CV.EXE - CommView for WiFi Packet Analyzer

info
MZ
PE
resources
imports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	CV.EXE
size	8983968 (0x8915a0)
md5	94bc799a9d7eb1b6454b8c58dede4327

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x50
blocks_in_file	2
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0xf
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0x1a
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	0xb
TimeDateStamp	0x531b13ec
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x81af
Magic	0x10b
LinkerVersion	2.25
SizeOfCode	0x93dc00
SizeOfInitializedData	0x4b5800
SizeOfUninitializedData	0
AddressOfEntryPoint	0xcda5d0
BaseOfCode	0x1000
BaseOfData	0x940000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0x1921000
SizeOfHeaders	0x400
CheckSum	0x89977a
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x4000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

PolyEnE 0.01+ by Lennart Hedlund

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x9357b8	0	R-X CODE
.itext	0x937000	0x8344	0	R-X CODE
.data	0x940000	0x2fb28	0	RW- IDATA
.bss	0x970000	0x67848	0	RW-
.idata	0x9d8000	0x60d4	0	RW- IDATA
.didata	0x9df000	0xaf8	0	RW- IDATA
.tls	0x9e0000	0x158	0	RW-
.rdata	0x9e1000	0x18	0	R-- IDATA
.KISS0	0x9e2000	0x2f08ce	0	RWX CODE IDATA
.KISS1	0xcd3000	0x8792c7	0x879400	RWX CODE IDATA
.rsrc	0x154d000	0x3d3808	0x16800	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0xcd4228	0x21c
RESOURCE	0x154d000	0x3d3808
EXCEPTION	0	0
SECURITY	0x890000	0x15a0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0xcda6a4	0x1c
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0xcdc000	0xf0
Delay_IAT	0x9df000	0xaf8
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0xde0000	0xde0158	0xd40c48	0x10da6bc	0	0

show previews

type	name	size
RSTABLE	ENG_RS	110708
CURSOR	#1	308
CURSOR	#2	308
CURSOR	#3	308
CURSOR	#4	308
CURSOR	#5	308
CURSOR	#6	308
CURSOR	#7	308
CURSOR	#8	748
CURSOR	#9	748
CURSOR	#10	748
CURSOR	#11	748
CURSOR	#12	308
CURSOR	#13	308
CURSOR	#14	308
CURSOR	#15	308
CURSOR	#16	308
CURSOR	#17	308
CURSOR	#18	308
CURSOR	#19	308
CURSOR	#20	308
CURSOR	#21	308
CURSOR	#22	748
CURSOR	#23	748
CURSOR	#24	748
CURSOR	#25	748
CURSOR	#26	748
CURSOR	#27	748
CURSOR	#28	308
CURSOR	#29	308
CURSOR	#30	308
BITMAP	ASCBMP	152
BITMAP	BBABORT	464
BITMAP	BBALL	484
BITMAP	BBCANCEL	464
BITMAP	BBCLOSE	464
BITMAP	BBHELP	464
BITMAP	BBIGNORE	464
BITMAP	BBNO	464
BITMAP	BBOK	464
BITMAP	BBRETRY	464
BITMAP	BBYES	464
BITMAP	CDROM	192
BITMAP	CLOSEDFOLDER	224
BITMAP	CURRENTFOLDER	224
BITMAP	DESCBMP	152
BITMAP	ELADVPANELCLOSEBUTTON	76
BITMAP	ELADVPANELDOWNARROW	68
BITMAP	ELADVPANELUPARROW	68
BITMAP	ELCALCULATOREDIT	136
BITMAP	ELDOWNARROW	120
BITMAP	ELFILENAMEEDITBUTTON	200
BITMAP	ELFILESAVEEDITBUTTON	208
BITMAP	ELFOLDERNAMEEDITBUTTON	192
BITMAP	ELFONTCOMBODEVICEBITMAP	248
BITMAP	ELFONTCOMBOTRUETYPEBITMAP	248
BITMAP	ELHEADERASCBMP	152
BITMAP	ELHEADERDESCBMP	152
BITMAP	ELHEADERLEFTBMP	132
BITMAP	ELHEADERPOINTBMP	124
BITMAP	ELHEADERRIGHTBMP	132
BITMAP	ELTOOLBARMOREARROW	144
BITMAP	EXECUTABLE	224
BITMAP	FLOPPY	192
BITMAP	HARD	192
BITMAP	HINTICONERROR	2344
BITMAP	HINTICONINFO	2344
BITMAP	HINTICONWARNING	2344
BITMAP	KNOWNFILE	224
BITMAP	LEAFBMP	176
BITMAP	LMDBMPCL_ARROWS	2088
BITMAP	LMDBMPCOL_BUTTON	3268
BITMAP	LMDBMPPLAYGLYPH	360
BITMAP	LMDBMPSHIELD_BIG	2088
BITMAP	LMDBMPSHIELD_SMALL	1320
BITMAP	MINUSBMP	176
BITMAP	NETWORK	192
BITMAP	OPENFOLDER	224
BITMAP	PLUSBMP	176
BITMAP	PREVIEWGLYPH	232
BITMAP	PREVIEWICON	808
BITMAP	RAM	192
BITMAP	SPINDOWN	152
BITMAP	SPINUP	152
BITMAP	SPLITDOWN	64
BITMAP	SPLITLEFT	76
BITMAP	SPLITRIGHT	76
BITMAP	SPLITUP	64
BITMAP	TBUTTONCOLOR	1640
BITMAP	TBUTTONGRADIENT	1640
BITMAP	TBUTTONPEN	1640
BITMAP	TCOMBOFLAT	1640
BITMAP	TEEARROWDOWN	272
BITMAP	TEEARROWUP	272
BITMAP	TIMAGEFILTERED	1640
BITMAP	TTEEINSPECTOR	1640
BITMAP	TTEEPREVIEWPANEL	1640
BITMAP	UNKNOWNFILE	224
BITMAP	VT_CHECK_DARK	3304
BITMAP	VT_CHECK_LIGHT	3304
BITMAP	VT_FLAT	3304
ICON	#1	1640
ICON	#2	744
ICON	#3	296
ICON	#4	3752
ICON	#5	2216
ICON	#6	1384
ICON	#7	7336
ICON	#8	3240
ICON	#9	872
ICON	#10	9640
ICON	#11	4264
ICON	#12	1128
ICON	#13	4264
ICON	#14	1128
ICON	#15	4264
ICON	#16	1128
ICON	#17	296
ICON	#18	296
ICON	#19	1128
ICON	#20	1128
ICON	#21	296
ICON	#22	296
ICON	#23	1128
ICON	#24	1128
ICON	#25	296
ICON	#26	296
ICON	#27	1128
ICON	#28	1128
GROUP_ICON	MAINICON	174
GROUP_ICON	PGEN	34
GROUP_ICON	RA	34
GROUP_ICON	TRAYICON_0	20
GROUP_ICON	TRAYICON_1	20
GROUP_ICON	TRAYICON_10	20
GROUP_ICON	TRAYICON_11	20
GROUP_ICON	TRAYICON_2	20
GROUP_ICON	TRAYICON_3	20
GROUP_ICON	TRAYICON_4	20
GROUP_ICON	TRAYICON_5	20
GROUP_ICON	TRAYICON_6	20
GROUP_ICON	TRAYICON_7	20
GROUP_ICON	TRAYICON_8	20
GROUP_ICON	TRAYICON_9	20
VERSION	#1	880
MANIFEST	#1	1408

