filename1.zip
size121728 (0x1db80)
md5ecf21054ab515946a812d1aa5c408ca5
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xd0

Rich Header

lib idversiontimes used
93403513
10134
9440351
95403527
9040351

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections3
TimeDateStamp0x480251cd
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion7.10
SizeOfCode0x9a00
SizeOfInitializedData0x12e00
SizeOfUninitializedData0
AddressOfEntryPoint0x645c
BaseOfCode0x1000
BaseOfData0xb000
ImageBase0x1000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion5.1
SubsystemVersion4.0
Reserved10
SizeOfImage0x20000
SizeOfHeaders0x400
CheckSum0x2474a
Subsystem2
DllCharacteristics0x8400
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS CAB SFX

Sections

namevavsizeraw sizeflags
.text0x10000x99c80x9a00R-X CODE
.data0xb0000x1be40x400RW- IDATA
.rsrc0xd0000x130000x12a00R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x9d800x8c
RESOURCE0xd0000x1280c
EXCEPTION00
SECURITY0x1cc000xf80
BASERELOC00
DEBUG0x12300x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x10000x230
Delay_IAT00
CLR_Header00
typenamesizecp
AVI#3001118021252
ICON#17441252
ICON#22961252
DIALOG#20014121252
DIALOG#20022721252
DIALOG#20032641252
DIALOG#20043641252
DIALOG#20052201252
DIALOG#20062121252
STRING#63681252
STRING#764441252
STRING#776641252
STRING#805401252
STRING#834441252
STRING#853081252
RCDATAADMQCMD71252
RCDATACABINET555521252
RCDATAEXTRACTOPT41252
RCDATAFILESIZES361252
RCDATAFINISHMSG71252
RCDATALICENSE71252
RCDATAPACKINSTSPACE41252
RCDATAPOSTRUNPROGRAM71252
RCDATAREBOOT41252
RCDATARUNPROGRAM141252
RCDATASHOWWINDOW41252
RCDATATITLE21252
RCDATAUPROMPT71252
RCDATAUSRQCMD71252
GROUP_ICON#3000341252
VERSION#110721252
idlangstring
10002052请选择用于存放提取文件的文件夹。
10012052%s
12002052从 %s 获取磁盘空间信息失败。 系统消息: %s。
12012052未找到所需的资源。
12022052是否取消?
12042052无法检索到操作系统的版本信息。
12052052内存分配请求失败。
12082052无法创建解压缩线程。
12102052CAB 文件无效。
12112052文件表已满。
12122052无法更改目标文件夹。
12132052安装程序没有找到含 %s KB 可用磁盘空间的驱动器，安装过程无法进行。请释放部分空间，然后单击“重试”，或者单击“取消”退出安装程序。
12142052文件夹无效。请确认文件夹是否存在而且可写。
12152052必须指定文件夹路径或选择“取消”。
12162052无法更新文件夹编辑框。
12172052无法加载浏览器对话框所需的函数。
12182052无法加载浏览器对话框所需的 Shell32.dll。
12202052创建进程 <%s> 时出错。原因: %s
12212052不支持此系统的簇大小。
12222052所需的资源可能已被破坏。
12232052此安装程序要求 Windows 95、Windows NT 4.0 Beta 2 或更高版本的操作系统。
12242052加载 %s 时出错
12252052GetProcAddress() 在执行函数 %s 时失败。可能的原因: 所用的 advpack.dll 版本不对。
12262052需要安装 Windows 95 或 Windows NT
12272052无法创建“%s”文件夹
12282052要安装该程序，需要有 %s KB 的磁盘空间保留在驱动器 %s 上。建议在继续安装之前释放出所需的磁盘空间。 是否继续?
12642052检索 Windows 文件夹时出错
12692052NT 系统关闭: OpenProcessToken 出错。
12702052NT 系统关闭: AdjustTokenPrivileges 出错。
12712052NT 系统关闭: ExitWindowsEx 出错。
12722052无法提取文件。很可能是由于内存不足(用于交换文件的磁盘空间不足)或 CAB 文件已损坏。
12732052安装程序无法获取驱动器(%s)的卷标信息。 系统消息: %s。
12742052安装程序无法找到含 %s KB 可用磁盘空间的驱动器，安装过程无法进行。请释放部分空间，然后再试。
12752052安装程序可能已损坏。请与该应用程序的供应商联系。
13122052命令行选项语法错误。键入“命令 /?”可获得帮助信息。
13132052命令行选项: /Q -- 无提示安装方式， /T:<full path> -- 指定临时工作文件夹， /C -- (与 /T 并用)仅将文件提取到指定文件夹。 /C:<Cmd> -- 忽略作者定义的安装命令。
13142052必须重新启动计算机才能使新的设置生效。 是否现在重新启动计算机?
13162052正在运行“%s”软件包的另一副本。是否运行新的副本?
13172052无法找到文件 %s。
13512052您没有该计算机的管理员权限。如果不是由管理员运行，部分程序无法正确安装。
13542052文件夹“%s”不存在，是否创建该文件夹?
13552052正在运行“%s”软件包的另一副本。是否要运行新的副本?
13562052“%s”软件包与您的 Windows 版本不兼容。
13572052“%s”软件包与您计算机系统中的文件 %s 的版本不兼容。
module_namehintordfunction_name
ADVAPI32.dll225FreeSid
ADVAPI32.dll29AllocateAndInitializeSid
ADVAPI32.dll216EqualSid
ADVAPI32.dll281GetTokenInformation
ADVAPI32.dll426OpenProcessToken
ADVAPI32.dll28AdjustTokenPrivileges
ADVAPI32.dll333LookupPrivilegeValueA
ADVAPI32.dll458RegCloseKey
ADVAPI32.dll467RegDeleteValueA
ADVAPI32.dll484RegOpenKeyExA
ADVAPI32.dll507RegSetValueExA
