MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 000004e4

VS_FIXEDFILEINFO

Signers (1)

issuer: /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Code Signing CA
serial: 2238A464530B9741347349C9C5E294E0

Certificates (3)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: Dec 31 00:00:00 2015 GMT
            Not After : Jul  9 18:40:36 2019 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO SHA-1 Time Stamping Signer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e9:3d:df:d7:37:08:c9:1e:38:b2:52:53:42:
                    6d:22:f1:b1:c4:06:04:6b:9e:fd:82:74:50:43:7d:
                    c6:a0:bb:1f:4e:f9:02:71:26:b1:ef:43:d8:83:8c:
                    48:fc:e7:0f:97:7a:9a:eb:9c:de:a6:a3:0e:3b:1c:
                    44:18:75:8e:78:a5:17:69:fe:49:18:a4:e2:bb:5c:
                    4e:fe:8e:2a:54:7a:50:f0:d5:f6:cc:91:e7:99:79:
                    d7:de:79:94:d7:96:33:fe:0e:83:be:22:bf:63:16:
                    2c:a3:dd:28:1b:af:3d:ab:ea:97:d2:f1:bf:04:10:
                    e7:3d:48:45:fd:1f:68:65:c1:7f:59:99:69:c0:22:
                    31:0c:62:6e:a7:5c:65:01:21:b0:63:c4:22:18:27:
                    ee:e6:fc:d2:00:3d:47:2e:a8:b8:86:56:5d:04:dc:
                    13:17:25:6e:1c:df:44:0f:15:cd:b7:db:a5:57:76:
                    42:6f:00:68:82:99:d2:e3:c1:de:f0:8b:94:57:4c:
                    ec:08:90:22:21:ce:22:2b:98:0c:42:e6:42:93:94:
                    98:93:ef:fd:06:d9:3f:bc:5b:9b:54:3c:20:b1:ee:
                    6a:d6:47:7a:c5:ab:80:e9:30:9a:de:f1:a4:3f:55:
                    4d:0a:09:34:8a:75:29:d2:69:ad:97:0f:50:bf:f8:
                    ca:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8

            X509v3 Subject Key Identifier: 
                8E:6B:2D:33:6B:F4:33:A7:93:B3:13:9A:A5:E0:0A:F7:12:35:6A:88
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.usertrust.com

    Signature Algorithm: sha1WithRSAEncryption
         ba:33:24:40:40:8c:7c:db:58:9f:b3:60:98:b2:f5:c0:31:fe:
         eb:1f:6e:50:f6:0a:e0:e4:e6:81:ad:26:87:a2:df:fd:b3:da:
         f4:73:f3:00:fb:29:1b:89:1b:15:3e:db:6b:52:93:2b:c4:ac:
         39:81:d7:3c:67:57:9a:39:36:e0:28:08:9a:e3:39:4f:9b:89:
         09:7f:7b:c5:61:7f:59:89:32:25:0a:6a:ae:1a:3e:f0:a2:27:
         a8:b6:c3:b8:87:f7:16:04:48:41:3d:5c:d8:ec:9f:4d:20:31:
         04:d9:65:a1:ed:cd:69:07:53:16:3d:dd:36:02:0a:88:eb:40:
         e5:06:30:0b:b8:16:4b:dc:ef:bc:55:09:ff:c6:3e:12:2e:76:
         b3:dc:ce:42:ef:f9:76:57:e1:b7:0a:05:40:98:58:9a:5d:71:
         16:93:71:8c:65:81:ea:6f:f3:89:f7:fb:73:ad:b4:e7:bf:d9:
         8e:6f:aa:0b:4f:25:f3:b8:e1:d5:dd:75:98:68:81:f8:aa:c0:
         d1:80:c2:c4:c4:39:89:c1:f6:c9:9e:6c:d7:74:f9:d9:97:f8:
         4f:c2:9a:0a:cd:5e:8f:f8:19:e9:e0:a5:9f:c4:f0:92:21:e6:
         2d:79:25:c9:22:f9:c3:f0:3a:84:57:ad:3a:16:f4:63:94:10:
         1d:5d:d0:c6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:38:a4:64:53:0b:97:41:34:73:49:c9:c5:e2:94:e0
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Code Signing CA
        Validity
            Not Before: Sep 10 00:00:00 2014 GMT
            Not After : Sep  9 23:59:59 2017 GMT
        Subject: C=US/postalCode=98501, ST=WA, L=Olympia/street=505 Union Ave SE Ste 120, O=dotPDN LLC, CN=dotPDN LLC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:26:33:45:00:ed:20:bd:58:0f:0b:dd:8c:1b:
                    9e:17:97:0e:e2:ee:e4:60:4e:10:7f:69:63:3c:97:
                    22:1a:da:f4:fd:ab:38:2d:fb:a7:a5:a5:ce:08:0b:
                    f3:33:39:20:9f:e9:8b:7b:2a:ee:d1:48:23:64:0e:
                    29:68:bf:a4:48:2a:17:78:23:04:f4:f6:08:ac:07:
                    8b:52:de:18:84:21:bb:c9:f0:3c:39:55:82:c1:aa:
                    ae:4f:8f:0c:b4:d2:9b:cd:d6:76:54:69:bb:cf:2b:
                    83:6b:8f:e0:1f:5a:bd:50:19:62:27:77:a8:dc:32:
                    d2:34:34:03:35:d7:4b:23:bc:69:0d:1d:67:af:52:
                    f0:2d:bf:b3:0d:02:9c:ed:b6:7e:a1:0f:7f:5d:35:
                    7e:c7:06:c6:2a:5d:66:0b:1c:27:23:49:e8:d2:03:
                    5b:78:3d:79:1b:aa:0d:30:6b:f0:b6:36:66:ef:54:
                    3b:47:01:73:76:13:de:ea:7c:19:05:b9:3b:0b:ce:
                    53:6c:3a:61:92:ec:6f:b9:82:43:bc:a9:4e:7e:f3:
                    12:5c:34:f1:c8:93:93:0d:79:d8:5c:26:f4:17:bd:
                    f5:98:b0:2d:85:50:70:78:f5:97:4f:c9:15:a4:52:
                    aa:1e:58:c4:62:99:ee:73:1e:7c:50:9e:3e:f0:2b:
                    73:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:29:91:60:FF:8A:4D:FA:EB:F9:A6:6A:B8:CF:F9:E6:4B:BD:49:CE:12

            X509v3 Subject Key Identifier: 
                97:27:6E:D2:DA:39:E2:C2:00:DA:5D:50:C0:27:75:50:43:28:9B:FF
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                Code Signing
            Netscape Cert Type: 
                Object Signing
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.1.3.2
                  CPS: https://secure.comodo.net/CPS

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.comodoca.com/COMODORSACodeSigningCA.crl

            Authority Information Access: 
                CA Issuers - URI:http://crt.comodoca.com/COMODORSACodeSigningCA.crt
                OCSP - URI:http://ocsp.comodoca.com

