertMenuW
user32.dllInflateRect
user32.dllGetWindowThreadProcessId
user32.dllGetWindowTextW
user32.dllGetWindowRect
user32.dllGetWindowPlacement
user32.dllGetWindowLongW
user32.dllGetWindowDC
user32.dllGetTopWindow
user32.dllGetSystemMetrics
user32.dllGetSystemMenu
user32.dllGetSysColorBrush
user32.dllGetSysColor
user32.dllGetSubMenu
user32.dllGetScrollRange
user32.dllGetScrollPos
user32.dllGetScrollInfo
user32.dllGetPropW
user32.dllGetParent
user32.dllGetWindow
user32.dllGetMessagePos
user32.dllGetMenuStringW
user32.dllGetMenuState
user32.dllGetMenuItemInfoW
user32.dllGetMenuItemID
user32.dllGetMenuItemCount
user32.dllGetMenu
user32.dllGetLastActivePopup
user32.dllGetKeyboardState
user32.dllGetKeyboardLayoutNameW
user32.dllGetKeyboardLayoutList
user32.dllGetKeyboardLayout
user32.dllGetKeyState
user32.dllGetKeyNameTextW
user32.dllGetIconInfo
user32.dllGetForegroundWindow
user32.dllGetFocus
user32.dllGetDesktopWindow
user32.dllGetDCEx
user32.dllGetDC
user32.dllGetCursorPos
user32.dllGetCursor
user32.dllGetClipboardData
user32.dllGetClientRect
user32.dllGetClassLongW
user32.dllGetClassInfoW
user32.dllGetCapture
user32.dllGetActiveWindow
user32.dllFrameRect
user32.dllFindWindowExW
user32.dllFindWindowW
user32.dllFillRect
user32.dllEnumWindows
user32.dllEnumThreadWindows
user32.dllEnumChildWindows
user32.dllEndPaint
user32.dllEnableWindow
user32.dllEnableScrollBar
user32.dllEnableMenuItem
user32.dllDrawTextExW
user32.dllDrawTextW
user32.dllDrawMenuBar
user32.dllDrawIconEx
user32.dllDrawIcon
user32.dllDrawFrameControl
user32.dllDrawEdge
user32.dllDispatchMessageA
user32.dllDispatchMessageW
user32.dllDestroyWindow
user32.dllDestroyMenu
user32.dllDestroyIcon
user32.dllDestroyCursor
user32.dllDeleteMenu
user32.dllDefWindowProcW
user32.dllDefMDIChildProcW
user32.dllDefFrameProcW
user32.dllCreatePopupMenu
user32.dllCreateMenu
user32.dllCreateIcon
user32.dllClientToScreen
user32.dllCheckMenuItem
user32.dllCharUpperBuffW
user32.dllCharToOemW
user32.dllCharNextW
user32.dllCharLowerBuffW
user32.dllCharLowerW
user32.dllCallWindowProcW
user32.dllCallNextHookEx
user32.dllBeginPaint
user32.dllAdjustWindowRectEx
user32.dllActivateKeyboardLayout
msimg32.dllAlphaBlend
gdi32.dllUnrealizeObject
gdi32.dllStretchBlt
gdi32.dllSetWindowOrgEx
gdi32.dllSetWinMetaFileBits
gdi32.dllSetViewportOrgEx
gdi32.dllSetTextColor
gdi32.dllSetStretchBltMode
gdi32.dllSetROP2
gdi32.dllSetPixel
gdi32.dllSetEnhMetaFileBits
gdi32.dllSetDIBColorTable
gdi32.dllSetBrushOrgEx
gdi32.dllSetBkMode
gdi32.dllSetBkColor
gdi32.dllSelectPalette
gdi32.dllSelectObject
gdi32.dllSaveDC
gdi32.dllRoundRect
gdi32.dllRestoreDC
gdi32.dllRectangle
gdi32.dllRectVisible
gdi32.dllRealizePalette
gdi32.dllPolyline
gdi32.dllPlayEnhMetaFile
gdi32.dllPatBlt
gdi32.dllMoveToEx
gdi32.dllMaskBlt
gdi32.dllLineTo
gdi32.dllIntersectClipRect
gdi32.dllGetWindowOrgEx
gdi32.dllGetWinMetaFileBits
gdi32.dllGetTextMetricsW
gdi32.dllGetTextExtentPoint32W
gdi32.dllGetSystemPaletteEntries
gdi32.dllGetStockObject
gdi32.dllGetRgnBox
gdi32.dllGetPixel
gdi32.dllGetPaletteEntries
gdi32.dllGetObjectW
gdi32.dllGetEnhMetaFilePaletteEntries
gdi32.dllGetEnhMetaFileHeader
gdi32.dllGetEnhMetaFileBits
gdi32.dllGetDeviceCaps
gdi32.dllGetDIBits
gdi32.dllGetDIBColorTable
gdi32.dllGetDCOrgEx
gdi32.dllGetCurrentPositionEx
gdi32.dllGetClipBox
gdi32.dllGetBrushOrgEx
gdi32.dllGetBitmapBits
gdi32.dllFrameRgn
gdi32.dllExtTextOutW
gdi32.dllExcludeClipRect
gdi32.dllDeleteObject
gdi32.dllDeleteEnhMetaFile
gdi32.dllDeleteDC
gdi32.dllCreateSolidBrush
gdi32.dllCreateRoundRectRgn
gdi32.dllCreateRectRgn
gdi32.dllCreatePolygonRgn
gdi32.dllCreatePenIndirect
gdi32.dllCreatePalette
gdi32.dllCreateHalftonePalette
gdi32.dllCreateFontIndirectW
gdi32.dllCreateDIBitmap
gdi32.dllCreateDIBSection
gdi32.dllCreateCompatibleDC
gdi32.dllCreateCompatibleBitmap
gdi32.dllCreateBrushIndirect
gdi32.dllCreateBitmap
gdi32.dllCopyEnhMetaFileW
gdi32.dllCombineRgn
gdi32.dllBitBlt
version.dllVerQueryValueW
