68EB11E54492EC8095B2570697058B7979CFB51E.exe - NDP46-KB3164025-x64.exe - Security Update for Microsoft .NET Framework 4.6 (KB3164025)

info
MZ
PE
resources
strings
imports
exports
foremost
7zip
version info
signature
hexdump
disasm
log
discuss
donate

filename	68EB11E54492EC8095B2570697058B7979CFB51E.exe
size	3459328 (0x34c900)
md5	c52937a82d16d50ced1d24416028acbd

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x110

Rich Header

lib id	version	times used
158	40219	1
109	50727	3
206	65501	1
171	30319	43
158	30319	20
170	30319	105
203	65501	21
1	0	197
175	40219	70
155	40219	1
154	40219	1
157	40219	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	6
TimeDateStamp	0x56007c85
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x122
Magic	0x10b
LinkerVersion	10.0
SizeOfCode	0x26c00
SizeOfInitializedData	0x7400
SizeOfUninitializedData	0
AddressOfEntryPoint	0x18bdf
BaseOfCode	0x1000
BaseOfData	0x28000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.1
ImageVersion	10.0
SubsystemVersion	5.1
Reserved1	0
SizeOfImage	0x34000
SizeOfHeaders	0x400
CheckSum	0x3578c3
Subsystem	2
DllCharacteristics	0x8140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x2000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x26ada	0x26c00	R-X CODE
.data	0x28000	0x3720	0x1400	RW- IDATA
.idata	0x2c000	0x1248	0x1400	R-- IDATA
.boxld01	0x2e000	0x98	0x200	R-- IDATA
.rsrc	0x2f000	0x1f30	0x2000	R-- IDATA
.reloc	0x31000	0x289e	0x2a00	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x27a40	0x9a
IMPORT	0x2c000	0xdc
RESOURCE	0x2f000	0x1f30
EXCEPTION	0	0
SECURITY	0x348a30	0x3ed0
BASERELOC	0x31000	0x19d8
DEBUG	0x1040	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x56e8	0x40
Bound_IAT	0	0
IAT	0x2c38c	0x2b0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
ICON	#1	744	1252
ICON	#2	296	1252
DIALOG	#129	268	1252
DIALOG	#130	368	1252
STRING	#1	1410	1252
STRING	#2	180	1252
STRING	#32	64	1252
GROUP_ICON	#107	34	1252
VERSION	#1	1632	1252
VERSION	#1	888	1252
MANIFEST	#1	1432	1252

id	lang	string
10	1033	Preparing:
11	1033	Are you sure you want to cancel?
12	1033	An error was encountered.
13	1033	There is not enough disk space on your drive for the new files to be uncompressed and installed. Please run this application again after you have freed some space on your drive.
14	1033	Unable to create or save new files in the folder into which the files are being extracted. Please check the folder properties to ensure you have permission on the folder to write files and that the folder is not read-only.
15	1033	The application cannot find one of its required files, possibly because it was unable to create it in the folder. Please make sure that the folder in which this application was downloaded is accessible and not read-only.
16	1033	Unable to execute the embedded application to complete the installation.
500	1033	Extracting files