    Signature Algorithm: sha256WithRSAEncryption
         8f:f7:ac:f9:74:6e:b3:b3:ca:08:bd:45:85:4e:87:40:06:11:
         a1:ca:c0:9a:5e:a2:e6:52:44:37:9e:a9:c4:51:5b:d7:bb:ba:
         e0:75:03:cf:92:66:1c:08:4b:f0:f4:54:03:b0:34:31:57:af:
         74:1c:06:bf:22:9e:36:1b:4e:b9:5e:d3:fb:b4:96:65:b5:6d:
         cf:32:55:bc:21:05:b1:da:4e:61:05:95:2a:4e:fc:54:7b:7e:
         e8:a0:00:c7:ef:27:95:96:1d:4f:99:53:6b:ee:2e:72:18:dd:
         61:af:4f:d2:cf:1f:cc:c7:2a:35:2e:a2:9b:d1:cc:50:3d:04:
         d3:63:d0:53:0b:9a:5a:da:10:d1:41:5d:42:04:55:6d:29:a4:
         5b:98:34:81:54:2d:d0:bf:59:00:f0:27:9d:cf:00:b7:5e:f7:
         81:22:b4:5f:8e:56:0f:c8:51:e3:85:d3:02:4d:ff:b9:ff:ac:
         af:29:de:58:d3:e2:a8:b7:a2:eb:63:c0:84:2d:df:b1:ba:d0:
         fa:8e:e5:11:cc:43:05:30:8d:fc:4c:29:ff:62:c7:39:00:92:
         ad:e6:ef:52:06:70:1d:b4:0c:29:a5:ea:93:48:25:0b:e8:3d:
         45:39:96:e1:99:6e:74:1a:72:77:ba:b8:41:94:25:35:f9:1f:
         40:63:d1:d9

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority
        Validity
            Not Before: May  9 00:00:00 2013 GMT
            Not After : May  8 23:59:59 2028 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Code Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:98:90:63:77:91:34:7f:8a:d1:dd:e9:67:31:
                    11:eb:cc:1e:fd:31:1d:b3:b9:62:57:3f:93:bc:5b:
                    e3:9f:1e:24:32:11:27:6b:bc:51:91:a7:cf:9e:9e:
                    25:b3:5f:81:a8:18:0f:1d:1e:20:30:0e:fb:61:7b:
                    86:09:b3:e3:fd:a2:68:9d:1c:2c:9d:bf:72:e3:e4:
                    75:a0:e5:35:23:8e:c9:8a:ee:1a:0c:64:c7:d8:42:
                    a1:7b:b5:52:03:4b:3a:b0:8e:23:4b:4b:63:e0:22:
                    94:37:7b:d5:79:90:0a:14:18:51:2c:e6:fe:c1:12:
                    f0:1c:3f:61:61:0a:8c:a2:dc:f6:c3:30:aa:cd:28:
                    18:75:48:c1:79:5a:08:cd:bb:8c:55:8c:f7:d4:76:
                    90:3a:33:46:50:73:98:5c:f4:85:4a:6b:0f:80:dd:
                    5e:d6:bd:fd:a9:2f:c0:25:f5:f9:78:d7:8d:5f:10:
                    c2:44:55:3c:90:3c:31:46:cb:70:ae:07:a9:0a:e3:
                    af:c1:01:6f:90:1a:23:e2:5f:38:db:c6:08:5d:47:
                    b3:83:41:f0:2e:00:37:14:b9:12:aa:79:92:52:cd:
                    87:0f:7b:d8:62:29:a4:7e:30:bd:1b:b5:8c:72:b4:
                    48:f2:e3:e8:21:f9:5e:4c:62:79:8b:02:06:9f:7f:
                    d5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:BB:AF:7E:02:3D:FA:A6:F1:3C:84:8E:AD:EE:38:98:EC:D9:32:32:D4

            X509v3 Subject Key Identifier: 
                29:91:60:FF:8A:4D:FA:EB:F9:A6:6A:B8:CF:F9:E6:4B:BD:49:CE:12
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.comodoca.com/COMODORSACertificationAuthority.crl

            Authority Information Access: 
                CA Issuers - URI:http://crt.comodoca.com/COMODORSAAddTrustCA.crt
                OCSP - URI:http://ocsp.comodoca.com