module_name	hint	ord	function_name
oleaut32.dll			VariantClear
advapi32.dll			CloseServiceHandle
user32.dll			SetForegroundWindow
kernel32.dll			GetVersion
kernel32.dll			GetVersionExW
kernel32.dll			EnterCriticalSection
wintrust.dll			WintrustSetRegPolicyFlags
gdi32.dll			CreateDIBSection
version.dll			GetFileVersionInfoSizeW
wsock32.dll			closesocket
SHFolder.dll			SHGetFolderPathW
ole32.dll			OleSetClipboard
comctl32.dll			ImageList_SetBkColor
shell32.dll			ShellExecuteExW
msvcrt.dll			memset
comdlg32.dll			GetOpenFileNameW
winspool.drv			GetDefaultPrinterW
winmm.dll			waveOutClose
FCD.DLL			GetData
ca2k.dll			IC
crypt32.dll			CryptMsgGetParam
oleacc.dll			LresultFromObject
msacm32.dll			acmStreamClose
Translator.dll			GetTranslError
ws2_32.dll			GetNameInfoW
SetupApi.dll			SetupDiEnumDeviceInfo
kernel32.dll			GetModuleFileNameW
kernel32.dll			GetModuleHandleA
kernel32.dll			LoadLibraryA
kernel32.dll			LocalAlloc
kernel32.dll			LocalFree
kernel32.dll			GetModuleFileNameA
kernel32.dll			ExitProcess

StringTable 040904E4

CompanyName	TamoSoft
FileDescription	CommView for WiFi Packet Analyzer
FileVersion	7.0.0.773
InternalName	CV
LegalCopyright	Copyright © 1999-2014 TamoSoft
LegalTrademarks	CommView is a registered trademark of TamoSoft
OriginalFilename	CV.EXE
ProductName	CommView for WiFi
ProductVersion	7.0

VS_FIXEDFILEINFO

FileVersion	7.0.0.773
ProductVersion	7.0.0.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Code Signing 2010 CA

serial: 3CD1573766F79D2B3DB89D43FA987EC5

Certificates (3)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: May 10 00:00:00 2010 GMT
            Not After : May 10 23:59:59 2015 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping Signer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:35:a0:36:70:22:81:11:c3:b2:83:b9:d3:28:
                    c6:36:cd:25:6b:a9:7b:b2:1c:f6:9b:51:9c:ef:35:
                    f4:ed:08:8e:5e:38:08:f8:77:3c:0a:42:e0:f3:70:
                    dc:a3:d7:ca:f5:4c:0b:cf:ff:22:9c:0a:7e:68:d6:
                    09:a2:2a:84:7b:a6:9d:b4:a9:c1:33:e2:ef:1f:17:
                    48:ca:3a:cd:46:e6:c5:aa:77:bd:e3:77:9a:fa:47:
                    53:40:28:59:43:93:f1:a4:81:ea:ef:80:b5:4f:a7:
                    08:ce:ba:6e:bc:ca:76:0c:97:64:59:86:24:bb:3d:
                    82:90:a8:55:b1:92:d3:a0:a7:05:ac:9f:53:25:08:
                    10:47:99:cd:98:de:68:e5:b4:50:78:a3:af:01:cc:
                    59:43:58:e4:76:6e:7e:ac:c7:e2:9e:1f:4f:b0:47:
                    2d:c8:0c:a3:49:27:80:75:8c:bb:06:91:65:0f:90:
                    9b:f4:ba:d1:81:c8:5c:6a:ec:14:e9:25:09:bf:23:
                    16:f4:95:46:40:40:21:bb:83:96:fd:86:1f:7a:c8:
                    0d:10:8e:a2:f8:19:07:58:7f:9f:bd:37:02:60:f2:
                    a4:e9:9d:44:3f:30:05:e4:a7:70:99:51:9a:e8:17:
                    f1:55:ca:b2:61:89:65:46:a7:6a:f2:58:46:7e:aa:
                    a0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8

            X509v3 Subject Key Identifier: 
                2E:2D:B0:0A:44:4A:D3:87:C0:02:07:CE:97:7D:50:62:20:FD:0F:83
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.usertrust.com