module_name	hint	ord	function_name
ADVAPI32.dll	146		CreateWellKnownSid
ADVAPI32.dll	397		InitializeSecurityDescriptor
ADVAPI32.dll	719		SetEntriesInAclW
ADVAPI32.dll	735		SetSecurityDescriptorDacl
ADVAPI32.dll	737		SetSecurityDescriptorOwner
ADVAPI32.dll	193		CryptAcquireContextW
ADVAPI32.dll	209		CryptGenRandom
ADVAPI32.dll	219		CryptReleaseContext
ADVAPI32.dll	232		DecryptFileW
KERNEL32.dll	219		CreateProcessW
KERNEL32.dll	1360		Sleep
KERNEL32.dll	1449		WaitForSingleObject
KERNEL32.dll	556		GetExitCodeProcess
KERNEL32.dll	127		CloseHandle
KERNEL32.dll	1270		SetFileAttributesW
KERNEL32.dll	839		InitializeCriticalSection
KERNEL32.dll	182		CreateEventW
KERNEL32.dll	232		CreateThread
KERNEL32.dll	261		DeleteCriticalSection
KERNEL32.dll	293		EnterCriticalSection
KERNEL32.dll	341		ExpandEnvironmentStringsW
KERNEL32.dll	1263		SetEvent
KERNEL32.dll	457		GetCommandLineW
KERNEL32.dll	1545		lstrlenW
KERNEL32.dll	147		CompareStringW
KERNEL32.dll	946		LocalFree
KERNEL32.dll	178		CreateDirectoryW
KERNEL32.dll	1062		QueryDosDeviceW
KERNEL32.dll	598		GetLogicalDriveStringsW
KERNEL32.dll	538		GetDiskFreeSpaceExW
KERNEL32.dll	543		GetDriveTypeW
KERNEL32.dll	194		CreateFileW
KERNEL32.dll	274		DeviceIoControl
KERNEL32.dll	1262		SetErrorMode
KERNEL32.dll	1172		RemoveDirectoryW
KERNEL32.dll	970		MoveFileExW
KERNEL32.dll	936		LoadLibraryW
KERNEL32.dll	669		GetProcAddress
KERNEL32.dll	717		GetSystemDirectoryW
KERNEL32.dll	592		GetLastError
KERNEL32.dll	1261		SetEnvironmentVariableW
KERNEL32.dll	338		ExitThread
KERNEL32.dll	754		GetTickCount
KERNEL32.dll	553		GetEnvironmentVariableW
KERNEL32.dll	615		GetModuleHandleW
KERNEL32.dll	930		LeaveCriticalSection
KERNEL32.dll	1447		WaitForMultipleObjects
KERNEL32.dll	1185		ResetEvent
KERNEL32.dll	179		CreateEventA
KERNEL32.dll	720		GetSystemInfo
KERNEL32.dll	349		FileTimeToSystemTime
KERNEL32.dll	348		FileTimeToLocalFileTime
KERNEL32.dll	347		FileTimeToDosDateTime
KERNEL32.dll	612		GetModuleHandleA
KERNEL32.dll	772		GetVersionExA
KERNEL32.dll	1279		SetFileTime
KERNEL32.dll	944		LocalFileTimeToFileTime
KERNEL32.dll	282		DosDateTimeToFileTime
KERNEL32.dll	1257		SetEndOfFile
KERNEL32.dll	287		DuplicateHandle
KERNEL32.dll	1103		ReadFile
KERNEL32.dll	456		GetCommandLineA
KERNEL32.dll	823		HeapSetInformation
KERNEL32.dll	702		GetStartupInfoW
KERNEL32.dll	1345		SetUnhandledExceptionFilter
KERNEL32.dll	337		ExitProcess
KERNEL32.dll	1503		WriteFile
KERNEL32.dll	704		GetStdHandle
KERNEL32.dll	611		GetModuleFileNameW
KERNEL32.dll	610		GetModuleFileNameA
KERNEL32.dll	413		FreeEnvironmentStringsW
KERNEL32.dll	1483		WideCharToMultiByte
KERNEL32.dll	551		GetEnvironmentStringsW
KERNEL32.dll	1286		SetHandleCount
KERNEL32.dll	840		InitializeCriticalSectionAndSpinCount
KERNEL32.dll	574		GetFileType
KERNEL32.dll	1393		TlsAlloc
KERNEL32.dll	1395		TlsGetValue
KERNEL32.dll	1396		TlsSetValue
KERNEL32.dll	1394		TlsFree
KERNEL32.dll	853		InterlockedIncrement
KERNEL32.dll	1290		SetLastError
KERNEL32.dll	526		GetCurrentThreadId
KERNEL32.dll	849		InterlockedDecrement
KERNEL32.dll	817		HeapCreate
KERNEL32.dll	1069		QueryPerformanceCounter
KERNEL32.dll	522		GetCurrentProcessId
KERNEL32.dll	726		GetSystemTimeAsFileTime
KERNEL32.dll	1375		TerminateProcess
KERNEL32.dll	521		GetCurrentProcess
KERNEL32.dll	1408		UnhandledExceptionFilter
KERNEL32.dll	871		IsDebuggerPresent
KERNEL32.dll	819		HeapFree
KERNEL32.dll	435		GetCPInfo
KERNEL32.dll	420		GetACP
KERNEL32.dll	646		GetOEMCP
KERNEL32.dll	882		IsValidCodePage
KERNEL32.dll	815		HeapAlloc
KERNEL32.dll	918		LCMapStringW
KERNEL32.dll	1196		RtlUnwind
KERNEL32.dll	1275		SetFilePointer
KERNEL32.dll	476		GetConsoleCP
KERNEL32.dll	494		GetConsoleMode
KERNEL32.dll	977		MultiByteToWideChar
KERNEL32.dll	709		GetStringTypeW
KERNEL32.dll	824		HeapSize
KERNEL32.dll	822		HeapReAlloc
KERNEL32.dll	877		IsProcessorFeaturePresent
KERNEL32.dll	1312		SetStdHandle
KERNEL32.dll	1502		WriteConsoleW
KERNEL32.dll	402		FlushFileBuffers
KERNEL32.dll	186		CreateFileA
KERNEL32.dll	593		GetLocalTime
KERNEL32.dll	465		GetComputerNameW
KERNEL32.dll	1544		lstrlenA
KERNEL32.dll	410		FormatMessageW
KERNEL32.dll	724		GetSystemTime
KERNEL32.dll	761		GetTimeZoneInformation
KERNEL32.dll	1372		SystemTimeToTzSpecificLocalTime
KERNEL32.dll	266		DeleteFileW
KERNEL32.dll	565		GetFileAttributesW
KERNEL32.dll	371		FindFirstFileW
KERNEL32.dll	383		FindNextFileW
KERNEL32.dll	360		FindClose
KERNEL32.dll	515		GetCurrentDirectoryW
KERNEL32.dll	1250		SetCurrentDirectoryW
KERNEL32.dll	674		GetProcessHeap
KERNEL32.dll	791		GlobalAlloc
KERNEL32.dll	798		GlobalFree
KERNEL32.dll	1276		SetFilePointerEx
KERNEL32.dll	1087		RaiseException
COMCTL32.dll		17
RPCRT4.dll	522		UuidCreate
RPCRT4.dll	531		UuidToStringW
RPCRT4.dll	513		RpcStringFreeW
SHELL32.dll	131		SHBrowseForFolderW
SHELL32.dll	233		SHGetPathFromIDListW
SHELL32.dll	6		CommandLineToArgvW
SHLWAPI.dll	141		PathRemoveExtensionW
USER32.dll	433		GetTopWindow
USER32.dll	467		GetWindowThreadProcessId
USER32.dll	443		GetWindow
USER32.dll	700		SendMessageW
USER32.dll	589		MessageBoxW
USER32.dll	624		PostMessageW
USER32.dll	178		DialogBoxParamW
USER32.dll	316		GetDlgItem
USER32.dll	788		SetWindowTextW
USER32.dll	231		EndDialog
USER32.dll	625		PostQuitMessage
USER32.dll	781		SetWindowLongW
USER32.dll	453		GetWindowLongW
USER32.dll	560		LoadStringW
USER32.dll	60		CharUpperW
Cabinet.dll		22
Cabinet.dll		23
Cabinet.dll		20
OLEAUT32.dll		9
OLEAUT32.dll		2
VERSION.dll	7		GetFileVersionInfoSizeW
VERSION.dll	16		VerQueryValueW
VERSION.dll	8		GetFileVersionInfoW