ADVAPI32.dll494RegQueryValueExA
ADVAPI32.dll462RegCreateKeyExA
ADVAPI32.dll489RegQueryInfoKeyA
KERNEL32.dll590LocalFree
KERNEL32.dll586LocalAlloc
KERNEL32.dll360GetLastError
KERNEL32.dll315GetCurrentProcess
KERNEL32.dll951lstrlenA
KERNEL32.dll372GetModuleFileNameA
KERNEL32.dll441GetSystemDirectoryA
KERNEL32.dll929_lclose
KERNEL32.dll931_llseek
KERNEL32.dll932_lopen
KERNEL32.dll916WritePrivateProfileStringA
KERNEL32.dll488GetWindowsDirectoryA
KERNEL32.dll71CreateDirectoryA
KERNEL32.dll342GetFileAttributesA
KERNEL32.dll185ExpandEnvironmentStringsA
KERNEL32.dll945lstrcpyA
KERNEL32.dll500GlobalFree
KERNEL32.dll511GlobalUnlock
KERNEL32.dll504GlobalLock
KERNEL32.dll493GlobalAlloc
KERNEL32.dll555IsDBCSLeadByte
KERNEL32.dll428GetShortPathNameA
KERNEL32.dll404GetPrivateProfileStringA
KERNEL32.dll398GetPrivateProfileIntA
KERNEL32.dll942lstrcmpiA
KERNEL32.dll693RemoveDirectoryA
KERNEL32.dll204FindClose
KERNEL32.dll217FindNextFileA
KERNEL32.dll129DeleteFileA
KERNEL32.dll775SetFileAttributesA
KERNEL32.dll939lstrcmpA
KERNEL32.dll208FindFirstFileA
KERNEL32.dll242FreeResource
KERNEL32.dll408GetProcAddress
KERNEL32.dll585LoadResource
KERNEL32.dll833SizeofResource
KERNEL32.dll223FindResourceA
KERNEL32.dll936lstrcatA
KERNEL32.dll49CloseHandle
KERNEL32.dll911WriteFile
KERNEL32.dll777SetFilePointer
KERNEL32.dll781SetFileTime
KERNEL32.dll588LocalFileTimeToFileTime
KERNEL32.dll141DosDateTimeToFileTime
KERNEL32.dll762SetCurrentDirectoryA
KERNEL32.dll457GetTempFileNameA
KERNEL32.dll182ExitProcess
KERNEL32.dll79CreateFileA
KERNEL32.dll581LoadLibraryExA
KERNEL32.dll948lstrcpynA
KERNEL32.dll480GetVolumeInformationA
KERNEL32.dll235FormatMessageA
KERNEL32.dll313GetCurrentDirectoryA
KERNEL32.dll478GetVersionExA
KERNEL32.dll338GetExitCodeProcess
KERNEL32.dll894WaitForSingleObject
KERNEL32.dll98CreateProcessA
KERNEL32.dll459GetTempPathA
KERNEL32.dll443GetSystemInfo
KERNEL32.dll92CreateMutexA
KERNEL32.dll772SetEvent
KERNEL32.dll75CreateEventA
KERNEL32.dll108CreateThread
KERNEL32.dll703ResetEvent
KERNEL32.dll843TerminateThread
KERNEL32.dll331GetDriveTypeA
KERNEL32.dll374GetModuleHandleA
KERNEL32.dll430GetStartupInfoA
KERNEL32.dll265GetCommandLineA
KERNEL32.dll660QueryPerformanceCounter
KERNEL32.dll468GetTickCount
KERNEL32.dll318GetCurrentThreadId
KERNEL32.dll316GetCurrentProcessId
KERNEL32.dll448GetSystemTimeAsFileTime
KERNEL32.dll842TerminateProcess
KERNEL32.dll859UnhandledExceptionFilter
KERNEL32.dll822SetUnhandledExceptionFilter
KERNEL32.dll678ReadFile
KERNEL32.dll580LoadLibraryA
KERNEL32.dll325GetDiskFreeSpaceA
KERNEL32.dll614MulDiv
KERNEL32.dll161EnumResourceLanguagesA
KERNEL32.dll240FreeLibrary
KERNEL32.dll599LockResource
GDI32.dll364GetDeviceCaps
USER32.dll225ExitWindowsEx
USER32.dll728wsprintfA
USER32.dll42CharNextA
USER32.dll52CharUpperA
USER32.dll45CharPrevA
USER32.dll640SetWindowLongA
USER32.dll366GetWindowLongA
USER32.dll27CallWindowProcA
USER32.dll161DispatchMessageA
USER32.dll490MsgWaitForMultipleObjects
USER32.dll509PeekMessageA
USER32.dll571SendMessageA
USER32.dll643SetWindowPos
USER32.dll554ReleaseDC
USER32.dll268GetDC
USER32.dll372GetWindowRect
USER32.dll566SendDlgItemMessageA
USER32.dll273GetDlgItem
USER32.dll599SetForegroundWindow
USER32.dll646SetWindowTextA
USER32.dll476MessageBoxA
USER32.dll155DialogBoxIndirectParamA
USER32.dll658ShowWindow
USER32.dll196EnableWindow
USER32.dll275GetDlgItemTextA
USER32.dll198EndDialog
USER32.dll270GetDesktopWindow
USER32.dll475MessageBeep
USER32.dll595SetDlgItemTextA
USER32.dll456LoadStringA
USER32.dll349GetSystemMetrics
COMCTL32.dll17
VERSION.dllGetFileVersionInfoA
VERSION.dll10VerQueryValueA
VERSION.dll1GetFileVersionInfoSizeA

