AdobePIP.dll.DEL - AdobePIP.dll - Adobe Product Improvement Program

info
MZ
PE
resources
imports
exports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	AdobePIP.dll.DEL
size	494704 (0x78c70)
md5	8b52ca2bdd68f1cb7bca20362da9c3ca

type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x110

Rich Header

lib id	version	times used
147	30729	14
257	23907	4
199	41118	1
259	23907	2
261	23907	19
260	23907	11
203	65501	15
1	0	226
264	23918	30
256	23918	1
255	23918	1
151	0	3
258	23918	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	7
TimeDateStamp	0x57d67b1e
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x2022
Magic	0x20b
LinkerVersion	14.0
SizeOfCode	0x31600
SizeOfInitializedData	0x45e00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x2f11c
BaseOfCode	0x1000
ImageBase	0x180000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.0
ImageVersion	0.0
SubsystemVersion	6.0
Reserved1	0
SizeOfImage	0x7d000
SizeOfHeaders	0x400
CheckSum	0x843f6
Subsystem	2
DllCharacteristics	0x160
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MASM/TASM - sig4

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x31573	0x31600	R-X CODE
.rdata	0x33000	0xfb9e	0xfc00	R-- IDATA
.data	0x43000	0x12c8	0xc00	RW- IDATA
.pdata	0x45000	0x32d0	0x3400	R-- IDATA
.gfids	0x49000	0x34	0x200	R-- IDATA
.rsrc	0x4a000	0x311c8	0x31200	R-- IDATA
.reloc	0x7c000	0x4cc	0x600	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x40e30	0x158
IMPORT	0x40f88	0x140
RESOURCE	0x4a000	0x311c8
EXCEPTION	0x45000	0x32d0
SECURITY	0x77000	0x1c70
BASERELOC	0x7c000	0x4cc
DEBUG	0x39f40	0x70
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x39fb0	0x94
Bound_IAT	0	0
IAT	0x33000	0x5a0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
DIALOG	#115	1440
RCDATA	#2001	3488
RCDATA	#2002	3622
RCDATA	#2003	5970
RCDATA	#2004	5760
RCDATA	#2005	6164
RCDATA	#2006	3484
RCDATA	#2007	5420
RCDATA	#2008	5984
RCDATA	#2009	3388
RCDATA	#2010	5382
RCDATA	#2011	6078
RCDATA	#2012	4738
RCDATA	#2013	3484
RCDATA	#2014	3582
RCDATA	#2015	5924
RCDATA	#2016	6020
RCDATA	#2017	4104
RCDATA	#2018	4054
RCDATA	#2019	3632
RCDATA	#2020	3462
RCDATA	#2021	5562
RCDATA	#2022	5856
RCDATA	#2023	5612
RCDATA	#2024	5620
RCDATA	#2026	5536
RCDATA	#2027	3742
RCDATA	#2028	3454
RCDATA	#2029	5360
RCDATA	#2030	6008
RCDATA	#2031	5738
RCDATA	#2032	3570
RCDATA	#2033	3572
RCDATA	#2110	1292
RCDATA	#2111	1292
RCDATA	#2112	1368
RCDATA	#2113	1380
RCDATA	#2114	1442
RCDATA	#2115	1292
RCDATA	#2116	1292
RCDATA	#2117	1382
RCDATA	#2118	1292
RCDATA	#2119	1444
RCDATA	#2120	1416
RCDATA	#2121	1292
RCDATA	#2122	1292
RCDATA	#2123	1292
RCDATA	#2124	1514
RCDATA	#2125	1408
RCDATA	#2126	1010
RCDATA	#2127	994
RCDATA	#2128	1292
RCDATA	#2129	1292
RCDATA	#2130	1380
RCDATA	#2131	1364
RCDATA	#2132	1400
RCDATA	#2133	1436
RCDATA	#2134	1344
RCDATA	#2135	1292
RCDATA	#2136	1292
RCDATA	#2137	1326
RCDATA	#2138	1346
RCDATA	#2139	1284
RCDATA	#2140	904
RCDATA	#2141	898
VERSION	#1	896
MANIFEST	#2	381

module_name	hint	ord	function_name
ADVAPI32.dll	657		RegQueryValueExA
ADVAPI32.dll	643		RegOpenKeyA
ADVAPI32.dll	596		RegCloseKey
SHELL32.dll	233		SHGetPathFromIDListW
SHELL32.dll	241		SHGetSpecialFolderLocation
SHELL32.dll		165
SHELL32.dll	225		SHGetMalloc
SHELL32.dll	210		SHGetFolderPathW
gdiplus.dll	629		GdiplusStartup
gdiplus.dll	628		GdiplusShutdown
KERNEL32.dll	1072		QueryPerformanceCounter
KERNEL32.dll	874		IsDebuggerPresent
KERNEL32.dll	880		IsProcessorFeaturePresent
KERNEL32.dll	1392		TerminateProcess
KERNEL32.dll	527		GetCurrentProcess
KERNEL32.dll	617		GetModuleFileNameW
KERNEL32.dll	939		LoadLibraryW
KERNEL32.dll	676		GetProcAddress
KERNEL32.dll	621		GetModuleHandleW
KERNEL32.dll	420		FreeLibrary
KERNEL32.dll	1501		WideCharToMultiByte
KERNEL32.dll	1376		SizeofResource
KERNEL32.dll	960		LockResource
KERNEL32.dll	942		LoadResource
KERNEL32.dll	399		FindResourceW
KERNEL32.dll	532		GetCurrentThreadId
KERNEL32.dll	980		MultiByteToWideChar
KERNEL32.dll	979		MulDiv
KERNEL32.dll	194		CreateFileW
KERNEL32.dll	572		GetFileAttributesW
KERNEL32.dll	1009		OpenProcess
KERNEL32.dll	598		GetLastError
KERNEL32.dll	936		LoadLibraryA
KERNEL32.dll	267		DeleteFileW
KERNEL32.dll	127		CloseHandle
KERNEL32.dll	528		GetCurrentProcessId
KERNEL32.dll	1362		SetUnhandledExceptionFilter
KERNEL32.dll	1426		UnhandledExceptionFilter
KERNEL32.dll	1212		RtlVirtualUnwind
KERNEL32.dll	1205		RtlLookupFunctionEntry
KERNEL32.dll	1198		RtlCaptureContext
KERNEL32.dll	852		InitializeSListHead
KERNEL32.dll	279		DisableThreadLibraryCalls
KERNEL32.dll	733		GetSystemTimeAsFileTime
KERNEL32.dll	780		GetVersion
USER32.dll	499		InvalidateRect
USER32.dll	228		EnableWindow
USER32.dll	318		GetDlgItem
USER32.dll	231		EndDialog
USER32.dll	704		SendMessageW
USER32.dll	408		GetPropW
USER32.dll	310		GetDC
USER32.dll	760		SetPropW
USER32.dll	178		DialogBoxParamW
GDI32.dll	503		GetDeviceCaps
GDI32.dll	553		GetObjectW
GDI32.dll	65		CreateFontIndirectW
MSVCP140.dll	1332		public: char __cdecl std::basic_ios<char, struct std::char_traits<char> >::widen(char)const __ptr64 ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
MSVCP140.dll	262		public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::operator<<(class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 (__cdecl*)(class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64)) __ptr64 ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
MSVCP140.dll	128		public: virtual __cdecl std::basic_iostream<char, struct std::char_traits<char> >::~basic_iostream<char, struct std::char_traits<char> >(void) __ptr64 ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
MSVCP140.dll	1121		public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::put(char) __ptr64 ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
MSVCP140.dll	255		public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::operator<<(int) __ptr64 ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
MSVCP140.dll	1014		protected: virtual void __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::imbue(class std::locale const & __ptr64) __ptr64 ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
MSVCP140.dll	1277		protected: virtual int __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::sync(void) __ptr64 ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
MSVCP140.dll	1205		protected: virtual class std::basic_streambuf<char, struct std::char_traits<char> > * __ptr64 __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::setbuf(char * __ptr64, __int64) __ptr64 ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
MSVCP140.dll	651		void __cdecl std::_Xbad_alloc(void) ?_Xbad_alloc@std@@YAXXZ
MSVCP140.dll	655		void __cdecl std::_Xout_of_range(char const * __ptr64) ?_Xout_of_range@std@@YAXPEBD@Z
MSVCP140.dll	654		void __cdecl std::_Xlength_error(char const * __ptr64) ?_Xlength_error@std@@YAXPEBD@Z
MSVCP140.dll	165		public: __cdecl std::_Lockit::~_Lockit(void) __ptr64 ??1_Lockit@std@@QEAA@XZ
MSVCP140.dll	109		public: __cdecl std::_Lockit::_Lockit(int) __ptr64 ??0_Lockit@std@@QEAA@H@Z
MSVCP140.dll	469		private: static class std::locale::_Locimp * __ptr64 __cdecl std::locale::_Getgloballocale(void) ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
MSVCP140.dll	1310		bool __cdecl std::uncaught_exception(void) ?uncaught_exception@std@@YA_NXZ
MSVCP140.dll	406		__int64 const std::_BADOFF ?_BADOFF@std@@3_JB
MSVCP140.dll	969		public: static class std::locale::id std::codecvt<char, char, struct _Mbstatet>::id ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
MSVCP140.dll	429		struct _iobuf * __ptr64 __cdecl std::_Fiopen(wchar_t const * __ptr64, int, int) ?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
MSVCP140.dll	580		public: void __cdecl std::basic_ostream<char, struct std::char_traits<char> >::_Osfx(void) __ptr64 ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
MSVCP140.dll	872		public: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::flush(void) __ptr64 ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
MSVCP140.dll	1249		public: __int64 __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::sputn(char const * __ptr64, __int64) __ptr64 ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
MSVCP140.dll	433		public: static unsigned __int64 __cdecl std::codecvt<char, char, struct _Mbstatet>::_Getcat(class std::locale::facet const * __ptr64 * __ptr64, class std::locale const * __ptr64) ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
MSVCP140.dll	1246		public: int __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::sputc(char) __ptr64 ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
MSVCP140.dll	47		protected: __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::basic_streambuf<char, struct std::char_traits<char> >(void) __ptr64 ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
MSVCP140.dll	960		public: class std::locale __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::getloc(void)const __ptr64 ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
MSVCP140.dll	501		protected: void __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::_Init(void) __ptr64 ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
MSVCP140.dll	1319		public: int __cdecl std::codecvt<char, char, struct _Mbstatet>::unshift(struct _Mbstatet & __ptr64, char * __ptr64, char * __ptr64, char * __ptr64 & __ptr64)const __ptr64 ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
MSVCP140.dll	1221		public: void __cdecl std::basic_ios<char, struct std::char_traits<char> >::setstate(int, bool) __ptr64 ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
MSVCP140.dll	12		protected: __cdecl std::basic_ios<char, struct std::char_traits<char> >::basic_ios<char, struct std::char_traits<char> >(void) __ptr64 ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
MSVCP140.dll	37		public: __cdecl std::basic_ostream<char, struct std::char_traits<char> >::basic_ostream<char, struct std::char_traits<char> >(class std::basic_streambuf<char, struct std::char_traits<char> > * __ptr64, bool) __ptr64 ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
MSVCP140.dll	1018		public: int __cdecl std::codecvt<char, char, struct _Mbstatet>::in(struct _Mbstatet & __ptr64, char const * __ptr64, char const * __ptr64, char const * __ptr64 & __ptr64, char * __ptr64, char * __ptr64, char * __ptr64 & __ptr64)const __ptr64 ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
MSVCP140.dll	1075		public: int __cdecl std::codecvt<char, char, struct _Mbstatet>::out(struct _Mbstatet & __ptr64, char const * __ptr64, char const * __ptr64, char const * __ptr64 & __ptr64, char * __ptr64, char * __ptr64, char * __ptr64 & __ptr64)const __ptr64 ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
MSVCP140.dll	125		public: virtual __cdecl std::basic_ios<char, struct std::char_traits<char> >::~basic_ios<char, struct std::char_traits<char> >(void) __ptr64 ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
MSVCP140.dll	137		public: virtual __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::~basic_streambuf<char, struct std::char_traits<char> >(void) __ptr64 ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
MSVCP140.dll	1237		protected: virtual __int64 __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::showmanyc(void) __ptr64 ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
MSVCP140.dll	1347		protected: virtual __int64 __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::xsgetn(char * __ptr64, __int64) __ptr64 ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
MSVCP140.dll	1350		protected: virtual __int64 __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::xsputn(char const * __ptr64, __int64) __ptr64 ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
MSVCP140.dll	134		public: virtual __cdecl std::basic_ostream<char, struct std::char_traits<char> >::~basic_ostream<char, struct std::char_traits<char> >(void) __ptr64 ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
MSVCP140.dll	669		public: bool __cdecl std::codecvt_base::always_noconv(void)const __ptr64 ?always_noconv@codecvt_base@std@@QEBA_NXZ
MSVCP140.dll	305		public: __cdecl std::locale::id::operator unsigned __int64(void) __ptr64 ??Bid@locale@std@@QEAA_KXZ
MSVCP140.dll	26		public: __cdecl std::basic_istream<char, struct std::char_traits<char> >::basic_istream<char, struct std::char_traits<char> >(class std::basic_streambuf<char, struct std::char_traits<char> > * __ptr64, bool) __ptr64 ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
MSVCP140.dll	131		public: virtual __cdecl std::basic_istream<char, struct std::char_traits<char> >::~basic_istream<char, struct std::char_traits<char> >(void) __ptr64 ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
MSVCP140.dll	1165		public: class std::basic_istream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_istream<char, struct std::char_traits<char> >::read(char * __ptr64, __int64) __ptr64 ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
MSVCP140.dll	1183		public: class std::basic_istream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_istream<char, struct std::char_traits<char> >::seekg(__int64, int) __ptr64 ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
MSVCP140.dll	1283		public: class std::fpos<struct _Mbstatet> __cdecl std::basic_istream<char, struct std::char_traits<char> >::tellg(void) __ptr64 ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
MSVCP140.dll	19		public: __cdecl std::basic_iostream<char, struct std::char_traits<char> >::basic_iostream<char, struct std::char_traits<char> >(class std::basic_streambuf<char, struct std::char_traits<char> > * __ptr64) __ptr64 ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
MSVCP140.dll	552		public: virtual void __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::_Lock(void) __ptr64 ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
MSVCP140.dll	639		public: virtual void __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::_Unlock(void) __ptr64 ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
MSVCP140.dll	1307		protected: virtual int __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::uflow(void) __ptr64 ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
VCRUNTIME140.dll	14		__CxxFrameHandler3
VCRUNTIME140.dll	59		memcmp
VCRUNTIME140.dll	37		__std_type_info_destroy_list
VCRUNTIME140.dll	62		memset
VCRUNTIME140.dll	41		__telemetry_main_return_trigger
VCRUNTIME140.dll	40		__telemetry_main_invoke_trigger
VCRUNTIME140.dll	8		__C_specific_handler
VCRUNTIME140.dll	58		memchr
VCRUNTIME140.dll	33		__std_exception_copy
VCRUNTIME140.dll	34		__std_exception_destroy
VCRUNTIME140.dll	35		__std_terminate
VCRUNTIME140.dll	54		_purecall
VCRUNTIME140.dll	61		memmove
VCRUNTIME140.dll	1		_CxxThrowException
VCRUNTIME140.dll	60		memcpy
api-ms-win-crt-heap-l1-1-0.dll	8		_callnewh
api-ms-win-crt-heap-l1-1-0.dll	26		realloc
api-ms-win-crt-heap-l1-1-0.dll	24		free
api-ms-win-crt-heap-l1-1-0.dll	23		calloc
api-ms-win-crt-heap-l1-1-0.dll	25		malloc
api-ms-win-crt-runtime-l1-1-0.dll	55		_initterm_e
api-ms-win-crt-runtime-l1-1-0.dll	57		_invalid_parameter_noinfo_noreturn
api-ms-win-crt-runtime-l1-1-0.dll	84		abort
api-ms-win-crt-runtime-l1-1-0.dll	33		_errno
api-ms-win-crt-runtime-l1-1-0.dll	54		_initterm
api-ms-win-crt-runtime-l1-1-0.dll	22		_cexit
api-ms-win-crt-runtime-l1-1-0.dll	30		_crt_atexit
api-ms-win-crt-runtime-l1-1-0.dll	34		_execute_onexit_table
api-ms-win-crt-runtime-l1-1-0.dll	60		_register_onexit_function
api-ms-win-crt-runtime-l1-1-0.dll	56		_invalid_parameter_noinfo
api-ms-win-crt-runtime-l1-1-0.dll	63		_seh_filter_dll
api-ms-win-crt-runtime-l1-1-0.dll	24		_configure_narrow_argv
api-ms-win-crt-runtime-l1-1-0.dll	51		_initialize_narrow_environment
api-ms-win-crt-runtime-l1-1-0.dll	52		_initialize_onexit_table
api-ms-win-crt-time-l1-1-0.dll	48		_time64
api-ms-win-crt-time-l1-1-0.dll	35		_localtime64
api-ms-win-crt-time-l1-1-0.dll	69		clock
api-ms-win-crt-time-l1-1-0.dll	40		_mktime64
api-ms-win-crt-time-l1-1-0.dll	70		strftime
api-ms-win-crt-time-l1-1-0.dll	14		_ctime64
api-ms-win-crt-stdio-l1-1-0.dll	120		fgetc
api-ms-win-crt-stdio-l1-1-0.dll	138		fwrite
api-ms-win-crt-stdio-l1-1-0.dll	121		fgetpos
api-ms-win-crt-stdio-l1-1-0.dll	152		setvbuf
api-ms-win-crt-stdio-l1-1-0.dll	157		ungetc
api-ms-win-crt-stdio-l1-1-0.dll	136		fsetpos
api-ms-win-crt-stdio-l1-1-0.dll	15		__stdio_common_vsprintf_s
api-ms-win-crt-stdio-l1-1-0.dll	13		__stdio_common_vsprintf
api-ms-win-crt-stdio-l1-1-0.dll	47		_fseeki64
api-ms-win-crt-stdio-l1-1-0.dll	57		_get_stream_buffer_pointers
api-ms-win-crt-stdio-l1-1-0.dll	127		fputc
api-ms-win-crt-stdio-l1-1-0.dll	116		fclose
api-ms-win-crt-stdio-l1-1-0.dll	119		fflush
api-ms-win-crt-filesystem-l1-1-0.dll	22		_lock_file
api-ms-win-crt-filesystem-l1-1-0.dll	36		_unlock_file
api-ms-win-crt-convert-l1-1-0.dll	80		atoi
api-ms-win-crt-string-l1-1-0.dll	149		strtok_s
api-ms-win-crt-string-l1-1-0.dll	161		wcscpy_s
api-ms-win-crt-string-l1-1-0.dll	42		_stricmp

ord	entry_va	function_name
1	0x140f0	APIPHBInitialize
2	0x14640	APIPInitializeW
3	0x13f30	APIPSonarInitialize
4	0x14da0	AdobePIPEnableCrashDetection
5	0x14d10	AdobePIPGetLogHandle
6	0x14a60	AdobePIPInitializeW
7	0x14db0	AdobePIPIsThorNoticeShowed
8	0x142b0	AdobePIPSetProductDisplayNameW
9	0x14b10	AdobePIPTerminate

module_name	AdobePIP.dll
flags	0
timestamp	2016-09-12 09:53:30
version	0.0
ordinal_base	1
nFunctions	9
nNames	9
Names(9)	0x40e7c
Functions(9)	0x40e58
NameOrdinals(9)	0x40ea0

StringTable 000004b0

CompanyName	Adobe Systems, Incorporated
FileDescription	Adobe Product Improvement Program
FileVersion	7.4.1.60.45263
InternalName	AdobePIP
LegalCopyright	Copyright © 2016 Adobe. All rights reserved.
OriginalFilename	AdobePIP.dll
ProductName	Adobe Product Improvement Program
ProductVersion	7.4.1.60.45263

VS_FIXEDFILEINFO

FileVersion	7.4.1.60
ProductVersion	7.4.1.60
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	2
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 Extended Validation Code Signing CA - G2

serial: 3624872AC101E39BF9774A149EB7DED9

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Mar  4 00:00:00 2014 GMT
            Not After : Mar  3 23:59:59 2024 GMT
        Subject: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Extended Validation Code Signing CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d0:18:02:ee:ed:a2:8d:08:58:63:0f:26:d7:dd:
                    22:7b:88:f6:e4:c7:ec:3b:26:18:78:d3:c7:a4:20:
                    53:8d:83:7c:a5:3f:7e:a5:c8:2b:47:df:0d:f5:a6:
                    d9:c3:1d:25:93:60:cf:7c:dc:ea:03:2c:be:78:7f:
                    5c:48:6d:a7:02:d9:49:f8:a1:eb:eb:9a:61:7c:9f:
                    c0:26:d6:dc:15:d8:b8:10:7c:20:ba:5e:f4:28:f6:
                    a8:ea:a7:5c:7c:c6:9c:90:90:34:3c:b6:22:ac:fe:
                    ba:0c:3a:1e:d6:5e:84:b6:5b:f0:a3:81:70:78:8a:
                    8d:46:52:7b:fc:db:49:f3:29:13:11:74:4f:8d:16:
                    b3:c2:e3:a0:2d:c7:03:04:9d:cc:c3:72:e1:0e:0c:
                    fb:02:8e:f1:26:17:7b:6e:ae:f8:b7:33:8b:a6:61:
                    4b:45:df:f2:25:44:c7:f7:b0:98:23:36:dc:28:79:
                    0a:e8:9b:72:88:a8:d8:e8:ae:7b:7f:0a:64:45:a5:
                    f0:57:92:9a:77:06:45:1e:eb:9f:e8:66:f3:7a:7d:
                    92:81:5f:00:2d:1e:b8:f6:56:13:5a:62:0d:b7:47:
                    a1:8f:72:ef:83:5e:82:e0:94:98:e1:ac:a5:ad:86:
                    37:e0:a7:d3:ba:b1:3e:7a:eb:45:a8:f1:c1:44:7d:
                    e2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://s.symcb.com/pca3-g5.crl
            X509v3 Extended Key Usage: critical
                Code Signing
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                OCSP - URI:http://s.symcd.com
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                  CPS: https://d.symcb.com/cps
                  User Notice:
                    Explicit Text: https://d.symcb.com/rpa
            X509v3 Subject Alternative Name: 
                DirName:/CN=SymantecPKI-1-629
            X509v3 Subject Key Identifier: 
                16:66:DE:4A:34:E3:50:A7:11:86:03:B1:6C:A9:C6:AC:CD:59:6E:9B
            X509v3 Authority Key Identifier: 
                7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        3f:5b:19:f3:fa:13:d5:75:38:2a:5a:ee:9f:5a:a0:4c:a9:1d:
        c5:cc:94:ee:de:15:fe:f5:10:6e:a4:1b:a5:64:83:54:18:58:
        c4:0b:28:a1:85:c3:4e:74:e5:ff:89:7c:fe:d5:ed:3c:ba:71:
        9f:56:02:26:8f:16:2a:88:fe:b0:a3:27:22:ce:4b:e2:38:8e:
        00:a6:3a:86:5f:9d:e5:3e:a8:de:64:49:41:74:41:21:fd:07:
        c8:84:17:da:1d:65:30:82:cb:26:4f:39:d6:04:27:a4:81:b1:
        4b:49:c3:23:8b:7e:02:32:18:27:b7:ab:0b:f3:18:72:b6:a4:
        ee:67:06:6f:38:a6:58:8d:e0:f1:7e:5d:a4:60:c6:a8:e5:50:
        5f:e0:e8:ba:e2:8f:99:58:b6:b5:a0:a8:76:f1:a2:f1:1c:88:
        41:72:7e:52:97:9b:0a:36:99:8d:50:f7:01:eb:3c:e7:f0:22:
        6a:e5:35:8c:63:36:8a:1a:b1:d9:67:66:5f:97:1a:ef:a8:20:
        9d:f0:2f:ba:6c:ce:d9:94:85:00:f1:58:f1:7d:c9:7c:22:b5:
        07:5d:02:c6:e6:0b:bf:ab:93:93:ff:27:18:8e:33:36:7e:57:
        34:f1:c3:af:04:c1:84:f1:56:b3:e8:87:83:36:f8:d3:0a:31:
        dc:6e:2c:6d

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:24:87:2a:c1:01:e3:9b:f9:77:4a:14:9e:b7:de:d9
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Extended Validation Code Signing CA - G2
        Validity
            Not Before: Nov  6 00:00:00 2015 GMT
            Not After : Oct 28 23:59:59 2017 GMT
        Subject: jurisdictionC=US/jurisdictionST=Delaware/businessCategory=Private Organization/serialNumber=2748129, C=US, ST=California, L=San Jose, O=Adobe Systems Incorporated, OU=Audition,Encore,Dynamic Link Media Server, CN=Adobe Systems Incorporated
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a9:56:71:40:b2:f2:50:ec:ec:14:88:dc:da:54:
                    3b:0a:75:83:c4:b1:25:c8:ff:45:f4:96:df:a0:ad:
                    d4:8e:09:b5:16:a7:72:71:e7:d4:d2:04:a5:f1:81:
                    64:52:00:bb:8e:9e:03:7d:e6:a0:b3:79:99:c2:26:
                    d2:93:99:e7:ac:fd:88:6e:cf:9b:70:b1:9a:c4:ba:
                    83:d8:fc:45:f5:5f:17:6d:37:65:4b:2b:d8:c7:74:
                    c9:22:51:c3:e8:12:60:01:12:3f:9e:c6:0e:11:12:
                    21:9a:cf:91:85:7b:e1:bc:f1:95:16:d4:c0:13:5f:
                    13:d7:ee:a2:41:18:a0:a5:fa:99:08:9a:91:05:7f:
                    f1:1e:7c:d5:9d:68:1b:af:48:e8:60:02:43:67:d7:
                    3c:7f:a0:08:89:49:d7:6b:17:84:23:6b:55:6f:73:
                    81:b0:2f:db:b9:c2:91:ed:1c:10:d2:dc:7e:4c:99:
                    6b:13:ec:8d:4b:e6:b3:fc:5c:b0:7e:88:bb:bd:ee:
                    6a:93:1c:99:db:b4:84:7e:09:11:31:c3:84:5f:5a:
                    95:7e:ca:af:e5:d9:13:e4:18:24:ec:5e:e4:35:1f:
                    82:d2:ba:cc:97:c2:a0:37:f6:50:27:97:af:e9:66:
                    88:24:d9:e9:36:69:78:91:e4:11:72:7e:7b:14:8d:
                    f9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Alternative Name: 
                othername: Permanent Identifier::<unsupported>
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://sw.symcb.com/sw.crl
            X509v3 Extended Key Usage: critical
                Code Signing
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.6
                  CPS: https://d.symcb.com/cps
                  User Notice:
                    Explicit Text: https://d.symcb.com/rpa
            X509v3 Subject Key Identifier: 
                9F:15:2D:3C:9F:4E:0F:73:0B:4B:85:9A:81:5E:D3:14:61:59:48:3A
            Authority Information Access: 
                OCSP - URI:http://sw.symcd.com
                CA Issuers - URI:http://sw1.symcb.com/sw.crt
            X509v3 Authority Key Identifier: 
                16:66:DE:4A:34:E3:50:A7:11:86:03:B1:6C:A9:C6:AC:CD:59:6E:9B
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        56:b6:9a:09:79:9d:b0:1c:7d:e7:36:a5:5d:e9:73:9e:cc:e5:
        ee:9c:2b:dd:79:0f:b1:00:46:74:a8:45:c9:08:16:ad:fa:50:
        f8:21:4d:e5:55:a2:24:4d:74:29:ea:84:eb:aa:91:d4:ab:5e:
        b8:f3:60:67:18:f9:1a:b5:87:02:6f:8d:d0:a1:a3:40:94:2d:
        ed:24:05:4c:f7:38:cf:06:56:72:97:5d:83:13:29:e8:df:da:
        12:5e:b2:6f:aa:c9:d4:10:f2:b2:f9:44:b2:22:68:37:37:3a:
        6e:10:95:10:61:05:ea:eb:8c:fd:a0:16:fe:94:f1:32:78:ac:
        53:d8:50:cf:b2:15:07:68:7a:30:b6:13:8b:01:69:54:bb:59:
        f6:41:1e:f6:3c:2f:f3:60:40:23:04:e4:e5:04:27:09:50:c6:
        cb:3c:bf:5d:44:74:3c:d0:41:06:04:58:66:bb:2c:c4:12:5e:
        bc:cf:95:fb:7f:34:e8:dd:21:11:be:4c:53:86:ab:9c:84:ee:
        a6:0c:89:68:83:3e:fe:c1:ef:9f:21:73:40:ea:67:12:18:bb:
        9a:83:49:37:87:89:d8:cf:d6:e8:11:70:8e:a0:dd:f4:97:87:
        b0:cf:9f:2c:9e:4b:d7:04:b4:b1:ad:0f:5a:03:88:b7:05:cc:
        61:34:8f:65

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

1a 99 7b 1f ac 62 77 88 6d ea 1c f1 48 c8 2b 01 |..{..bw.m...H.+.| 9b 60 8b 76 |.`.v |

Certificates
- Certificate #0
  - 2
    - 19:1A:32:CB:75:9C:97:B8:CF:AC:11:8D:D5:12:7F:49
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: (c) 2006 VeriSign, Inc. - For authorized use only
      - CN: VeriSign Class 3 Public Primary Certification Authority - G5
    - 2014-03-04 00:00:00 UTC: 2024-03-03 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - OU: Symantec Trust Network
      - CN: Symantec Class 3 Extended Validation Code Signing CA - G2
    - #5
      - rsaEncryption: nil
      - D0:18:02:EE:ED:A2:8D:08:58:63:0F:26:D7:DD:22:7B:
        88:F6:E4:C7:EC:3B:26:18:78:D3:C7:A4:20:53:8D:83:
        7C:A5:3F:7E:A5:C8:2B:47:DF:0D:F5:A6:D9:C3:1D:25:
        93:60:CF:7C:DC:EA:03:2C:BE:78:7F:5C:48:6D:A7:02:
        D9:49:F8:A1:EB:EB:9A:61:7C:9F:C0:26:D6:DC:15:D8:
        B8:10:7C:20:BA:5E:F4:28:F6:A8:EA:A7:5C:7C:C6:9C:
        90:90:34:3C:B6:22:AC:FE:BA:0C:3A:1E:D6:5E:84:B6:
        5B:F0:A3:81:70:78:8A:8D:46:52:7B:FC:DB:49:F3:29:
        13:11:74:4F:8D:16:B3:C2:E3:A0:2D:C7:03:04:9D:CC:
        C3:72:E1:0E:0C:FB:02:8E:F1:26:17:7B:6E:AE:F8:B7:
        33:8B:A6:61:4B:45:DF:F2:25:44:C7:F7:B0:98:23:36:
        DC:28:79:0A:E8:9B:72:88:A8:D8:E8:AE:7B:7F:0A:64:
        45:A5:F0:57:92:9A:77:06:45:1E:EB:9F:E8:66:F3:7A:
        7D:92:81:5F:00:2D:1E:B8:F6:56:13:5A:62:0D:B7:47:
        A1:8F:72:EF:83:5E:82:E0:94:98:E1:AC:A5:AD:86:37:
        E0:A7:D3:BA:B1:3E:7A:EB:45:A8:F1:C1:44:7D:E2:03: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        true: 0
      - crlDistributionPoints: http://s.symcb.com/pca3-g5.crl
      - extendedKeyUsage: true, codeSigning
      - keyUsage: true, 6
      - authorityInfoAccess
        OCSP: http://s.symcd.com
      - certificatePolicies
        anyPolicy
        #0
        id-qt-cps: https://d.symcb.com/cps
        id-qt-unotice: https://d.symcb.com/rpa
      - subjectAltName
        CN: SymantecPKI-1-629
      - subjectKeyIdentifier:
        16 66 de 4a 34 e3 50 a7 11 86 03 b1 6c a9 c6 ac |.f.J4.P.....l...| cd 59 6e 9b |.Yn. |
      - authorityKeyIdentifier:
        7f d3 65 a7 c2 dd ec bb f0 30 09 f3 43 39 fa 02 |..e......0..C9..| af 33 31 33 |.313 |
  - RSA-SHA256:
```
3f 5b 19 f3 fa 13 d5 75  38 2a 5a ee 9f 5a a0 4c  |?[.....u8*Z..Z.L|
a9 1d c5 cc 94 ee de 15  fe f5 10 6e a4 1b a5 64  |...........n...d|
83 54 18 58 c4 0b 28 a1  85 c3 4e 74 e5 ff 89 7c  |.T.X..(...Nt...||
fe d5 ed 3c ba 71 9f 56  02 26 8f 16 2a 88 fe b0  |...<.q.V.&..*...|
a3 27 22 ce 4b e2 38 8e  00 a6 3a 86 5f 9d e5 3e  |.'".K.8...:._..>|
a8 de 64 49 41 74 41 21  fd 07 c8 84 17 da 1d 65  |..dIAtA!.......e|
30 82 cb 26 4f 39 d6 04  27 a4 81 b1 4b 49 c3 23  |0..&O9..'...KI.#|
8b 7e 02 32 18 27 b7 ab  0b f3 18 72 b6 a4 ee 67  |.~.2.'.....r...g|
06 6f 38 a6 58 8d e0 f1  7e 5d a4 60 c6 a8 e5 50  |.o8.X...~].`...P|
5f e0 e8 ba e2 8f 99 58  b6 b5 a0 a8 76 f1 a2 f1  |_......X....v...|
1c 88 41 72 7e 52 97 9b  0a 36 99 8d 50 f7 01 eb  |..Ar~R...6..P...|
3c e7 f0 22 6a e5 35 8c  63 36 8a 1a b1 d9 67 66  |<.."j.5.c6....gf|
5f 97 1a ef a8 20 9d f0  2f ba 6c ce d9 94 85 00  |_.... ../.l.....|
f1 58 f1 7d c9 7c 22 b5  07 5d 02 c6 e6 0b bf ab  |.X.}.|"..]......|
93 93 ff 27 18 8e 33 36  7e 57 34 f1 c3 af 04 c1  |...'..36~W4.....|
84 f1 56 b3 e8 87 83 36  f8 d3 0a 31 dc 6e 2c 6d  |..V....6...1.n,m|
```
- Certificate #1
  - 2
    - 36:24:87:2A:C1:01:E3:9B:F9:77:4A:14:9E:B7:DE:D9
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: Symantec Corporation
      - OU: Symantec Trust Network
      - CN: Symantec Class 3 Extended Validation Code Signing CA - G2
    - 2015-11-06 00:00:00 UTC: 2017-10-28 23:59:59 UTC
    - #4
      - jurisdictionC: US
      - jurisdictionST: Delaware
      - businessCategory: Private Organization
      - serialNumber: 2748129
      - C: US
      - ST: California
      - L: San Jose
      - O: Adobe Systems Incorporated
      - OU: Audition,Encore,Dynamic Link Media Server
      - CN: Adobe Systems Incorporated
    - #5
      - rsaEncryption: nil
      - A9:56:71:40:B2:F2:50:EC:EC:14:88:DC:DA:54:3B:0A:
        75:83:C4:B1:25:C8:FF:45:F4:96:DF:A0:AD:D4:8E:09:
        B5:16:A7:72:71:E7:D4:D2:04:A5:F1:81:64:52:00:BB:
        8E:9E:03:7D:E6:A0:B3:79:99:C2:26:D2:93:99:E7:AC:
        FD:88:6E:CF:9B:70:B1:9A:C4:BA:83:D8:FC:45:F5:5F:
        17:6D:37:65:4B:2B:D8:C7:74:C9:22:51:C3:E8:12:60:
        01:12:3F:9E:C6:0E:11:12:21:9A:CF:91:85:7B:E1:BC:
        F1:95:16:D4:C0:13:5F:13:D7:EE:A2:41:18:A0:A5:FA:
        99:08:9A:91:05:7F:F1:1E:7C:D5:9D:68:1B:AF:48:E8:
        60:02:43:67:D7:3C:7F:A0:08:89:49:D7:6B:17:84:23:
        6B:55:6F:73:81:B0:2F:DB:B9:C2:91:ED:1C:10:D2:DC:
        7E:4C:99:6B:13:EC:8D:4B:E6:B3:FC:5C:B0:7E:88:BB:
        BD:EE:6A:93:1C:99:DB:B4:84:7E:09:11:31:C3:84:5F:
        5A:95:7E:CA:AF:E5:D9:13:E4:18:24:EC:5E:E4:35:1F:
        82:D2:BA:CC:97:C2:A0:37:F6:50:27:97:AF:E9:66:88:
        24:D9:E9:36:69:78:91:E4:11:72:7E:7B:14:8D:F9:BB: 0x010001
    - #6
      - subjectAltName
        id-on-permanentIdentifier: US-DELAWARE-2748129
      - basicConstraints
        nil
      - crlDistributionPoints: http://sw.symcb.com/sw.crl
      - extendedKeyUsage: true, codeSigning
      - keyUsage: true, 0x80
      - certificatePolicies
        2.16.840.1.113733.1.7.23.6
        #0
        id-qt-cps: https://d.symcb.com/cps
        id-qt-unotice: https://d.symcb.com/rpa
      - subjectKeyIdentifier:
        9f 15 2d 3c 9f 4e 0f 73 0b 4b 85 9a 81 5e d3 14 |..-<.N.s.K...^..| 61 59 48 3a |aYH: |
      - authorityInfoAccess
        #0
        OCSP: http://sw.symcd.com
        caIssuers: http://sw1.symcb.com/sw.crt
      - authorityKeyIdentifier:
        16 66 de 4a 34 e3 50 a7 11 86 03 b1 6c a9 c6 ac |.f.J4.P.....l...| cd 59 6e 9b |.Yn. |
  - RSA-SHA256:
```
56 b6 9a 09 79 9d b0 1c  7d e7 36 a5 5d e9 73 9e  |V...y...}.6.].s.|
cc e5 ee 9c 2b dd 79 0f  b1 00 46 74 a8 45 c9 08  |....+.y...Ft.E..|
16 ad fa 50 f8 21 4d e5  55 a2 24 4d 74 29 ea 84  |...P.!M.U.$Mt)..|
eb aa 91 d4 ab 5e b8 f3  60 67 18 f9 1a b5 87 02  |.....^..`g......|
6f 8d d0 a1 a3 40 94 2d  ed 24 05 4c f7 38 cf 06  |o....@.-.$.L.8..|
56 72 97 5d 83 13 29 e8  df da 12 5e b2 6f aa c9  |Vr.]..)....^.o..|
d4 10 f2 b2 f9 44 b2 22  68 37 37 3a 6e 10 95 10  |.....D."h77:n...|
61 05 ea eb 8c fd a0 16  fe 94 f1 32 78 ac 53 d8  |a..........2x.S.|
50 cf b2 15 07 68 7a 30  b6 13 8b 01 69 54 bb 59  |P....hz0....iT.Y|
f6 41 1e f6 3c 2f f3 60  40 23 04 e4 e5 04 27 09  |.A......|
21 73 40 ea 67 12 18 bb  9a 83 49 37 87 89 d8 cf  |!s@.g.....I7....|
d6 e8 11 70 8e a0 dd f4  97 87 b0 cf 9f 2c 9e 4b  |...p.........,.K|
d7 04 b4 b1 ad 0f 5a 03  88 b7 05 cc 61 34 8f 65  |......Z.....a4.e|
```

Signer

1
unnamed
- #0
  - C: US
  - O: Symantec Corporation
  - OU: Symantec Trust Network
  - CN: Symantec Class 3 Extended Validation Code Signing CA - G2
- 36:24:87:2A:C1:01:E3:9B:F9:77:4A:14:9E:B7:DE:D9
SHA1: nil

contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

8d f7 17 98 18 f0 41 d1  1b 34 40 f4 4c c4 dc 3d  |......A..4@.L..=|
7b bd 51 89                                       |{.Q.            |

1.3.6.1.4.1.311.2.1.12:

00 41 00 64 00 6f 00 62  00 65 00 20 00 41 00 75  |.A.d.o.b.e. .A.u|
00 64 00 69 00 74 00 69  00 6f 00 6e 00 20 00 43  |.d.i.t.i.o.n. .C|
00 43                                             |.C              |

rsaEncryption:

69 b8 46 15 d3 a0 fd 4c  78 f2 58 85 07 4b 1d 2f  |i.F....Lx.X..K./|
20 dd e5 c2 44 f9 ba d9  d4 ea 90 b2 97 35 01 32  | ...D........5.2|
f0 4a ec fe 3d 64 02 82  b1 05 11 46 0a 2a 12 86  |.J..=d.....F.*..|
8d ca 53 bc 5b 60 50 65  61 3a cd 0b f9 7a 85 7b  |..S.[`Pea:...z.{|
33 70 28 e1 6d c6 57 00  e0 64 d0 aa 75 ac fa 0f  |3p(.m.W..d..u...|
9f 75 fa 94 7a 32 da aa  2b c9 65 8b e3 a4 2f 2c  |.u..z2..+.e.../,|
8d 67 3c 9e 61 ec 4c cb  ea 1f b2 8d 70 ee 28 1b  |.g<.a.L.....p.(.|
cb 15 b9 54 d0 ad 72 cc  30 e1 a0 f2 62 6a 43 39  |...T..r.0...bjC9|
49 31 83 e1 c8 92 5c 53  54 82 13 66 1c 1f 5c 86  |I1....\ST..f..\.|
e5 86 6c fa 1f a1 88 1e  94 60 db 5e 6f 41 41 96  |..l......`.^oAA.|
3a 97 f9 d9 65 02 8a 19  86 f9 fa b8 9a 00 88 1a  |:...e...........|
d0 ab 09 e4 de 1d 7a 9f  be 2a bf 9f 80 c7 3b 28  |......z..*....;(|
2d 15 a8 ce d1 d4 eb f3  6d b8 10 2d 4b e9 11 22  |-.......m..-K.."|
fe 1e 19 04 31 c5 37 b4  79 6a 5d 51 21 23 2f 17  |....1.7.yj]Q!#/.|
7b 1e 3f a3 ee ed 40 9a  eb af 70 f3 08 51 72 d7  |{.?...@...p..Qr.|
c2 6e ee 10 99 14 6d 1f  34 91 36 85 30 c0 18 a0  |.n....m.4.6.0...|

1.3.6.1.4.1.311.3.3.1

pkcs7-signedData

SHA256
id-smime-ct-TSTInfo
- 1
  - 2.16.840.1.113733.1.7.23.3
  - SHA256
    - 5e 79 49 01 be e5 e1 ac 9b 0d d0 4f 88 55 c9 95 |^yI........O.U..| 2c b1 4d d3 ae ef b3 94 03 f0 4f ce f8 63 d9 2c |,.M.......O..c.,|
  - 37:02:02:06:A7:20:A5:99:94:8D:07:8C:A0:3C:3A:37:
    6B:5E:22:AF
  - 2017-01-13 17:00:56 UTC
  - 0x1E
  - #5
    - C: US
    - O: Symantec Corporation
    - OU: Symantec Trust Network
    - CN: Symantec SHA256 TimeStamping Signer - G1
Certificates
- Certificate #0
  - 2
    - 7B:05:B1:D4:49:68:51:44:F7:C9:89:D2:9C:19:9D:12
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: (c) 2008 VeriSign, Inc. - For authorized use only
      - CN: VeriSign Universal Root Certification Authority
    - 2016-01-12 00:00:00 UTC: 2031-01-11 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - OU: Symantec Trust Network
      - CN: Symantec SHA256 TimeStamping CA
    - #5
      - rsaEncryption: nil
      - BB:59:9D:59:55:4F:9D:8C:72:5D:1A:81:A2:EB:55:F3:
        B0:01:AD:3C:71:AC:32:8F:05:6B:86:9A:27:00:32:97:
        6A:4D:C9:64:14:4B:29:BB:C2:D9:29:B9:2E:EC:63:B3:
        E1:CF:3F:0B:56:90:F8:62:1B:7E:EB:A6:07:E2:DE:7F:
        5E:6D:40:38:D4:91:06:E7:41:7C:79:1C:CB:CB:AD:1B:
        BF:D8:95:91:F3:F0:EE:6C:F8:AD:96:39:2E:7F:C1:27:
        B8:78:39:C5:84:A5:ED:ED:AF:87:8E:CE:8D:C7:6D:EA:
        D2:98:B5:3A:1F:1E:39:9D:C3:F4:9A:A8:F4:84:E1:C4:
        D1:7C:71:C6:06:29:B4:3F:E4:83:0D:26:C3:7B:08:3E:
        4D:F9:0A:B7:33:49:FF:CA:3B:D4:F5:B2:9B:4B:E1:88:
        99:1A:F5:C0:E9:33:14:D6:DF:C7:80:DB:91:EE:FE:BC:
        92:57:72:77:F4:CD:A8:CC:FE:09:F5:93:37:BE:95:88:
        6A:C5:DC:F4:B1:4B:D4:CE:E8:09:91:5F:B5:84:79:35:
        8A:78:AC:19:32:8F:23:C1:32:41:1B:59:0E:A9:3E:B1:
        CC:F9:D6:2B:EF:B7:D8:E4:D5:1D:6D:11:3A:92:F6:93:
        C9:9C:E3:48:EE:BB:53:0E:D4:36:97:86:78:C5:A1:37: 0x010001
    - #6
      - keyUsage: true, 6
      - basicConstraints
        true
        true: 0
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://d.symcb.com/cps
        id-qt-unotice: https://d.symcb.com/rpa
      - authorityInfoAccess
        OCSP: http://s.symcd.com
      - crlDistributionPoints: http://s.symcb.com/universal-root.crl
      - extendedKeyUsage: timeStamping
      - subjectAltName
        CN: TimeStamp-2048-3
      - subjectKeyIdentifier:
        af 63 d6 ca a3 4e 85 72 e0 a7 bc 41 f3 29 a2 38 |.c...N.r...A.).8| 7f 80 75 62 |..ub |
      - authorityKeyIdentifier:
        b6 77 fa 69 48 47 9f 53 12 d5 c2 ea 07 32 76 07 |.w.iHG.S.....2v.| d1 97 07 19 |.... |
  - RSA-SHA256:
```
75 ea b0 2d d5 34 19 5c  32 45 fe 0e e1 d4 4f a6  |u..-.4.\2E....O.|
78 c1 6f d7 ea dd dc 4f  f3 a1 c8 81 88 f7 a7 8f  |x.o....O........|
15 e6 40 29 ad e6 5d f4  a2 d9 56 64 84 71 30 2a  |..@)..]...Vd.q0*|
dd 1e 61 17 66 20 56 06  98 19 8d 5d 71 f2 f8 97  |..a.f V....]q...|
bc 09 fd 1c 91 47 c9 e2  e8 8d 03 fb cc 90 2f d6  |.....G......../.|
0a 6c 4e 33 ec d6 b4 93  c8 4c 90 63 48 39 40 21  |.lN3.....L.cH9@!|
c4 dd d6 6e 89 98 3c b5  98 97 e8 a9 06 b7 09 c9  |...n..<.........|
8f 53 57 41 90 2f e1 1e  4d 4e dc ca 10 78 6c 42  |.SWA./..MN...xlB|
6e f0 b6 c5 f8 61 5c 52  f5 4e f6 6b 8d f7 4a 7a  |n....a\R.N.k..Jz|
be f3 cd fd 03 d7 d9 f6  03 a8 0f e3 53 f7 0a 75  |............S..u|
ec c6 75 2e aa 66 85 04  99 b7 f8 06 57 e1 c6 0e  |..u..f......W...|
f6 e8 af da ec 9b 18 1f  aa b9 e3 3a 00 bf ce 8a  |...........:....|
94 cb 01 db 9e c7 38 bb  0f 52 ab d1 e3 94 03 60  |......8..R.....`|
0a 4d a0 fe 27 6d 14 32  fc 3f 97 40 e1 bf 99 89  |.M..'m.2.?.@....|
db e4 39 14 bd da e4 d3  c3 ea 2b 5a b3 95 58 55  |..9.......+Z..XU|
04 7d c7 9a ec 23 03 8d  85 2a d2 ff ae a9 61 81  |.}...#...*....a.|
```
- Certificate #1
  - 2
    - 54:F3:7D:A1:71:67:51:BC:6A:8D:0A:D2:74:B2:8B:13
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: Symantec Corporation
      - OU: Symantec Trust Network
      - CN: Symantec SHA256 TimeStamping CA
    - 2016-01-12 00:00:00 UTC: 2027-04-11 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - OU: Symantec Trust Network
      - CN: Symantec SHA256 TimeStamping Signer - G1
    - #5
      - rsaEncryption: nil
      - 9F:FB:DF:8F:1F:A7:CF:9E:3E:1A:CB:EB:68:AD:CF:27:
        1C:EE:81:55:A9:87:08:58:E5:81:4D:09:14:E0:ED:D0:
        F3:D4:0F:3F:21:B6:1E:0E:34:D4:F1:68:0A:6F:7D:8F:
        89:D9:F2:EA:A7:D8:25:38:A4:8C:36:CA:EE:28:CF:33:
        F8:75:3D:D8:9D:CF:92:DD:56:E3:F6:B0:79:54:66:B5:
        45:82:43:44:D2:6A:B1:AB:17:A2:C3:E5:EF:00:EA:27:
        F3:27:88:0E:87:3C:F6:6E:BC:A9:EC:F6:BB:2E:6A:77:
        06:22:BD:FA:B8:7F:C3:24:07:F7:3F:BB:4C:B0:FF:43:
        CB:93:CA:12:AA:95:24:00:90:B2:2B:36:A2:D2:DD:D2:
        B3:D1:99:32:DD:CF:F4:CC:73:16:49:83:7F:24:EB:ED:
        78:46:D3:EE:5F:6C:42:65:1B:67:8D:F0:26:1A:0E:5E:
        87:6E:5A:8F:A0:82:7E:6E:9F:CD:26:DE:BD:61:EF:44:
        5E:45:8B:A8:94:D3:1C:04:32:A1:FF:A4:A7:A2:AA:77:
        01:DB:2A:DE:0F:4C:92:36:C6:69:AC:5C:84:80:AD:25:
        F5:ED:30:C3:68:1D:17:DB:0A:4D:9A:34:78:59:01:9B:
        6B:02:85:38:E2:27:71:A2:14:54:30:60:93:20:48:23: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        nil
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://d.symcb.com/cps
        id-qt-unotice: https://d.symcb.com/rpa
      - crlDistributionPoints: http://ts-crl.ws.symantec.com/sha256-tss-ca.crl
      - extendedKeyUsage: true, timeStamping
      - keyUsage: true, 0x80
      - authorityInfoAccess
        #0
        OCSP: http://ts-ocsp.ws.symantec.com
        caIssuers: http://ts-aia.ws.symantec.com/sha256-tss-ca.cer
      - subjectAltName
        CN: TimeStamp-2048-4
      - subjectKeyIdentifier:
        ed 6b 60 cf 3b 58 f8 3e 32 cc bf a4 e8 ab e8 ea |.k`.;X.>2.......| a2 50 42 7f |.PB. |
      - authorityKeyIdentifier:
        af 63 d6 ca a3 4e 85 72 e0 a7 bc 41 f3 29 a2 38 |.c...N.r...A.).8| 7f 80 75 62 |..ub |
  - RSA-SHA256:
```
a2 8d 5e 5d 1d ee 4e d2  93 fd 4f e5 f4 6d a6 f0  |..^]..N...O..m..|
89 45 55 bb 08 ca ab 24  a1 16 24 c9 4f 17 c1 9f  |.EU....$..$.O...|
f4 dd 02 9a c2 47 c0 a9  dc 88 89 77 c1 86 86 f1  |.....G.....w....|
d5 49 96 f3 fb 1e 98 d6  c9 1d 35 23 88 99 8a 62  |.I........5#...b|
e1 75 a8 4d 78 a7 3d ec  24 80 15 9e 68 d4 3a a4  |.u.Mx.=.$...h.:.|
c2 4c dc 71 6c 96 9d 8e  1e 0c 2e 6c 52 01 9e 56  |.L.ql......lR..V|
90 3f a2 5e 92 cd b6 da  41 1a 24 83 a1 7a a3 5f  |.?.^....A.$..z._|
fe 8d 3b 6f 39 d1 3f 41  5f 56 1c 27 0c e5 7c 05  |..;o9.?A_V.'..|.|
d8 67 36 88 e5 b0 c2 c3  04 a3 5a 56 b8 12 04 8e  |.g6.......ZV....|
d4 9c 24 6b 1b 66 b4 be  a0 1a e1 b5 cd ec e3 44  |..$k.f.........D|
a4 b1 3c e7 92 f3 58 dd  df e8 b1 58 4b 70 4b ce  |..<...X....XKpK.|
90 00 cc dc a3 d1 d2 6e  75 16 54 44 02 ef 1b 54  |.......nu.TD...T|
44 63 e8 b5 70 c8 b9 47  9a 5b 45 c4 6e 76 9a 18  |Dc..p..G.[E.nv..|
b1 f7 10 33 c8 0b 51 f5  55 8c fd 21 1e 41 8f 4e  |...3..Q.U..!.A.N|
3e 90 5d 80 01 c8 bc 24  7e 86 68 14 15 14 34 35  |>.]....$~.h...45|
74 49 b7 87 52 29 d6 96  5e a2 a3 16 d4 b0 d3 7b  |tI..R)..^......{|
```

unnamed
- #0
  - C: US
  - O: Symantec Corporation
  - OU: Symantec Trust Network
  - CN: Symantec SHA256 TimeStamping CA
- 54:F3:7D:A1:71:67:51:BC:6A:8D:0A:D2:74:B2:8B:13
SHA256

contentType: id-smime-ct-TSTInfo
signingTime: 2017-01-13 17:00:56 UTC

messageDigest:

4b ce 13 1a bf 7e c3 7a  74 6e e7 49 4c 3b f5 0d  |K....~.ztn.IL;..|
5d c0 6c a3 34 bc e2 c1  cf 73 72 11 bd 32 19 d4  |].l.4....sr..2..|

id-smime-aa-signingCertificateV2:

82 d5 56 db db 5d ad 5f  a0 7b b6 07 26 a6 d8 6e  |..V..]._.{..&..n|
73 0b 5b b7 29 88 5b b6  de 4f f2 75 29 02 2c fc  |s.[.).[..O.u).,.|

rsaEncryption

1b e8 45 02 9f 04 28 c1 46 84 ff 0b cc b4 7a 2b |..E...(.F.....z+| 2b 00 1a 5c 08 ad 12 40 73 c6 a2 0e 5b 8a da 27 |+..\...@s...[..'| d1 d3 7b dd 8d dd 6a 42 93 58 9b 33 3e 5e b7 bc |..{...jB.X.3>^..| 71 45 78 08 0a 3e ea ac 0e 67 3b 58 3f 0e 01 18 |qEx..>...g;X?...| 53 eb 21 06 ae 52 09 93 e2 d3 e0 a9 11 b5 86 5e |S.!..R.........^| ef 3f 5e 65 7c 0f df 04 68 b7 ed 58 38 1b df bf |.?^e|...h..X8...| af 39 b8 25 39 04 59 0b 95 11 85 58 b8 11 e9 fc |.9.%9.Y....X....| f7 9e d5 48 ac 46 57 5a 00 d6 0f 42 74 33 a8 56 |...H.FWZ...Bt3.V| f1 22 82 fe f9 fe 49 17 37 7e 94 49 49 4a 4a 61 |."....I.7~.IIJJa| f5 98 75 31 de bc 18 66 1e 4f 66 ac 01 55 5b 0a |..u1...f.Of..U[.| f9 98 a0 bb 37 5f 04 c6 f2 b9 1e e3 03 2c ab e5 |....7_.......,..| c8 52 a7 80 dc 4f 03 e0 a3 d2 16 ac f0 a5 5a f0 |.R...O........Z.| 51 6b d8 ed 6c e5 d6 7c d5 77 f6 b2 2a 2f 7b 01 |Qk..l..|.w..*/{.| d8 b5 55 2e d6 3a d3 d6 5e e5 5c a0 cb ff ce 36 |..U..:..^.\....6| 62 62 4b ca 9e 77 dc 18 ee 07 39 a1 41 3b 89 c2 |bbK..w....9.A;..| 99 d6 0a b5 ec 5d 3e 73 8c b8 df bc 29 70 f4 f7 |.....]>s....)p..|

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	489120	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

AdobePIP.dll.DEL-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 000004b0

VS_FIXEDFILEINFO

Signers (1)

Certificates (2)

AdobePIP.dll.DEL
-