ord	entry_va	function_name
1	0x2e000	?dwPlaceholder@@3PAEA
2	0xb696	_DecodePointerInternal@4
3	0xb67b	_EncodePointerInternal@4

module_name	boxstub.exe
flags	0
timestamp	2015-09-21 21:54:12
version	0.0
ordinal_base	1
nFunctions	3
nNames	3
Names(3)	0x27a74
Functions(3)	0x27a68
NameOrdinals(3)	0x27a80

StringTable 040904b0

CompanyName	Microsoft Corporation
FileDescription	Security Update for Microsoft .NET Framework 4.6 (KB3164025)
FileVersion	4.6.01082.04
InternalName	NDP46-KB3164025-x64.exe
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	NDP46-KB3164025-x64.exe
ProductName	Microsoft .NET Framework 4.6
ProductVersion	4.6.01082.04

StringTable 040904b0

CompanyName	Microsoft Corporation
FileDescription	Box Stub
FileVersion	14.0.1047.0 built by: NETFXDEV1(NIKOLAM-DEV-NIKOLAM)
InternalName	BoxStub.exe
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	BoxStub.exe
ProductName	Microsoft® .NET Framework
ProductVersion	14.0.1047.0

VS_FIXEDFILEINFO

FileVersion	4.6.1082.4
ProductVersion	4.6.1082.4
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

VS_FIXEDFILEINFO

FileVersion	14.0.1047.0
ProductVersion	14.0.1047.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Code Signing PCA

serial: 330000010A2C79AED7797BA6AC00010000010A

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:00:00:9b:e0:74:37:cb:3d:4d:8d:2e:00:00:00:00:00:9b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA
        Validity
            Not Before: Mar 30 19:21:29 2016 GMT
            Not After : Jun 30 19:21:29 2017 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, OU=nCipher DSE ESN:728D-C45F-F9EB, CN=Microsoft Time-Stamp Service
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:8d:a3:e2:cf:81:8b:d7:cb:bf:03:a2:60:f6:3b:
                    6d:e2:d4:18:b0:37:05:d5:8d:36:9c:0e:73:ce:4d:
                    7f:a2:10:b2:7c:43:7b:2c:18:57:bc:ac:a7:a6:86:
                    7d:79:a1:b5:de:32:66:f9:8e:fc:20:cd:ab:73:77:
                    cf:77:9d:6f:60:9c:6b:78:f3:c5:ad:a9:bd:5b:4c:
                    2b:55:aa:52:80:41:43:41:66:99:a5:f0:30:68:86:
                    ba:0f:21:72:1f:c3:75:3f:92:76:c1:00:d7:99:2c:
                    a8:59:3f:c1:62:91:6d:09:f6:ce:d3:22:ba:2d:00:
                    9f:66:cb:53:d1:ca:56:3a:58:4c:21:b2:85:a3:98:
                    65:8c:c7:89:4a:45:58:7b:ab:53:40:9f:8c:6a:b2:
                    05:c5:fe:1e:e2:ff:0a:a1:a8:a2:db:cb:21:8d:7c:
                    95:30:de:31:17:8a:0d:e9:5f:cc:42:70:ca:a4:15:
                    14:6e:84:0f:c2:c2:fd:6c:02:4c:93:b1:4c:b6:ce:
                    b6:ec:e2:b5:cd:9a:1a:10:f5:48:e5:57:10:77:ea:
                    81:dd:5f:84:42:32:70:44:c9:ca:bc:b0:fb:f7:48:
                    39:d8:60:75:49:ad:b3:bf:68:74:2e:94:0e:1c:be:
                    c1:70:72:74:10:0e:cc:db:6b:50:1f:31:ea:34:fa:
                    6c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                96:95:B1:9E:13:53:BA:58:21:46:34:E2:7C:C7:39:4A:6C:20:F0:77
            X509v3 Authority Key Identifier: 
                23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt
            X509v3 Extended Key Usage: 
                Time Stamping
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        21:1d:b3:53:e9:3b:46:81:a1:fa:2a:13:e3:5a:20:24:ba:76:
        a5:3b:b6:77:c8:91:72:04:d6:ea:fe:d2:9b:22:2f:93:08:a2:
        b0:6e:ef:02:a5:b9:56:5e:fd:65:f6:8d:12:7d:ea:27:de:3f:
        a0:b8:2e:33:32:d7:96:5a:3f:c3:74:39:c9:0f:a9:b6:ba:da:
        fe:10:68:cf:88:fd:8f:20:de:b2:b1:d6:5d:28:93:27:b7:c2:
        07:a4:47:25:65:bb:52:d5:71:4d:29:69:e8:0b:50:c7:8c:95:
        96:a0:5e:ac:37:39:02:d5:5e:f3:54:28:79:71:db:17:c3:43:
        fc:cd:6a:2b:f9:0f:39:40:44:7c:2c:68:c8:d2:81:e8:99:22:
        ab:20:56:e6:e4:ef:24:86:9b:66:56:4e:3b:e2:ee:b8:64:f7:
        e5:9f:ca:75:0a:ee:7c:96:9f:59:e1:ac:a0:b7:d6:69:bd:42:
        26:d2:f5:a5:87:52:01:ec:29:7e:fb:05:b4:e6:d8:97:7c:13:
        80:71:35:5f:93:26:e7:e4:5f:74:95:71:7c:03:8d:b5:1f:75:
        f5:a2:b6:61:3d:ee:c4:6c:89:5e:64:04:7f:29:4b:6c:d4:48:
        ea:4a:4a:4c:e7:82:6e:b5:3a:bf:57:26:11:c8:78:80:d5:80:
        cd:0e:bb:64