StringTable 080404B0

CompanyNameMicrosoft Corporation
FileDescriptionWin32 Cabinet Self-Extractor
FileVersion6.00.2900.5512 (xpsp.080413-2105)
InternalNameWextract
LegalCopyright(C) Microsoft Corporation. All rights reserved.
OriginalFilenameWEXTRACT.EXE
ProductNameMicrosoft(R) Windows(R) Operating System
ProductVersion6.00.2900.5512

VS_FIXEDFILEINFO

FileVersion6.0.2900.5512
ProductVersion6.0.2900.5512
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0

Signers (1)

issuer: /C=US/O=Thawte, Inc./CN=Thawte Code Signing CA - G2
serial: 452156C3B3FB0176365BDB5B7715BC4C

Certificates (3)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:21:56:c3:b3:fb:01:76:36:5b:db:5b:77:15:bc:4c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Thawte, Inc., CN=Thawte Code Signing CA - G2
        Validity
            Not Before: Nov  6 00:00:00 2012 GMT
            Not After : Jan  5 23:59:59 2015 GMT
        Subject: C=KR, ST=Gyeonggi-do, L=Anyang-si, O=CallTogether, Inc., CN=CallTogether, Inc.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ac:8d:05:b8:33:64:bc:31:51:7e:41:5b:31:
                    88:77:e5:55:ca:67:7f:60:91:90:66:d3:eb:ad:96:
                    1d:62:66:37:0c:39:da:f4:fc:04:9f:ac:c3:56:28:
                    1d:b9:0e:64:b6:ac:db:e5:b9:e3:72:b1:12:73:84:
                    f9:4a:ae:55:40:02:49:e6:53:5e:49:e7:ac:9a:80:
                    f7:bd:dc:bd:c2:a4:22:c3:1a:41:56:5f:aa:31:ef:
                    ac:64:a5:70:48:2f:36:78:04:09:38:1a:f0:8c:60:
                    37:63:59:79:00:29:16:17:01:60:06:df:80:d5:df:
                    ac:bc:41:3c:1f:fe:14:39:1a:09:0d:e3:6a:bd:32:
                    85:47:73:49:6f:89:1e:b5:e4:1a:a3:da:bf:06:3a:
                    42:a0:c9:08:98:c4:43:b3:fe:14:62:fd:da:cb:17:
                    09:21:f4:ac:5e:c3:0b:26:1d:63:9b:e2:f5:8f:12:
                    c3:c6:5c:2b:85:6a:14:44:a3:0e:a2:ed:7d:32:4f:
                    0e:cc:8c:99:79:b1:55:49:f5:18:c2:06:b0:0b:c8:
                    64:64:04:d6:77:cd:81:87:16:64:0e:db:01:79:4a:
                    48:88:34:aa:b4:49:6e:7c:f3:0b:c6:b3:b1:50:11:
                    05:36:e8:1f:8b:f5:4d:c5:b5:b2:e3:dd:52:2f:24:
                    56:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://cs-g2-crl.thawte.com/ThawteCSG2.crl

            X509v3 Extended Key Usage: 
                Code Signing, Microsoft Commercial Code Signing
            2.5.29.4: 
                0.0.0..
+.....7.......
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com