version.dllGetFileVersionInfoSizeW
version.dllGetFileVersionInfoW
kernel32.dlllstrcpyW
kernel32.dllWritePrivateProfileStringW
kernel32.dllWriteFile
kernel32.dllWideCharToMultiByte
kernel32.dllWaitForSingleObject
kernel32.dllWaitForMultipleObjectsEx
kernel32.dllVirtualQueryEx
kernel32.dllVirtualQuery
kernel32.dllVirtualAlloc
kernel32.dllTerminateProcess
kernel32.dllSwitchToThread
kernel32.dllSizeofResource
kernel32.dllSignalObjectAndWait
kernel32.dllSetThreadLocale
kernel32.dllSetLastError
kernel32.dllSetFilePointer
kernel32.dllSetEvent
kernel32.dllSetErrorMode
kernel32.dllSetEndOfFile
kernel32.dllResumeThread
kernel32.dllResetEvent
kernel32.dllReadFile
kernel32.dllQueryDosDeviceW
kernel32.dllOpenProcess
kernel32.dllOpenEventW
kernel32.dllMultiByteToWideChar
kernel32.dllMulDiv
kernel32.dllLockResource
kernel32.dllLocalFree
kernel32.dllLoadResource
kernel32.dllLoadLibraryW
kernel32.dllLeaveCriticalSection
kernel32.dllInitializeCriticalSection
kernel32.dllGlobalFindAtomW
kernel32.dllGlobalDeleteAtom
kernel32.dllGlobalAddAtomW
kernel32.dllGetVersionExW
kernel32.dllGetVersion
kernel32.dllGetTickCount
kernel32.dllGetThreadLocale
kernel32.dllGetStdHandle
kernel32.dllGetProcAddress
kernel32.dllGetPrivateProfileStringW
kernel32.dllGetModuleHandleW
kernel32.dllGetModuleFileNameW
kernel32.dllGetLocaleInfoW
kernel32.dllGetLocalTime
kernel32.dllGetLastError
kernel32.dllGetFullPathNameW
kernel32.dllGetFileSize
kernel32.dllGetFileAttributesW
kernel32.dllGetExitCodeThread
kernel32.dllGetDiskFreeSpaceW
kernel32.dllGetDateFormatW
kernel32.dllGetCurrentThreadId
kernel32.dllGetCurrentThread
kernel32.dllGetCurrentProcessId
kernel32.dllGetCurrentProcess
kernel32.dllGetCPInfo
kernel32.dllFreeResource
kernel32.dllInterlockedIncrement
kernel32.dllInterlockedExchangeAdd
kernel32.dllInterlockedExchange
kernel32.dllInterlockedDecrement
kernel32.dllInterlockedCompareExchange
kernel32.dllFreeLibrary
kernel32.dllFormatMessageW
kernel32.dllFlushFileBuffers
kernel32.dllFindResourceW
kernel32.dllFindFirstFileW
kernel32.dllFindClose
kernel32.dllExitProcess
kernel32.dllEnumCalendarInfoA
kernel32.dllEnterCriticalSection
kernel32.dllDeviceIoControl
kernel32.dllDeleteFileW
kernel32.dllDeleteCriticalSection
kernel32.dllCreateThread
kernel32.dllCreateFileW
kernel32.dllCreateEventW
kernel32.dllCreateDirectoryW
kernel32.dllCompareStringW
kernel32.dllCloseHandle
advapi32.dllRegQueryValueExW
advapi32.dllRegOpenKeyExW
advapi32.dllRegFlushKey
advapi32.dllRegCloseKey
advapi32.dllOpenProcessToken
advapi32.dllLookupPrivilegeValueW
advapi32.dllAdjustTokenPrivileges
ole32.dllOleUninitialize
ole32.dllOleInitialize
kernel32.dllSleep
oleaut32.dllSafeArrayPtrOfIndex
oleaut32.dllSafeArrayGetUBound
oleaut32.dllSafeArrayGetLBound
oleaut32.dllSafeArrayCreate
oleaut32.dllVariantChangeType
oleaut32.dllVariantCopy
oleaut32.dllVariantClear
oleaut32.dllVariantInit
comctl32.dllInitializeFlatSB
comctl32.dllFlatSB_SetScrollProp
comctl32.dllFlatSB_SetScrollPos
comctl32.dllFlatSB_SetScrollInfo
comctl32.dllFlatSB_GetScrollPos
comctl32.dllFlatSB_GetScrollInfo
comctl32.dll_TrackMouseEvent
comctl32.dllImageList_SetIconSize
comctl32.dllImageList_GetIconSize
comctl32.dllImageList_Write
comctl32.dllImageList_Read
comctl32.dllImageList_GetDragImage
comctl32.dllImageList_DragShowNolock
comctl32.dllImageList_DragMove
comctl32.dllImageList_DragLeave
comctl32.dllImageList_DragEnter
comctl32.dllImageList_EndDrag
comctl32.dllImageList_BeginDrag
comctl32.dllImageList_Remove
comctl32.dllImageList_DrawEx
comctl32.dllImageList_Draw
comctl32.dllImageList_GetBkColor
comctl32.dllImageList_SetBkColor
comctl32.dllImageList_Add
comctl32.dllImageList_SetImageCount
comctl32.dllImageList_GetImageCount
comctl32.dllImageList_Destroy
comctl32.dllImageList_Create
shell32.dllSHGetSpecialFolderPathW
advapi32.dllOpenServiceW
advapi32.dllOpenSCManagerW
advapi32.dllDeleteService
advapi32.dllControlService
advapi32.dllCloseServiceHandle
advapi32.dllCryptDestroyHash
advapi32.dllCryptHashData