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0a
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA
        Validity
            Not Before: Jun  4 17:42:45 2015 GMT
            Not After : Sep  4 17:42:45 2016 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, CN=Microsoft Corporation
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:92:fc:6f:36:bb:e1:03:b9:28:d6:46:d1:a2:61:
                    ba:a5:46:fb:63:16:3e:2e:f9:47:d2:c7:ec:ed:c7:
                    99:b1:26:51:75:bd:da:cc:0f:06:14:11:a4:6c:19:
                    9e:c0:5f:4d:54:89:e4:4d:50:d8:8d:cd:a1:61:a5:
                    77:13:9a:1c:a7:ed:0d:74:f7:a7:56:79:e8:28:f7:
                    53:d2:b1:7a:63:e0:f5:94:97:b7:ec:d9:47:f8:6c:
                    3d:f3:25:88:b3:bc:0a:c5:04:a7:8e:7c:85:48:76:
                    1c:61:46:aa:19:c4:7a:62:8b:c1:c2:35:aa:fb:58:
                    6f:c5:63:0b:93:49:30:81:1b:7b:df:7f:7c:4f:b4:
                    47:6d:5f:78:1c:af:b6:f7:96:13:52:ef:b9:d1:4d:
                    39:e5:73:de:48:4e:3c:14:aa:97:0d:39:cc:8b:51:
                    e1:5c:d1:3b:f0:8e:67:ea:30:60:a9:4d:5a:9d:43:
                    bd:db:23:ba:c0:0f:d7:4b:10:9d:9c:4d:f0:51:a2:
                    84:aa:e4:9c:a7:3d:d6:a3:ef:0a:18:48:a8:fa:b1:
                    4e:a5:98:0e:4b:bf:f0:14:f3:00:c8:b0:48:d6:5b:
                    fe:38:d7:89:11:2d:05:ba:43:02:4f:22:00:96:25:
                    ad:7d:35:6e:84:68:ab:20:18:38:28:fe:1c:a2:10:
                    b1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Subject Key Identifier: 
                89:FE:0A:31:EA:26:CD:E6:6D:C7:91:91:B9:94:8C:A2:18:61:37:34
            X509v3 Subject Alternative Name: 
                DirName:/OU=MOPR/serialNumber=31595\+04079350-16fa-4c60-b6bf-9d2b1cd05984
            X509v3 Authority Key Identifier: 
                CB:11:E8:CA:D2:B4:16:58:01:C9:37:2E:33:16:16:B9:4C:9A:0A:1F
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        a6:a8:53:91:df:3b:01:fe:61:5d:06:5a:eb:66:f0:0c:d8:f7:
        d9:84:d3:00:51:0e:10:d1:a4:d1:17:28:e7:8c:33:38:2b:d8:
        43:c6:03:8b:75:eb:33:92:f4:a9:e2:67:fd:02:db:a5:1d:4e:
        43:45:5d:1b:49:e3:e0:4f:16:f0:7e:8f:f0:88:11:ca:82:ad:
        a4:fb:a6:a9:5f:f5:97:60:c8:7b:c4:bf:7c:9b:69:ed:1f:82:
        c1:f1:cd:8e:78:4b:62:f5:d7:0d:1c:d7:53:12:d6:96:52:ef:
        35:bd:19:8e:a0:40:93:a1:0a:a5:2d:16:9c:c2:46:74:08:eb:
        db:f4:d8:a5:49:36:54:12:11:55:03:b3:7b:16:fb:47:fe:fb:
        68:fc:c0:45:5c:e2:3f:12:79:33:a2:ef:82:c5:de:40:19:07:
        ee:15:c5:0a:9b:59:05:41:a9:d0:97:9e:81:9e:03:5b:fc:4a:
        e3:1a:2e:05:ac:50:47:2f:8c:fa:79:d8:1e:20:f8:05:fb:29:
        6b:18:14:fa:72:04:b7:0b:a7:9a:64:ec:11:5d:4f:45:49:8d:
        29:1a:2d:fb:d0:b6:09:53:5f:34:94:e0:16:c4:b9:ea:73:35:
        e8:57:ef:e1:eb:16:c3:18:c7:06:b3:3b:cf:61:84:e2:b6:44:
        89:94:a3:86