    Signature Algorithm: sha1WithRSAEncryption
         c8:fb:63:f8:0b:75:75:2c:3a:f1:f2:13:a7:2d:b6:a3:1a:9c:
         ad:01:07:d3:34:8e:77:e0:c2:6e:ae:02:5d:48:4f:a4:d2:21:
         b6:36:fd:2a:35:43:7c:6b:df:80:87:0b:15:f0:76:32:00:b4:
         ce:b5:67:a4:2f:2f:20:1b:9c:54:9e:83:3f:1f:5f:14:95:62:
         82:0f:22:41:22:1f:70:b3:f3:f7:42:de:6c:51:cd:4b:f8:21:
         ac:9b:3b:8c:b1:e5:e6:28:8f:ce:2a:8a:f9:aa:52:4d:8c:5b:
         77:ba:4d:5a:58:db:bb:6a:04:cc:52:1e:9d:e2:28:37:0e:bb:
         e7:0e:91:c7:f8:db:f1:81:98:eb:cd:37:b3:0e:ab:65:d3:62:
         ec:3a:a5:76:eb:13:a8:35:93:c9:2e:0a:01:ec:c0:e8:cc:3d:
         7e:b6:eb:e2:c1:ec:d3:14:92:82:66:87:50:dc:fd:50:97:ac:
         b3:4a:76:73:06:c4:86:11:3a:b3:5f:43:04:52:6f:ea:b3:d0:
         74:36:4c:ca:f1:1b:79:84:37:70:63:ad:74:b9:aa:0e:f3:98:
         b0:86:08:eb:db:e0:1f:8c:10:f2:39:64:9b:ae:4f:0a:2c:92:
         8a:4f:18:b5:91:e5:8d:1a:93:5f:1f:ae:f1:a6:f0:2e:97:d0:
         d2:f6:2b:3c

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d1:57:37:66:f7:9d:2b:3d:b8:9d:43:fa:98:7e:c5
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Validity
            Not Before: Aug  8 00:00:00 2012 GMT
            Not After : Oct 22 23:59:59 2015 GMT
        Subject: C=NZ, ST=New Zealand, L=Christchurch, O=TamoSoft Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=Application Development, CN=TamoSoft Ltd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:19:6c:19:62:e7:52:40:b4:bc:d0:95:71:8e:
                    33:ba:d2:0e:d0:92:dc:2c:92:ac:23:02:56:9c:91:
                    6a:09:a3:e7:bb:4e:32:8e:6c:29:9c:ae:1d:f2:98:
                    fc:71:f4:46:2d:8c:83:62:54:95:02:9a:e7:ab:a7:
                    82:56:78:55:ea:bf:c2:ad:fd:28:62:db:76:6d:ae:
                    2c:34:3a:f5:ff:93:e5:41:5e:8f:43:a7:e6:e7:a2:
                    72:03:4e:0d:fe:46:ca:a4:8e:cf:4d:a9:f2:19:1a:
                    2b:73:87:ff:f2:4b:22:95:71:3a:ec:e1:fc:8b:02:
                    10:b0:35:cd:84:02:6d:fa:00:23:a4:97:44:49:2a:
                    bd:42:3a:c1:fa:98:2d:f9:21:54:a4:ed:36:68:0e:
                    e6:da:7f:1f:80:52:f2:71:79:a6:b8:a7:c6:3c:57:
                    db:f0:95:2d:cb:ad:64:d4:89:89:59:98:9e:9c:bf:
                    8e:b5:8b:62:2a:d7:26:46:68:ec:d1:db:f0:61:5f:
                    fc:d2:36:29:55:8d:76:96:8c:b5:71:f7:d8:67:ee:
                    8c:96:d0:a5:0b:8d:62:2b:15:64:86:34:0c:9f:3d:
                    b0:78:f7:2b:44:91:7f:7b:ee:01:fc:f9:a0:f5:54:
                    53:c2:6d:76:11:a1:0e:a6:67:4f:cb:56:a9:37:66:
                    3c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://csc3-2010-crl.verisign.com/CSC3-2010.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa

            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
                CA Issuers - URI:http://csc3-2010-aia.verisign.com/CSC3-2010.cer

            X509v3 Authority Key Identifier: 
                keyid:CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D

            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
         1b:1f:ce:91:71:be:bc:4b:a9:3d:7a:d4:e1:98:ae:96:43:7f:
         c2:72:b1:bb:cc:dc:d4:b5:81:14:42:5e:e1:64:7f:43:df:90:
         f8:37:85:ce:f3:68:e9:6a:72:9e:27:11:c4:c3:6c:09:4e:e1:
         b5:70:6e:e1:a2:8a:c1:30:a6:63:84:1e:c3:5a:d1:1b:4b:6c:
         e4:3a:7d:e4:ac:f1:4c:6a:2f:be:f5:4c:3f:8a:3a:28:10:58:
         98:ec:2e:4f:d0:56:fe:2c:b8:2d:57:11:f0:95:c9:70:67:96:
         84:2e:92:8c:9a:d6:31:72:40:6d:68:39:c2:4f:2c:fb:7b:c1:
         d4:3e:6e:e7:fb:22:b7:b9:22:81:5c:ff:d7:b9:50:ee:6c:7f:
         95:8b:2b:51:26:ae:c1:ee:27:4d:84:aa:ec:89:36:02:47:81:
         56:7e:01:68:35:b8:99:0a:ed:1c:52:58:9d:70:4c:9a:06:ab:
         2a:8e:21:46:3d:e7:b6:4a:1c:8c:60:5d:33:6f:b8:a8:36:51:
         21:a5:52:ca:be:6c:d2:99:c8:1b:c0:a8:f2:87:ef:3d:1b:b3:
         7e:b0:78:0b:ec:a5:a9:bd:c8:fd:a2:f8:35:71:cd:56:50:65:
         90:75:c1:ec:98:e1:3f:f5:9b:ff:c6:6c:68:d7:9a:7d:57:5d:
         f7:22:a5:a9