            Netscape Cert Type: 
                Object Signing
    Signature Algorithm: sha1WithRSAEncryption
         a9:9d:5e:8c:a8:40:00:d3:79:0e:31:4c:14:30:0e:b3:91:e8:
         bf:2f:f7:ff:09:70:7d:f8:af:66:06:2c:73:84:21:96:83:91:
         f4:99:9b:ef:85:33:7d:4a:6f:59:02:69:23:3d:38:35:91:d6:
         6b:0f:12:60:1f:dd:b2:db:8d:ef:ea:c4:70:d3:8a:eb:3b:9b:
         aa:1f:de:30:f9:b8:90:90:d4:45:68:34:e9:f0:e0:7d:37:42:
         3a:93:5b:b2:e2:20:04:fe:5a:f2:46:da:2f:1c:30:83:69:9c:
         17:f1:c0:d2:d8:b9:46:6e:ef:94:b6:39:58:f9:c0:92:f9:1f:
         97:2c:e6:89:42:7c:0c:79:f4:4c:8e:7c:44:b3:b3:a6:77:5b:
         f0:73:4c:59:9b:8b:c1:96:d2:39:3d:46:71:07:20:f7:e0:50:
         e5:88:c7:25:71:3a:75:f4:67:98:b9:37:48:8d:92:8b:31:f8:
         5d:0c:1e:f3:47:46:1c:08:8b:c3:0c:02:c1:1a:99:f0:be:40:
         3d:02:0a:d3:22:f7:35:6a:99:76:ae:17:c3:12:9e:2a:20:c0:
         6e:51:6e:e5:07:0c:a1:40:e0:85:89:2a:8d:75:73:31:eb:0d:
         8d:87:0d:5e:ab:14:69:32:b4:ca:ca:a4:b4:39:9e:bd:41:bd:
         8b:59:cb:a9
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:4e:d5:57:20:d5:ed:ec:49:f4:2f:ce:37:db:2b:6d
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
        Validity
            Not Before: Nov 17 00:00:00 2006 GMT
            Not After : Jul 16 23:59:59 2036 GMT
        Subject: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a0:f0:fb:80:59:d4:9c:c7:a4:cf:9d:a1:59:
                    73:09:10:45:0c:0d:2c:6e:68:f1:6c:5b:48:68:49:
                    59:37:fc:0b:33:19:c2:77:7f:cc:10:2d:95:34:1c:
                    e6:eb:4d:09:a7:1c:d2:b8:c9:97:36:02:b7:89:d4:
                    24:5f:06:c0:cc:44:94:94:8d:02:62:6f:eb:5a:dd:
                    11:8d:28:9a:5c:84:90:10:7a:0d:bd:74:66:2f:6a:
                    38:a0:e2:d5:54:44:eb:1d:07:9f:07:ba:6f:ee:e9:
                    fd:4e:0b:29:f5:3e:84:a0:01:f1:9c:ab:f8:1c:7e:
                    89:a4:e8:a1:d8:71:65:0d:a3:51:7b:ee:bc:d2:22:
                    60:0d:b9:5b:9d:df:ba:fc:51:5b:0b:af:98:b2:e9:
                    2e:e9:04:e8:62:87:de:2b:c8:d7:4e:c1:4c:64:1e:
                    dd:cf:87:58:ba:4a:4f:ca:68:07:1d:1c:9d:4a:c6:
                    d5:2f:91:cc:7c:71:72:1c:c5:c0:67:eb:32:fd:c9:
                    92:5c:94:da:85:c0:9b:bf:53:7d:2b:09:f4:8c:9d:
                    91:1f:97:6a:52:cb:de:09:36:a4:77:d8:7b:87:50:
                    44:d5:3e:6e:29:69:fb:39:49:26:1e:09:a5:80:7b:
                    40:2d:eb:e8:27:85:c9:fe:61:fd:7e:e6:7c:97:1d:
                    d5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier: 
                7B:5B:45:CF:AF:CE:CB:7A:FD:31:92:1A:6A:B6:F3:46:EB:57:48:50
    Signature Algorithm: sha1WithRSAEncryption
         79:11:c0:4b:b3:91:b6:fc:f0:e9:67:d4:0d:6e:45:be:55:e8:
         93:d2:ce:03:3f:ed:da:25:b0:1d:57:cb:1e:3a:76:a0:4c:ec:
         50:76:e8:64:72:0c:a4:a9:f1:b8:8b:d6:d6:87:84:bb:32:e5:
         41:11:c0:77:d9:b3:60:9d:eb:1b:d5:d1:6e:44:44:a9:a6:01:
         ec:55:62:1d:77:b8:5c:8e:48:49:7c:9c:3b:57:11:ac:ad:73:
         37:8e:2f:78:5c:90:68:47:d9:60:60:e6:fc:07:3d:22:20:17:
         c4:f7:16:e9:c4:d8:72:f9:c8:73:7c:df:16:2f:15:a9:3e:fd:
         6a:27:b6:a1:eb:5a:ba:98:1f:d5:e3:4d:64:0a:9d:13:c8:61:
         ba:f5:39:1c:87:ba:b8:bd:7b:22:7f:f6:fe:ac:40:79:e5:ac:
         10:6f:3d:8f:1b:79:76:8b:c4:37:b3:21:18:84:e5:36:00:eb:
         63:20:99:b9:e9:fe:33:04:bb:41:c8:c1:02:f9:44:63:20:9e:
         81:ce:42:d3:d6:3f:2c:76:d3:63:9c:59:dd:8f:a6:e1:0e:a0:
         2e:41:f7:2e:95:47:cf:bc:fd:33:f3:f6:0b:61:7e:7e:91:2b:
         81:47:c2:27:30:ee:a7:10:5d:37:8f:5c:39:2b:e4:04:f0:7b:
         8d:56:8c:68
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=Thawte, Inc., CN=Thawte Code Signing CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8b:cf:75:5b:9f:25:da:7e:39:b0:93:db:38:
                    d3:a9:23:d0:82:fa:e9:24:7e:5c:0b:8e:83:f8:e6:
                    7a:59:e6:a3:c5:98:a7:99:d2:44:ff:00:a6:a5:39:
                    04:8a:da:29:88:ea:db:a2:f3:1c:99:15:26:c2:b1:
                    f4:fc:e1:0c:47:a9:09:11:06:0a:20:92:b9:c7:a0:
                    04:8c:5c:94:19:ab:5b:25:2c:1d:62:7e:70:0d:ce:
                    61:6c:dd:2b:82:c9:ce:5d:48:5f:f7:c2:be:bc:41:
                    23:1e:4f:29:5d:d7:4f:bc:f4:c5:2a:fc:63:e6:7c:
                    26:4e:99:a7:79:41:9e:10:4a:7a:79:c9:c6:86:f7:
                    86:95:d2:26:ce:3c:18:2a:d6:7c:ce:af:cd:ad:bb:
                    f7:82:2c:70:26:37:45:e5:0f:47:22:c6:01:28:bd:
                    2e:83:5c:6a:a4:47:c1:e7:d0:d8:6b:81:46:3f:21:
                    17:f5:07:c5:43:5a:a6:67:2c:b8:7b:60:11:b5:83:
                    ee:f5:74:0a:72:71:44:3d:58:fe:e8:1a:ab:38:c3:
                    59:db:7f:6e:38:7d:76:c7:72:69:98:36:96:57:d3:
                    66:1c:d2:54:91:04:2e:54:19:b0:dc:3d:b5:22:5e:
                    86:d5:2a:7e:20:df:5d:e6:7a:b1:65:fe:c5:02:4e:
                    31:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.thawte.com/ThawtePCA.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-10
            X509v3 Subject Key Identifier: 
                D4:0D:65:3F:7A:BD:34:C6:FE:47:E7:4C:0D:C0:BD:F2:DE:15:AB:71
            X509v3 Authority Key Identifier: 
                keyid:7B:5B:45:CF:AF:CE:CB:7A:FD:31:92:1A:6A:B6:F3:46:EB:57:48:50