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:33:26:1a:00:00:00:00:00:31
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
        Validity
            Not Before: Aug 31 22:19:32 2010 GMT
            Not After : Aug 31 22:29:32 2020 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b2:72:59:5c:19:30:64:bf:1d:9a:60:20:20:42:
                    99:76:53:6c:3e:1b:d6:6f:cc:cb:f1:ea:6b:fe:97:
                    16:10:e0:df:3a:74:83:1a:b7:2f:a0:32:ec:ff:de:
                    c2:42:4e:23:d5:72:00:db:35:57:0a:89:ca:ae:20:
                    49:f4:f0:68:ac:4d:4b:8d:a5:bd:79:4b:71:9b:47:
                    07:da:fd:25:df:9d:75:88:cf:aa:73:44:7f:d7:81:
                    db:f3:bd:f2:36:a4:c9:5c:45:dc:af:ad:3d:e0:28:
                    68:97:1a:a7:a5:72:73:56:f1:17:94:e4:fd:35:94:
                    72:a0:d6:76:5f:1e:77:45:83:85:38:16:d0:73:5b:
                    05:ba:67:52:8d:a5:b2:69:2f:da:19:0b:fe:92:74:
                    29:e2:76:2f:54:dd:14:30:59:f8:d2:8d:62:fd:cb:
                    c9:5f:46:31:50:b9:27:13:e4:40:30:cf:72:29:10:
                    28:22:c7:37:4e:3d:a0:32:3d:90:cd:a1:38:06:85:
                    5c:4e:56:82:28:2a:05:32:b7:4b:d7:4f:63:e7:d2:
                    2d:62:f1:45:3d:e7:ac:08:00:f6:46:a1:9e:d1:5b:
                    8c:26:53:e8:7a:aa:4a:f2:46:cf:37:3c:38:9e:b4:
                    77:5c:a5:17:9e:8d:cb:11:8f:56:3c:c1:ac:09:5f:
                    03:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                CB:11:E8:CA:D2:B4:16:58:01:C9:37:2E:33:16:16:B9:4C:9A:0A:1F
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            1.3.6.1.4.1.311.21.1: 
                .....
            1.3.6.1.4.1.311.21.2: 
                ....1N.&....`;.1o.<..-
            1.3.6.1.4.1.311.20.2: 
                .
.S.u.b.C.A
            X509v3 Authority Key Identifier: 
                0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        59:39:3e:7f:26:46:af:eb:6f:40:b1:32:b5:6a:eb:0e:2f:6e:
        a8:49:f7:eb:5f:75:ed:4c:3b:2d:d7:43:ad:0b:fe:cb:e9:2d:
        31:a3:23:cc:7c:50:98:80:21:5d:ac:3d:2f:4c:ba:a2:a8:56:
        9c:e3:70:bb:b8:b4:f8:79:b5:49:72:f7:3e:ea:41:7f:ca:e1:
        0c:17:69:cb:a5:9c:20:2d:fa:0b:50:c4:56:cd:2d:e3:4a:d2:
        bc:70:e7:a8:0d:a2:03:a5:56:e0:b8:8a:4b:57:f2:95:42:9c:
        f1:f3:ef:ee:e3:86:1f:34:3c:b8:56:9a:f0:53:23:85:2a:a4:
        82:1c:93:e2:94:07:1d:f2:e2:4e:f8:8c:a1:ca:e8:13:a5:91:
        4e:c8:1b:d2:8f:72:95:2a:71:6d:9b:1a:f8:1c:f0:53:d6:67:
        cc:22:ff:5c:1d:cd:a2:8c:bd:27:b2:79:63:56:44:a2:51:cd:
        f9:e9:a3:58:56:dd:9b:02:45:44:2f:5f:f4:da:ae:d4:82:32:
        6e:fc:a4:95:13:e4:eb:69:e7:a9:a2:2c:be:c8:2b:10:0e:65:
        8e:99:db:f5:a2:fa:12:26:09:65:38:94:f1:7a:1f:4a:bb:d1:
        e1:56:e8:d0:78:96:18:5c:c9:35:16:5f:dd:93:1d:49:8e:2d:
        be:ad:34:44:1c:ee:10:15:1a:00:5d:dd:35:5b:21:ce:98:c7:
        09:ee:85:0e:8c:4f:6d:0e:13:4e:3d:7c:29:48:9c:72:d1:f3:
        6c:ca:c1:ec:70:a3:57:92:57:7d:94:8d:a0:1b:48:03:5a:f7:
        cf:a3:67:0a:74:a5:36:ed:2d:2f:17:c8:e6:72:37:12:f4:6f:
        b1:3c:67:82:f9:52:b2:8d:33:16:65:1e:0e:8a:dd:10:de:64:
        f4:6f:ce:46:d4:d3:17:e9:79:c4:04:b4:d3:fb:2c:df:1f:8a:
        9e:ac:0a:fb:13:27:40:ad:e4:f9:e1:a9:7f:46:bb:07:60:47:
        65:60:40:4e:b0:42:ec:4e:ed:b3:76:79:d8:0a:34:09:6d:1c:
        80:31:1f:e2:0e:54:dd:e5:a1:fb:e5:47:10:ad:64:98:ff:50:
        16:2e:7c:bf:05:21:7a:e2:95:41:27:69:c3:93:8f:95:c9:8d:
        d8:9b:21:ae:0d:5c:9c:f0:a2:ae:86:68:83:0c:6a:2d:bb:76:
        6b:00:1d:96:ad:f2:16:7b:f6:16:83:24:b9:88:cf:6a:a8:47:
        31:2f:9a:dc:e3:71:3d:d7:00:7e:62:47:d1:ce:88:c9:b8:18:
        fa:0e:72:8d:c1:a3:3d:af:02:40:6a:ff:69:9b:96:e2:10:a8:
        10:b4:37:50:08:d6:c3:3d

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:16:68:34:00:00:00:00:00:1c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
        Validity
            Not Before: Apr  3 12:53:09 2007 GMT
            Not After : Apr  3 13:03:09 2021 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:9f:a1:6c:b1:df:db:48:92:2a:7c:6b:2e:19:e1:
                    bd:e2:e3:c5:99:51:23:50:ad:ce:dd:18:4e:24:0f:
                    ee:d1:a7:d1:4c:ad:74:30:20:11:eb:07:d5:54:95:
                    15:49:94:1b:42:92:ae:98:5c:30:26:da:00:6b:e8:
                    7b:bd:ec:89:07:0f:f7:0e:04:98:f0:89:cc:1f:cb:
                    33:24:87:9d:f2:f4:67:1c:2c:fc:7b:e7:88:1d:ea:
                    e7:4e:a3:a1:c1:23:53:ca:8d:fa:45:cf:09:d0:5e:
                    af:d0:b0:42:04:a2:f9:a6:6c:93:67:d7:28:dc:46:
                    53:b0:86:d0:e5:28:46:2e:27:ac:86:4f:55:52:0c:
                    e4:03:2c:fb:6a:90:90:30:6e:87:f3:59:30:9d:fa:
                    7e:d6:97:b3:e8:21:97:7e:f8:d2:13:f3:08:b7:53:
                    6d:52:b4:45:90:9f:48:00:4a:47:66:11:27:29:66:
                    a8:97:e4:d3:06:81:4a:a2:f9:84:a7:11:47:14:09:
                    82:9f:84:ed:55:78:fe:01:9a:1d:50:08:85:00:10:
                    30:46:ed:b7:de:23:46:bb:c4:2d:54:9f:af:1e:78:
                    41:31:77:cc:9b:df:3b:83:93:a1:61:02:b5:1d:0d:
                    b1:fc:f7:9b:b2:01:ce:22:4b:54:ff:f9:05:c3:c2:
                    20:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Authority Key Identifier: 
                keyid:0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4
                DirName:/DC=com/DC=microsoft/CN=Microsoft Root Certificate Authority
                serial:79:AD:16:A1:4A:A0:A5:AD:4C:73:58:F4:07:13:2E:65
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt
            X509v3 Extended Key Usage: 
                Time Stamping
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        10:97:8a:c3:5c:03:44:36:dd:e9:b4:ad:77:db:ce:79:51:4d:
        01:b1:2e:74:71:5b:6d:0c:13:ab:ce:be:7b:8f:b8:2e:d4:12:
        a2:8c:6d:62:b8:57:02:cb:4e:20:13:50:99:dd:7a:40:e2:57:
        bb:af:58:9a:1c:e1:1d:01:86:ac:bb:78:f2:8b:d0:ec:3b:01:
        ee:e2:be:8f:0a:05:c8:8d:48:e2:f0:53:15:dd:4f:ab:92:e4:
        e7:8d:6a:d5:80:c1:e6:94:f2:06:2f:85:03:e9:91:2a:24:22:
        70:fb:f6:fc:e4:78:99:2e:0d:f7:07:e2:70:bc:18:4e:9d:8e:
        6b:0a:72:95:b8:a1:39:9c:67:2d:c5:51:0e:ea:62:5c:3f:16:
        98:8b:20:3f:e2:07:1a:32:f9:cc:31:4a:76:31:3d:2b:72:0b:
        c8:ea:70:3d:ff:85:0a:13:df:c2:0a:61:8e:f0:d7:b8:17:eb:
        4e:8b:7f:c5:35:2b:5e:a3:bf:eb:bc:7d:0b:42:7b:d4:53:72:
        21:ee:30:ca:bb:78:65:5c:5b:01:17:0a:14:0e:d2:da:14:98:
        f5:3c:b9:66:58:b3:2d:2f:e7:f9:85:86:cc:51:56:e8:9d:70:
        94:6c:ac:39:4c:d4:f6:79:bf:aa:18:7a:62:29:ef:a2:9b:29:
        34:06:77:1a:62:c9:3d:1e:6d:1f:82:f0:0b:c7:2c:bb:cf:43:
        b3:e5:f9:ec:7d:b5:e3:a4:a8:74:35:b8:4e:c5:71:23:12:26:
        76:0b:3c:52:8c:71:5a:46:43:14:bc:b3:b3:b0:4d:67:c8:9f:
        42:ff:80:79:21:80:9e:15:30:66:e8:42:12:5e:1a:c8:9e:22:
        21:d0:43:e9:2b:e9:bb:f4:48:cc:2c:d4:d8:32:80:4c:26:2a:
        48:24:5f:5a:ea:56:ef:a6:de:99:9d:ca:3a:6f:bd:81:27:74:
        06:11:ee:76:21:bf:9b:82:c1:27:54:b6:b1:6a:3d:89:a1:76:
        61:b4:6e:a1:13:a6:bf:aa:47:f0:12:6f:fd:8a:32:6c:b2:fe:
        df:51:c8:8c:23:c9:66:bd:9d:1d:87:12:64:02:3d:2d:af:59:
        8f:b8:e4:21:e5:b5:b0:ca:63:b4:78:54:05:d4:41:2e:50:ac:
        94:b0:a5:78:ab:b3:a0:96:75:1a:d9:92:87:13:75:22:2f:32:
        a8:08:6e:a0:5b:8c:25:bf:a0:ef:84:ca:21:d6:eb:1e:4f:c9:
        9a:ee:49:e0:f7:01:65:6f:89:0b:7d:c8:69:c8:e6:6e:ea:a7:
        97:ce:31:29:ff:0e:c5:5b:5c:d8:4d:1b:a1:d8:fa:2f:9e:3f:
        2e:55:16:6b:c9:13:a3:fd

undefined method `first' for #

show previews

offset	size	type	comment
0	189440	EXE	09/21/2015 21:54:13	#
15c1	15	HTM		#
2e400	3269888	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 3459328 bytes (3379 KiB)