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:23:4b:5e:a5:d7:8a:bb:32:e9:d4:57:f7:ef:
                    e4:c7:26:7e:ad:19:98:fe:a8:9d:7d:94:f6:36:6b:
                    10:d7:75:81:30:7f:04:68:7f:cb:2b:75:1e:cd:1d:
                    08:8c:df:69:94:a7:37:a3:9c:7b:80:e0:99:e1:ee:
                    37:4d:5f:ce:3b:14:ee:86:d4:d0:f5:27:35:bc:25:
                    0b:38:a7:8c:63:9d:17:a3:08:a5:ab:b0:fb:cd:6a:
                    62:82:4c:d5:21:da:1b:d9:f1:e3:84:3b:8a:2a:4f:
                    85:5b:90:01:4f:c9:a7:76:10:7f:27:03:7c:be:ae:
                    7e:7d:c1:dd:f9:05:bc:1b:48:9c:69:e7:c0:a4:3c:
                    3c:41:00:3e:df:96:e5:c5:e4:94:71:d6:55:01:c7:
                    00:26:4a:40:3c:b5:a1:26:a9:0c:a7:6d:80:8e:90:
                    25:7b:cf:bf:3f:1c:eb:2f:96:fa:e5:87:77:c6:b5:
                    56:b2:7a:3b:54:30:53:1b:df:62:34:ff:1e:d1:f4:
                    5a:93:28:85:e5:4c:17:4e:7e:5b:fd:a4:93:99:7f:
                    df:cd:ef:a4:75:ef:ef:15:f6:47:e7:f8:19:72:d8:
                    2e:34:1a:a6:b4:a7:4c:7e:bd:bb:4f:0c:3d:57:f1:
                    30:d6:a6:36:8e:d6:80:76:d7:19:2e:a5:cd:7e:34:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/pca3-g5.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-8
            X509v3 Subject Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            X509v3 Authority Key Identifier: 
                keyid:7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33

    Signature Algorithm: sha1WithRSAEncryption
         56:22:e6:34:a4:c4:61:cb:48:b9:01:ad:56:a8:64:0f:d9:8c:
         91:c4:bb:cc:0c:e5:ad:7a:a0:22:7f:df:47:38:4a:2d:6c:d1:
         7f:71:1a:7c:ec:70:a9:b1:f0:4f:e4:0f:0c:53:fa:15:5e:fe:
         74:98:49:24:85:81:26:1c:91:14:47:b0:4c:63:8c:bb:a1:34:
         d4:c6:45:e8:0d:85:26:73:03:d0:a9:8c:64:6d:dc:71:92:e6:
         45:05:60:15:59:51:39:fc:58:14:6b:fe:d4:a4:ed:79:6b:08:
         0c:41:72:e7:37:22:06:09:be:23:e9:3f:44:9a:1e:e9:61:9d:
         cc:b1:90:5c:fc:3d:d2:8d:ac:42:3d:65:36:d4:b4:3d:40:28:
         8f:9b:10:cf:23:26:cc:4b:20:cb:90:1f:5d:8c:4c:34:ca:3c:
         d8:e5:37:d6:6f:a5:20:bd:34:eb:26:d9:ae:0d:e7:c5:9a:f7:
         a1:b4:21:91:33:6f:86:e8:58:bb:25:7c:74:0e:58:fe:75:1b:
         63:3f:ce:31:7c:9b:8f:1b:96:9e:c5:53:76:84:5b:9c:ad:91:
         fa:ac:ed:93:ba:5d:c8:21:53:c2:82:53:63:af:12:0d:50:87:
         11:1b:3d:54:52:96:8a:2c:9c:3d:92:1a:08:9a:05:2e:c7:93:
         a5:48:91:d3

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA1

eb 99 d8 ca 8b c8 67 8f af aa 7d ee 13 f6 63 fe |......g...}...c.| a3 32 93 de |.2.. |