    Signature Algorithm: sha1WithRSAEncryption
         56:fe:53:5c:e1:c7:9e:bc:a7:ed:7e:53:6d:6a:14:4b:51:8c:
         40:5e:80:5f:aa:a4:e8:2f:ef:38:c8:04:c9:ca:3e:cf:df:3a:
         58:4e:b0:d4:b6:63:c5:29:57:fa:02:05:9a:45:4d:68:db:2a:
         1b:d4:34:3d:9f:00:c3:5a:cb:95:49:a5:6e:e1:b0:c5:fc:41:
         4d:41:4a:6f:d3:77:c8:d7:38:8d:e4:19:de:18:f3:1f:15:65:
         83:6d:45:0c:53:f9:0a:9a:2e:a5:5d:bf:6f:32:81:18:92:19:
         6a:55:00:ad:63:1c:52:06:7e:55:d9:29:68:ae:4a:7c:18:9a:
         79:88:6b:23:23:d8:27:38:2a:29:87:76:ca:fb:c7:b6:62:23:
         1f:ed:7a:56:4c:dd:9c:32:5b:f5:3d:0c:46:18:95:3b:2a:23:
         68:83:64:41:d9:00:6d:0f:19:24:15:68:72:bd:c5:71:67:6e:
         ac:4c:db:90:eb:51:a5:1a:62:07:d0:be:6a:00:47:3c:72:2f:
         ec:4f:61:3e:73:85:ce:5a:0a:b7:ba:c0:1c:13:75:e3:22:39:
         28:dd:6d:1d:09:46:9d:4f:ba:e8:40:81:91:c6:a4:ce:94:72:
         1b:01:cf:2a:6e:15:67:95:89:ae:7d:b7:b7:cd:f9:0a:3d:75:
         b6:6b:3c:25
pkcs7-signedData
  • 1
    • MD5: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • : 
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • MD5
          • 0e 07 20 28 20 3b b9 c8  c6 0e 4d 01 d2 0e fe 72  |.. ( ;....M....r|
    • Certificates
      • Certificate #0
        • 2
          • 45:21:56:C3:B3:FB:01:76:36:5B:DB:5B:77:15:BC:4C
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: Thawte, Inc.
            • CN: Thawte Code Signing CA - G2
          • 2012-11-06 00:00:00 UTC: 2015-01-05 23:59:59 UTC
          • Subject
            • C: KR
            • ST: Gyeonggi-do
            • L: Anyang-si
            • O: CallTogether, Inc.
            • CN: CallTogether, Inc.
          • #5
            • rsaEncryption: nil
            • DE:AC:8D:05:B8:33:64:BC:31:51:7E:41:5B:31:88:77:
              E5:55:CA:67:7F:60:91:90:66:D3:EB:AD:96:1D:62:66:
              37:0C:39:DA:F4:FC:04:9F:AC:C3:56:28:1D:B9:0E:64:
              B6:AC:DB:E5:B9:E3:72:B1:12:73:84:F9:4A:AE:55:40:
              02:49:E6:53:5E:49:E7:AC:9A:80:F7:BD:DC:BD:C2:A4:
              22:C3:1A:41:56:5F:AA:31:EF:AC:64:A5:70:48:2F:36:
              78:04:09:38:1A:F0:8C:60:37:63:59:79:00:29:16:17:
              01:60:06:DF:80:D5:DF:AC:BC:41:3C:1F:FE:14:39:1A:
              09:0D:E3:6A:BD:32:85:47:73:49:6F:89:1E:B5:E4:1A:
              A3:DA:BF:06:3A:42:A0:C9:08:98:C4:43:B3:FE:14:62:
              FD:DA:CB:17:09:21:F4:AC:5E:C3:0B:26:1D:63:9B:E2:
              F5:8F:12:C3:C6:5C:2B:85:6A:14:44:A3:0E:A2:ED:7D:
              32:4F:0E:CC:8C:99:79:B1:55:49:F5:18:C2:06:B0:0B:
              C8:64:64:04:D6:77:CD:81:87:16:64:0E:DB:01:79:4A:
              48:88:34:AA:B4:49:6E:7C:F3:0B:C6:B3:B1:50:11:05:
              36:E8:1F:8B:F5:4D:C5:B5:B2:E3:DD:52:2F:24:56:4D              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • nil
            • crlDistributionPoints: http://cs-g2-crl.thawte.com/ThawteCSG2.crl
            • extendedKeyUsage
              • codeSigning: msCodeCom
            • 2.5.29.4
              • msCodeCom: 0x80
            • authorityInfoAccess
              • OCSP: http://ocsp.thawte.com
            • nsCertType: 0x10
        • RSA-SHA1: 
          a9 9d 5e 8c a8 40 00 d3  79 0e 31 4c 14 30 0e b3  |..^..@..y.1L.0..|
91 e8 bf 2f f7 ff 09 70  7d f8 af 66 06 2c 73 84  |.../...p}..f.,s.|
21 96 83 91 f4 99 9b ef  85 33 7d 4a 6f 59 02 69  |!........3}JoY.i|
23 3d 38 35 91 d6 6b 0f  12 60 1f dd b2 db 8d ef  |#=85..k..`......|
ea c4 70 d3 8a eb 3b 9b  aa 1f de 30 f9 b8 90 90  |..p...;....0....|
d4 45 68 34 e9 f0 e0 7d  37 42 3a 93 5b b2 e2 20  |.Eh4...}7B:.[.. |
04 fe 5a f2 46 da 2f 1c  30 83 69 9c 17 f1 c0 d2  |..Z.F./.0.i.....|
d8 b9 46 6e ef 94 b6 39  58 f9 c0 92 f9 1f 97 2c  |..Fn...9X......,|
e6 89 42 7c 0c 79 f4 4c  8e 7c 44 b3 b3 a6 77 5b  |..B|.y.L.|D...w[|
f0 73 4c 59 9b 8b c1 96  d2 39 3d 46 71 07 20 f7  |.sLY.....9=Fq. .|
e0 50 e5 88 c7 25 71 3a  75 f4 67 98 b9 37 48 8d  |.P...%q:u.g..7H.|
92 8b 31 f8 5d 0c 1e f3  47 46 1c 08 8b c3 0c 02  |..1.]...GF......|
c1 1a 99 f0 be 40 3d 02  0a d3 22 f7 35 6a 99 76  |.....@=...".5j.v|
ae 17 c3 12 9e 2a 20 c0  6e 51 6e e5 07 0c a1 40  |.....* .nQn....@|
e0 85 89 2a 8d 75 73 31  eb 0d 8d 87 0d 5e ab 14  |...*.us1.....^..|