--
Type = PE
Physical Size = 3459328
CPU = x86
Characteristics = Executable 32-bit LargeAddress
Created = 2015-09-21 21:54:13
Headers Size = 1024
Checksum = 3504323
Name = NDP46-KB3164025-x64.exe
Image Size = 212992
Section Alignment = 4096
File Alignment = 512
Code Size = 158720
Initialized Data Size = 29696
Uninitialized Data Size = 0
Linker Version = 10.0
OS Version = 5.1
Image Version = 10.0
Subsystem Version = 5.1
Subsystem = Windows GUI
DLL Characteristics = Relocated NX-Compatible TerminalServerAware
Stack Reserve = 1048576
Stack Commit = 8192
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
Comment = FileVersion: 4.6.1082.4
FileVersion: 4.6.01082.04
FileVersion: 14.0.1047.0
FileVersion: 14.0.1047.0 built by: NETFXDEV1(NIKOLAM-DEV-NIKOLAM)
ProductVersion: 4.6.1082.4
ProductVersion: 4.6.01082.04
ProductVersion: 14.0.1047.0
CompanyName: Microsoft Corporation
FileDescription: Security Update for Microsoft .NET Framework 4.6 (KB3164025)
FileDescription: Box Stub
InternalName: NDP46-KB3164025-x64.exe
InternalName: BoxStub.exe
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: NDP46-KB3164025-x64.exe
OriginalFilename: BoxStub.exe
ProductName: Microsoft .NET Framework 4.6
ProductName: Microsoft® .NET Framework
----
Path = [0]
Size = 3253808
Packed Size = 3253808
Virtual Size = 3253808
Offset = 189440
--
Path = [0]
Type = 7z
Offset = 250
Physical Size = 3253556
Tail Size = 2
Headers Size = 1619
Method = LZMA:24 BCJ2
Solid = +
Blocks = 1

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2016-06-13 23:44:40 .....         7306      3251937  header.bmp
2016-06-13 23:44:48 .....       196662               SplashScreen.bmp
2016-06-13 23:44:40 .....       110348               watermark.bmp
2016-06-20 19:24:13 .....       126132               Graphics/Print.ico
2016-06-20 19:24:13 .....       143901               Graphics/Rotate1.ico
2016-06-20 19:24:13 .....       143932               Graphics/Rotate10.ico
2016-06-20 19:24:13 .....       144110               Graphics/Rotate2.ico
2016-06-20 19:24:13 .....       144151               Graphics/Rotate3.ico
2016-06-20 19:24:13 .....       144033               Graphics/Rotate4.ico
2016-06-20 19:24:13 .....       143871               Graphics/Rotate5.ico
2016-06-20 19:24:13 .....       143881               Graphics/Rotate6.ico
2016-06-20 19:24:13 .....       144084               Graphics/Rotate7.ico
2016-06-20 19:24:13 .....       143835               Graphics/Rotate8.ico
2016-06-20 19:24:13 .....       144064               Graphics/Rotate9.ico
2016-06-20 19:24:13 .....       126548               Graphics/Save.ico
2016-06-20 19:24:13 .....       126246               Graphics/Setup.ico
2016-06-20 19:24:13 .....       190199               Graphics/stop.ico
2016-06-20 19:24:13 .....       136313               Graphics/SysReqMet.ico
2016-06-20 19:24:13 .....       143990               Graphics/SysReqNotMet.ico
2016-06-20 19:24:13 .....       199341               Graphics/warn.ico
2016-06-20 19:47:43 .....        78870               1025/LocalizedData.xml
2016-06-20 19:47:43 .....        67900               2052/LocalizedData.xml
2016-06-20 19:47:43 .....        67954               1028/LocalizedData.xml
2016-06-20 19:47:43 .....        84574               1029/LocalizedData.xml
2016-06-20 19:47:43 .....        82210               1030/LocalizedData.xml
2016-06-20 19:47:43 .....        86848               1031/LocalizedData.xml
2016-06-20 19:47:43 .....        88860               1032/LocalizedData.xml
2016-06-20 19:47:43 .....        81892               1033/LocalizedData.xml
2016-06-20 19:47:43 .....        84256               3082/LocalizedData.xml
2016-06-20 19:47:43 .....        82732               1035/LocalizedData.xml
2016-06-20 19:47:44 .....        86606               1036/LocalizedData.xml
2016-06-20 19:47:44 .....        77354               1037/LocalizedData.xml
2016-06-20 19:47:44 .....        85446               1038/LocalizedData.xml
2016-06-20 19:47:44 .....        84514               1040/LocalizedData.xml
2016-06-20 19:47:44 .....        73822               1041/LocalizedData.xml
2016-06-20 19:47:44 .....        72134               1042/LocalizedData.xml
2016-06-20 19:47:44 .....        84064               1043/LocalizedData.xml
2016-06-20 19:47:44 .....        83562               1044/LocalizedData.xml
2016-06-20 19:47:44 .....        86430               1045/LocalizedData.xml
2016-06-20 19:47:44 .....        83350               1046/LocalizedData.xml
2016-06-20 19:47:45 .....        84976               2070/LocalizedData.xml
2016-06-20 19:47:45 .....        84996               1049/LocalizedData.xml
2016-06-20 19:47:45 .....        82204               1053/LocalizedData.xml
2016-06-20 19:47:45 .....        82166               1055/LocalizedData.xml
2016-06-20 23:37:13 .....        40568               ParameterInfo.xml
2016-06-13 23:44:48 .....        14092               Strings.xml
2016-06-13 23:44:48 .....        36428               UiInfo.xml
2016-05-19 00:23:26 .....        32572               SetupUi.xsd
2016-06-20 19:24:13 .....        16118               DHtmlHeader.html
2016-06-20 19:20:46 .....       160295               1028/eula.rtf
2016-06-20 19:20:46 .....       124495               1025/eula.rtf
2016-06-20 19:20:46 .....       132348               1029/eula.rtf
2016-06-20 19:20:46 .....       111186               1031/eula.rtf
2016-06-20 19:20:46 .....       131637               1030/eula.rtf
2016-06-20 19:20:46 .....       128314               1033/eula.rtf
2016-06-20 19:20:46 .....       142041               1032/eula.rtf
2016-06-20 19:20:46 .....       156440               1036/eula.rtf
2016-06-20 19:20:46 .....       137247               1035/eula.rtf
2016-06-20 19:20:46 .....       137812               1043/eula.rtf
2016-06-20 19:20:46 .....       146392               1037/eula.rtf
2016-06-20 19:20:46 .....       147275               1040/eula.rtf
2016-06-20 19:20:46 .....       155616               1041/eula.rtf
2016-06-20 19:20:46 .....       158420               1038/eula.rtf
2016-06-20 19:20:46 .....       259432               1042/eula.rtf
2016-06-20 19:20:46 .....       137226               1046/eula.rtf
2016-06-20 19:20:46 .....       140171               1055/eula.rtf
2016-06-20 19:20:46 .....       146273               2052/eula.rtf
2016-06-20 19:20:46 .....       148376               1044/eula.rtf
2016-06-20 19:20:46 .....       149236               1053/eula.rtf
2016-06-20 19:20:46 .....       151635               1045/eula.rtf
2016-06-20 19:20:46 .....       188741               1049/eula.rtf
2016-06-20 19:20:46 .....       129883               3082/eula.rtf
2016-06-20 19:20:46 .....       147662               2070/eula.rtf
2016-05-20 07:39:30 .....        88216               Setup.exe
2016-05-20 07:39:30 .....       219312               SetupUtility.exe
2016-05-20 07:39:30 .....       876208               SetupEngine.dll
2016-05-20 07:45:04 .....        25432               1028/SetupResources.dll
2016-05-20 07:45:04 .....        25432               2052/SetupResources.dll
2016-05-20 07:45:04 .....        26456               1042/SetupResources.dll
2016-05-20 07:45:04 .....        26968               1041/SetupResources.dll
2016-05-20 07:45:04 .....        28504               1037/SetupResources.dll
2016-05-20 07:45:04 .....        28856               1025/SetupResources.dll
2016-05-20 07:45:04 .....        29008               1033/SetupResources.dll
2016-05-20 07:45:04 .....        29528               1044/SetupResources.dll
2016-05-20 07:45:04 .....        30032               1029/SetupResources.dll
2016-05-20 07:45:04 .....        30032               1030/SetupResources.dll
2016-05-20 07:45:04 .....        30032               1035/SetupResources.dll
2016-05-20 07:45:04 .....        30544               1040/SetupResources.dll
2016-05-20 07:45:04 .....        30552               1045/SetupResources.dll
2016-05-20 07:45:04 .....        30552               3082/SetupResources.dll
2016-05-20 07:45:04 .....        31056               1031/SetupResources.dll
2016-05-20 07:45:04 .....        31056               1043/SetupResources.dll
2016-05-20 07:45:04 .....        31064               1036/SetupResources.dll
2016-05-20 07:45:04 .....        31064               1038/SetupResources.dll
2016-05-20 07:45:04 .....        31568               1032/SetupResources.dll
2016-05-20 07:45:04 .....        30032               1046/SetupResources.dll
2016-05-20 07:45:04 .....        30040               1053/SetupResources.dll
2016-05-20 07:45:04 .....        30040               1055/SetupResources.dll
2016-05-20 07:45:04 .....        30544               2070/SetupResources.dll
2016-05-20 07:45:04 .....        30552               1049/SetupResources.dll
2016-05-20 07:39:30 .....       320160               SetupUi.dll
2016-06-20 19:23:33 .....       226456               sqmapi.dll
2016-06-20 23:37:11 .....      2064384               NDP46-KB3164025.msp
2016-06-20 23:37:13 D....            0            0  Graphics
2016-06-20 23:37:13 D....            0            0  3082
2016-06-20 23:37:13 D....            0            0  2070
2016-06-20 23:37:13 D....            0            0  2052
2016-06-20 23:37:13 D....            0            0  1055
2016-06-20 23:37:13 D....            0            0  1053
2016-06-20 23:37:13 D....            0            0  1049
2016-06-20 23:37:13 D....            0            0  1046
2016-06-20 23:37:13 D....            0            0  1045
2016-06-20 23:37:13 D....            0            0  1044
2016-06-20 23:37:13 D....            0            0  1043
2016-06-20 23:37:13 D....            0            0  1042
2016-06-20 23:37:13 D....            0            0  1041
2016-06-20 23:37:13 D....            0            0  1040
2016-06-20 23:37:13 D....            0            0  1038
2016-06-20 23:37:13 D....            0            0  1037
2016-06-20 23:37:13 D....            0            0  1036
2016-06-20 23:37:13 D....            0            0  1035
2016-06-20 23:37:13 D....            0            0  1033
2016-06-20 23:37:13 D....            0            0  1032
2016-06-20 23:37:13 D....            0            0  1031
2016-06-20 23:37:13 D....            0            0  1030
2016-06-20 23:37:13 D....            0            0  1029
2016-06-20 23:37:13 D....            0            0  1028
2016-06-20 23:37:13 D....            0            0  1025
------------------- ----- ------------ ------------  ------------------------
2016-06-20 23:37:13           12972278      3251937  103 files, 25 folders

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

68EB11E54492EC8095B2570697058B7979CFB51E.exe-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904b0

StringTable 040904b0

VS_FIXEDFILEINFO

VS_FIXEDFILEINFO

Signers (1)

Certificates (4)

68EB11E54492EC8095B2570697058B7979CFB51E.exe
-