advapi32.dllCryptCreateHash
advapi32.dllCryptGetHashParam
advapi32.dllCryptReleaseContext
advapi32.dllCryptAcquireContextW

StringTable 040904E4

CompanyNameIObit
FileDescriptionProtected Folder service check
FileVersion4.2.0.51
InternalName
LegalCopyrightCopyright© 2005-2012
LegalTrademarksIObit
OriginalFilenamePfCheckService.exe
ProductNameProtected Folder
ProductVersion1.2.0.0
Comments

VS_FIXEDFILEINFO

FileVersion4.2.0.51
ProductVersion4.2.0.51
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType1
FileSubtype0

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10/CN=VeriSign Class 3 Code Signing 2010 CA
serial: 11CADAF29DA4C3CB113BF1877B120103

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl
            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
        4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
        6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
        11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
        d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
        40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
        3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
        7e:b6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
        18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
        dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
        33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
        c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
        bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
        29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
        0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
        69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
        13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
        15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
        88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
        eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
        3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
        1c:d8:04:75

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ca:da:f2:9d:a4:c3:cb:11:3b:f1:87:7b:12:01:03
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Validity
            Not Before: Jan 15 00:00:00 2013 GMT
            Not After : Feb 14 23:59:59 2016 GMT
        Subject: C=CN, ST=Sichuan, L=Chengdu, O=IObit Information Technology, OU=Digital ID Class 3 - Microsoft Software Validation v2, CN=IObit Information Technology
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d1:cf:de:4a:f7:c1:4c:07:1d:2a:77:8d:6b:6e:
                    91:7a:da:9e:71:d8:27:e3:92:75:97:02:97:3b:85:
                    3f:97:1e:5b:0c:94:75:a4:ea:ea:75:4c:a2:b3:cf:
                    35:7a:94:23:15:a0:f9:67:60:0a:54:3b:32:72:bb:
                    fa:c3:28:ac:49:9d:09:24:73:2c:4f:ee:0f:1b:ae:
                    88:5e:45:4b:09:da:4e:a0:50:d1:99:79:ce:a3:27:
                    6e:30:1b:24:44:cb:cd:77:fe:7e:8d:b2:56:eb:55:
                    ae:9e:e3:da:7b:93:15:9b:1e:07:b9:ca:53:a6:83:
                    18:0d:ce:2a:04:20:fb:25:fd:c0:ac:7c:49:2d:7d:
                    eb:42:7a:bb:d1:46:28:2b:9f:77:77:54:b7:67:76:
                    17:f1:66:33:ca:5d:f2:20:f3:98:91:bc:23:99:96:
                    43:4e:c3:5e:dd:a5:ae:72:96:cd:06:f6:67:1f:1c:
                    2e:bb:73:7f:cd:cb:f7:3c:0c:98:60:75:97:cb:3f:
                    19:27:6d:ab:75:0c:8b:75:4c:18:cc:97:a8:7f:fc:
                    52:35:73:20:4e:be:86:d9:94:91:58:09:7e:ac:cf:
                    2e:c5:b6:58:83:31:15:3b:ae:57:31:ed:95:31:17:
                    3e:9e:9c:a9:b6:cf:76:39:f8:78:d3:28:34:5c:e8:
                    8c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://csc3-2010-crl.verisign.com/CSC3-2010.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa
            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
                CA Issuers - URI:http://csc3-2010-aia.verisign.com/CSC3-2010.cer