69 32 b4 ca ca a4 b4 39  9e bd 41 bd 8b 59 cb a9  |i2.....9..A..Y..|
      • Certificate #1
        • 2
          • 34:4E:D5:57:20:D5:ED:EC:49:F4:2F:CE:37:DB:2B:6D
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: thawte, Inc.
            • OU: Certification Services Division
            • OU: (c) 2006 thawte, Inc. - For authorized use only
            • CN: thawte Primary Root CA
          • 2006-11-17 00:00:00 UTC: 2036-07-16 23:59:59 UTC
          • Subject
            • C: US
            • O: thawte, Inc.
            • OU: Certification Services Division
            • OU: (c) 2006 thawte, Inc. - For authorized use only
            • CN: thawte Primary Root CA
          • #5
            • rsaEncryption: nil
            • AC:A0:F0:FB:80:59:D4:9C:C7:A4:CF:9D:A1:59:73:09:
              10:45:0C:0D:2C:6E:68:F1:6C:5B:48:68:49:59:37:FC:
              0B:33:19:C2:77:7F:CC:10:2D:95:34:1C:E6:EB:4D:09:
              A7:1C:D2:B8:C9:97:36:02:B7:89:D4:24:5F:06:C0:CC:
              44:94:94:8D:02:62:6F:EB:5A:DD:11:8D:28:9A:5C:84:
              90:10:7A:0D:BD:74:66:2F:6A:38:A0:E2:D5:54:44:EB:
              1D:07:9F:07:BA:6F:EE:E9:FD:4E:0B:29:F5:3E:84:A0:
              01:F1:9C:AB:F8:1C:7E:89:A4:E8:A1:D8:71:65:0D:A3:
              51:7B:EE:BC:D2:22:60:0D:B9:5B:9D:DF:BA:FC:51:5B:
              0B:AF:98:B2:E9:2E:E9:04:E8:62:87:DE:2B:C8:D7:4E:
              C1:4C:64:1E:DD:CF:87:58:BA:4A:4F:CA:68:07:1D:1C:
              9D:4A:C6:D5:2F:91:CC:7C:71:72:1C:C5:C0:67:EB:32:
              FD:C9:92:5C:94:DA:85:C0:9B:BF:53:7D:2B:09:F4:8C:
              9D:91:1F:97:6A:52:CB:DE:09:36:A4:77:D8:7B:87:50:
              44:D5:3E:6E:29:69:FB:39:49:26:1E:09:A5:80:7B:40:
              2D:EB:E8:27:85:C9:FE:61:FD:7E:E6:7C:97:1D:D5:9D              : 0x010001
          • X509v3 extensions
            • basicConstraints: true, true
            • keyUsage: true, 6
            • subjectKeyIdentifier: 
              7b 5b 45 cf af ce cb 7a  fd 31 92 1a 6a b6 f3 46  |{[E....z.1..j..F|
eb 57 48 50                                       |.WHP            |
        • RSA-SHA1: 
          79 11 c0 4b b3 91 b6 fc  f0 e9 67 d4 0d 6e 45 be  |y..K......g..nE.|
55 e8 93 d2 ce 03 3f ed  da 25 b0 1d 57 cb 1e 3a  |U.....?..%..W..:|
76 a0 4c ec 50 76 e8 64  72 0c a4 a9 f1 b8 8b d6  |v.L.Pv.dr.......|
d6 87 84 bb 32 e5 41 11  c0 77 d9 b3 60 9d eb 1b  |....2.A..w..`...|
d5 d1 6e 44 44 a9 a6 01  ec 55 62 1d 77 b8 5c 8e  |..nDD....Ub.w.\.|
48 49 7c 9c 3b 57 11 ac  ad 73 37 8e 2f 78 5c 90  |HI|.;W...s7./x\.|
68 47 d9 60 60 e6 fc 07  3d 22 20 17 c4 f7 16 e9  |hG.``...=" .....|
c4 d8 72 f9 c8 73 7c df  16 2f 15 a9 3e fd 6a 27  |..r..s|../..>.j'|
b6 a1 eb 5a ba 98 1f d5  e3 4d 64 0a 9d 13 c8 61  |...Z.....Md....a|
ba f5 39 1c 87 ba b8 bd  7b 22 7f f6 fe ac 40 79  |..9.....{"....@y|
e5 ac 10 6f 3d 8f 1b 79  76 8b c4 37 b3 21 18 84  |...o=..yv..7.!..|
e5 36 00 eb 63 20 99 b9  e9 fe 33 04 bb 41 c8 c1  |.6..c ....3..A..|
02 f9 44 63 20 9e 81 ce  42 d3 d6 3f 2c 76 d3 63  |..Dc ...B..?,v.c|
9c 59 dd 8f a6 e1 0e a0  2e 41 f7 2e 95 47 cf bc  |.Y.......A...G..|
fd 33 f3 f6 0b 61 7e 7e  91 2b 81 47 c2 27 30 ee  |.3...a~~.+.G.'0.|
a7 10 5d 37 8f 5c 39 2b  e4 04 f0 7b 8d 56 8c 68  |..]7.\9+...{.V.h|
      • Certificate #2
        • 2
          • 47:97:4D:78:73:A5:BC:AB:0D:2F:B3:70:19:2F:CE:5E
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: thawte, Inc.
            • OU: Certification Services Division
            • OU: (c) 2006 thawte, Inc. - For authorized use only
            • CN: thawte Primary Root CA
          • 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
          • Subject
            • C: US
            • O: Thawte, Inc.
            • CN: Thawte Code Signing CA - G2
          • #5
            • rsaEncryption: nil
            • B7:8B:CF:75:5B:9F:25:DA:7E:39:B0:93:DB:38:D3:A9:
              23:D0:82:FA:E9:24:7E:5C:0B:8E:83:F8:E6:7A:59:E6:
              A3:C5:98:A7:99:D2:44:FF:00:A6:A5:39:04:8A:DA:29:
              88:EA:DB:A2:F3:1C:99:15:26:C2:B1:F4:FC:E1:0C:47:
              A9:09:11:06:0A:20:92:B9:C7:A0:04:8C:5C:94:19:AB:
              5B:25:2C:1D:62:7E:70:0D:CE:61:6C:DD:2B:82:C9:CE:
              5D:48:5F:F7:C2:BE:BC:41:23:1E:4F:29:5D:D7:4F:BC:
              F4:C5:2A:FC:63:E6:7C:26:4E:99:A7:79:41:9E:10:4A:
              7A:79:C9:C6:86:F7:86:95:D2:26:CE:3C:18:2A:D6:7C:
              CE:AF:CD:AD:BB:F7:82:2C:70:26:37:45:E5:0F:47:22:
              C6:01:28:BD:2E:83:5C:6A:A4:47:C1:E7:D0:D8:6B:81:
              46:3F:21:17:F5:07:C5:43:5A:A6:67:2C:B8:7B:60:11:
              B5:83:EE:F5:74:0A:72:71:44:3D:58:FE:E8:1A:AB:38:
              C3:59:DB:7F:6E:38:7D:76:C7:72:69:98:36:96:57:D3:
              66:1C:D2:54:91:04:2E:54:19:B0:DC:3D:B5:22:5E:86:
              D5:2A:7E:20:DF:5D:E6:7A:B1:65:FE:C5:02:4E:31:2D              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://crl.thawte.com/ThawtePCA.crl
            • keyUsage: true, 6
            • authorityInfoAccess
              • OCSP: http://ocsp.thawte.com
            • extendedKeyUsage
              • clientAuth: codeSigning
            • subjectAltName
              • CN: VeriSignMPKI-2-10
            • subjectKeyIdentifier: 
              d4 0d 65 3f 7a bd 34 c6  fe 47 e7 4c 0d c0 bd f2  |..e?z.4..G.L....|
de 15 ab 71                                       |...q            |
            • authorityKeyIdentifier: 
              7b 5b 45 cf af ce cb 7a  fd 31 92 1a 6a b6 f3 46  |{[E....z.1..j..F|
eb 57 48 50                                       |.WHP            |
        • RSA-SHA1: 
          56 fe 53 5c e1 c7 9e bc  a7 ed 7e 53 6d 6a 14 4b  |V.S\......~Smj.K|
51 8c 40 5e 80 5f aa a4  e8 2f ef 38 c8 04 c9 ca  |Q.@^._.../.8....|
3e cf df 3a 58 4e b0 d4  b6 63 c5 29 57 fa 02 05  |>..:XN...c.)W...|
9a 45 4d 68 db 2a 1b d4  34 3d 9f 00 c3 5a cb 95  |.EMh.*..4=...Z..|
49 a5 6e e1 b0 c5 fc 41  4d 41 4a 6f d3 77 c8 d7  |I.n....AMAJo.w..|
38 8d e4 19 de 18 f3 1f  15 65 83 6d 45 0c 53 f9  |8........e.mE.S.|
0a 9a 2e a5 5d bf 6f 32  81 18 92 19 6a 55 00 ad  |....].o2....jU..|
63 1c 52 06 7e 55 d9 29  68 ae 4a 7c 18 9a 79 88  |c.R.~U.)h.J|..y.|
6b 23 23 d8 27 38 2a 29  87 76 ca fb c7 b6 62 23  |k##.'8*).v....b#|
1f ed 7a 56 4c dd 9c 32  5b f5 3d 0c 46 18 95 3b  |..zVL..2[.=.F..;|
2a 23 68 83 64 41 d9 00  6d 0f 19 24 15 68 72 bd  |*#h.dA..m..$.hr.|
c5 71 67 6e ac 4c db 90  eb 51 a5 1a 62 07 d0 be  |.qgn.L...Q..b...|
6a 00 47 3c 72 2f ec 4f  61 3e 73 85 ce 5a 0a b7  |j.Gs..Z..|
ba c0 1c 13 75 e3 22 39  28 dd 6d 1d 09 46 9d 4f  |....u."9(.m..F.O|
ba e8 40 81 91 c6 a4 ce  94 72 1b 01 cf 2a 6e 15  |..@......r...*n.|
67 95 89 ae 7d b7 b7 cd  f9 0a 3d 75 b6 6b 3c 25  |g...}.....=u.k<%|
    • 1
      • unnamed
        • #0
          • C: US
          • O: Thawte, Inc.
          • CN: Thawte Code Signing CA - G2
        • 45:21:56:C3:B3:FB:01:76:36:5B:DB:5B:77:15:BC:4C
      • MD5: nil
      • #2
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeCom
        • messageDigest: 
          bf de e1 cf 73 69 c8 e9  87 78 52 53 e8 e5 d2 1e  |....si...xRS....|
      • rsaEncryption: 
        51 e5 e7 6d b6 55 f9 77  ed 30 62 90 72 94 1f b7  |Q..m.U.w.0b.r...|
89 f8 8a c7 a7 1b dc 42  91 1e 69 1b 3c 93 85 b3  |.......B..i.<...|
6c 09 61 4e 71 c8 2b 20  8b 53 23 da 89 08 92 66  |l.aNq.+ .S#....f|
47 06 ca f7 16 4b 36 79  af 94 cd c5 f0 6f 8d 39  |G....K6y.....o.9|
ce cb f9 be 32 e8 57 5b  fc 35 ab d7 2d 0c 09 8d  |....2.W[.5..-...|
e6 a2 9b f3 c4 36 6b 75  8c 73 3c 40 ab dc f1 64  |.....6ku.s<@...d|
dd 19 aa db d1 6d 83 2b  63 54 15 71 1c 8d 87 3b  |.....m.+cT.q...;|
40 a7 2d ea c0 7e 50 50  1e 04 5d 14 fa 7e 70 58  |@.-..~PP..]..~pX|
61 79 7d f6 48 5c 3f bf  c3 3a 13 cd d1 d8 76 cf  |ay}.H\?..:....v.|
2c 5a 7d d3 68 a2 44 2f  1f 1d fc 7b d0 0c ed 75  |,Z}.h.D/...{...u|
5c 05 89 a7 8d 9c d0 ca  b7 44 ed fd c0 02 2f a1  |\........D..../.|
e1 1e 8d fe d3 c3 2a ab  48 d4 2d 76 7d 9b 72 c3  |......*.H.-v}.r.|
9e 82 d6 a0 91 a1 00 93  35 d9 0e b9 26 49 bc 8f  |........5...&I..|
b1 c2 12 fb 58 95 b6 c4  da 89 06 df 3b 0b 5c d3  |....X.......;.\.|
88 ec dc 03 59 48 8f 0e  68 a9 9c 54 c3 2c 84 1f  |....YH..h..T.,..|
63 47 df c7 4c cc a0 fb  e1 06 ae ca b1 70 c2 06  |cG..L........p..|
offsetsizetypecomment
0117760EXE04/13/2008 18:32:45#
15c115HTM#
a9a011794AVI#
1cc003968PKCS7Authenticode Signature#
Scanning the drive for archives:
1 file, 121728 bytes (119 KiB)