Certificates
- Certificate #0
  - 2
    - 47:8A:8E:FB:59:E1:D8:3F:0C:E1:42:D2:A2:87:07:BE
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - ST: UT
      - L: Salt Lake City
      - O: The USERTRUST Network
      - OU: http://www.usertrust.com
      - CN: UTN-USERFirst-Object
    - 2010-05-10 00:00:00 UTC: 2015-05-10 23:59:59 UTC
    - Subject
      - C: GB
      - ST: Greater Manchester
      - L: Salford
      - O: COMODO CA Limited
      - CN: COMODO Time Stamping Signer
    - #5
      - rsaEncryption: nil
      - BC:35:A0:36:70:22:81:11:C3:B2:83:B9:D3:28:C6:36:
        CD:25:6B:A9:7B:B2:1C:F6:9B:51:9C:EF:35:F4:ED:08:
        8E:5E:38:08:F8:77:3C:0A:42:E0:F3:70:DC:A3:D7:CA:
        F5:4C:0B:CF:FF:22:9C:0A:7E:68:D6:09:A2:2A:84:7B:
        A6:9D:B4:A9:C1:33:E2:EF:1F:17:48:CA:3A:CD:46:E6:
        C5:AA:77:BD:E3:77:9A:FA:47:53:40:28:59:43:93:F1:
        A4:81:EA:EF:80:B5:4F:A7:08:CE:BA:6E:BC:CA:76:0C:
        97:64:59:86:24:BB:3D:82:90:A8:55:B1:92:D3:A0:A7:
        05:AC:9F:53:25:08:10:47:99:CD:98:DE:68:E5:B4:50:
        78:A3:AF:01:CC:59:43:58:E4:76:6E:7E:AC:C7:E2:9E:
        1F:4F:B0:47:2D:C8:0C:A3:49:27:80:75:8C:BB:06:91:
        65:0F:90:9B:F4:BA:D1:81:C8:5C:6A:EC:14:E9:25:09:
        BF:23:16:F4:95:46:40:40:21:BB:83:96:FD:86:1F:7A:
        C8:0D:10:8E:A2:F8:19:07:58:7F:9F:BD:37:02:60:F2:
        A4:E9:9D:44:3F:30:05:E4:A7:70:99:51:9A:E8:17:F1:
        55:CA:B2:61:89:65:46:A7:6A:F2:58:46:7E:AA:A0:07: 0x010001
    - #6
      - authorityKeyIdentifier:
        da ed 64 74 14 9c 14 3c ab dd 99 a9 bd 5b 28 4d |..dt...<.....[(M| 8b 3c c9 d8 |.<.. |
      - subjectKeyIdentifier:
        2e 2d b0 0a 44 4a d3 87 c0 02 07 ce 97 7d 50 62 |.-..DJ.......}Pb| 20 fd 0f 83 | ... |
      - keyUsage: true, 0xc0
      - basicConstraints
        true
        nil
      - extendedKeyUsage: true, timeStamping
      - crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
      - authorityInfoAccess
        OCSP: http://ocsp.usertrust.com
  - RSA-SHA1:
```
c8 fb 63 f8 0b 75 75 2c  3a f1 f2 13 a7 2d b6 a3  |..c..uu,:....-..|
1a 9c ad 01 07 d3 34 8e  77 e0 c2 6e ae 02 5d 48  |......4.w..n..]H|
4f a4 d2 21 b6 36 fd 2a  35 43 7c 6b df 80 87 0b  |O..!.6.*5C|k....|
15 f0 76 32 00 b4 ce b5  67 a4 2f 2f 20 1b 9c 54  |..v2....g.// ..T|
9e 83 3f 1f 5f 14 95 62  82 0f 22 41 22 1f 70 b3  |..?._..b.."A".p.|
f3 f7 42 de 6c 51 cd 4b  f8 21 ac 9b 3b 8c b1 e5  |..B.lQ.K.!..;...|
e6 28 8f ce 2a 8a f9 aa  52 4d 8c 5b 77 ba 4d 5a  |.(..*...RM.[w.MZ|
58 db bb 6a 04 cc 52 1e  9d e2 28 37 0e bb e7 0e  |X..j..R...(7....|
91 c7 f8 db f1 81 98 eb  cd 37 b3 0e ab 65 d3 62  |.........7...e.b|
ec 3a a5 76 eb 13 a8 35  93 c9 2e 0a 01 ec c0 e8  |.:.v...5........|
cc 3d 7e b6 eb e2 c1 ec  d3 14 92 82 66 87 50 dc  |.=~.........f.P.|
fd 50 97 ac b3 4a 76 73  06 c4 86 11 3a b3 5f 43  |.P...Jvs....:._C|
04 52 6f ea b3 d0 74 36  4c ca f1 1b 79 84 37 70  |.Ro...t6L...y.7p|
63 ad 74 b9 aa 0e f3 98  b0 86 08 eb db e0 1f 8c  |c.t.............|
10 f2 39 64 9b ae 4f 0a  2c 92 8a 4f 18 b5 91 e5  |..9d..O.,..O....|
8d 1a 93 5f 1f ae f1 a6  f0 2e 97 d0 d2 f6 2b 3c  |..._..........+<|
```
- Certificate #1
  - 2
    - 3C:D1:57:37:66:F7:9D:2B:3D:B8:9D:43:FA:98:7E:C5
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)10
      - CN: VeriSign Class 3 Code Signing 2010 CA
    - 2012-08-08 00:00:00 UTC: 2015-10-22 23:59:59 UTC
    - Subject
      - C: NZ
      - ST: New Zealand
      - L: Christchurch
      - O: TamoSoft Ltd
      - OU: Digital ID Class 3 - Microsoft Software Validation v2
      - OU: Application Development
      - CN: TamoSoft Ltd
    - #5
      - rsaEncryption: nil
      - E7:19:6C:19:62:E7:52:40:B4:BC:D0:95:71:8E:33:BA:
        D2:0E:D0:92:DC:2C:92:AC:23:02:56:9C:91:6A:09:A3:
        E7:BB:4E:32:8E:6C:29:9C:AE:1D:F2:98:FC:71:F4:46:
        2D:8C:83:62:54:95:02:9A:E7:AB:A7:82:56:78:55:EA:
        BF:C2:AD:FD:28:62:DB:76:6D:AE:2C:34:3A:F5:FF:93:
        E5:41:5E:8F:43:A7:E6:E7:A2:72:03:4E:0D:FE:46:CA:
        A4:8E:CF:4D:A9:F2:19:1A:2B:73:87:FF:F2:4B:22:95:
        71:3A:EC:E1:FC:8B:02:10:B0:35:CD:84:02:6D:FA:00:
        23:A4:97:44:49:2A:BD:42:3A:C1:FA:98:2D:F9:21:54:
        A4:ED:36:68:0E:E6:DA:7F:1F:80:52:F2:71:79:A6:B8:
        A7:C6:3C:57:DB:F0:95:2D:CB:AD:64:D4:89:89:59:98:
        9E:9C:BF:8E:B5:8B:62:2A:D7:26:46:68:EC:D1:DB:F0:
        61:5F:FC:D2:36:29:55:8D:76:96:8C:B5:71:F7:D8:67:
        EE:8C:96:D0:A5:0B:8D:62:2B:15:64:86:34:0C:9F:3D:
        B0:78:F7:2B:44:91:7F:7B:EE:01:FC:F9:A0:F5:54:53:
        C2:6D:76:11:A1:0E:A6:67:4F:CB:56:A9:37:66:3C:17: 0x010001
    - X509v3 extensions
      - basicConstraints
        nil
      - keyUsage: true, 0x80
      - crlDistributionPoints: http://csc3-2010-crl.verisign.com/CSC3-2010.crl
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        id-qt-cps: https://www.verisign.com/rpa
      - extendedKeyUsage: codeSigning
      - authorityInfoAccess