            X509v3 Authority Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        a0:9e:a7:ad:2e:5d:67:13:6d:3a:8d:90:87:82:94:84:32:92:
        af:15:10:3d:0b:ca:0d:fb:60:91:aa:98:d3:5d:2b:bd:a1:9f:
        7b:67:e8:c6:0e:c5:65:0d:5d:9e:df:aa:0f:61:e7:44:c2:f3:
        f3:df:12:d0:7a:68:42:91:27:e2:a7:c5:e2:62:ab:6b:ac:51:
        cb:42:87:cc:13:1a:ac:3e:11:5f:7b:1a:0c:57:bf:d9:01:f5:
        af:f0:55:5c:98:10:17:d7:67:09:52:c6:61:bb:07:d1:34:9a:
        f2:05:39:65:1e:57:89:c9:96:82:a3:14:d8:be:ba:08:0a:cf:
        d9:ba:a4:42:db:7b:5d:f2:1b:25:0c:e4:46:49:d6:b9:42:c7:
        a7:6d:2d:45:74:4d:3c:24:b2:6c:c6:43:37:90:ee:5b:0d:7b:
        54:d6:15:12:45:e0:28:41:77:af:ea:e7:19:6f:59:b1:37:18:
        be:94:ed:54:e9:ba:5c:84:a3:30:f8:f3:9f:27:7e:d2:be:74:
        24:dd:45:df:b9:c7:58:56:6e:7a:af:4f:d7:eb:45:f9:c5:b1:
        00:73:37:9d:e1:dc:5a:f3:4f:78:72:7d:fc:04:73:a0:c7:ff:
        2c:ca:b6:dc:9c:0d:db:a5:a6:02:01:30:10:ee:78:9d:fc:aa:
        c2:1d:0f:a9

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:f5:23:4b:5e:a5:d7:8a:bb:32:e9:d4:57:f7:ef:
                    e4:c7:26:7e:ad:19:98:fe:a8:9d:7d:94:f6:36:6b:
                    10:d7:75:81:30:7f:04:68:7f:cb:2b:75:1e:cd:1d:
                    08:8c:df:69:94:a7:37:a3:9c:7b:80:e0:99:e1:ee:
                    37:4d:5f:ce:3b:14:ee:86:d4:d0:f5:27:35:bc:25:
                    0b:38:a7:8c:63:9d:17:a3:08:a5:ab:b0:fb:cd:6a:
                    62:82:4c:d5:21:da:1b:d9:f1:e3:84:3b:8a:2a:4f:
                    85:5b:90:01:4f:c9:a7:76:10:7f:27:03:7c:be:ae:
                    7e:7d:c1:dd:f9:05:bc:1b:48:9c:69:e7:c0:a4:3c:
                    3c:41:00:3e:df:96:e5:c5:e4:94:71:d6:55:01:c7:
                    00:26:4a:40:3c:b5:a1:26:a9:0c:a7:6d:80:8e:90:
                    25:7b:cf:bf:3f:1c:eb:2f:96:fa:e5:87:77:c6:b5:
                    56:b2:7a:3b:54:30:53:1b:df:62:34:ff:1e:d1:f4:
                    5a:93:28:85:e5:4c:17:4e:7e:5b:fd:a4:93:99:7f:
                    df:cd:ef:a4:75:ef:ef:15:f6:47:e7:f8:19:72:d8:
                    2e:34:1a:a6:b4:a7:4c:7e:bd:bb:4f:0c:3d:57:f1:
                    30:d6:a6:36:8e:d6:80:76:d7:19:2e:a5:cd:7e:34:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.verisign.com/pca3-g5.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-8
            X509v3 Subject Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            X509v3 Authority Key Identifier: 
                7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        56:22:e6:34:a4:c4:61:cb:48:b9:01:ad:56:a8:64:0f:d9:8c:
        91:c4:bb:cc:0c:e5:ad:7a:a0:22:7f:df:47:38:4a:2d:6c:d1:
        7f:71:1a:7c:ec:70:a9:b1:f0:4f:e4:0f:0c:53:fa:15:5e:fe:
        74:98:49:24:85:81:26:1c:91:14:47:b0:4c:63:8c:bb:a1:34:
        d4:c6:45:e8:0d:85:26:73:03:d0:a9:8c:64:6d:dc:71:92:e6:
        45:05:60:15:59:51:39:fc:58:14:6b:fe:d4:a4:ed:79:6b:08:
        0c:41:72:e7:37:22:06:09:be:23:e9:3f:44:9a:1e:e9:61:9d:
        cc:b1:90:5c:fc:3d:d2:8d:ac:42:3d:65:36:d4:b4:3d:40:28:
        8f:9b:10:cf:23:26:cc:4b:20:cb:90:1f:5d:8c:4c:34:ca:3c:
        d8:e5:37:d6:6f:a5:20:bd:34:eb:26:d9:ae:0d:e7:c5:9a:f7:
        a1:b4:21:91:33:6f:86:e8:58:bb:25:7c:74:0e:58:fe:75:1b:
        63:3f:ce:31:7c:9b:8f:1b:96:9e:c5:53:76:84:5b:9c:ad:91:
        fa:ac:ed:93:ba:5d:c8:21:53:c2:82:53:63:af:12:0d:50:87:
        11:1b:3d:54:52:96:8a:2c:9c:3d:92:1a:08:9a:05:2e:c7:93:
        a5:48:91:d3
pkcs7-signedData
  • 1
    • MD5: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
        • MD5
          • 7b 3e 6a 99 b9 38 96 0d  90 e1 7a 6f 06 b1 8b 2e  |{>j..8....zo....|
    • Certificates
      • Certificate #0
        • 2
          • 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
          • RSA-SHA1: nil
          • Issuer
            • C: ZA
            • ST: Western Cape
            • L: Durbanville
            • O: Thawte
            • OU: Thawte Certification
            • CN: Thawte Timestamping CA
          • 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services CA - G2
          • #5
            • rsaEncryption: nil
            • B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
              2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
              C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
              74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
              6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
              2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
              61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
              99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
              79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
              9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
              DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
              27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
              27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
              E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
              48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
              64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71              : 0x010001
          • #6
            • subjectKeyIdentifier: 
              5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
4c 80 2e dd                                       |L...            |
            • authorityInfoAccess
              • OCSP: http://ocsp.thawte.com
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
            • extendedKeyUsage: timeStamping
            • keyUsage: true, 6
            • subjectAltName
              • CN: TimeStamp-2048-1
        • RSA-SHA1: 
          03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
      • Certificate #1
        • 2
          • 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services CA - G2
          • 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
          • Subject
            • C: US
            • O: Symantec Corporation
            • CN: Symantec Time Stamping Services Signer - G4
          • #5
            • rsaEncryption: nil
            • A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
              61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
              53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
              0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
              C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
              64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
              CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
              28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
              92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
              CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
              D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
              2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
              74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
              3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
              8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
              83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: true, timeStamping
            • keyUsage: true, 0x80
            • authorityInfoAccess
              • #0
                • OCSP: http://ts-ocsp.ws.symantec.com
                • caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
            • crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
            • subjectAltName
              • CN: TimeStamp-2048-2
            • subjectKeyIdentifier: 
              46 c6 69 a3 0e 4a 14 1e  d5 4c da 52 63 17 3f 5e  |F.i..J...L.Rc.?^|
36 bc 0d e6                                       |6...            |
            • authorityKeyIdentifier: 
              5f 9a f5 6e 5c cc cc 74  9a d4 dd 7d ef 3f db ec  |_..n\..t...}.?..|