--
Type = PE
Physical Size = 121728
CPU = x86
Characteristics = Executable 32-bit NoRelocs NoLineNums NoLocalSyms
Created = 2008-04-13 18:32:45
Headers Size = 1024
Checksum = 149322
Name = WEXTRACT.EXE            
Image Size = 131072
Section Alignment = 4096
File Alignment = 512
Code Size = 39424
Initialized Data Size = 77312
Uninitialized Data Size = 0
Linker Version = 7.10
OS Version = 5.1
Image Version = 5.1
Subsystem Version = 4.0
Subsystem = Windows GUI
DLL Characteristics = NoSEH TerminalServerAware
Stack Reserve = 262144
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 16777216
Comment = FileVersion: 6.0.2900.5512
FileVersion: 6.00.2900.5512 (xpsp.080413-2105)
ProductVersion: 6.0.2900.5512
ProductVersion: 6.00.2900.5512
CompanyName: Microsoft Corporation
FileDescription: Win32 Cabinet Self-Extractor                                           
InternalName: Wextract                
LegalCopyright: (C) Microsoft Corporation. All rights reserved.
OriginalFilename: WEXTRACT.EXE            
ProductName: Microsoft(R) Windows(R) Operating System
----
Path = .rsrc/1033/RCDATA/CABINET
Size = 55552
Packed Size = 55552
--
Path = .rsrc/1033/RCDATA/CABINET
Type = Cab
Physical Size = 55552
Method = LZX:21
Blocks = 1
Volumes = 1
Volume Index = 0
ID = 3095

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2014-09-15 15:20:38 ....A        13184               dbgeng.dll
2014-09-15 15:20:38 ....A        31584               dllhost.exe
2014-09-15 15:20:38 ....A        66631               Readme.txt
------------------- ----- ------------ ------------  ------------------------
2014-09-15 15:20:38             111399       121728  3 files
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK