MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 000003a4

VS_FIXEDFILEINFO

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Code Signing 2010 CA
serial: 67CBBBC287729969E701CBDA1DED7CA8

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:cb:bb:c2:87:72:99:69:e7:01:cb:da:1d:ed:7c:a8
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Validity
            Not Before: Jul 12 00:00:00 2011 GMT
            Not After : Jul  1 23:59:59 2014 GMT
        Subject: C=US, ST=California, L=Walnut Creek, O=ReviverSoft, OU=Digital ID Class 3 - Microsoft Software Validation v2, CN=ReviverSoft
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7a:9b:54:ae:0a:92:20:4f:42:a3:56:79:79:
                    1e:65:25:53:3f:25:9b:bc:d8:d8:88:35:28:f5:c1:
                    a4:a0:e8:7d:1d:e0:9d:00:cc:c0:1e:f1:57:e1:01:
                    56:45:21:a4:fa:bb:28:4b:2a:0f:db:12:f5:c6:d8:
                    24:31:b0:3f:a4:b0:a6:8c:f3:36:69:70:93:d6:6e:
                    a6:8d:05:c1:e8:e1:64:f7:74:df:b0:fb:41:89:b2:
                    c0:f9:1e:bb:c6:93:ad:d2:1d:cb:2e:75:7a:b1:17:
                    af:43:9f:91:a4:9f:ca:b0:fc:96:ac:3e:c2:07:49:
                    cc:b8:08:86:d6:66:eb:29:5f:35:bb:f6:e5:47:a8:
                    0f:6d:1f:59:c5:11:e1:aa:eb:c3:b8:5f:4c:c9:14:
                    31:78:d6:37:42:92:6b:11:6b:81:b0:8c:02:40:73:
                    da:47:80:9b:89:8d:0f:6f:80:b7:90:f0:aa:98:91:
                    ec:9d:aa:e4:7e:59:f5:9a:3c:94:60:0c:29:b5:e3:
                    21:1d:dd:e8:09:b0:27:28:9a:6b:98:36:3f:d1:cd:
                    2f:3d:56:60:5a:b0:35:53:1c:c8:3f:40:8b:93:41:
                    c0:a6:80:e9:b5:5d:88:d2:92:85:21:49:e5:8b:1d:
                    1c:11:30:22:15:da:85:cc:05:48:bf:86:c7:2f:f1:
                    35:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://csc3-2010-crl.verisign.com/CSC3-2010.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa

            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
                CA Issuers - URI:http://csc3-2010-aia.verisign.com/CSC3-2010.cer

            X509v3 Authority Key Identifier: 
                keyid:CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D

            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
         b4:a1:a7:b5:fb:6c:92:ee:01:fd:a0:2f:9c:da:4c:ab:32:58:
         77:75:22:06:ae:6b:54:c4:35:01:3f:ec:80:0c:b5:24:4d:1a:
         d9:49:60:3f:f0:e8:3f:17:38:c2:6f:5d:7d:ed:53:83:57:46:
         3a:b5:f9:65:bf:91:a1:36:45:f9:00:2c:85:ed:b6:38:8d:89:
         87:6f:f6:b3:dd:90:24:34:4f:e1:78:99:36:38:df:39:44:52:
         35:f6:a2:3f:77:22:f1:47:4b:3d:b5:ef:f2:43:4f:56:77:97:
         95:6e:a9:d5:47:56:32:14:48:08:b6:cb:10:f2:67:16:b7:f1:
         f5:c8:7f:78:16:aa:ac:53:0d:01:ed:b9:5a:4e:2a:bd:c5:9a:
         fe:48:32:26:9e:f1:e1:b2:ae:e7:ee:58:cb:20:31:35:69:04:
         42:ea:7b:ae:2b:87:d7:46:88:c3:fe:af:d0:c3:59:c6:a6:00:
         e9:e6:ae:c6:ee:04:71:49:36:e9:75:6f:bb:75:14:c4:75:9f:
         0f:ff:fa:f3:39:29:e3:25:2e:a0:7c:58:89:b5:1a:00:77:2e:
         cb:a0:a3:90:20:d1:5c:4c:5e:ad:95:2e:5d:b7:8c:83:f3:e5:
         54:72:fb:a9:4d:9e:87:f2:69:ae:3a:c0:62:2e:9b:54:f7:94:
         6a:8f:3a:20

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:23:4b:5e:a5:d7:8a:bb:32:e9:d4:57:f7:ef:
                    e4:c7:26:7e:ad:19:98:fe:a8:9d:7d:94:f6:36:6b:
                    10:d7:75:81:30:7f:04:68:7f:cb:2b:75:1e:cd:1d:
                    08:8c:df:69:94:a7:37:a3:9c:7b:80:e0:99:e1:ee:
                    37:4d:5f:ce:3b:14:ee:86:d4:d0:f5:27:35:bc:25:
                    0b:38:a7:8c:63:9d:17:a3:08:a5:ab:b0:fb:cd:6a:
                    62:82:4c:d5:21:da:1b:d9:f1:e3:84:3b:8a:2a:4f:
                    85:5b:90:01:4f:c9:a7:76:10:7f:27:03:7c:be:ae:
                    7e:7d:c1:dd:f9:05:bc:1b:48:9c:69:e7:c0:a4:3c:
                    3c:41:00:3e:df:96:e5:c5:e4:94:71:d6:55:01:c7:
                    00:26:4a:40:3c:b5:a1:26:a9:0c:a7:6d:80:8e:90:
                    25:7b:cf:bf:3f:1c:eb:2f:96:fa:e5:87:77:c6:b5:
                    56:b2:7a:3b:54:30:53:1b:df:62:34:ff:1e:d1:f4:
                    5a:93:28:85:e5:4c:17:4e:7e:5b:fd:a4:93:99:7f:
                    df:cd:ef:a4:75:ef:ef:15:f6:47:e7:f8:19:72:d8:
                    2e:34:1a:a6:b4:a7:4c:7e:bd:bb:4f:0c:3d:57:f1:
                    30:d6:a6:36:8e:d6:80:76:d7:19:2e:a5:cd:7e:34:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/pca3-g5.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-8
            X509v3 Subject Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            X509v3 Authority Key Identifier: 
                keyid:7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33

    Signature Algorithm: sha1WithRSAEncryption
         56:22:e6:34:a4:c4:61:cb:48:b9:01:ad:56:a8:64:0f:d9:8c:
         91:c4:bb:cc:0c:e5:ad:7a:a0:22:7f:df:47:38:4a:2d:6c:d1:
         7f:71:1a:7c:ec:70:a9:b1:f0:4f:e4:0f:0c:53:fa:15:5e:fe:
         74:98:49:24:85:81:26:1c:91:14:47:b0:4c:63:8c:bb:a1:34:
         d4:c6:45:e8:0d:85:26:73:03:d0:a9:8c:64:6d:dc:71:92:e6:
         45:05:60:15:59:51:39:fc:58:14:6b:fe:d4:a4:ed:79:6b:08:
         0c:41:72:e7:37:22:06:09:be:23:e9:3f:44:9a:1e:e9:61:9d:
         cc:b1:90:5c:fc:3d:d2:8d:ac:42:3d:65:36:d4:b4:3d:40:28:
         8f:9b:10:cf:23:26:cc:4b:20:cb:90:1f:5d:8c:4c:34:ca:3c:
         d8:e5:37:d6:6f:a5:20:bd:34:eb:26:d9:ae:0d:e7:c5:9a:f7:
         a1:b4:21:91:33:6f:86:e8:58:bb:25:7c:74:0e:58:fe:75:1b:
         63:3f:ce:31:7c:9b:8f:1b:96:9e:c5:53:76:84:5b:9c:ad:91:
         fa:ac:ed:93:ba:5d:c8:21:53:c2:82:53:63:af:12:0d:50:87:
         11:1b:3d:54:52:96:8a:2c:9c:3d:92:1a:08:9a:05:2e:c7:93:
         a5:48:91:d3
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
        • SHA1
          • 1b 11 cf a5 25 23 01 14  a4 5d 68 eb 6c 3a b5 ca  |....%#...]h.l:..|
            c9 17 d2 fd                                       |....            |
    • Certificates
      • Certificate #0
        • 2
          • 67:CB:BB:C2:87:72:99:69:E7:01:CB:DA:1D:ED:7C:A8
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: Terms of use at https://www.verisign.com/rpa (c)10
            • CN: VeriSign Class 3 Code Signing 2010 CA
          • 2011-07-12 00:00:00 UTC: 2014-07-01 23:59:59 UTC
          • Subject
            • C: US
            • ST: California
            • L: Walnut Creek
            • O: ReviverSoft
            • OU: Digital ID Class 3 - Microsoft Software Validation v2
            • CN: ReviverSoft
          • #5
            • rsaEncryption: nil
            • C3:7A:9B:54:AE:0A:92:20:4F:42:A3:56:79:79:1E:65:
              25:53:3F:25:9B:BC:D8:D8:88:35:28:F5:C1:A4:A0:E8:
              7D:1D:E0:9D:00:CC:C0:1E:F1:57:E1:01:56:45:21:A4:
              FA:BB:28:4B:2A:0F:DB:12:F5:C6:D8:24:31:B0:3F:A4:
              B0:A6:8C:F3:36:69:70:93:D6:6E:A6:8D:05:C1:E8:E1:
              64:F7:74:DF:B0:FB:41:89:B2:C0:F9:1E:BB:C6:93:AD:
              D2:1D:CB:2E:75:7A:B1:17:AF:43:9F:91:A4:9F:CA:B0:
              FC:96:AC:3E:C2:07:49:CC:B8:08:86:D6:66:EB:29:5F:
              35:BB:F6:E5:47:A8:0F:6D:1F:59:C5:11:E1:AA:EB:C3:
              B8:5F:4C:C9:14:31:78:D6:37:42:92:6B:11:6B:81:B0:
              8C:02:40:73:DA:47:80:9B:89:8D:0F:6F:80:B7:90:F0:
              AA:98:91:EC:9D:AA:E4:7E:59:F5:9A:3C:94:60:0C:29:
              B5:E3:21:1D:DD:E8:09:B0:27:28:9A:6B:98:36:3F:D1:
              CD:2F:3D:56:60:5A:B0:35:53:1C:C8:3F:40:8B:93:41:
              C0:A6:80:E9:B5:5D:88:D2:92:85:21:49:E5:8B:1D:1C:
              11:30:22:15:DA:85:CC:05:48:BF:86:C7:2F:F1:35:B5
              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • nil
            • keyUsage: true, 0x80
            • crlDistributionPoints: http://csc3-2010-crl.verisign.com/CSC3-2010.crl
            • certificatePolicies
              • 2.16.840.1.113733.1.7.23.3
                • id-qt-cps: https://www.verisign.com/rpa
            • extendedKeyUsage: codeSigning
            • authorityInfoAccess
              • #0
                • OCSP: http://ocsp.verisign.com
                • caIssuers: http://csc3-2010-aia.verisign.com/CSC3-2010.cer
            • authorityKeyIdentifier:
              cf 99 a9 ea 7b 26 f4 4b  c9 8e 8f d7 f0 05 26 ef  |....{&.K......&.|
              e3 d2 a7 9d                                       |....            |
            • nsCertType: 0x10
            • 1.3.6.1.4.1.311.2.1.27
              • false: true
        • RSA-SHA1:
          b4 a1 a7 b5 fb 6c 92 ee  01 fd a0 2f 9c da 4c ab  |.....l...../..L.|
          32 58 77 75 22 06 ae 6b  54 c4 35 01 3f ec 80 0c  |2Xwu"..kT.5.?...|
          b5 24 4d 1a d9 49 60 3f  f0 e8 3f 17 38 c2 6f 5d  |.$M..I`?..?.8.o]|
          7d ed 53 83 57 46 3a b5  f9 65 bf 91 a1 36 45 f9  |}.S.WF:..e...6E.|
          00 2c 85 ed b6 38 8d 89  87 6f f6 b3 dd 90 24 34  |.,...8...o....$4|
          4f e1 78 99 36 38 df 39  44 52 35 f6 a2 3f 77 22  |O.x.68.9DR5..?w"|
          f1 47 4b 3d b5 ef f2 43  4f 56 77 97 95 6e a9 d5  |.GK=...COVw..n..|
          47 56 32 14 48 08 b6 cb  10 f2 67 16 b7 f1 f5 c8  |GV2.H.....g.....|
          7f 78 16 aa ac 53 0d 01  ed b9 5a 4e 2a bd c5 9a  |.x...S....ZN*...|
          fe 48 32 26 9e f1 e1 b2  ae e7 ee 58 cb 20 31 35  |.H2&.......X. 15|
          69 04 42 ea 7b ae 2b 87  d7 46 88 c3 fe af d0 c3  |i.B.{.+..F......|
          59 c6 a6 00 e9 e6 ae c6  ee 04 71 49 36 e9 75 6f  |Y.........qI6.uo|
          bb 75 14 c4 75 9f 0f ff  fa f3 39 29 e3 25 2e a0  |.u..u.....9).%..|
          7c 58 89 b5 1a 00 77 2e  cb a0 a3 90 20 d1 5c 4c  ||X....w..... .\L|
          5e ad 95 2e 5d b7 8c 83  f3 e5 54 72 fb a9 4d 9e  |^...].....Tr..M.|
          87 f2 69 ae 3a c0 62 2e  9b 54 f7 94 6a 8f 3a 20  |..i.:.b..T..j.: |
      • Certificate #1
        • 2
          • 52:00:E5:AA:25:56:FC:1A:86:ED:96:C9:D4:4B:33:C7
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: (c) 2006 VeriSign, Inc. - For authorized use only
            • CN: VeriSign Class 3 Public Primary Certification Authority - G5
          • 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
          • Subject
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: Terms of use at https://www.verisign.com/rpa (c)10
            • CN: VeriSign Class 3 Code Signing 2010 CA
          • #5
            • rsaEncryption: nil
            • F5:23:4B:5E:A5:D7:8A:BB:32:E9:D4:57:F7:EF:E4:C7:
              26:7E:AD:19:98:FE:A8:9D:7D:94:F6:36:6B:10:D7:75:
              81:30:7F:04:68:7F:CB:2B:75:1E:CD:1D:08:8C:DF:69:
              94:A7:37:A3:9C:7B:80:E0:99:E1:EE:37:4D:5F:CE:3B:
              14:EE:86:D4:D0:F5:27:35:BC:25:0B:38:A7:8C:63:9D:
              17:A3:08:A5:AB:B0:FB:CD:6A:62:82:4C:D5:21:DA:1B:
              D9:F1:E3:84:3B:8A:2A:4F:85:5B:90:01:4F:C9:A7:76:
              10:7F:27:03:7C:BE:AE:7E:7D:C1:DD:F9:05:BC:1B:48:
              9C:69:E7:C0:A4:3C:3C:41:00:3E:DF:96:E5:C5:E4:94:
              71:D6:55:01:C7:00:26:4A:40:3C:B5:A1:26:A9:0C:A7:
              6D:80:8E:90:25:7B:CF:BF:3F:1C:EB:2F:96:FA:E5:87:
              77:C6:B5:56:B2:7A:3B:54:30:53:1B:DF:62:34:FF:1E:
              D1:F4:5A:93:28:85:E5:4C:17:4E:7E:5B:FD:A4:93:99:
              7F:DF:CD:EF:A4:75:EF:EF:15:F6:47:E7:F8:19:72:D8:
              2E:34:1A:A6:B4:A7:4C:7E:BD:BB:4F:0C:3D:57:F1:30:
              D6:A6:36:8E:D6:80:76:D7:19:2E:A5:CD:7E:34:2D:89
              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • true: 0
            • certificatePolicies
              • 2.16.840.1.113733.1.7.23.3
                • #0
                  • id-qt-cps: https://www.verisign.com/cps
                  • id-qt-unotice: https://www.verisign.com/rpa
            • keyUsage: true, 6
            • 1.3.6.1.5.5.7.1.12
              • image/gif
                • SHA1:
                  8f e5 d3 1a 86 ac 8d 8e  6b c3 cf 80 6a d4 48 18  |........k...j.H.|
                  2c 7b 19 2e                                       |,{..            |
                • http://logo.verisign.com/vslogo.gif
            • crlDistributionPoints: http://crl.verisign.com/pca3-g5.crl
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com
            • extendedKeyUsage
              • clientAuth: codeSigning
            • subjectAltName
              • CN: VeriSignMPKI-2-8
            • subjectKeyIdentifier:
              cf 99 a9 ea 7b 26 f4 4b  c9 8e 8f d7 f0 05 26 ef  |....{&.K......&.|
              e3 d2 a7 9d                                       |....            |
            • authorityKeyIdentifier:
              7f d3 65 a7 c2 dd ec bb  f0 30 09 f3 43 39 fa 02  |..e......0..C9..|
              af 33 31 33                                       |.313            |
        • RSA-SHA1:
          56 22 e6 34 a4 c4 61 cb  48 b9 01 ad 56 a8 64 0f  |V".4..a.H...V.d.|
          d9 8c 91 c4 bb cc 0c e5  ad 7a a0 22 7f df 47 38  |.........z."..G8|
          4a 2d 6c d1 7f 71 1a 7c  ec 70 a9 b1 f0 4f e4 0f  |J-l..q.|.p...O..|
          0c 53 fa 15 5e fe 74 98  49 24 85 81 26 1c 91 14  |.S..^.t.I$..&...|
          47 b0 4c 63 8c bb a1 34  d4 c6 45 e8 0d 85 26 73  |G.Lc...4..E...&s|
          03 d0 a9 8c 64 6d dc 71  92 e6 45 05 60 15 59 51  |....dm.q..E.`.YQ|
          39 fc 58 14 6b fe d4 a4  ed 79 6b 08 0c 41 72 e7  |9.X.k....yk..Ar.|
          37 22 06 09 be 23 e9 3f  44 9a 1e e9 61 9d cc b1  |7"...#.?D...a...|
          90 5c fc 3d d2 8d ac 42  3d 65 36 d4 b4 3d 40 28  |.\.=...B=e6..=@(|
          8f 9b 10 cf 23 26 cc 4b  20 cb 90 1f 5d 8c 4c 34  |....#&.K ...].L4|
          ca 3c d8 e5 37 d6 6f a5  20 bd 34 eb 26 d9 ae 0d  |.<..7.o. .4.&...|
          e7 c5 9a f7 a1 b4 21 91  33 6f 86 e8 58 bb 25 7c  |......!.3o..X.%||
          74 0e 58 fe 75 1b 63 3f  ce 31 7c 9b 8f 1b 96 9e  |t.X.u.c?.1|.....|
          c5 53 76 84 5b 9c ad 91  fa ac ed 93 ba 5d c8 21  |.Sv.[........].!|
          53 c2 82 53 63 af 12 0d  50 87 11 1b 3d 54 52 96  |S..Sc...P...=TR.|
          8a 2c 9c 3d 92 1a 08 9a  05 2e c7 93 a5 48 91 d3  |.,.=.........H..|
    • Signer
      • 1
      • unnamed
        • #0
          • C: US
          • O: VeriSign, Inc.
          • OU: VeriSign Trust Network
          • OU: Terms of use at https://www.verisign.com/rpa (c)10
          • CN: VeriSign Class 3 Code Signing 2010 CA
        • 67:CB:BB:C2:87:72:99:69:E7:01:CB:DA:1D:ED:7C:A8
      • SHA1: nil
      • #3
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest:
          42 d2 be c2 99 7a 1b e5  59 ac 02 61 4c ba f3 e9  |B....z..Y..aL...|
          a7 ce 43 d8                                       |..C.            |
      • rsaEncryption:
        7b e4 5a ed a1 c0 36 53  38 b5 00 d2 dc ed 57 1b  |{.Z...6S8.....W.|
        cd 18 f1 83 24 74 17 34  df 39 02 63 d7 a7 36 77  |....$t.4.9.c..6w|
        61 42 11 5c 17 08 99 c1  7a 19 73 b5 fb de e1 7f  |aB.\....z.s.....|
        e1 75 cc dc 0c 11 b2 ee  53 1a 3a 6a 42 8a 3d 85  |.u......S.:jB.=.|
        7c 90 20 23 69 31 22 03  83 46 62 4e a8 14 c5 57  ||. #i1"..FbN...W|
        d5 60 e1 28 42 8e 85 ee  bf 02 94 31 b7 25 b0 21  |.`.(B......1.%.!|
        ca 38 06 b6 44 fd 29 88  54 9d 69 73 75 c7 db 5f  |.8..D.).T.isu.._|
        c7 45 3b 6e d2 c3 94 69  06 11 26 69 a3 c3 bd 8d  |.E;n...i..&i....|
        76 84 58 0d 24 9e d6 cc  72 ed e8 bf ab 8a ca a1  |v.X.$...r.......|
        f4 14 af 34 dc 42 2c 9e  97 17 64 0a 89 4a 32 c9  |...4.B,...d..J2.|
        3b a8 f4 55 51 8e 5a 97  66 60 87 8a 83 45 ac f9  |;..UQ.Z.f`...E..|
        15 0f 89 58 ea 8d 8b 4d  13 85 bf 33 01 81 29 ec  |...X...M...3..).|
        7f 2a 58 21 7d 92 5f 41  ae 2e aa 1b 93 3f a6 eb  |.*X!}._A.....?..|
        82 44 5b bd f9 90 57 da  aa da 37 53 db ba 21 4d  |.D[...W...7S..!M|
        ba 1f 98 77 1c 68 82 b0  13 d2 e3 e6 a4 71 e4 e5  |...w.h.......q..|
        43 62 f2 d2 c2 6d 86 57  54 a5 6f 27 79 94 b1 0e  |Cb...m.WT.o'y...|
offsetsizetypecomment
0105472EXE04/10/2010 12:19:31#
15c115HTM#
8f2847497PNG(256 x 256)#
19c0023835232BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 23940704 bytes (23 MiB)


--
Type = PE
Physical Size = 23940704
CPU = x86
Characteristics = Executable 32-bit NoRelocs
Created = 2010-04-10 12:19:31
Headers Size = 1024
Checksum = 23946445
Image Size = 1179648
Section Alignment = 4096
File Alignment = 512
Code Size = 25600
Initialized Data Size = 431104
Uninitialized Data Size = 16896
Linker Version = 9.0
OS Version = 5.0
Image Version = 6.0
Subsystem Version = 5.0
Subsystem = Windows GUI
DLL Characteristics = NoSEH TerminalServerAware
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
Comment = FileVersion: 1.0.0.468
ProductVersion: 1.0.0.468
CompanyName: ReviverSoft
FileDescription: PC Reviver
LegalCopyright: Copyright (c) 2013 Reviversoft LLC. All rights reserved.
LegalTrademarks: The PC Reviver software and user interface are protected by trademark and other pending or existing intellectual property rights in the United States and other countries.
ProductName: PC Reviver
----
Path = [0]
Size = 23831552
Packed Size = 23831552
Virtual Size = 23831552
Offset = 105472
--
Path = [0]
Type = Nsis
Physical Size = 23831546
Tail Size = 6
Method = LZMA:26
Solid = +
Headers Size = 279050
Embedded Stub Size = 0
SubType = NSIS-Park-1 Unicode

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
                    .....        15360     23831542  $PLUGINSDIR/InstallOptions.dll
2013-09-05 15:35:18 .....          424               $PLUGINSDIR/ioSpecial.ini
2013-11-05 15:13:14 .....       154544               $PLUGINSDIR/modern-wizard.bmp
                    .....        11264               $PLUGINSDIR/System.dll
                    .....         5120               $PLUGINSDIR/LangDLL.dll
2013-11-26 08:49:44 .....       608080               msvcp100.dll
2013-11-26 08:49:44 .....       829264               msvcr100.dll
2014-04-18 09:11:28 .....      6085728               PCReviver.exe
2013-09-05 15:27:40 .....      2946048               QtCore4.dll
2013-09-05 15:27:40 .....      9824768               QtGui4.dll
2013-09-05 15:27:40 .....      1036800               QtNetwork4.dll
2013-09-05 15:27:40 .....       227840               QtSql4.dll
2013-09-05 15:27:42 .....       421888               QtXml4.dll
2013-09-05 15:27:40 .....     16566272               QtWebKit4.dll
2014-04-18 09:11:30 .....      1966688               SmartAlertsService.exe
2013-09-05 15:05:08 .....        97280               SignatureChecker.dll
2013-09-05 15:27:56 .....        31744               imageformats/qgif4.dll
2013-09-05 15:27:56 .....        33280               imageformats/qico4.dll
2013-09-05 15:27:58 .....       239616               imageformats/qjpeg4.dll
2014-04-18 09:11:30 .....       953952               plugins/DiskCleaner.dll
2014-04-18 09:11:30 .....      3040864               plugins/DR_Plugin.dll
2014-04-18 09:11:30 .....       613984               plugins/FEM_Plugin_Win8_design.dll
2014-04-18 09:11:30 .....      2912864               plugins/RR_Plugin.dll
2014-04-18 09:11:30 .....       613984               plugins/Uninstaller_Plugin.dll
2014-04-18 09:11:30 .....       741984               plugins/WU_Plugin.dll
2014-04-18 09:11:30 .....       795232               plugins/Startup_Manager.dll
2014-04-18 09:11:30 .....       640096               plugins/RR_Defrag_plugin.dll
2014-04-18 09:11:30 .....       468064               plugins/SysInfo_Plugin.dll
2014-04-18 09:11:30 .....       413792               plugins/Crash_Helper_Plugin.dll
2014-04-18 09:11:30 .....       413792               plugins/Process_Library_Plugin.dll
2014-04-17 09:44:14 .....        18588               PCReviver/English.xml
2014-04-17 09:44:14 .....        26432               PCReviver/Russian.xml
2014-04-17 09:44:14 .....        22105               PCReviver/Japanese.xml
2014-04-17 09:44:14 .....        19675               PCReviver/Dutch.xml
2014-04-17 09:44:14 .....        20297               PCReviver/French.xml
2014-04-17 09:44:14 .....        20341               PCReviver/German.xml
2014-04-17 09:44:14 .....         7750               Plugins/DR_Plugin/English.xml
2014-04-17 09:44:14 .....        11181               Plugins/DR_Plugin/Russian.xml
2014-04-17 09:44:14 .....         9596               Plugins/DR_Plugin/Japanese.xml
2014-04-17 09:44:14 .....         8550               Plugins/DR_Plugin/Dutch.xml
2014-04-17 09:44:14 .....         8620               Plugins/DR_Plugin/French.xml
2014-04-17 09:44:14 .....         8343               Plugins/DR_Plugin/German.xml
2014-04-17 09:44:14 .....         6422               Plugins/RR_Plugin/English.xml
2014-04-17 09:44:14 .....         8905               Plugins/RR_Plugin/Russian.xml
2014-04-17 09:44:14 .....         7715               Plugins/RR_Plugin/Japanese.xml
2014-04-17 09:44:14 .....         6963               Plugins/RR_Plugin/Dutch.xml
2014-04-17 09:44:14 .....         7154               Plugins/RR_Plugin/French.xml
2014-04-17 09:44:14 .....         7037               Plugins/RR_Plugin/German.xml
2014-04-17 09:44:14 .....         2550               Plugins/FEM_Plugin_Win8_design/English.xml
2014-04-17 09:44:14 .....         3685               Plugins/FEM_Plugin_Win8_design/Russian.xml
2014-04-17 09:44:14 .....         3004               Plugins/FEM_Plugin_Win8_design/Japanese.xml
2014-04-17 09:44:14 .....         2758               Plugins/FEM_Plugin_Win8_design/Dutch.xml
2014-04-17 09:44:14 .....         2766               Plugins/FEM_Plugin_Win8_design/French.xml
2014-04-17 09:44:14 .....         2747               Plugins/FEM_Plugin_Win8_design/German.xml
2014-04-17 09:44:14 .....         4564               Plugins/RR_Defrag_Plugin/English.xml
2014-04-17 09:44:14 .....         6335               Plugins/RR_Defrag_Plugin/Russian.xml
2014-04-17 09:44:14 .....         5345               Plugins/RR_Defrag_Plugin/Japanese.xml
2014-04-17 09:44:14 .....         4886               Plugins/RR_Defrag_Plugin/Dutch.xml
2014-04-17 09:44:14 .....         4880               Plugins/RR_Defrag_Plugin/French.xml
2014-04-17 09:44:14 .....         4963               Plugins/RR_Defrag_Plugin/German.xml
2014-04-17 09:44:14 .....         2956               Plugins/Startup_Manager_Plugin/English.xml
2014-04-17 09:44:14 .....         4227               Plugins/Startup_Manager_Plugin/Russian.xml
2014-04-17 09:44:14 .....         3502               Plugins/Startup_Manager_Plugin/Japanese.xml
2014-04-17 09:44:14 .....         3202               Plugins/Startup_Manager_Plugin/Dutch.xml
2014-04-17 09:44:14 .....         3224               Plugins/Startup_Manager_Plugin/French.xml
2014-04-17 09:44:14 .....         3159               Plugins/Startup_Manager_Plugin/German.xml
2014-04-17 09:44:14 .....         3342               Plugins/DiskCleaner/English.xml
2014-04-17 09:44:14 .....         4731               Plugins/DiskCleaner/Russian.xml
2014-04-17 09:44:14 .....         4043               Plugins/DiskCleaner/Japanese.xml
2014-04-17 09:44:14 .....         3697               Plugins/DiskCleaner/Dutch.xml
2014-04-17 09:44:14 .....         3711               Plugins/DiskCleaner/French.xml
2014-04-17 09:44:14 .....         3641               Plugins/DiskCleaner/German.xml
2014-04-17 09:44:14 .....         2768               Plugins/Uninstaller_Plugin/English.xml
2014-04-17 09:44:14 .....         3856               Plugins/Uninstaller_Plugin/Russian.xml
2014-04-17 09:44:14 .....         3248               Plugins/Uninstaller_Plugin/Japanese.xml
2014-04-17 09:44:14 .....         2964               Plugins/Uninstaller_Plugin/Dutch.xml
2014-04-17 09:44:14 .....         2959               Plugins/Uninstaller_Plugin/French.xml
2014-04-17 09:44:14 .....         2966               Plugins/Uninstaller_Plugin/German.xml
2014-04-17 09:44:14 .....         3582               Plugins/WU_Plugin/English.xml
2014-04-17 09:44:14 .....         5133               Plugins/WU_Plugin/Russian.xml
2014-04-17 09:44:14 .....         4247               Plugins/WU_Plugin/Japanese.xml
2014-04-17 09:44:14 .....         3851               Plugins/WU_Plugin/Dutch.xml
2014-04-17 09:44:14 .....         3919               Plugins/WU_Plugin/French.xml
2014-04-17 09:44:14 .....         3833               Plugins/WU_Plugin/German.xml
2014-04-17 09:44:14 .....        11940               Plugins/SysInfo_Plugin/English.xml
2014-04-17 09:44:14 .....        15875               Plugins/SysInfo_Plugin/Russian.xml
2014-04-17 09:44:14 .....        13844               Plugins/SysInfo_Plugin/Japanese.xml
2014-04-17 09:44:14 .....        12546               Plugins/SysInfo_Plugin/Dutch.xml
2014-04-17 09:44:14 .....        12869               Plugins/SysInfo_Plugin/French.xml
2014-04-17 09:44:14 .....        12466               Plugins/SysInfo_Plugin/German.xml
2014-04-17 09:44:14 .....         2054               Plugins/Process_Library_Plugin/English.xml
2014-04-17 09:44:14 .....         2968               Plugins/Process_Library_Plugin/Russian.xml
2014-04-17 09:44:14 .....         2437               Plugins/Process_Library_Plugin/Japanese.xml
2014-04-17 09:44:14 .....         2228               Plugins/Process_Library_Plugin/Dutch.xml
2014-04-17 09:44:14 .....         2224               Plugins/Process_Library_Plugin/French.xml
2014-04-17 09:44:14 .....         2210               Plugins/Process_Library_Plugin/German.xml
2014-02-11 09:37:48 .....         2034               Plugins/Crash_Helper_Plugin/English.xml
2014-04-17 09:44:14 .....         2952               Plugins/Crash_Helper_Plugin/Russian.xml
2014-04-17 09:44:14 .....         2445               Plugins/Crash_Helper_Plugin/Japanese.xml
2014-04-17 09:44:14 .....         2204               Plugins/Crash_Helper_Plugin/Dutch.xml
2014-04-17 09:44:14 .....         2201               Plugins/Crash_Helper_Plugin/French.xml
2014-04-17 09:44:14 .....         2185               Plugins/Crash_Helper_Plugin/German.xml
2013-11-26 08:49:44 .....       421200               Plugins/Crash_Helper_Plugin/msvcp100.dll
2013-11-26 08:49:44 .....       773968               Plugins/Crash_Helper_Plugin/msvcr100.dll
2014-04-18 09:11:30 .....      4584544               Plugins/Crash_Helper_Plugin/PCReviver.exe
2013-09-05 15:30:14 .....      2516992               Plugins/Crash_Helper_Plugin/QtCore4.dll
2013-09-05 15:30:16 .....      8406528               Plugins/Crash_Helper_Plugin/QtGui4.dll
2013-09-05 15:30:16 .....       894464               Plugins/Crash_Helper_Plugin/QtNetwork4.dll
2013-09-05 15:30:18 .....       197632               Plugins/Crash_Helper_Plugin/QtSql4.dll
2013-09-05 15:30:22 .....       355840               Plugins/Crash_Helper_Plugin/QtXml4.dll
2013-09-05 15:30:20 .....     13109248               Plugins/Crash_Helper_Plugin/QtWebKit4.dll
2014-04-18 09:11:32 .....      1693792               Plugins/Crash_Helper_Plugin/SmartAlertsService.exe
2013-09-05 15:05:08 .....        83456               Plugins/Crash_Helper_Plugin/SignatureChecker.dll
2013-09-05 15:30:36 .....        26624               imageformats/qgif4.dll
2013-09-05 15:30:36 .....        28672               imageformats/qico4.dll
2013-09-05 15:30:36 .....       201216               imageformats/qjpeg4.dll
2014-04-18 09:11:30 .....       819296               plugins/DiskCleaner.dll
2014-04-18 09:11:30 .....      2802784               plugins/DR_Plugin.dll
2014-04-18 09:11:30 .....       507488               plugins/FEM_Plugin_Win8_design.dll
2014-04-18 09:11:30 .....      2693728               plugins/RR_Plugin.dll
2014-04-18 09:11:30 .....       535648               plugins/Uninstaller_Plugin.dll
2014-04-18 09:11:30 .....       631904               plugins/WU_Plugin.dll
2014-04-18 09:11:30 .....       686176               plugins/Startup_Manager.dll
2014-04-18 09:11:30 .....       562272               plugins/RR_Defrag_plugin.dll
2014-04-18 09:11:30 .....       421984               plugins/SysInfo_Plugin.dll
2014-04-18 09:11:30 .....       346720               plugins/Crash_Helper_Plugin.dll
2014-04-18 09:11:30 .....       346208               plugins/Process_Library_Plugin.dll
2013-09-05 15:05:08 .....          134               VersionInfo.txt
2013-09-05 15:05:08 .....         7853               LGPL.txt
2014-04-18 09:11:42 .....                            uninst.exe
------------------- ----- ------------ ------------  ------------------------
2014-04-18 09:11:42           96835587     23831542  130 files
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] ignoring invalid PEdump::BITMAPINFOHEADER