    Signature Algorithm: sha384WithRSAEncryption
         02:3f:02:39:c3:ee:f8:ca:3b:89:de:0c:6d:4d:b1:f1:4e:92:
         4f:af:c2:38:2c:04:cc:c5:63:11:ab:09:63:af:ab:a2:d7:02:
         3f:cc:6f:19:c3:3d:d6:1a:08:94:ff:25:d8:a9:88:a7:2b:10:
         1a:e0:9b:b1:07:22:1a:51:1c:3a:d4:e1:e9:09:bf:e6:24:74:
         af:1e:7b:16:31:6e:23:ef:54:51:2d:52:02:e2:75:08:05:4c:
         f1:b7:51:e1:51:00:c6:87:f6:6c:ee:10:44:76:57:6a:f1:df:
         58:6b:21:aa:49:d4:7c:37:4e:bd:ff:b6:75:54:40:18:36:57:
         67:11:cd:4f:02:e4:fe:f3:da:fc:75:17:db:ec:b7:f7:65:09:
         23:49:1f:43:57:83:ea:7e:20:77:61:c8:4d:f2:bb:65:4d:a8:
         f7:85:45:07:af:7a:69:27:65:90:29:40:8b:df:7b:3a:51:39:
         8c:a8:1f:70:79:ad:6d:42:20:a2:cf:0c:6c:03:8c:4c:cd:73:
         07:94:e7:5a:8e:3a:04:ba:a2:a1:7c:1f:cb:63:3a:15:a7:d4:
         15:1b:a7:52:47:32:a9:f4:bf:64:47:d1:aa:1f:53:4e:32:30:
         73:c2:6f:b7:78:82:9d:5c:ff:46:bb:6b:22:1d:88:0b:f8:1b:
         aa:34:a6:fc:8c:f5:dd:7f:65:8c:8c:31:57:31:d0:36:ec:47:
         a1:cf:cb:8b:a8:ef:1c:18:58:c5:06:77:ca:4b:9b:51:af:4c:
         08:4a:7a:8f:e2:a3:52:e2:8e:8e:cc:26:e4:b2:d8:e5:38:c2:
         a8:ed:c6:81:9c:35:6b:a9:58:61:4a:0a:97:b4:4b:42:b6:55:
         9d:be:99:e7:70:6d:59:f8:6d:2a:0c:7f:19:60:5f:0c:9a:88:
         6c:30:ac:52:09:90:16:1b:ff:2b:9d:db:d0:20:ca:89:ea:28:
         7e:32:8e:19:df:7b:48:33:1e:d7:65:f8:ae:c9:f8:83:14:93:
         76:7d:64:d0:8e:ce:be:35:7d:ff:72:31:4d:9f:9e:bd:1e:6c:
         2f:a8:8f:0c:06:50:fb:8c:27:b3:76:c9:f4:e6:d7:c3:34:e2:
         8c:87:21:86:61:fe:bf:55:74:e1:21:77:03:0a:68:6c:bb:e4:
         c9:a9:e6:cf:59:25:eb:7c:ec:45:0e:79:66:68:e8:22:cd:b8:
         ef:98:85:4d:96:11:3c:09:8a:d0:7f:bc:28:28:13:fb:6a:ca:
         54:8d:92:5c:cd:c2:65:98:06:9e:ce:48:5b:d4:b5:37:93:46:
         41:7c:07:dd:cf:fa:43:ef:ba:67:61:ff:7d:49:e0:bb:30:7d:
         5c:80:e3:e6:16:39:4b:a7
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
        • SHA1
          • a9 f9 61 9a bf bd 30 87  d1 1d d5 27 e2 c1 ee 7b  |..a...0....'...{|
            bb 2e 74 51                                       |..tQ            |
    • Certificates
      • Certificate #0
        • 2
          • 16:88:F0:39:25:5E:63:8E:69:14:39:07:E6:33:0B
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • ST: UT
            • L: Salt Lake City
            • O: The USERTRUST Network
            • OU: http://www.usertrust.com
            • CN: UTN-USERFirst-Object
          • 2015-12-31 00:00:00 UTC: 2019-07-09 18:40:36 UTC
          • Subject
            • C: GB
            • ST: Greater Manchester
            • L: Salford
            • O: COMODO CA Limited
            • CN: COMODO SHA-1 Time Stamping Signer
          • #5
            • rsaEncryption: nil
            • E9:E9:3D:DF:D7:37:08:C9:1E:38:B2:52:53:42:6D:22:
              F1:B1:C4:06:04:6B:9E:FD:82:74:50:43:7D:C6:A0:BB:
              1F:4E:F9:02:71:26:B1:EF:43:D8:83:8C:48:FC:E7:0F:
              97:7A:9A:EB:9C:DE:A6:A3:0E:3B:1C:44:18:75:8E:78:
              A5:17:69:FE:49:18:A4:E2:BB:5C:4E:FE:8E:2A:54:7A:
              50:F0:D5:F6:CC:91:E7:99:79:D7:DE:79:94:D7:96:33:
              FE:0E:83:BE:22:BF:63:16:2C:A3:DD:28:1B:AF:3D:AB:
              EA:97:D2:F1:BF:04:10:E7:3D:48:45:FD:1F:68:65:C1:
              7F:59:99:69:C0:22:31:0C:62:6E:A7:5C:65:01:21:B0:
              63:C4:22:18:27:EE:E6:FC:D2:00:3D:47:2E:A8:B8:86:
              56:5D:04:DC:13:17:25:6E:1C:DF:44:0F:15:CD:B7:DB:
              A5:57:76:42:6F:00:68:82:99:D2:E3:C1:DE:F0:8B:94:
              57:4C:EC:08:90:22:21:CE:22:2B:98:0C:42:E6:42:93:
              94:98:93:EF:FD:06:D9:3F:BC:5B:9B:54:3C:20:B1:EE:
              6A:D6:47:7A:C5:AB:80:E9:30:9A:DE:F1:A4:3F:55:4D:
              0A:09:34:8A:75:29:D2:69:AD:97:0F:50:BF:F8:CA:09
              : 0x010001
          • #6
            • authorityKeyIdentifier:
              da ed 64 74 14 9c 14 3c  ab dd 99 a9 bd 5b 28 4d  |..dt...<.....[(M|
              8b 3c c9 d8                                       |.<..            |
            • subjectKeyIdentifier:
              8e 6b 2d 33 6b f4 33 a7  93 b3 13 9a a5 e0 0a f7  |.k-3k.3.........|
              12 35 6a 88                                       |.5j.            |
            • keyUsage: true, 0xc0
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: true, timeStamping
            • crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
            • authorityInfoAccess
              • OCSP: http://ocsp.usertrust.com
        • RSA-SHA1:
          ba 33 24 40 40 8c 7c db  58 9f b3 60 98 b2 f5 c0  |.3$@@.|.X..`....|
          31 fe eb 1f 6e 50 f6 0a  e0 e4 e6 81 ad 26 87 a2  |1...nP.......&..|