4c 80 2e dd                                       |L...            |
        • RSA-SHA1: 
          78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
      • Certificate #2
        • 2
          • 11:CA:DA:F2:9D:A4:C3:CB:11:3B:F1:87:7B:12:01:03
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: Terms of use at https://www.verisign.com/rpa (c)10
            • CN: VeriSign Class 3 Code Signing 2010 CA
          • 2013-01-15 00:00:00 UTC: 2016-02-14 23:59:59 UTC
          • Subject
            • C: CN
            • ST: Sichuan
            • L: Chengdu
            • O: IObit Information Technology
            • OU: Digital ID Class 3 - Microsoft Software Validation v2
            • CN: IObit Information Technology
          • #5
            • rsaEncryption: nil
            • D1:CF:DE:4A:F7:C1:4C:07:1D:2A:77:8D:6B:6E:91:7A:
              DA:9E:71:D8:27:E3:92:75:97:02:97:3B:85:3F:97:1E:
              5B:0C:94:75:A4:EA:EA:75:4C:A2:B3:CF:35:7A:94:23:
              15:A0:F9:67:60:0A:54:3B:32:72:BB:FA:C3:28:AC:49:
              9D:09:24:73:2C:4F:EE:0F:1B:AE:88:5E:45:4B:09:DA:
              4E:A0:50:D1:99:79:CE:A3:27:6E:30:1B:24:44:CB:CD:
              77:FE:7E:8D:B2:56:EB:55:AE:9E:E3:DA:7B:93:15:9B:
              1E:07:B9:CA:53:A6:83:18:0D:CE:2A:04:20:FB:25:FD:
              C0:AC:7C:49:2D:7D:EB:42:7A:BB:D1:46:28:2B:9F:77:
              77:54:B7:67:76:17:F1:66:33:CA:5D:F2:20:F3:98:91:
              BC:23:99:96:43:4E:C3:5E:DD:A5:AE:72:96:CD:06:F6:
              67:1F:1C:2E:BB:73:7F:CD:CB:F7:3C:0C:98:60:75:97:
              CB:3F:19:27:6D:AB:75:0C:8B:75:4C:18:CC:97:A8:7F:
              FC:52:35:73:20:4E:BE:86:D9:94:91:58:09:7E:AC:CF:
              2E:C5:B6:58:83:31:15:3B:AE:57:31:ED:95:31:17:3E:
              9E:9C:A9:B6:CF:76:39:F8:78:D3:28:34:5C:E8:8C:BF              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • nil
            • keyUsage: true, 0x80
            • crlDistributionPoints: http://csc3-2010-crl.verisign.com/CSC3-2010.crl
            • certificatePolicies
              • 2.16.840.1.113733.1.7.23.3
                • id-qt-cps: https://www.verisign.com/rpa
            • extendedKeyUsage: codeSigning
            • authorityInfoAccess
              • #0
                • OCSP: http://ocsp.verisign.com
                • caIssuers: http://csc3-2010-aia.verisign.com/CSC3-2010.cer
            • authorityKeyIdentifier: 
              cf 99 a9 ea 7b 26 f4 4b  c9 8e 8f d7 f0 05 26 ef  |....{&.K......&.|
e3 d2 a7 9d                                       |....            |
            • nsCertType: 0x10
            • 1.3.6.1.4.1.311.2.1.27
              • false: true
        • RSA-SHA1: 
          a0 9e a7 ad 2e 5d 67 13  6d 3a 8d 90 87 82 94 84  |.....]g.m:......|
32 92 af 15 10 3d 0b ca  0d fb 60 91 aa 98 d3 5d  |2....=....`....]|
2b bd a1 9f 7b 67 e8 c6  0e c5 65 0d 5d 9e df aa  |+...{g....e.]...|
0f 61 e7 44 c2 f3 f3 df  12 d0 7a 68 42 91 27 e2  |.a.D......zhB.'.|
a7 c5 e2 62 ab 6b ac 51  cb 42 87 cc 13 1a ac 3e  |...b.k.Q.B.....>|
11 5f 7b 1a 0c 57 bf d9  01 f5 af f0 55 5c 98 10  |._{..W......U\..|
17 d7 67 09 52 c6 61 bb  07 d1 34 9a f2 05 39 65  |..g.R.a...4...9e|
1e 57 89 c9 96 82 a3 14  d8 be ba 08 0a cf d9 ba  |.W..............|
a4 42 db 7b 5d f2 1b 25  0c e4 46 49 d6 b9 42 c7  |.B.{]..%..FI..B.|
a7 6d 2d 45 74 4d 3c 24  b2 6c c6 43 37 90 ee 5b  |.m-EtM<$.l.C7..[|
0d 7b 54 d6 15 12 45 e0  28 41 77 af ea e7 19 6f  |.{T...E.(Aw....o|
59 b1 37 18 be 94 ed 54  e9 ba 5c 84 a3 30 f8 f3  |Y.7....T..\..0..|
9f 27 7e d2 be 74 24 dd  45 df b9 c7 58 56 6e 7a  |.'~..t$.E...XVnz|
af 4f d7 eb 45 f9 c5 b1  00 73 37 9d e1 dc 5a f3  |.O..E....s7...Z.|
4f 78 72 7d fc 04 73 a0  c7 ff 2c ca b6 dc 9c 0d  |Oxr}..s...,.....|
db a5 a6 02 01 30 10 ee  78 9d fc aa c2 1d 0f a9  |.....0..x.......|
      • Certificate #3
        • 2
          • 52:00:E5:AA:25:56:FC:1A:86:ED:96:C9:D4:4B:33:C7