        #0
        OCSP: http://ocsp.verisign.com
        caIssuers: http://csc3-2010-aia.verisign.com/CSC3-2010.cer
      - authorityKeyIdentifier:
        cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... |
      - nsCertType: 0x10
      - 1.3.6.1.4.1.311.2.1.27
        false: true
  - RSA-SHA1:
```
1b 1f ce 91 71 be bc 4b  a9 3d 7a d4 e1 98 ae 96  |....q..K.=z.....|
43 7f c2 72 b1 bb cc dc  d4 b5 81 14 42 5e e1 64  |C..r........B^.d|
7f 43 df 90 f8 37 85 ce  f3 68 e9 6a 72 9e 27 11  |.C...7...h.jr.'.|
c4 c3 6c 09 4e e1 b5 70  6e e1 a2 8a c1 30 a6 63  |..l.N..pn....0.c|
84 1e c3 5a d1 1b 4b 6c  e4 3a 7d e4 ac f1 4c 6a  |...Z..Kl.:}...Lj|
2f be f5 4c 3f 8a 3a 28  10 58 98 ec 2e 4f d0 56  |/..L?.:(.X...O.V|
fe 2c b8 2d 57 11 f0 95  c9 70 67 96 84 2e 92 8c  |.,.-W....pg.....|
9a d6 31 72 40 6d 68 39  c2 4f 2c fb 7b c1 d4 3e  |..1r@mh9.O,.{..>|
6e e7 fb 22 b7 b9 22 81  5c ff d7 b9 50 ee 6c 7f  |n.."..".\...P.l.|
95 8b 2b 51 26 ae c1 ee  27 4d 84 aa ec 89 36 02  |..+Q&...'M....6.|
47 81 56 7e 01 68 35 b8  99 0a ed 1c 52 58 9d 70  |G.V~.h5.....RX.p|
4c 9a 06 ab 2a 8e 21 46  3d e7 b6 4a 1c 8c 60 5d  |L...*.!F=..J..`]|
33 6f b8 a8 36 51 21 a5  52 ca be 6c d2 99 c8 1b  |3o..6Q!.R..l....|
c0 a8 f2 87 ef 3d 1b b3  7e b0 78 0b ec a5 a9 bd  |.....=..~.x.....|
c8 fd a2 f8 35 71 cd 56  50 65 90 75 c1 ec 98 e1  |....5q.VPe.u....|
3f f5 9b ff c6 6c 68 d7  9a 7d 57 5d f7 22 a5 a9  |?....lh..}W]."..|
```
- Certificate #2
  - 2
    - 52:00:E5:AA:25:56:FC:1A:86:ED:96:C9:D4:4B:33:C7
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: (c) 2006 VeriSign, Inc. - For authorized use only
      - CN: VeriSign Class 3 Public Primary Certification Authority - G5
    - 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
    - Subject
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)10
      - CN: VeriSign Class 3 Code Signing 2010 CA
    - #5
      - rsaEncryption: nil
      - F5:23:4B:5E:A5:D7:8A:BB:32:E9:D4:57:F7:EF:E4:C7:
        26:7E:AD:19:98:FE:A8:9D:7D:94:F6:36:6B:10:D7:75:
        81:30:7F:04:68:7F:CB:2B:75:1E:CD:1D:08:8C:DF:69:
        94:A7:37:A3:9C:7B:80:E0:99:E1:EE:37:4D:5F:CE:3B:
        14:EE:86:D4:D0:F5:27:35:BC:25:0B:38:A7:8C:63:9D:
        17:A3:08:A5:AB:B0:FB:CD:6A:62:82:4C:D5:21:DA:1B:
        D9:F1:E3:84:3B:8A:2A:4F:85:5B:90:01:4F:C9:A7:76:
        10:7F:27:03:7C:BE:AE:7E:7D:C1:DD:F9:05:BC:1B:48:
        9C:69:E7:C0:A4:3C:3C:41:00:3E:DF:96:E5:C5:E4:94:
        71:D6:55:01:C7:00:26:4A:40:3C:B5:A1:26:A9:0C:A7:
        6D:80:8E:90:25:7B:CF:BF:3F:1C:EB:2F:96:FA:E5:87:
        77:C6:B5:56:B2:7A:3B:54:30:53:1B:DF:62:34:FF:1E:
        D1:F4:5A:93:28:85:E5:4C:17:4E:7E:5B:FD:A4:93:99:
        7F:DF:CD:EF:A4:75:EF:EF:15:F6:47:E7:F8:19:72:D8:
        2E:34:1A:A6:B4:A7:4C:7E:BD:BB:4F:0C:3D:57:F1:30:
        D6:A6:36:8E:D6:80:76:D7:19:2E:A5:CD:7E:34:2D:89: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        true: 0
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://www.verisign.com/cps
        id-qt-unotice: https://www.verisign.com/rpa
      - keyUsage: true, 6
      - 1.3.6.1.5.5.7.1.12
        image/gif
        SHA1:
        8f e5 d3 1a 86 ac 8d 8e 6b c3 cf 80 6a d4 48 18 |........k...j.H.| 2c 7b 19 2e |,{.. |
        http://logo.verisign.com/vslogo.gif
      - crlDistributionPoints: http://crl.verisign.com/pca3-g5.crl
      - authorityInfoAccess
        OCSP: http://ocsp.verisign.com
      - extendedKeyUsage
        clientAuth: codeSigning
      - subjectAltName
        CN: VeriSignMPKI-2-8
      - subjectKeyIdentifier:
        cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... |
      - authorityKeyIdentifier:
        7f d3 65 a7 c2 dd ec bb f0 30 09 f3 43 39 fa 02 |..e......0..C9..| af 33 31 33 |.313 |
  - RSA-SHA1:
```
56 22 e6 34 a4 c4 61 cb  48 b9 01 ad 56 a8 64 0f  |V".4..a.H...V.d.|
d9 8c 91 c4 bb cc 0c e5  ad 7a a0 22 7f df 47 38  |.........z."..G8|
4a 2d 6c d1 7f 71 1a 7c  ec 70 a9 b1 f0 4f e4 0f  |J-l..q.|.p...O..|
0c 53 fa 15 5e fe 74 98  49 24 85 81 26 1c 91 14  |.S..^.t.I$..&...|
47 b0 4c 63 8c bb a1 34  d4 c6 45 e8 0d 85 26 73  |G.Lc...4..E...&s|
03 d0 a9 8c 64 6d dc 71  92 e6 45 05 60 15 59 51  |....dm.q..E.`.YQ|
39 fc 58 14 6b fe d4 a4  ed 79 6b 08 0c 41 72 e7  |9.X.k....yk..Ar.|
37 22 06 09 be 23 e9 3f  44 9a 1e e9 61 9d cc b1  |7"...#.?D...a...|
90 5c fc 3d d2 8d ac 42  3d 65 36 d4 b4 3d 40 28  |.\.=...B=e6..=@(|
8f 9b 10 cf 23 26 cc 4b  20 cb 90 1f 5d 8c 4c 34  |....#&.K ...].L4|
ca 3c d8 e5 37 d6 6f a5  20 bd 34 eb 26 d9 ae 0d  |.<..7.o. .4.&...|
e7 c5 9a f7 a1 b4 21 91  33 6f 86 e8 58 bb 25 7c  |......!.3o..X.%||
74 0e 58 fe 75 1b 63 3f  ce 31 7c 9b 8f 1b 96 9e  |t.X.u.c?.1|.....|
c5 53 76 84 5b 9c ad 91  fa ac ed 93 ba 5d c8 21  |.Sv.[........].!|
53 c2 82 53 63 af 12 0d  50 87 11 1b 3d 54 52 96  |S..Sc...P...=TR.|
8a 2c 9c 3d 92 1a 08 9a  05 2e c7 93 a5 48 91 d3  |.,.=.........H..|
```

Signer

1
unnamed
- #0
  - C: US
  - O: VeriSign, Inc.
  - OU: VeriSign Trust Network
  - OU: Terms of use at https://www.verisign.com/rpa (c)10
  - CN: VeriSign Class 3 Code Signing 2010 CA
- 3C:D1:57:37:66:F7:9D:2B:3D:B8:9D:43:FA:98:7E:C5
SHA1: nil

contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

b6 f7 2b 21 b8 9e e0 9d  24 57 fd bb 74 c5 ab ff  |..+!....$W..t...|
ce 37 7a 3a                                       |.7z:            |

1.3.6.1.4.1.311.2.1.12

00 43 00 6f 00 6d 00 6d 00 56 00 69 00 65 00 77 |.C.o.m.m.V.i.e.w| 00 20 00 66 00 6f 00 72 00 20 00 57 00 69 00 46 |. .f.o.r. .W.i.F| 00 69 |.i |
: www.tamos.com

rsaEncryption:

75 a7 0d 13 23 18 0a 3b  6b 7b c4 8a 28 89 30 7b  |u...#..;k{..(.0{|
cf 13 38 64 4a 55 4f 63  f0 06 8a d9 20 28 c3 1f  |..8dJUOc.... (..|
f0 b7 be 15 f0 44 2c 55  db f8 19 c9 8a 86 e2 91  |.....D,U........|
dc 20 12 dc 58 63 93 4a  37 89 60 4d 94 e4 49 36  |. ..Xc.J7.`M..I6|
93 13 3f 8a a7 67 c2 f2  a1 11 90 4f 2c ec c8 09  |..?..g.....O,...|
f8 cd 02 88 46 eb cd f8  8f df 3c 0c 5b 34 36 a9  |....F.....<.[46.|
15 2c c9 f2 e1 0a 96 fd  da 64 3d 22 42 a9 2d 28  |.,.......d="B.-(|
e0 28 76 8c 7d 27 44 58  9c 0f 6e 98 3d c7 7d c3  |.(v.}'DX..n.=.}.|
85 be 86 66 e4 83 ce 0a  e8 7c 52 2b 8a a3 98 21  |...f.....|R+...!|
f9 f5 3a 3b 4a 43 7a 7b  11 5c f9 dc 36 9e ce ce  |..:;JCz{.\..6...|
dd eb d0 4f a9 0e 50 fa  5e 31 97 38 0f b5 dd b9  |...O..P.^1.8....|
ac 9e 5a 4a 85 12 38 2a  96 42 d7 59 ab 39 d6 6c  |..ZJ..8*.B.Y.9.l|
27 28 c2 bf ea 81 5c df  fa e4 bf 47 cc 97 59 39  |'(....\....G..Y9|
43 03 c5 3e b4 ac a7 51  78 da d9 19 be 63 7e 6d  |C..>...Qx....c~m|
08 64 62 95 86 97 df 72  08 fb f0 af 01 2c 2b 26  |.db....r.....,+&|
0e ab 67 c4 de cd f6 dc  79 f5 d9 92 f3 2c ec 6d  |..g.....y....,.m|

countersignature

unnamed
- #0
  - C: US
  - ST: UT
  - L: Salt Lake City
  - O: The USERTRUST Network
  - OU: http://www.usertrust.com
  - CN: UTN-USERFirst-Object
- 47:8A:8E:FB:59:E1:D8:3F:0C:E1:42:D2:A2:87:07:BE
SHA1: nil

contentType: pkcs7-data
signingTime: 2014-03-08 12:59:05 UTC

messageDigest:

7c 45 c4 b4 a5 c3 5f 73  1b 1f 5a 86 09 fe 6a e7  ||E...._s..Z...j.|
b4 68 71 09                                       |.hq.            |

rsaEncryption:

73 cf 70 3b 69 ca c2 3c  83 01 94 fe 20 50 69 b9  |s.p;i..<.... Pi.|
c9 0b b7 cb 9c 93 fc 2a  11 2b ae 50 f4 5b 1f d8  |.......*.+.P.[..|
00 da 20 36 1c 9f 63 f3  1c 96 3d de a3 14 b6 ef  |.. 6..c...=.....|
8d 20 b6 f4 d7 94 8b 5c  de 3e 5b 68 75 7e 28 16  |. .....\.>[hu~(.|
54 18 3f 6d 6f 26 be 74  c8 32 45 66 6b 5c d3 7e  |T.?mo&.t.2Efk\.~|
80 ed 40 7f 9b 0c 23 ec  5e 51 31 6e a2 1d b4 c8  |..@...#.^Q1n....|
07 59 7a ab a6 32 63 5f  3e 81 c8 73 93 81 87 2f  |.Yz..2c_>..s.../|
50 9f 89 ab 6c c3 89 05  d9 c2 d9 98 0d 34 a0 96  |P...l........4..|
bf 77 09 c4 68 30 ad 00  7d 9c 3e c7 88 6c 62 43  |.w..h0..}.>..lbC|
d0 77 d4 a8 39 59 81 44  3c fc a2 3e 22 22 09 d2  |.w..9Y.D<..>""..|
52 ae 8b 60 9d d6 06 b5  71 d8 1d cc 6c 97 da 8b  |R..`....q...l...|
be ae a3 34 44 a9 3d 2d  a6 52 e0 34 5f ec 68 28  |...4D.=-.R.4_.h(|
02 60 b1 39 fe cf 8d 01  7b 64 1d 1c fc a0 c5 85  |.`.9....{d......|
3b ec 58 0b c4 10 bf a8  7b 32 dd 53 48 67 8e 95  |;.X.....{2.SHg..|
9b 1b c6 1b ad 39 9d 8b  c1 06 c8 6d 9f c5 8d 3b  |.....9.....m...;|
d1 b2 0e e9 8d 18 95 b9  51 db 27 a7 d9 51 c2 4c  |........Q.'..Q.L|

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	8978384	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x157e858

[?] can't find file_offset of VA 0x157e98c

[?] can't find file_offset of VA 0x157eac0

[?] can't find file_offset of VA 0x157ebf4

[?] can't find file_offset of VA 0x157ed28

[?] can't find file_offset of VA 0x157ee5c

[?] can't find file_offset of VA 0x157ef90

[?] can't find file_offset of VA 0x157f0c4

[?] can't find file_offset of VA 0x157f3b0

[?] can't find file_offset of VA 0x157f69c

[?] can't find file_offset of VA 0x157f988

[?] can't find file_offset of VA 0x157fc74

[?] can't find file_offset of VA 0x157fda8

[?] can't find file_offset of VA 0x157fedc

[?] can't find file_offset of VA 0x1580010

[?] can't find file_offset of VA 0x1580144

[?] can't find file_offset of VA 0x1580278

[?] can't find file_offset of VA 0x15803ac

[?] can't find file_offset of VA 0x15804e0

[?] can't find file_offset of VA 0x1580614

[?] can't find file_offset of VA 0x1580748

[?] can't find file_offset of VA 0x158087c

[?] can't find file_offset of VA 0x1580b68

[?] can't find file_offset of VA 0x1580e54

[?] can't find file_offset of VA 0x1581140

[?] can't find file_offset of VA 0x158142c

[?] can't find file_offset of VA 0x1581718

[?] can't find file_offset of VA 0x1581a04

[?] can't find file_offset of VA 0x1581b38

[?] can't find file_offset of VA 0x1581c6c

[?] can't find file_offset of VA 0x1581da0

[?] can't find file_offset of VA 0x1581e38

[?] can't find file_offset of VA 0x1582008

[?] can't find file_offset of VA 0x15821ec

[?] can't find file_offset of VA 0x15823bc

[?] can't find file_offset of VA 0x158258c

[?] can't find file_offset of VA 0x158275c

[?] can't find file_offset of VA 0x158292c

[?] can't find file_offset of VA 0x1582afc

[?] can't find file_offset of VA 0x1582ccc

[?] can't find file_offset of VA 0x1582e9c

[?] can't find file_offset of VA 0x158306c

[?] can't find file_offset of VA 0x158312c

[?] can't find file_offset of VA 0x158320c

[?] can't find file_offset of VA 0x15832ec

[?] can't find file_offset of VA 0x1583384

[?] can't find file_offset of VA 0x15833d0

[?] can't find file_offset of VA 0x1583414

[?] can't find file_offset of VA 0x1583458

[?] can't find file_offset of VA 0x15834e0

[?] can't find file_offset of VA 0x1583558

[?] can't find file_offset of VA 0x1583620

[?] can't find file_offset of VA 0x15836f0

[?] can't find file_offset of VA 0x15837b0

[?] can't find file_offset of VA 0x15838a8

[?] can't find file_offset of VA 0x15839a0

[?] can't find file_offset of VA 0x1583a38

[?] can't find file_offset of VA 0x1583ad0

[?] can't find file_offset of VA 0x1583b54

[?] can't find file_offset of VA 0x1583bd0

[?] can't find file_offset of VA 0x1583c54

[?] can't find file_offset of VA 0x1583ce4

[?] can't find file_offset of VA 0x1583dc4

[?] can't find file_offset of VA 0x1583e84

[?] can't find file_offset of VA 0x1583f44

[?] can't find file_offset of VA 0x158486c

[?] can't find file_offset of VA 0x1585194

[?] can't find file_offset of VA 0x1585abc

[?] can't find file_offset of VA 0x1585b9c

[?] can't find file_offset of VA 0x1585c4c

[?] can't find file_offset of VA 0x1586474

[?] can't find file_offset of VA 0x1587138

[?] can't find file_offset of VA 0x15872a0

[?] can't find file_offset of VA 0x1587ac8

[?] can't find file_offset of VA 0x1587ff0

[?] can't find file_offset of VA 0x15880a0

[?] can't find file_offset of VA 0x1588160

[?] can't find file_offset of VA 0x1588240

[?] can't find file_offset of VA 0x15882f0

[?] can't find file_offset of VA 0x15883d8

[?] can't find file_offset of VA 0x1588700

[?] can't find file_offset of VA 0x15887c0

[?] can't find file_offset of VA 0x1588858

[?] can't find file_offset of VA 0x15888f0

[?] can't find file_offset of VA 0x1588930

[?] can't find file_offset of VA 0x158897c

[?] can't find file_offset of VA 0x15889c8

[?] can't find file_offset of VA 0x1588a08

[?] can't find file_offset of VA 0x1589070

[?] can't find file_offset of VA 0x15896d8

[?] can't find file_offset of VA 0x1589d40

[?] can't find file_offset of VA 0x158a3a8

[?] can't find file_offset of VA 0x158a4b8

[?] can't find file_offset of VA 0x158a5c8

[?] can't find file_offset of VA 0x158ac30

[?] can't find file_offset of VA 0x158b298

[?] can't find file_offset of VA 0x158b900

[?] can't find file_offset of VA 0x158b9e0

[?] can't find file_offset of VA 0x158c6c8

[?] can't find file_offset of VA 0x158d3b0

[?] can't find file_offset of VA 0x158e098

[?] too many errors getting resource data, stopped on 0 of 1

[?] can't find file_offset of VA 0x940c48

[?] can't find file_offset of VA 0x9df000

CV.EXE- CommView for WiFi Packet Analyzer