          df fd b3 da f4 73 f3 00  fb 29 1b 89 1b 15 3e db  |.....s...)....>.|
          6b 52 93 2b c4 ac 39 81  d7 3c 67 57 9a 39 36 e0  |kR.+..9....'......|
          16 04 48 41 3d 5c d8 ec  9f 4d 20 31 04 d9 65 a1  |..HA=\...M 1..e.|
          ed cd 69 07 53 16 3d dd  36 02 0a 88 eb 40 e5 06  |..i.S.=.6....@..|
          30 0b b8 16 4b dc ef bc  55 09 ff c6 3e 12 2e 76  |0...K...U...>..v|
          b3 dc ce 42 ef f9 76 57  e1 b7 0a 05 40 98 58 9a  |...B..vW....@.X.|
          5d 71 16 93 71 8c 65 81  ea 6f f3 89 f7 fb 73 ad  |]q..q.e..o....s.|
          b4 e7 bf d9 8e 6f aa 0b  4f 25 f3 b8 e1 d5 dd 75  |.....o..O%.....u|
          98 68 81 f8 aa c0 d1 80  c2 c4 c4 39 89 c1 f6 c9  |.h.........9....|
          9e 6c d7 74 f9 d9 97 f8  4f c2 9a 0a cd 5e 8f f8  |.l.t....O....^..|
          19 e9 e0 a5 9f c4 f0 92  21 e6 2d 79 25 c9 22 f9  |........!.-y%.".|
          c3 f0 3a 84 57 ad 3a 16  f4 63 94 10 1d 5d d0 c6  |..:.W.:..c...]..|
      • Certificate #1
        • 2
          • 22:38:A4:64:53:0B:97:41:34:73:49:C9:C5:E2:94:E0
          • RSA-SHA256: nil
          • Issuer
            • C: GB
            • ST: Greater Manchester
            • L: Salford
            • O: COMODO CA Limited
            • CN: COMODO RSA Code Signing CA
          • 2014-09-10 00:00:00 UTC: 2017-09-09 23:59:59 UTC
          • Subject
            • C: US
            • postalCode: 98501
            • ST: WA
            • L: Olympia
            • street: 505 Union Ave SE Ste 120
            • O: dotPDN LLC
            • CN: dotPDN LLC
          • #5
            • rsaEncryption: nil
            • B6:26:33:45:00:ED:20:BD:58:0F:0B:DD:8C:1B:9E:17:
              97:0E:E2:EE:E4:60:4E:10:7F:69:63:3C:97:22:1A:DA:
              F4:FD:AB:38:2D:FB:A7:A5:A5:CE:08:0B:F3:33:39:20:
              9F:E9:8B:7B:2A:EE:D1:48:23:64:0E:29:68:BF:A4:48:
              2A:17:78:23:04:F4:F6:08:AC:07:8B:52:DE:18:84:21:
              BB:C9:F0:3C:39:55:82:C1:AA:AE:4F:8F:0C:B4:D2:9B:
              CD:D6:76:54:69:BB:CF:2B:83:6B:8F:E0:1F:5A:BD:50:
              19:62:27:77:A8:DC:32:D2:34:34:03:35:D7:4B:23:BC:
              69:0D:1D:67:AF:52:F0:2D:BF:B3:0D:02:9C:ED:B6:7E:
              A1:0F:7F:5D:35:7E:C7:06:C6:2A:5D:66:0B:1C:27:23:
              49:E8:D2:03:5B:78:3D:79:1B:AA:0D:30:6B:F0:B6:36:
              66:EF:54:3B:47:01:73:76:13:DE:EA:7C:19:05:B9:3B:
              0B:CE:53:6C:3A:61:92:EC:6F:B9:82:43:BC:A9:4E:7E:
              F3:12:5C:34:F1:C8:93:93:0D:79:D8:5C:26:F4:17:BD:
              F5:98:B0:2D:85:50:70:78:F5:97:4F:C9:15:A4:52:AA:
              1E:58:C4:62:99:EE:73:1E:7C:50:9E:3E:F0:2B:73:35
              : 0x010001
          • #6
            • authorityKeyIdentifier:
              29 91 60 ff 8a 4d fa eb  f9 a6 6a b8 cf f9 e6 4b  |).`..M....j....K|
              bd 49 ce 12                                       |.I..            |
            • subjectKeyIdentifier:
              97 27 6e d2 da 39 e2 c2  00 da 5d 50 c0 27 75 50  |.'n..9....]P.'uP|
              43 28 9b ff                                       |C(..            |
            • keyUsage: true, 0x80
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: codeSigning
            • nsCertType: 0x10
            • certificatePolicies
              • 1.3.6.1.4.1.6449.1.2.1.3.2
                • id-qt-cps: https://secure.comodo.net/CPS
            • crlDistributionPoints: http://crl.comodoca.com/COMODORSACodeSigningCA.crl
            • authorityInfoAccess
              • #0
                • caIssuers: http://crt.comodoca.com/COMODORSACodeSigningCA.crt
                • OCSP: http://ocsp.comodoca.com
        • RSA-SHA256:
          8f f7 ac f9 74 6e b3 b3  ca 08 bd 45 85 4e 87 40  |....tn.....E.N.@|
          06 11 a1 ca c0 9a 5e a2  e6 52 44 37 9e a9 c4 51  |......^..RD7...Q|
          5b d7 bb ba e0 75 03 cf  92 66 1c 08 4b f0 f4 54  |[....u...f..K..T|
          03 b0 34 31 57 af 74 1c  06 bf 22 9e 36 1b 4e b9  |..41W.t...".6.N.|
          5e d3 fb b4 96 65 b5 6d  cf 32 55 bc 21 05 b1 da  |^....e.m.2U.!...|
          4e 61 05 95 2a 4e fc 54  7b 7e e8 a0 00 c7 ef 27  |Na..*N.T{~.....'|
          95 96 1d 4f 99 53 6b ee  2e 72 18 dd 61 af 4f d2  |...O.Sk..r..a.O.|
          cf 1f cc c7 2a 35 2e a2  9b d1 cc 50 3d 04 d3 63  |....*5.....P=..c|
          d0 53 0b 9a 5a da 10 d1  41 5d 42 04 55 6d 29 a4  |.S..Z...A]B.Um).|
          5b 98 34 81 54 2d d0 bf  59 00 f0 27 9d cf 00 b7  |[.4.T-..Y..'....|
          5e f7 81 22 b4 5f 8e 56  0f c8 51 e3 85 d3 02 4d  |^.."._.V..Q....M|
          ff b9 ff ac af 29 de 58  d3 e2 a8 b7 a2 eb 63 c0  |.....).X......c.|
          84 2d df b1 ba d0 fa 8e  e5 11 cc 43 05 30 8d fc  |.-.........C.0..|
          4c 29 ff 62 c7 39 00 92  ad e6 ef 52 06 70 1d b4  |L).b.9.....R.p..|
          0c 29 a5 ea 93 48 25 0b  e8 3d 45 39 96 e1 99 6e  |.)...H%..=E9...n|
          74 1a 72 77 ba b8 41 94  25 35 f9 1f 40 63 d1 d9  |t.rw..A.%5..@c..|
      • Certificate #2
        • 2
          • 2E:7C:87:CC:0E:93:4A:52:FE:94:FD:1C:B7:CD:34:AF
          • RSA-SHA384: nil
          • Issuer
            • C: GB
            • ST: Greater Manchester
            • L: Salford
            • O: COMODO CA Limited
            • CN: COMODO RSA Certification Authority
          • 2013-05-09 00:00:00 UTC: 2028-05-08 23:59:59 UTC
          • Subject
            • C: GB
            • ST: Greater Manchester
            • L: Salford
            • O: COMODO CA Limited
            • CN: COMODO RSA Code Signing CA
          • #5
            • rsaEncryption: nil
            • A6:98:90:63:77:91:34:7F:8A:D1:DD:E9:67:31:11:EB:
              CC:1E:FD:31:1D:B3:B9:62:57:3F:93:BC:5B:E3:9F:1E:
              24:32:11:27:6B:BC:51:91:A7:CF:9E:9E:25:B3:5F:81:
              A8:18:0F:1D:1E:20:30:0E:FB:61:7B:86:09:B3:E3:FD:
              A2:68:9D:1C:2C:9D:BF:72:E3:E4:75:A0:E5:35:23:8E:
              C9:8A:EE:1A:0C:64:C7:D8:42:A1:7B:B5:52:03:4B:3A:
              B0:8E:23:4B:4B:63:E0:22:94:37:7B:D5:79:90:0A:14:
              18:51:2C:E6:FE:C1:12:F0:1C:3F:61:61:0A:8C:A2:DC:
              F6:C3:30:AA:CD:28:18:75:48:C1:79:5A:08:CD:BB:8C:
              55:8C:F7:D4:76:90:3A:33:46:50:73:98:5C:F4:85:4A:
              6B:0F:80:DD:5E:D6:BD:FD:A9:2F:C0:25:F5:F9:78:D7:
              8D:5F:10:C2:44:55:3C:90:3C:31:46:CB:70:AE:07:A9:
              0A:E3:AF:C1:01:6F:90:1A:23:E2:5F:38:DB:C6:08:5D:
              47:B3:83:41:F0:2E:00:37:14:B9:12:AA:79:92:52:CD:
              87:0F:7B:D8:62:29:A4:7E:30:BD:1B:B5:8C:72:B4:48:
              F2:E3:E8:21:F9:5E:4C:62:79:8B:02:06:9F:7F:D5:0B
              : 0x010001
          • #6
            • authorityKeyIdentifier:
              bb af 7e 02 3d fa a6 f1  3c 84 8e ad ee 38 98 ec  |..~.=...<....8..|
              d9 32 32 d4                                       |.22.            |
            • subjectKeyIdentifier:
              29 91 60 ff 8a 4d fa eb  f9 a6 6a b8 cf f9 e6 4b  |).`..M....j....K|
              bd 49 ce 12                                       |.I..            |
            • keyUsage: true, 0x86
            • basicConstraints
              • true
              • true: 0
            • extendedKeyUsage: codeSigning
            • certificatePolicies: anyPolicy
            • crlDistributionPoints: http://crl.comodoca.com/COMODORSACertificationAuthority.crl
            • authorityInfoAccess
              • #0
                • caIssuers: http://crt.comodoca.com/COMODORSAAddTrustCA.crt
                • OCSP: http://ocsp.comodoca.com
        • RSA-SHA384:
          02 3f 02 39 c3 ee f8 ca  3b 89 de 0c 6d 4d b1 f1  |.?.9....;...mM..|
          4e 92 4f af c2 38 2c 04  cc c5 63 11 ab 09 63 af  |N.O..8,...c...c.|
          ab a2 d7 02 3f cc 6f 19  c3 3d d6 1a 08 94 ff 25  |....?.o..=.....%|
          d8 a9 88 a7 2b 10 1a e0  9b b1 07 22 1a 51 1c 3a  |....+......".Q.:|
          d4 e1 e9 09 bf e6 24 74  af 1e 7b 16 31 6e 23 ef  |......$t..{.1n#.|
          54 51 2d 52 02 e2 75 08  05 4c f1 b7 51 e1 51 00  |TQ-R..u..L..Q.Q.|
          c6 87 f6 6c ee 10 44 76  57 6a f1 df 58 6b 21 aa  |...l..DvWj..Xk!.|
          49 d4 7c 37 4e bd ff b6  75 54 40 18 36 57 67 11  |I.|7N...uT@.6Wg.|
          cd 4f 02 e4 fe f3 da fc  75 17 db ec b7 f7 65 09  |.O......u.....e.|
          23 49 1f 43 57 83 ea 7e  20 77 61 c8 4d f2 bb 65  |#I.CW..~ wa.M..e|
          4d a8 f7 85 45 07 af 7a  69 27 65 90 29 40 8b df  |M...E..zi'e.)@..|
          7b 3a 51 39 8c a8 1f 70  79 ad 6d 42 20 a2 cf 0c  |{:Q9...py.mB ...|
          6c 03 8c 4c cd 73 07 94  e7 5a 8e 3a 04 ba a2 a1  |l..L.s...Z.:....|
          7c 1f cb 63 3a 15 a7 d4  15 1b a7 52 47 32 a9 f4  ||..c:......RG2..|
          bf 64 47 d1 aa 1f 53 4e  32 30 73 c2 6f b7 78 82  |.dG...SN20s.o.x.|
          9d 5c ff 46 bb 6b 22 1d  88 0b f8 1b aa 34 a6 fc  |.\.F.k"......4..|
          8c f5 dd 7f 65 8c 8c 31  57 31 d0 36 ec 47 a1 cf  |....e..1W1.6.G..|
          cb 8b a8 ef 1c 18 58 c5  06 77 ca 4b 9b 51 af 4c  |......X..w.K.Q.L|
          08 4a 7a 8f e2 a3 52 e2  8e 8e cc 26 e4 b2 d8 e5  |.Jz...R....&....|
          38 c2 a8 ed c6 81 9c 35  6b a9 58 61 4a 0a 97 b4  |8......5k.XaJ...|
          4b 42 b6 55 9d be 99 e7  70 6d 59 f8 6d 2a 0c 7f  |KB.U....pmY.m*..|
          19 60 5f 0c 9a 88 6c 30  ac 52 09 90 16 1b ff 2b  |.`_...l0.R.....+|
          9d db d0 20 ca 89 ea 28  7e 32 8e 19 df 7b 48 33  |... ...(~2...{H3|
          1e d7 65 f8 ae c9 f8 83  14 93 76 7d 64 d0 8e ce  |..e.......v}d...|
          be 35 7d ff 72 31 4d 9f  9e bd 1e 6c 2f a8 8f 0c  |.5}.r1M....l/...|
          06 50 fb 8c 27 b3 76 c9  f4 e6 d7 c3 34 e2 8c 87  |.P..'.v.....4...|
          21 86 61 fe bf 55 74 e1  21 77 03 0a 68 6c bb e4  |!.a..Ut.!w..hl..|
          c9 a9 e6 cf 59 25 eb 7c  ec 45 0e 79 66 68 e8 22  |....Y%.|.E.yfh."|
          cd b8 ef 98 85 4d 96 11  3c 09 8a d0 7f bc 28 28  |.....M..<.....((|
          13 fb 6a ca 54 8d 92 5c  cd c2 65 98 06 9e ce 48  |..j.T..\..e....H|
          5b d4 b5 37 93 46 41 7c  07 dd cf fa 43 ef ba 67  |[..7.FA|....C..g|
          61 ff 7d 49 e0 bb 30 7d  5c 80 e3 e6 16 39 4b a7  |a.}I..0}\....9K.|
    • Signer
      • 1
      • unnamed
        • #0
          • C: GB
          • ST: Greater Manchester
          • L: Salford
          • O: COMODO CA Limited
          • CN: COMODO RSA Code Signing CA
        • 22:38:A4:64:53:0B:97:41:34:73:49:C9:C5:E2:94:E0
      • SHA1: nil
      • #3
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest:
          af 71 85 f2 ae f2 45 69  9c 34 59 b2 31 62 27 0b  |.q....Ei.4Y.1b'.|
          85 12 56 a8                                       |..V.            |
        • 1.3.6.1.4.1.311.2.1.12
          • 00 70 00 61 00 69 00 6e  00 74 00 2e 00 6e 00 65  |.p.a.i.n.t...n.e|
            00 74                                             |.t              |
            : http://www.getpaint.net/
      • rsaEncryption:
        5c 4c db f3 d4 cf ae 3d  f1 1e 1b 5b 22 29 7f 77  |\L.....=...[").w|
        50 77 d3 80 a3 0a 1f 7b  30 01 ca 29 c0 33 d3 4b  |Pw.....{0..).3.K|
        89 dd 7a 2f f5 2a 85 2b  ee 00 58 58 d9 93 2f 4d  |..z/.*.+..XX../M|
        4e c9 c8 08 6f 99 63 10  c1 c1 4f 95 bf 46 aa 41  |N...o.c...O..F.A|
        1b a5 4f a0 ea 3d 0a 9a  c0 5c e9 38 2a dc 93 98  |..O..=...\.8*...|
        8c af 28 9f c2 83 bc 85  11 c9 dc 8e 8a 12 d4 05  |..(.............|
        26 32 64 4b cb 29 cd 60  8b 00 8a b7 56 71 f0 91  |&2dK.).`....Vq..|
        3f ce 58 53 e0 a6 dd 32  05 b4 9b e9 e9 1c 22 f6  |?.XS...2......".|
        5c 7b ca 7a 30 0a ac 1f  da 9a e0 bb 75 5e ed e4  |\{.z0.......u^..|
        fb c7 a1 78 50 d2 06 00  8a c7 7b c9 da b3 cb d6  |...xP.....{.....|
        cd a1 6b 1f 35 30 ff 1d  e3 10 69 07 f8 eb c0 72  |..k.50....i....r|
        d2 ae ca 1b ee dd 17 d8  02 0f 3d 90 7a db 4e 64  |..........=.z.Nd|
        0f cf 45 e9 7a 1b fd fd  47 58 2e 7d d7 31 22 d5  |..E.z...GX.}.1".|
        61 f9 e6 9a 9a 53 c5 91  36 5b db ae 49 4b 7e 14  |a....S..6[..IK~.|
        1f 5f 09 65 97 be 5d a0  59 9e 30 4a 9c dd 9a fb  |._.e..].Y.0J....|
        60 ca 84 b3 f0 4f fa ff  13 99 b5 42 01 cd cf a9  |`....O.....B....|
      • countersignature
        • 0
          • unnamed
            • #0
              • C: US
              • ST: UT
              • L: Salt Lake City
              • O: The USERTRUST Network
              • OU: http://www.usertrust.com
              • CN: UTN-USERFirst-Object
            • 16:88:F0:39:25:5E:63:8E:69:14:39:07:E6:33:0B
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2016-07-08 16:37:21 UTC
            • messageDigest:
              f2 ac 3a 01 ff 51 17 72  35 f9 37 62 9e 55 0d 18  |..:..Q.r5.7b.U..|
              5c b3 cb 1a                                       |\...            |
          • rsaEncryption:
            8c 48 88 e9 42 1a 14 ec  ea 36 fe ca a3 82 18 f3  |.H..B....6......|
            9e be 97 43 5b 5b e4 5a  93 de 58 ce be 33 84 de  |...C[[.Z..X..3..|
            22 a9 9b aa 0d c5 f6 cf  f0 e5 2f 1c c3 4e ff d2  |"........./..N..|
            78 8a fc 4b 62 b9 2b 59  b0 a4 b9 68 ab d2 8a 35  |x..Kb.+Y...h...5|
            15 31 92 6f 10 ac 45 8f  b9 3e 6f 95 6e 10 3d 26  |.1.o..E..>o.n.=&|
            df a3 fa 59 c5 d1 2c 59  7b 8a 34 63 e3 4c 9a 10  |...Y..,Y{.4c.L..|
            8a da 1d cf 65 85 eb 9f  cf 27 a0 97 4f 25 1b 43  |....e....'..O%.C|
            dd 94 7e 33 7b a8 20 2c  7f d6 3f fc d4 f8 5a a8  |..~3{. ,..?...Z.|
            84 7a b3 a2 21 f3 e6 d4  38 89 f2 98 a8 5c 7d a7  |.z..!...8....\}.|
            22 6f b8 ca 9e 05 12 f5  7e 07 fd 39 0a d6 1d 1e  |"o......~..9....|
            ca 96 c9 2d c8 66 e5 71  25 4e bd 40 27 be 4d 82  |...-.f.q%N.@'.M.|
            c0 70 b6 a1 c7 e2 38 c1  00 6a d2 0d 86 c6 9c 94  |.p....8..j......|
            c7 ca 8f 49 b9 07 b7 31  a3 2a 1b df 28 26 df f1  |...I...1.*..(&..|
            a2 97 71 ce 66 fe a5 ea  cb 07 76 cd d6 4e 67 28  |..q.f.....v..Ng(|
            f4 43 5f f1 42 84 e3 a6  d9 bc ee af 82 3c 71 16  |.C_.B........
offsetsizetypecomment
0112128EXE04/02/2016 03:20:09#
15c115HTM#
7d2857804PNG(256 x 256)#
1b6006934352BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 7046480 bytes (6882 KiB)


--
Type = PE
Physical Size = 7046480
CPU = x86
Characteristics = Executable 32-bit NoRelocs NoLineNums NoLocalSyms
Created = 2016-04-02 03:20:09
Headers Size = 1024
Checksum = 7050380
Image Size = 270336
Section Alignment = 4096
File Alignment = 512
Code Size = 24064
Initialized Data Size = 120320
Uninitialized Data Size = 1024
Linker Version = 6.0
OS Version = 4.0
Image Version = 6.0
Subsystem Version = 4.0
Subsystem = Windows GUI
DLL Characteristics = TerminalServerAware
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
Comment = FileVersion: 4.0.10.0
ProductVersion: 4.0.10.0
FileDescription: Installs paint.net.
LegalCopyright: Copyright © dotPDN LLC, Rick Brewster, and contributors. All Rights Reserved.
ProductName: paint.net Setup
----
Path = [0]
Size = 6929024
Packed Size = 6929024
Virtual Size = 6929024
Offset = 112128
--
Path = [0]
Type = Nsis
Physical Size = 6929022
Tail Size = 2
Method = LZMA:90m
Solid = +
Headers Size = 17393
Embedded Stub Size = 0
SubType = NSIS-2 BadCmd=11

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
                    .....        10752      6929018  $PLUGINSDIR/System.dll
2015-07-10 05:25:46 .....        19136               x64/api-ms-win-core-console-l1-1-0.dll
2015-07-10 05:25:42 .....        18624               x64/api-ms-win-core-datetime-l1-1-0.dll
2015-07-10 05:25:46 .....        18624               x64/api-ms-win-core-debug-l1-1-0.dll
2015-07-10 05:25:46 .....        18624               x64/api-ms-win-core-errorhandling-l1-1-0.dll
2015-07-10 05:25:46 .....        22208               x64/api-ms-win-core-file-l1-1-0.dll
2015-07-10 05:25:46 .....        18624               x64/api-ms-win-core-file-l1-2-0.dll
2015-07-10 05:25:46 .....        18624               x64/api-ms-win-core-file-l2-1-0.dll
2015-07-10 05:25:46 .....        18624               x64/api-ms-win-core-handle-l1-1-0.dll
2015-07-10 05:25:42 .....        19136               x64/api-ms-win-core-heap-l1-1-0.dll
2015-07-10 05:25:46 .....        18624               x64/api-ms-win-core-interlocked-l1-1-0.dll
2015-07-10 05:25:46 .....        19136               x64/api-ms-win-core-libraryloader-l1-1-0.dll
2015-07-10 05:25:46 .....        21184               x64/api-ms-win-core-localization-l1-2-0.dll
2015-07-10 05:25:46 .....        19136               x64/api-ms-win-core-memory-l1-1-0.dll
2015-07-10 05:25:46 .....        18624               x64/api-ms-win-core-namedpipe-l1-1-0.dll
2015-07-10 05:26:00 .....        19648               x64/api-ms-win-core-processenvironment-l1-1-0.dll
2015-07-10 05:26:00 .....        20672               x64/api-ms-win-core-processthreads-l1-1-0.dll
2015-07-10 05:25:56 .....        19136               x64/api-ms-win-core-processthreads-l1-1-1.dll
2015-07-10 05:26:00 .....        18112               x64/api-ms-win-core-profile-l1-1-0.dll
2015-07-10 05:26:00 .....        19136               x64/api-ms-win-core-rtlsupport-l1-1-0.dll
2015-07-10 05:26:00 .....        18624               x64/api-ms-win-core-string-l1-1-0.dll
2015-07-10 05:26:00 .....        20672               x64/api-ms-win-core-synch-l1-1-0.dll
2015-07-10 05:26:00 .....        19136               x64/api-ms-win-core-synch-l1-2-0.dll
2015-07-10 05:25:56 .....        19648               x64/api-ms-win-core-sysinfo-l1-1-0.dll
2015-07-10 05:26:00 .....        18624               x64/api-ms-win-core-timezone-l1-1-0.dll
2015-07-10 05:26:00 .....        18624               x64/api-ms-win-core-util-l1-1-0.dll
2015-07-10 05:25:56 .....        19648               x64/api-ms-win-crt-conio-l1-1-0.dll
2015-07-10 05:26:00 .....        22720               x64/api-ms-win-crt-convert-l1-1-0.dll
2015-07-10 05:26:00 .....        19136               x64/api-ms-win-crt-environment-l1-1-0.dll
2015-07-10 05:25:56 .....        20672               x64/api-ms-win-crt-filesystem-l1-1-0.dll
2015-07-10 05:26:00 .....        19648               x64/api-ms-win-crt-heap-l1-1-0.dll
2015-07-10 05:26:00 .....        19136               x64/api-ms-win-crt-locale-l1-1-0.dll
2015-07-10 05:25:58 .....        27840               x64/api-ms-win-crt-math-l1-1-0.dll
2015-07-10 05:26:00 .....        26816               x64/api-ms-win-crt-multibyte-l1-1-0.dll
2015-07-10 05:25:58 .....        70848               x64/api-ms-win-crt-private-l1-1-0.dll
2015-07-10 05:26:00 .....        19648               x64/api-ms-win-crt-process-l1-1-0.dll
2015-07-10 05:26:00 .....        23232               x64/api-ms-win-crt-runtime-l1-1-0.dll
2015-07-10 05:26:00 .....        24768               x64/api-ms-win-crt-stdio-l1-1-0.dll
2015-07-10 05:26:00 .....        24768               x64/api-ms-win-crt-string-l1-1-0.dll
2015-07-10 05:26:00 .....        21184               x64/api-ms-win-crt-time-l1-1-0.dll
2015-07-10 05:26:00 .....        19136               x64/api-ms-win-crt-utility-l1-1-0.dll
2015-06-26 06:15:28 .....       635040               x64/msvcp140.dll
2015-07-10 05:26:12 .....       982720               x64/ucrtbase.dll
2015-06-26 06:15:28 .....       205984               x64/vcomp140.dll
2015-06-26 06:15:28 .....        88752               x64/vcruntime140.dll
2015-07-10 05:32:44 .....        19136               x86/api-ms-win-core-console-l1-1-0.dll
2015-07-10 05:32:48 .....        18624               x86/api-ms-win-core-datetime-l1-1-0.dll
2015-07-10 05:32:48 .....        18624               x86/api-ms-win-core-debug-l1-1-0.dll
2015-07-10 05:32:44 .....        18624               x86/api-ms-win-core-errorhandling-l1-1-0.dll
2015-07-10 05:32:46 .....        22208               x86/api-ms-win-core-file-l1-1-0.dll
2015-07-10 05:32:48 .....        18624               x86/api-ms-win-core-file-l1-2-0.dll
2015-07-10 05:32:48 .....        18624               x86/api-ms-win-core-file-l2-1-0.dll
2015-07-10 05:32:48 .....        18624               x86/api-ms-win-core-handle-l1-1-0.dll
2015-07-10 05:32:48 .....        19136               x86/api-ms-win-core-heap-l1-1-0.dll
2015-07-10 05:32:48 .....        19136               x86/api-ms-win-core-interlocked-l1-1-0.dll
2015-07-10 05:32:48 .....        19136               x86/api-ms-win-core-libraryloader-l1-1-0.dll
2015-07-10 05:32:48 .....        21184               x86/api-ms-win-core-localization-l1-2-0.dll
2015-07-10 05:32:48 .....        19136               x86/api-ms-win-core-memory-l1-1-0.dll
2015-07-10 05:32:48 .....        18624               x86/api-ms-win-core-namedpipe-l1-1-0.dll
2015-07-10 05:32:48 .....        19648               x86/api-ms-win-core-processenvironment-l1-1-0.dll
2015-07-10 05:32:48 .....        20672               x86/api-ms-win-core-processthreads-l1-1-0.dll
2015-07-10 05:32:48 .....        19136               x86/api-ms-win-core-processthreads-l1-1-1.dll
2015-07-10 05:32:48 .....        18112               x86/api-ms-win-core-profile-l1-1-0.dll
2015-07-10 05:32:48 .....        18112               x86/api-ms-win-core-rtlsupport-l1-1-0.dll
2015-07-10 05:32:48 .....        18624               x86/api-ms-win-core-string-l1-1-0.dll
2015-07-10 05:32:48 .....        20672               x86/api-ms-win-core-synch-l1-1-0.dll
2015-07-10 05:32:48 .....        19136               x86/api-ms-win-core-synch-l1-2-0.dll
2015-07-10 05:32:48 .....        19648               x86/api-ms-win-core-sysinfo-l1-1-0.dll
2015-07-10 05:32:48 .....        18624               x86/api-ms-win-core-timezone-l1-1-0.dll
2015-07-10 05:32:48 .....        18624               x86/api-ms-win-core-util-l1-1-0.dll
2015-07-10 05:32:48 .....        19648               x86/api-ms-win-crt-conio-l1-1-0.dll
2015-07-10 05:32:48 .....        22720               x86/api-ms-win-crt-convert-l1-1-0.dll
2015-07-10 05:32:48 .....        19136               x86/api-ms-win-crt-environment-l1-1-0.dll
2015-07-10 05:32:48 .....        20672               x86/api-ms-win-crt-filesystem-l1-1-0.dll
2015-07-10 05:32:48 .....        19648               x86/api-ms-win-crt-heap-l1-1-0.dll
2015-07-10 05:32:48 .....        19136               x86/api-ms-win-crt-locale-l1-1-0.dll
2015-07-10 05:32:52 .....        29376               x86/api-ms-win-crt-math-l1-1-0.dll
2015-07-10 05:32:52 .....        26816               x86/api-ms-win-crt-multibyte-l1-1-0.dll
2015-07-10 05:32:50 .....        73408               x86/api-ms-win-crt-private-l1-1-0.dll
2015-07-10 05:32:52 .....        19648               x86/api-ms-win-crt-process-l1-1-0.dll
2015-07-10 05:32:52 .....        23232               x86/api-ms-win-crt-runtime-l1-1-0.dll
2015-07-10 05:32:52 .....        24768               x86/api-ms-win-crt-stdio-l1-1-0.dll
2015-07-10 05:32:52 .....        24768               x86/api-ms-win-crt-string-l1-1-0.dll
2015-07-10 05:32:52 .....        21184               x86/api-ms-win-crt-time-l1-1-0.dll
2015-07-10 05:32:52 .....        19136               x86/api-ms-win-crt-utility-l1-1-0.dll
2015-06-26 06:34:28 .....       439608               x86/msvcp140.dll
2015-07-10 05:33:00 .....       900288               x86/ucrtbase.dll
2015-06-26 06:34:28 .....       182432               x86/vcomp140.dll
2015-06-26 06:34:28 .....        85328               x86/vcruntime140.dll
2016-07-08 16:36:32 .....     30008832               PaintDotNet_x86.msi
2016-07-08 16:36:36 .....     30008832               PaintDotNet_x64.msi
2011-01-01 01:04:48 .....          294               PaintDotNet.msi.README!.txt
2016-07-08 16:35:10 .....      1702096               PaintDotNet.Base.dll
2016-07-08 16:34:54 .....      3417600               PaintDotNet.Base.pdb
2016-07-08 16:35:52 .....       637648               PaintDotNet.Core.dll
2016-07-08 16:35:40 .....      2092544               PaintDotNet.Core.pdb
2016-07-08 16:36:04 .....       333520               PaintDotNet.Framework.dll
2016-07-08 16:35:52 .....      1152512               PaintDotNet.Framework.pdb
2016-07-08 16:35:48 .....       414928               PaintDotNet.Resources.dll
2016-07-08 16:35:40 .....        48640               PaintDotNet.Resources.pdb
2016-07-08 16:35:40 .....       566480               PaintDotNet.SystemLayer.dll
2016-07-08 16:35:34 .....       816640               PaintDotNet.SystemLayer.pdb
2016-07-08 16:35:30 .....       988368               x86/PaintDotNet.SystemLayer.Native.x86.dll
2016-07-08 16:35:34 .....      1083600               x64/PaintDotNet.SystemLayer.Native.x64.dll
2016-07-08 16:36:24 .....      1764048               PaintDotNet.exe
2016-07-08 16:36:20 .....      4304384               PaintDotNet.pdb
2015-10-11 18:04:24 .....       147178               PaintDotNet.Strings.3.DE.resources
2015-12-30 19:33:20 .....       146227               PaintDotNet.Strings.3.ES.resources
2015-10-11 18:04:24 .....       148879               PaintDotNet.Strings.3.FR.resources
2015-10-11 18:04:24 .....       155355               PaintDotNet.Strings.3.JA.resources
2015-10-11 18:04:24 .....       148561               PaintDotNet.Strings.3.KO.resources
2015-10-11 18:04:24 .....       145665               PaintDotNet.Strings.3.PT-BR.resources
2015-10-11 18:04:24 .....       171795               PaintDotNet.Strings.3.RU.resources
2015-10-11 18:04:24 .....       135202               PaintDotNet.Strings.3.ZH-CN.resources
2016-07-08 16:18:54 .....       145386               PaintDotNet.Strings.3.cs.resources
2015-12-30 19:33:20 .....       141036               PaintDotNet.Strings.3.da.resources
2015-10-06 16:10:10 .....       158177               PaintDotNet.Strings.3.fa.resources
2015-12-30 19:33:20 .....       140038               PaintDotNet.Strings.3.fi.resources
2015-12-30 19:33:20 .....       188668               PaintDotNet.Strings.3.hi.resources
2015-10-11 18:04:24 .....       145649               PaintDotNet.Strings.3.hu.resources
2016-07-08 16:18:54 .....       144702               PaintDotNet.Strings.3.it.resources
2015-12-30 19:33:20 .....       147372               PaintDotNet.Strings.3.lt.resources
2016-07-08 16:18:54 .....       142988               PaintDotNet.Strings.3.nl.resources
2015-10-11 18:04:24 .....       143679               PaintDotNet.Strings.3.pl.resources
2016-07-08 16:18:54 .....       145523               PaintDotNet.Strings.3.pt-PT.resources
2016-06-28 19:51:40 .....       139020               PaintDotNet.Strings.3.resources
2015-12-30 19:33:20 .....       142712               PaintDotNet.Strings.3.sv.resources
2015-10-11 18:04:24 .....       137586               PaintDotNet.Strings.3.zh-TW.resources
2011-10-04 03:29:56 .....          843               Resources/en-US/copying.txt
2009-09-21 03:50:16 .....          657               Resources/en-US/Icons.CurvesEffect.png
2009-09-14 03:04:28 .....          585               Resources/en-US/Icons.DentsEffectIcon.png
2009-09-21 03:50:16 .....          275               Resources/en-US/Icons.EdgeDetectEffect.png
2009-09-14 03:04:28 .....          422               Resources/en-US/Icons.InkSketchEffectIcon.png
2009-09-14 03:04:28 .....         1013               Resources/en-US/Icons.InvertColorsEffect.png
2009-09-14 03:04:28 .....          447               Resources/en-US/Icons.LineToolIcon.png
2009-09-08 04:20:34 .....          368               Resources/en-US/Icons.MenuEditCutIcon.png
2014-01-26 22:32:00 .....          520               Resources/en-US/Icons.MenuWindowToolsIcon.png
2009-09-14 03:04:28 .....          245               Resources/en-US/Icons.OutlineEffectIcon.png
2014-01-26 22:32:00 .....          661               Resources/en-US/Icons.Settings.Tools.24.png
2009-09-14 03:04:30 .....          398               Resources/en-US/Icons.TextToolIcon.png
2009-11-04 21:41:04 .....          210               Resources/es/Icons.FontBoldIcon.png
2014-01-26 22:32:00 .....          205               Resources/es/Icons.FontItalicIcon.png
2014-01-26 22:32:00 .....          181               Resources/es/Icons.FontUnderlineIcon.png
2014-01-26 22:32:00 .....          304               Resources/fr/Icons.FontBoldIcon.png
2009-11-04 21:41:04 .....          219               Resources/fr/Icons.FontItalicIcon.png
2014-01-26 22:32:00 .....          261               Resources/fr/Icons.FontStrikeoutIcon.png
2009-10-02 03:14:58 .....          355               Resources/fr/Icons.FontUnderlineIcon.png
2014-01-26 22:32:00 .....          159               Resources/ja/Icons.FontStrikeoutIcon.png
2014-01-26 22:32:00 .....          232               Resources/ru/Icons.FontBoldIcon.png
2014-01-26 22:32:00 .....          212               Resources/ru/Icons.FontItalicIcon.png
2011-06-04 22:30:48 .....          329               Resources/ru/Icons.FontStrikeoutIcon.png
2014-01-26 22:32:00 .....          155               Resources/ru/Icons.FontUnderlineIcon.png
2007-12-15 08:59:06 .....         1717               Resources/de/Images.PayPalDonate.gif
2009-10-02 03:14:58 .....         1895               Resources/es/Images.PayPalDonate.gif
2009-10-02 03:14:58 .....         1712               Resources/fr/Images.PayPalDonate.gif
2007-12-15 08:59:06 .....         1805               Resources/ja/Images.PayPalDonate.gif
2014-06-18 23:46:20 .....         1241               Resources/zh-cn/Images.PayPalDonate.gif
2016-07-08 16:36:30 .....        87760               SetupFrontEnd.exe
2015-10-10 23:59:10 .....          412               SetupFrontEnd.exe.config
2016-07-08 16:36:24 .....       124416               SetupFrontEnd.pdb
2016-07-08 16:34:52 .....       131280               SetupShim.exe
2015-12-21 21:10:56 .....                            NDP461-KB3102438-Web.exe
------------------- ----- ------------ ------------  ------------------------
2016-07-08 16:36:36           88218666      6929018  162 files
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] ignoring invalid PEdump::BITMAPINFOHEADER