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: (c) 2006 VeriSign, Inc. - For authorized use only
            • CN: VeriSign Class 3 Public Primary Certification Authority - G5
          • 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
          • Subject
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: Terms of use at https://www.verisign.com/rpa (c)10
            • CN: VeriSign Class 3 Code Signing 2010 CA
          • #5
            • rsaEncryption: nil
            • F5:23:4B:5E:A5:D7:8A:BB:32:E9:D4:57:F7:EF:E4:C7:
              26:7E:AD:19:98:FE:A8:9D:7D:94:F6:36:6B:10:D7:75:
              81:30:7F:04:68:7F:CB:2B:75:1E:CD:1D:08:8C:DF:69:
              94:A7:37:A3:9C:7B:80:E0:99:E1:EE:37:4D:5F:CE:3B:
              14:EE:86:D4:D0:F5:27:35:BC:25:0B:38:A7:8C:63:9D:
              17:A3:08:A5:AB:B0:FB:CD:6A:62:82:4C:D5:21:DA:1B:
              D9:F1:E3:84:3B:8A:2A:4F:85:5B:90:01:4F:C9:A7:76:
              10:7F:27:03:7C:BE:AE:7E:7D:C1:DD:F9:05:BC:1B:48:
              9C:69:E7:C0:A4:3C:3C:41:00:3E:DF:96:E5:C5:E4:94:
              71:D6:55:01:C7:00:26:4A:40:3C:B5:A1:26:A9:0C:A7:
              6D:80:8E:90:25:7B:CF:BF:3F:1C:EB:2F:96:FA:E5:87:
              77:C6:B5:56:B2:7A:3B:54:30:53:1B:DF:62:34:FF:1E:
              D1:F4:5A:93:28:85:E5:4C:17:4E:7E:5B:FD:A4:93:99:
              7F:DF:CD:EF:A4:75:EF:EF:15:F6:47:E7:F8:19:72:D8:
              2E:34:1A:A6:B4:A7:4C:7E:BD:BB:4F:0C:3D:57:F1:30:
              D6:A6:36:8E:D6:80:76:D7:19:2E:A5:CD:7E:34:2D:89              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • true: 0
            • certificatePolicies
              • 2.16.840.1.113733.1.7.23.3
                • #0
                  • id-qt-cps: https://www.verisign.com/cps
                  • id-qt-unotice: https://www.verisign.com/rpa
            • keyUsage: true, 6
            • 1.3.6.1.5.5.7.1.12
              • image/gif
                • SHA1: 
                  8f e5 d3 1a 86 ac 8d 8e  6b c3 cf 80 6a d4 48 18  |........k...j.H.|
2c 7b 19 2e                                       |,{..            |
                • http://logo.verisign.com/vslogo.gif
            • crlDistributionPoints: http://crl.verisign.com/pca3-g5.crl
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com
            • extendedKeyUsage
              • clientAuth: codeSigning
            • subjectAltName
              • CN: VeriSignMPKI-2-8
            • subjectKeyIdentifier: 
              cf 99 a9 ea 7b 26 f4 4b  c9 8e 8f d7 f0 05 26 ef  |....{&.K......&.|
e3 d2 a7 9d                                       |....            |
            • authorityKeyIdentifier: 
              7f d3 65 a7 c2 dd ec bb  f0 30 09 f3 43 39 fa 02  |..e......0..C9..|
af 33 31 33                                       |.313            |
        • RSA-SHA1: 
          56 22 e6 34 a4 c4 61 cb  48 b9 01 ad 56 a8 64 0f  |V".4..a.H...V.d.|
d9 8c 91 c4 bb cc 0c e5  ad 7a a0 22 7f df 47 38  |.........z."..G8|
4a 2d 6c d1 7f 71 1a 7c  ec 70 a9 b1 f0 4f e4 0f  |J-l..q.|.p...O..|
0c 53 fa 15 5e fe 74 98  49 24 85 81 26 1c 91 14  |.S..^.t.I$..&...|
47 b0 4c 63 8c bb a1 34  d4 c6 45 e8 0d 85 26 73  |G.Lc...4..E...&s|
03 d0 a9 8c 64 6d dc 71  92 e6 45 05 60 15 59 51  |....dm.q..E.`.YQ|
39 fc 58 14 6b fe d4 a4  ed 79 6b 08 0c 41 72 e7  |9.X.k....yk..Ar.|
37 22 06 09 be 23 e9 3f  44 9a 1e e9 61 9d cc b1  |7"...#.?D...a...|
90 5c fc 3d d2 8d ac 42  3d 65 36 d4 b4 3d 40 28  |.\.=...B=e6..=@(|
8f 9b 10 cf 23 26 cc 4b  20 cb 90 1f 5d 8c 4c 34  |....#&.K ...].L4|
ca 3c d8 e5 37 d6 6f a5  20 bd 34 eb 26 d9 ae 0d  |.<..7.o. .4.&...|
e7 c5 9a f7 a1 b4 21 91  33 6f 86 e8 58 bb 25 7c  |......!.3o..X.%||
74 0e 58 fe 75 1b 63 3f  ce 31 7c 9b 8f 1b 96 9e  |t.X.u.c?.1|.....|
c5 53 76 84 5b 9c ad 91  fa ac ed 93 ba 5d c8 21  |.Sv.[........].!|
53 c2 82 53 63 af 12 0d  50 87 11 1b 3d 54 52 96  |S..Sc...P...=TR.|
8a 2c 9c 3d 92 1a 08 9a  05 2e c7 93 a5 48 91 d3  |.,.=.........H..|
    • Signer
      • 1
      • unnamed
        • #0
          • C: US
          • O: VeriSign, Inc.
          • OU: VeriSign Trust Network
          • OU: Terms of use at https://www.verisign.com/rpa (c)10
          • CN: VeriSign Class 3 Code Signing 2010 CA
        • 11:CA:DA:F2:9D:A4:C3:CB:11:3B:F1:87:7B:12:01:03
      • MD5: nil
      • #3
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest: 
          f1 60 2c 68 90 11 4b 1e  4f 8a dd a9 0c 17 13 71  |.`,h..K.O......q|
      • rsaEncryption: 
        8f 34 8c 20 74 76 4d a8  ae b4 0e 3d a3 b5 2c 15  |.4. tvM....=..,.|
c7 63 50 ec 05 a7 5c 28  d4 f0 04 8a 97 94 20 f6  |.cP...\(...... .|
16 3e 6c f6 b4 9b 45 44  6b fd 40 b5 1d d3 f9 ad  |.>l...EDk.@.....|
f4 4b f4 78 23 71 80 40  46 58 cb d1 aa 5f 0c 50  |.K.x#q.@FX..._.P|
e7 af 66 49 c9 ae c9 0e  b4 55 df 09 3a 96 d0 d6  |..fI.....U..:...|
d7 9d 0c 81 fd 2c 3c e7  e3 f4 2f 28 27 de 35 b6  |.....,<.../('.5.|
12 e2 09 c6 8f 92 4a 5a  0f 8a e0 9b b3 5d 67 b2  |......JZ.....]g.|
83 3e c2 a1 bd 81 8d 82  70 c3 c2 8d 59 ea 00 ab  |.>......p...Y...|
57 ba 17 4b 03 a7 33 bd  54 a0 70 56 b5 87 f4 6e  |W..K..3.T.pV...n|
b3 6f 85 64 fb a0 9c 7b  42 65 78 46 58 d4 b1 40  |.o.d...{BexFX..@|
91 57 11 11 df 18 2a 5a  29 98 1a ef 5e 1a 2c 70  |.W....*Z)...^.,p|
13 44 7f 26 d5 5b cd 9e  3c 4c 4d a1 43 a6 f7 23  |.D.&.[..
      • countersignature
        • 1
          • unnamed
            • #0
              • C: US
              • O: Symantec Corporation
              • CN: Symantec Time Stamping Services CA - G2
            • 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2015-03-10 07:39:11 UTC
            • messageDigest: 
              a8 81 36 70 f7 04 9b 29  92 40 70 7f 53 68 76 62  |..6p...).@p.Shvb|
f4 de a4 6c                                       |...l            |
          • rsaEncryption: 
            83 c8 80 2e 4e 52 bb f7  0f 44 da c6 53 8f 12 24  |....NR...D..S..$|
b3 11 d7 f3 94 31 45 e9  95 32 ed 90 3f e9 de fa  |.....1E..2..?...|
1c c8 e5 66 8d 14 9f 73  27 90 72 f0 68 3d 30 e2  |...f...s'.r.h=0.|
87 c1 fb f3 b6 41 d1 70  b8 ce 2c 93 fb aa 1e 29  |.....A.p..,....)|
8c b8 f8 2e 81 b8 3b 1f  6f 76 a8 b7 0f 80 bb a5  |......;.ov......|
74 1e 16 c0 a2 cb 16 74  03 23 52 ed c7 6b f1 ed  |t......t.#R..k..|
25 6e 45 e7 ef b8 ce a1  e4 be f0 61 c6 e4 fc a7  |%nE........a....|
b3 db 6e b5 6c b1 e7 28  aa f3 f5 65 ea e6 5b bc  |..n.l..(...e..[.|
92 72 3e 4b 5a 4f 38 cb  8a 69 43 90 e5 40 3e 20  |.r>KZO8..iC..@> |
dc 42 87 d2 ee e5 72 7d  a7 97 7c ce 09 2e e3 5f  |.B....r}..|...._|
6d fd f6 97 bd 17 bd 72  a2 bc cf e7 90 6f b5 2f  |m......r.....o./|
7f 91 a2 ca 00 39 e7 33  d0 97 31 12 a2 82 33 c9  |.....9.3..1...3.|
df 71 10 0b 12 5f 1b 9f  7c 55 10 19 cb 92 80 64  |.q..._..|U.....d|
4e ef d8 1c cc 67 6c 36  c9 06 9c a0 7c 12 81 d9  |N....gl6....|...|
e8 62 90 f1 9f 20 96 65  3f 6b 10 82 eb de 40 15  |.b... .e?k....@.|
d3 23 5e f8 b8 4f 61 3a  64 0a fd a7 56 41 6f bd  |.#^..Oa:d...VAo.|
offsetsizetypecomment
0992256EXE10/15/2013 02:26:38#
15c115HTM#
e3c479915PNG(256 x 256)#
e6d7a9236PNG(256 x 256)#
eae465790PNG(256 x 256)#
f081e4674BMP(48 x 48)#
f24006432PKCS7Authenticode Signature#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK