filenameInstallGoldWave624.exe
size12808416 (0xc370e0)
md5ee8bdb44b7325d61dafaa69754c36085
typePE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x50
blocks_in_file2
num_relocs0
header_paragraphs4
min_extra_paragraphs0xf
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0x1a
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x200

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000001c0:

PE Header

SignaturePE
Machine0x8664
NumberOfSections0xb
TimeDateStamp0x577aa165
PointerToSymbolTable0xb1200
NumberOfSymbols0x933
SizeOfOptionalHeader0xf0
Characteristics0x22e
Magic0x20b
LinkerVersion8.0
SizeOfCode0x6e000
SizeOfInitializedData0x7000
SizeOfUninitializedData0
AddressOfEntryPoint0x11a0
BaseOfCode0x1000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.2
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0xc2000
SizeOfHeaders0x610
CheckSum0xc38d48
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x2000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x6db780x6dc00R-X CODE
.rodata0x6f0000x67800x6800RW- IDATA
.data0x760000x177d00xd800RW- IDATA
.tls0x8e0000xb00x200RW- IDATA
.pdata0x8f0000x5e080x6000R-- IDATA
.xdata0x950000x7ea00x8000R-- IDATA
.rdata0x9d0000x280x200R-- IDATA SHARED
.idata0x9e0000x11410x1200R-- IDATA
.edata0xa00000x4d0x200R-- IDATA
.rsrc0xa10000x1e2000x1e200R-- IDATA
.reloc0xc00000x13000x1400R-- IDATA SHARED

Data Directory

typevasize
EXPORT0xa00000x4d
IMPORT0x9e0000x1141
RESOURCE0xa10000x1e200
EXCEPTION0x8f0000x5e08
SECURITY0xc35c200x14c0
BASERELOC0xc00000x1300
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS0x9d0000x28
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x48e0000x48e0b00x48d4200x49d02000
typenamesizecp
BITMAP#199786880
ICON#1169360
ICON#296400
ICON#342640
ICON#47440
ICON#524400
ICON#64880
ICON#711280
ICON#82960
DIALOG#20004460
DIALOG#20017760
DIALOG#20028760
DIALOG#20103340
STRING#6261860
STRING#68810480
STRING#6916580
STRING#6923160
RCDATADVCLAL160
RCDATAPLATFORMTARGETS20
GROUP_ICON#101180
VERSION#16560
MANIFEST#116250
idlangstring
100004105Install
100014105Destination Folder
100024105Desktop Shortcut and Menu Options
100034105Finish Installation
110004105Operation successful
110014105Cannot locate Zip End-of-Central directory. The download is incomplete or truncated. Please download the file again.
110024105Cannot locate Zip Central directory. Please download the file again.
110034105File is missing in Zip data.
110044105Zip file contains corrupted data or is incomplete. Please download the file again.
110054105Zip contains a file that was not compressed using Deflate method.
110064105Destination folder cannot be created. Please specify a different folder.
110074105An error occurred in the zLib decompression library.
110504105Operation successful
110514105Cannot open file.
110524105Cannot create file. Make sure any related programs are not still running and you are running this installation as Administrator.
110534105Cannot read file. Download may be incomplete.
110544105Cannot write to file. Make sure enough free space is available on the drive.
110554105Cannot seek within file.
110564105An error occurred when closing the file. Check to make sure there is enough free space available.
110574105The destination folder could not be created.
module_namehintordfunction_name
ADVAPI32RegCloseKey
ADVAPI32RegCreateKeyExA
ADVAPI32RegDeleteKeyA
ADVAPI32RegOpenKeyExA
ADVAPI32RegQueryValueExA
ADVAPI32RegSetValueExA
KERNEL32AddVectoredExceptionHandler
KERNEL32CloseHandle
KERNEL32CreateDirectoryA
KERNEL32CreateFileA
KERNEL32CreateFileW
KERNEL32DeleteFileA
KERNEL32DosDateTimeToFileTime
KERNEL32EnterCriticalSection
KERNEL32ExitProcess
KERNEL32GetACP
KERNEL32GetCPInfo
KERNEL32GetCommandLineA
KERNEL32GetCurrentDirectoryA
KERNEL32GetCurrentProcessId
KERNEL32GetCurrentThreadId
KERNEL32GetDateFormatA
KERNEL32GetEnvironmentStrings
KERNEL32GetFileAttributesA
KERNEL32GetFileAttributesW
KERNEL32GetFileSize
KERNEL32GetFileType
KERNEL32GetLastError
KERNEL32GetLocalTime
KERNEL32GetLocaleInfoA
KERNEL32GetModuleFileNameA
KERNEL32GetModuleHandleA
KERNEL32GetOEMCP
KERNEL32GetProcAddress
KERNEL32GetProcessHeap
KERNEL32GetStartupInfoA
KERNEL32GetStdHandle
KERNEL32GetStringTypeA
KERNEL32GetStringTypeW
KERNEL32GetSystemDefaultLangID
KERNEL32GetSystemInfo
KERNEL32GetTempFileNameA
KERNEL32GetTickCount
KERNEL32GetTimeZoneInformation
KERNEL32GetUserDefaultLCID
KERNEL32GetVersion
KERNEL32GetVersionExA
KERNEL32GetWindowsDirectoryA
KERNEL32HeapAlloc
KERNEL32IsDBCSLeadByteEx
KERNEL32IsDebuggerPresent
KERNEL32IsValidLocale
KERNEL32LCMapStringA
KERNEL32LeaveCriticalSection
KERNEL32LocalFileTimeToFileTime
KERNEL32MultiByteToWideChar
KERNEL32RaiseException
KERNEL32ReadFile
KERNEL32RemoveDirectoryA
KERNEL32RemoveVectoredExceptionHandler
KERNEL32RtlCaptureContext
KERNEL32SetConsoleCtrlHandler
KERNEL32SetEndOfFile
KERNEL32SetFilePointer
KERNEL32SetFileTime
KERNEL32SetHandleCount
KERNEL32SetLastError
KERNEL32SetThreadLocale
KERNEL32SystemTimeToFileTime
KERNEL32TlsAlloc
KERNEL32TlsFree
KERNEL32TlsGetValue
KERNEL32TlsSetValue
KERNEL32VirtualAlloc
KERNEL32VirtualFree
KERNEL32VirtualQuery
KERNEL32WideCharToMultiByte
KERNEL32WriteFile
KERNEL32RtlRestoreContext
KERNEL32RtlUnwindEx
VERSIONGetFileVersionInfoA
VERSIONVerQueryValueA
COMCTL32CreatePropertySheetPageA
COMCTL32InitCommonControls
COMCTL32PropertySheetA
SHELL32.DLLSHBrowseForFolderA
SHELL32.DLLSHGetMalloc
SHELL32.DLLSHGetPathFromIDListA
SHELL32.DLLShellExecuteA
SHFOLDERSHGetFolderPathA
USER32CheckDlgButton
USER32CreateDialogParamA
USER32DestroyWindow
USER32DispatchMessageA
USER32EnumChildWindows
USER32EnumThreadWindows
USER32GetDesktopWindow
USER32GetDlgItemTextA
USER32GetKeyState
USER32GetWindowRect
USER32GetWindowTextA
USER32IsDlgButtonChecked
USER32LoadStringA
USER32MessageBeep
USER32MessageBoxA
USER32PeekMessageA
USER32PostMessageA
USER32SendDlgItemMessageA
USER32SendMessageA
USER32SetDlgItemTextA
USER32SetWindowPos
USER32SetWindowTextA
USER32TranslateMessage
USER32SetWindowLongPtrA
USER32wsprintfA
OLE32CoCreateInstance
OLE32CoInitialize
OLE32CoUninitialize
ordentry_vafunction_name
10x8d470__CPPdebugHook
module_nameinstall.exe
flags0
timestamp0
version0.0
ordinal_base1
nFunctions1
nNames1
Names(1)0xa002c
Functions(1)0xa0028
NameOrdinals(1)0xa0030

StringTable 040904E4

CompanyNameGoldWave Inc.
FileDescriptionInstaller program for GoldWave software
FileVersion6.1.0.0
InternalNameInstall.exe
LegalCopyrightCopyright © 2016 GoldWave Inc.
ProductVersion6.1.0.0

VS_FIXEDFILEINFO

FileVersion6.1.0.0
ProductVersion6.1.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType1
FileSubtype0

Signers (1)

issuer: /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Code Signing CA
serial: C120BEF1D673AC26D471A5957DE3A582

Certificates (3)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: Dec 31 00:00:00 2015 GMT
            Not After : Jul  9 18:40:36 2019 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO SHA-1 Time Stamping Signer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e9:3d:df:d7:37:08:c9:1e:38:b2:52:53:42:
                    6d:22:f1:b1:c4:06:04:6b:9e:fd:82:74:50:43:7d:
                    c6:a0:bb:1f:4e:f9:02:71:26:b1:ef:43:d8:83:8c:
                    48:fc:e7:0f:97:7a:9a:eb:9c:de:a6:a3:0e:3b:1c:
                    44:18:75:8e:78:a5:17:69:fe:49:18:a4:e2:bb:5c:
                    4e:fe:8e:2a:54:7a:50:f0:d5:f6:cc:91:e7:99:79:
                    d7:de:79:94:d7:96:33:fe:0e:83:be:22:bf:63:16:
                    2c:a3:dd:28:1b:af:3d:ab:ea:97:d2:f1:bf:04:10:
                    e7:3d:48:45:fd:1f:68:65:c1:7f:59:99:69:c0:22:
                    31:0c:62:6e:a7:5c:65:01:21:b0:63:c4:22:18:27:
                    ee:e6:fc:d2:00:3d:47:2e:a8:b8:86:56:5d:04:dc:
                    13:17:25:6e:1c:df:44:0f:15:cd:b7:db:a5:57:76:
                    42:6f:00:68:82:99:d2:e3:c1:de:f0:8b:94:57:4c:
                    ec:08:90:22:21:ce:22:2b:98:0c:42:e6:42:93:94:
                    98:93:ef:fd:06:d9:3f:bc:5b:9b:54:3c:20:b1:ee:
                    6a:d6:47:7a:c5:ab:80:e9:30:9a:de:f1:a4:3f:55:
                    4d:0a:09:34:8a:75:29:d2:69:ad:97:0f:50:bf:f8:
                    ca:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8

            X509v3 Subject Key Identifier: 
                8E:6B:2D:33:6B:F4:33:A7:93:B3:13:9A:A5:E0:0A:F7:12:35:6A:88
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.usertrust.com

    Signature Algorithm: sha1WithRSAEncryption
         ba:33:24:40:40:8c:7c:db:58:9f:b3:60:98:b2:f5:c0:31:fe:
         eb:1f:6e:50:f6:0a:e0:e4:e6:81:ad:26:87:a2:df:fd:b3:da:
         f4:73:f3:00:fb:29:1b:89:1b:15:3e:db:6b:52:93:2b:c4:ac:
         39:81:d7:3c:67:57:9a:39:36:e0:28:08:9a:e3:39:4f:9b:89:
         09:7f:7b:c5:61:7f:59:89:32:25:0a:6a:ae:1a:3e:f0:a2:27:
         a8:b6:c3:b8:87:f7:16:04:48:41:3d:5c:d8:ec:9f:4d:20:31:
         04:d9:65:a1:ed:cd:69:07:53:16:3d:dd:36:02:0a:88:eb:40:
         e5:06:30:0b:b8:16:4b:dc:ef:bc:55:09:ff:c6:3e:12:2e:76:
         b3:dc:ce:42:ef:f9:76:57:e1:b7:0a:05:40:98:58:9a:5d:71:
         16:93:71:8c:65:81:ea:6f:f3:89:f7:fb:73:ad:b4:e7:bf:d9:
         8e:6f:aa:0b:4f:25:f3:b8:e1:d5:dd:75:98:68:81:f8:aa:c0:
         d1:80:c2:c4:c4:39:89:c1:f6:c9:9e:6c:d7:74:f9:d9:97:f8:
         4f:c2:9a:0a:cd:5e:8f:f8:19:e9:e0:a5:9f:c4:f0:92:21:e6:
         2d:79:25:c9:22:f9:c3:f0:3a:84:57:ad:3a:16:f4:63:94:10:
         1d:5d:d0:c6
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c1:20:be:f1:d6:73:ac:26:d4:71:a5:95:7d:e3:a5:82
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Code Signing CA
        Validity
            Not Before: Feb 26 00:00:00 2016 GMT
            Not After : Feb 25 23:59:59 2018 GMT
        Subject: C=CA/postalCode=A1N 2A5, ST=Newfoundland, L=Mount Pearl/street=PO Box 21151/street=2 Third St., O=GoldWave Inc., CN=GoldWave Inc.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:b8:a8:27:76:36:e5:a5:f1:53:31:aa:90:8b:
                    91:be:57:d7:dc:b8:72:d8:2e:08:5a:10:26:ab:90:
                    d7:ea:b7:7c:3d:2c:8e:af:62:60:ee:78:8a:af:4d:
                    1c:b8:f4:02:be:b9:0a:90:12:db:64:54:25:00:e0:
                    06:44:a5:ab:f7:d5:4f:c1:ba:ba:cc:a2:f0:2c:89:
                    c8:9d:a8:0d:d3:95:01:97:f2:31:78:88:10:e7:65:
                    37:ca:d4:89:8d:c4:33:ae:02:1b:3b:7a:5f:d1:ef:
                    f5:cd:de:d3:20:20:53:37:a4:ad:74:34:b3:63:57:
                    a8:f5:bb:bb:c3:91:ad:fb:13:dd:82:79:fe:25:be:
                    86:04:54:4f:73:05:3d:d7:c7:54:2c:8e:0a:57:eb:
                    39:66:fa:d5:06:2f:79:f6:ac:48:fa:4b:1e:a4:bd:
                    bf:c6:6b:ad:b4:47:3f:3c:fc:06:3e:20:e1:3e:23:
                    f0:4d:5e:1b:d0:05:de:43:30:bf:05:f0:a4:f2:60:
                    9f:a8:b8:d2:4f:c9:fd:10:f4:52:d1:1b:4f:a9:cf:
                    73:c6:65:bc:46:a4:8a:b2:e4:93:f6:ad:a9:2b:f1:
                    f5:19:b3:b9:70:6c:0c:19:3a:21:8d:cc:7f:f3:43:
                    ae:8d:86:1d:be:e9:cf:8a:19:da:70:f9:cd:1a:30:
                    bc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:29:91:60:FF:8A:4D:FA:EB:F9:A6:6A:B8:CF:F9:E6:4B:BD:49:CE:12

            X509v3 Subject Key Identifier: 
                62:AE:54:AC:90:46:1F:02:63:58:4C:DB:50:4C:B0:C3:1E:86:01:50
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                Code Signing
            Netscape Cert Type: 
                Object Signing
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.1.3.2
                  CPS: https://secure.comodo.net/CPS

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.comodoca.com/COMODORSACodeSigningCA.crl

            Authority Information Access: 
                CA Issuers - URI:http://crt.comodoca.com/COMODORSACodeSigningCA.crt
                OCSP - URI:http://ocsp.comodoca.com

    Signature Algorithm: sha256WithRSAEncryption
         a5:e3:f7:3f:78:47:93:ca:8e:aa:d8:f1:05:51:74:5c:ce:48:
         b3:d1:67:fa:8a:20:31:d7:33:d7:15:3e:4e:3e:3c:9d:aa:2f:
         47:ff:9c:d1:f4:14:b8:86:18:6c:06:ac:6e:3e:ff:45:44:78:
         91:d5:44:93:ed:3d:6c:e3:6f:4a:a8:04:f7:f0:4c:1a:4a:08:
         d4:50:b0:2b:d6:63:7b:a4:8c:b8:3c:8d:a6:d2:98:44:d3:9e:
         1d:9f:ba:e2:93:7d:90:d5:45:86:f2:01:08:f4:e3:62:f6:17:
         a2:dd:40:de:d0:18:34:0e:9b:52:e2:ad:86:1b:3b:25:e1:98:
         f1:b9:0e:c9:9a:ec:67:16:89:4d:fc:b8:aa:ec:35:40:2a:95:
         e9:e6:99:a2:c1:ca:92:03:7d:ce:12:0a:04:74:33:e9:31:c1:
         7f:1c:ce:bf:dd:9c:ae:83:10:93:b9:21:89:96:43:69:5b:53:
         24:2f:5e:e2:ad:8a:2f:59:36:ec:4e:e2:c0:0e:42:11:e6:21:
         58:cd:f0:35:7d:5d:76:05:35:fe:db:68:c4:4b:8e:03:65:17:
         ab:d1:73:ed:0d:ba:48:17:1c:b2:57:3a:6e:03:84:65:b4:39:
         66:9e:0e:4d:b1:22:8d:15:5e:2d:71:f5:6e:cf:8b:84:51:bb:
         90:03:26:a1
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority
        Validity
            Not Before: May  9 00:00:00 2013 GMT
            Not After : May  8 23:59:59 2028 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Code Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:98:90:63:77:91:34:7f:8a:d1:dd:e9:67:31:
                    11:eb:cc:1e:fd:31:1d:b3:b9:62:57:3f:93:bc:5b:
                    e3:9f:1e:24:32:11:27:6b:bc:51:91:a7:cf:9e:9e:
                    25:b3:5f:81:a8:18:0f:1d:1e:20:30:0e:fb:61:7b:
                    86:09:b3:e3:fd:a2:68:9d:1c:2c:9d:bf:72:e3:e4:
                    75:a0:e5:35:23:8e:c9:8a:ee:1a:0c:64:c7:d8:42:
                    a1:7b:b5:52:03:4b:3a:b0:8e:23:4b:4b:63:e0:22:
                    94:37:7b:d5:79:90:0a:14:18:51:2c:e6:fe:c1:12:
                    f0:1c:3f:61:61:0a:8c:a2:dc:f6:c3:30:aa:cd:28:
                    18:75:48:c1:79:5a:08:cd:bb:8c:55:8c:f7:d4:76:
                    90:3a:33:46:50:73:98:5c:f4:85:4a:6b:0f:80:dd:
                    5e:d6:bd:fd:a9:2f:c0:25:f5:f9:78:d7:8d:5f:10:
                    c2:44:55:3c:90:3c:31:46:cb:70:ae:07:a9:0a:e3:
                    af:c1:01:6f:90:1a:23:e2:5f:38:db:c6:08:5d:47:
                    b3:83:41:f0:2e:00:37:14:b9:12:aa:79:92:52:cd:
                    87:0f:7b:d8:62:29:a4:7e:30:bd:1b:b5:8c:72:b4:
                    48:f2:e3:e8:21:f9:5e:4c:62:79:8b:02:06:9f:7f:
                    d5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:BB:AF:7E:02:3D:FA:A6:F1:3C:84:8E:AD:EE:38:98:EC:D9:32:32:D4

            X509v3 Subject Key Identifier: 
                29:91:60:FF:8A:4D:FA:EB:F9:A6:6A:B8:CF:F9:E6:4B:BD:49:CE:12
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.comodoca.com/COMODORSACertificationAuthority.crl

            Authority Information Access: 
                CA Issuers - URI:http://crt.comodoca.com/COMODORSAAddTrustCA.crt
                OCSP - URI:http://ocsp.comodoca.com

    Signature Algorithm: sha384WithRSAEncryption
         02:3f:02:39:c3:ee:f8:ca:3b:89:de:0c:6d:4d:b1:f1:4e:92:
         4f:af:c2:38:2c:04:cc:c5:63:11:ab:09:63:af:ab:a2:d7:02:
         3f:cc:6f:19:c3:3d:d6:1a:08:94:ff:25:d8:a9:88:a7:2b:10:
         1a:e0:9b:b1:07:22:1a:51:1c:3a:d4:e1:e9:09:bf:e6:24:74:
         af:1e:7b:16:31:6e:23:ef:54:51:2d:52:02:e2:75:08:05:4c:
         f1:b7:51:e1:51:00:c6:87:f6:6c:ee:10:44:76:57:6a:f1:df:
         58:6b:21:aa:49:d4:7c:37:4e:bd:ff:b6:75:54:40:18:36:57:
         67:11:cd:4f:02:e4:fe:f3:da:fc:75:17:db:ec:b7:f7:65:09:
         23:49:1f:43:57:83:ea:7e:20:77:61:c8:4d:f2:bb:65:4d:a8:
         f7:85:45:07:af:7a:69:27:65:90:29:40:8b:df:7b:3a:51:39:
         8c:a8:1f:70:79:ad:6d:42:20:a2:cf:0c:6c:03:8c:4c:cd:73:
         07:94:e7:5a:8e:3a:04:ba:a2:a1:7c:1f:cb:63:3a:15:a7:d4:
         15:1b:a7:52:47:32:a9:f4:bf:64:47:d1:aa:1f:53:4e:32:30:
         73:c2:6f:b7:78:82:9d:5c:ff:46:bb:6b:22:1d:88:0b:f8:1b:
         aa:34:a6:fc:8c:f5:dd:7f:65:8c:8c:31:57:31:d0:36:ec:47:
         a1:cf:cb:8b:a8:ef:1c:18:58:c5:06:77:ca:4b:9b:51:af:4c:
         08:4a:7a:8f:e2:a3:52:e2:8e:8e:cc:26:e4:b2:d8:e5:38:c2:
         a8:ed:c6:81:9c:35:6b:a9:58:61:4a:0a:97:b4:4b:42:b6:55:
         9d:be:99:e7:70:6d:59:f8:6d:2a:0c:7f:19:60:5f:0c:9a:88:
         6c:30:ac:52:09:90:16:1b:ff:2b:9d:db:d0:20:ca:89:ea:28:
         7e:32:8e:19:df:7b:48:33:1e:d7:65:f8:ae:c9:f8:83:14:93:
         76:7d:64:d0:8e:ce:be:35:7d:ff:72:31:4d:9f:9e:bd:1e:6c:
         2f:a8:8f:0c:06:50:fb:8c:27:b3:76:c9:f4:e6:d7:c3:34:e2:
         8c:87:21:86:61:fe:bf:55:74:e1:21:77:03:0a:68:6c:bb:e4:
         c9:a9:e6:cf:59:25:eb:7c:ec:45:0e:79:66:68:e8:22:cd:b8:
         ef:98:85:4d:96:11:3c:09:8a:d0:7f:bc:28:28:13:fb:6a:ca:
         54:8d:92:5c:cd:c2:65:98:06:9e:ce:48:5b:d4:b5:37:93:46:
         41:7c:07:dd:cf:fa:43:ef:ba:67:61:ff:7d:49:e0:bb:30:7d:
         5c:80:e3:e6:16:39:4b:a7
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
        • SHA1
          • 9a 2b 04 a6 e6 5a ec 5a  73 d7 01 ef 7a 59 d8 65  |.+...Z.Zs...zY.e|
e2 e0 1f 2c                                       |...,            |
    • Certificates
      • Certificate #0
        • 2
          • 16:88:F0:39:25:5E:63:8E:69:14:39:07:E6:33:0B
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • ST: UT
            • L: Salt Lake City
            • O: The USERTRUST Network
            • OU: http://www.usertrust.com
            • CN: UTN-USERFirst-Object
          • 2015-12-31 00:00:00 UTC: 2019-07-09 18:40:36 UTC
          • Subject
            • C: GB
            • ST: Greater Manchester
            • L: Salford
            • O: COMODO CA Limited
            • CN: COMODO SHA-1 Time Stamping Signer
          • #5
            • rsaEncryption: nil
            • E9:E9:3D:DF:D7:37:08:C9:1E:38:B2:52:53:42:6D:22:
              F1:B1:C4:06:04:6B:9E:FD:82:74:50:43:7D:C6:A0:BB:
              1F:4E:F9:02:71:26:B1:EF:43:D8:83:8C:48:FC:E7:0F:
              97:7A:9A:EB:9C:DE:A6:A3:0E:3B:1C:44:18:75:8E:78:
              A5:17:69:FE:49:18:A4:E2:BB:5C:4E:FE:8E:2A:54:7A:
              50:F0:D5:F6:CC:91:E7:99:79:D7:DE:79:94:D7:96:33:
              FE:0E:83:BE:22:BF:63:16:2C:A3:DD:28:1B:AF:3D:AB:
              EA:97:D2:F1:BF:04:10:E7:3D:48:45:FD:1F:68:65:C1:
              7F:59:99:69:C0:22:31:0C:62:6E:A7:5C:65:01:21:B0:
              63:C4:22:18:27:EE:E6:FC:D2:00:3D:47:2E:A8:B8:86:
              56:5D:04:DC:13:17:25:6E:1C:DF:44:0F:15:CD:B7:DB:
              A5:57:76:42:6F:00:68:82:99:D2:E3:C1:DE:F0:8B:94:
              57:4C:EC:08:90:22:21:CE:22:2B:98:0C:42:E6:42:93:
              94:98:93:EF:FD:06:D9:3F:BC:5B:9B:54:3C:20:B1:EE:
              6A:D6:47:7A:C5:AB:80:E9:30:9A:DE:F1:A4:3F:55:4D:
              0A:09:34:8A:75:29:D2:69:AD:97:0F:50:BF:F8:CA:09              : 0x010001
          • #6
            • authorityKeyIdentifier: 
              da ed 64 74 14 9c 14 3c  ab dd 99 a9 bd 5b 28 4d  |..dt...<.....[(M|
8b 3c c9 d8                                       |.<..            |
            • subjectKeyIdentifier: 
              8e 6b 2d 33 6b f4 33 a7  93 b3 13 9a a5 e0 0a f7  |.k-3k.3.........|
12 35 6a 88                                       |.5j.            |
            • keyUsage: true, 0xc0
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: true, timeStamping
            • crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
            • authorityInfoAccess
              • OCSP: http://ocsp.usertrust.com
        • RSA-SHA1: 
          ba 33 24 40 40 8c 7c db  58 9f b3 60 98 b2 f5 c0  |.3$@@.|.X..`....|
31 fe eb 1f 6e 50 f6 0a  e0 e4 e6 81 ad 26 87 a2  |1...nP.......&..|
df fd b3 da f4 73 f3 00  fb 29 1b 89 1b 15 3e db  |.....s...)....>.|
6b 52 93 2b c4 ac 39 81  d7 3c 67 57 9a 39 36 e0  |kR.+..9....'......|
16 04 48 41 3d 5c d8 ec  9f 4d 20 31 04 d9 65 a1  |..HA=\...M 1..e.|
ed cd 69 07 53 16 3d dd  36 02 0a 88 eb 40 e5 06  |..i.S.=.6....@..|
30 0b b8 16 4b dc ef bc  55 09 ff c6 3e 12 2e 76  |0...K...U...>..v|
b3 dc ce 42 ef f9 76 57  e1 b7 0a 05 40 98 58 9a  |...B..vW....@.X.|
5d 71 16 93 71 8c 65 81  ea 6f f3 89 f7 fb 73 ad  |]q..q.e..o....s.|
b4 e7 bf d9 8e 6f aa 0b  4f 25 f3 b8 e1 d5 dd 75  |.....o..O%.....u|
98 68 81 f8 aa c0 d1 80  c2 c4 c4 39 89 c1 f6 c9  |.h.........9....|
9e 6c d7 74 f9 d9 97 f8  4f c2 9a 0a cd 5e 8f f8  |.l.t....O....^..|
19 e9 e0 a5 9f c4 f0 92  21 e6 2d 79 25 c9 22 f9  |........!.-y%.".|
c3 f0 3a 84 57 ad 3a 16  f4 63 94 10 1d 5d d0 c6  |..:.W.:..c...]..|
      • Certificate #1
        • 2
          • C1:20:BE:F1:D6:73:AC:26:D4:71:A5:95:7D:E3:A5:82
          • RSA-SHA256: nil
          • Issuer
            • C: GB
            • ST: Greater Manchester
            • L: Salford
            • O: COMODO CA Limited
            • CN: COMODO RSA Code Signing CA
          • 2016-02-26 00:00:00 UTC: 2018-02-25 23:59:59 UTC
          • Subject
            • C: CA
            • postalCode: A1N 2A5
            • ST: Newfoundland
            • L: Mount Pearl
            • street: PO Box 21151
            • street: 2 Third St.
            • O: GoldWave Inc.
            • CN: GoldWave Inc.
          • #5
            • rsaEncryption: nil
            • F5:B8:A8:27:76:36:E5:A5:F1:53:31:AA:90:8B:91:BE:
              57:D7:DC:B8:72:D8:2E:08:5A:10:26:AB:90:D7:EA:B7:
              7C:3D:2C:8E:AF:62:60:EE:78:8A:AF:4D:1C:B8:F4:02:
              BE:B9:0A:90:12:DB:64:54:25:00:E0:06:44:A5:AB:F7:
              D5:4F:C1:BA:BA:CC:A2:F0:2C:89:C8:9D:A8:0D:D3:95:
              01:97:F2:31:78:88:10:E7:65:37:CA:D4:89:8D:C4:33:
              AE:02:1B:3B:7A:5F:D1:EF:F5:CD:DE:D3:20:20:53:37:
              A4:AD:74:34:B3:63:57:A8:F5:BB:BB:C3:91:AD:FB:13:
              DD:82:79:FE:25:BE:86:04:54:4F:73:05:3D:D7:C7:54:
              2C:8E:0A:57:EB:39:66:FA:D5:06:2F:79:F6:AC:48:FA:
              4B:1E:A4:BD:BF:C6:6B:AD:B4:47:3F:3C:FC:06:3E:20:
              E1:3E:23:F0:4D:5E:1B:D0:05:DE:43:30:BF:05:F0:A4:
              F2:60:9F:A8:B8:D2:4F:C9:FD:10:F4:52:D1:1B:4F:A9:
              CF:73:C6:65:BC:46:A4:8A:B2:E4:93:F6:AD:A9:2B:F1:
              F5:19:B3:B9:70:6C:0C:19:3A:21:8D:CC:7F:F3:43:AE:
              8D:86:1D:BE:E9:CF:8A:19:DA:70:F9:CD:1A:30:BC:AD              : 0x010001
          • #6
            • authorityKeyIdentifier: 
              29 91 60 ff 8a 4d fa eb  f9 a6 6a b8 cf f9 e6 4b  |).`..M....j....K|
bd 49 ce 12                                       |.I..            |
            • subjectKeyIdentifier: 
              62 ae 54 ac 90 46 1f 02  63 58 4c db 50 4c b0 c3  |b.T..F..cXL.PL..|
1e 86 01 50                                       |...P            |
            • keyUsage: true, 0x80
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: codeSigning
            • nsCertType: 0x10
            • certificatePolicies
              • 1.3.6.1.4.1.6449.1.2.1.3.2
                • id-qt-cps: https://secure.comodo.net/CPS
            • crlDistributionPoints: http://crl.comodoca.com/COMODORSACodeSigningCA.crl
            • authorityInfoAccess
              • #0
                • caIssuers: http://crt.comodoca.com/COMODORSACodeSigningCA.crt
                • OCSP: http://ocsp.comodoca.com
        • RSA-SHA256: 
          a5 e3 f7 3f 78 47 93 ca  8e aa d8 f1 05 51 74 5c  |...?xG.......Qt\|
ce 48 b3 d1 67 fa 8a 20  31 d7 33 d7 15 3e 4e 3e  |.H..g.. 1.3..>N>|
3c 9d aa 2f 47 ff 9c d1  f4 14 b8 86 18 6c 06 ac  |<../G........l..|
6e 3e ff 45 44 78 91 d5  44 93 ed 3d 6c e3 6f 4a  |n>.EDx..D..=l.oJ|
a8 04 f7 f0 4c 1a 4a 08  d4 50 b0 2b d6 63 7b a4  |....L.J..P.+.c{.|
8c b8 3c 8d a6 d2 98 44  d3 9e 1d 9f ba e2 93 7d  |..<....D.......}|
90 d5 45 86 f2 01 08 f4  e3 62 f6 17 a2 dd 40 de  |..E......b....@.|
d0 18 34 0e 9b 52 e2 ad  86 1b 3b 25 e1 98 f1 b9  |..4..R....;%....|
0e c9 9a ec 67 16 89 4d  fc b8 aa ec 35 40 2a 95  |....g..M....5@*.|
e9 e6 99 a2 c1 ca 92 03  7d ce 12 0a 04 74 33 e9  |........}....t3.|
31 c1 7f 1c ce bf dd 9c  ae 83 10 93 b9 21 89 96  |1............!..|
43 69 5b 53 24 2f 5e e2  ad 8a 2f 59 36 ec 4e e2  |Ci[S$/^.../Y6.N.|
c0 0e 42 11 e6 21 58 cd  f0 35 7d 5d 76 05 35 fe  |..B..!X..5}]v.5.|
db 68 c4 4b 8e 03 65 17  ab d1 73 ed 0d ba 48 17  |.h.K..e...s...H.|
1c b2 57 3a 6e 03 84 65  b4 39 66 9e 0e 4d b1 22  |..W:n..e.9f..M."|
8d 15 5e 2d 71 f5 6e cf  8b 84 51 bb 90 03 26 a1  |..^-q.n...Q...&.|
      • Certificate #2
        • 2
          • 2E:7C:87:CC:0E:93:4A:52:FE:94:FD:1C:B7:CD:34:AF
          • RSA-SHA384: nil
          • Issuer
            • C: GB
            • ST: Greater Manchester
            • L: Salford
            • O: COMODO CA Limited
            • CN: COMODO RSA Certification Authority
          • 2013-05-09 00:00:00 UTC: 2028-05-08 23:59:59 UTC
          • Subject
            • C: GB
            • ST: Greater Manchester
            • L: Salford
            • O: COMODO CA Limited
            • CN: COMODO RSA Code Signing CA
          • #5
            • rsaEncryption: nil
            • A6:98:90:63:77:91:34:7F:8A:D1:DD:E9:67:31:11:EB:
              CC:1E:FD:31:1D:B3:B9:62:57:3F:93:BC:5B:E3:9F:1E:
              24:32:11:27:6B:BC:51:91:A7:CF:9E:9E:25:B3:5F:81:
              A8:18:0F:1D:1E:20:30:0E:FB:61:7B:86:09:B3:E3:FD:
              A2:68:9D:1C:2C:9D:BF:72:E3:E4:75:A0:E5:35:23:8E:
              C9:8A:EE:1A:0C:64:C7:D8:42:A1:7B:B5:52:03:4B:3A:
              B0:8E:23:4B:4B:63:E0:22:94:37:7B:D5:79:90:0A:14:
              18:51:2C:E6:FE:C1:12:F0:1C:3F:61:61:0A:8C:A2:DC:
              F6:C3:30:AA:CD:28:18:75:48:C1:79:5A:08:CD:BB:8C:
              55:8C:F7:D4:76:90:3A:33:46:50:73:98:5C:F4:85:4A:
              6B:0F:80:DD:5E:D6:BD:FD:A9:2F:C0:25:F5:F9:78:D7:
              8D:5F:10:C2:44:55:3C:90:3C:31:46:CB:70:AE:07:A9:
              0A:E3:AF:C1:01:6F:90:1A:23:E2:5F:38:DB:C6:08:5D:
              47:B3:83:41:F0:2E:00:37:14:B9:12:AA:79:92:52:CD:
              87:0F:7B:D8:62:29:A4:7E:30:BD:1B:B5:8C:72:B4:48:
              F2:E3:E8:21:F9:5E:4C:62:79:8B:02:06:9F:7F:D5:0B              : 0x010001
          • #6
            • authorityKeyIdentifier: 
              bb af 7e 02 3d fa a6 f1  3c 84 8e ad ee 38 98 ec  |..~.=...<....8..|
d9 32 32 d4                                       |.22.            |
            • subjectKeyIdentifier: 
              29 91 60 ff 8a 4d fa eb  f9 a6 6a b8 cf f9 e6 4b  |).`..M....j....K|
bd 49 ce 12                                       |.I..            |
            • keyUsage: true, 0x86
            • basicConstraints
              • true
              • true: 0
            • extendedKeyUsage: codeSigning
            • certificatePolicies: anyPolicy
            • crlDistributionPoints: http://crl.comodoca.com/COMODORSACertificationAuthority.crl
            • authorityInfoAccess
              • #0
                • caIssuers: http://crt.comodoca.com/COMODORSAAddTrustCA.crt
                • OCSP: http://ocsp.comodoca.com
        • RSA-SHA384: 
          02 3f 02 39 c3 ee f8 ca  3b 89 de 0c 6d 4d b1 f1  |.?.9....;...mM..|
4e 92 4f af c2 38 2c 04  cc c5 63 11 ab 09 63 af  |N.O..8,...c...c.|
ab a2 d7 02 3f cc 6f 19  c3 3d d6 1a 08 94 ff 25  |....?.o..=.....%|
d8 a9 88 a7 2b 10 1a e0  9b b1 07 22 1a 51 1c 3a  |....+......".Q.:|
d4 e1 e9 09 bf e6 24 74  af 1e 7b 16 31 6e 23 ef  |......$t..{.1n#.|
54 51 2d 52 02 e2 75 08  05 4c f1 b7 51 e1 51 00  |TQ-R..u..L..Q.Q.|
c6 87 f6 6c ee 10 44 76  57 6a f1 df 58 6b 21 aa  |...l..DvWj..Xk!.|
49 d4 7c 37 4e bd ff b6  75 54 40 18 36 57 67 11  |I.|7N...uT@.6Wg.|
cd 4f 02 e4 fe f3 da fc  75 17 db ec b7 f7 65 09  |.O......u.....e.|
23 49 1f 43 57 83 ea 7e  20 77 61 c8 4d f2 bb 65  |#I.CW..~ wa.M..e|
4d a8 f7 85 45 07 af 7a  69 27 65 90 29 40 8b df  |M...E..zi'e.)@..|
7b 3a 51 39 8c a8 1f 70  79 ad 6d 42 20 a2 cf 0c  |{:Q9...py.mB ...|
6c 03 8c 4c cd 73 07 94  e7 5a 8e 3a 04 ba a2 a1  |l..L.s...Z.:....|
7c 1f cb 63 3a 15 a7 d4  15 1b a7 52 47 32 a9 f4  ||..c:......RG2..|
bf 64 47 d1 aa 1f 53 4e  32 30 73 c2 6f b7 78 82  |.dG...SN20s.o.x.|
9d 5c ff 46 bb 6b 22 1d  88 0b f8 1b aa 34 a6 fc  |.\.F.k"......4..|
8c f5 dd 7f 65 8c 8c 31  57 31 d0 36 ec 47 a1 cf  |....e..1W1.6.G..|
cb 8b a8 ef 1c 18 58 c5  06 77 ca 4b 9b 51 af 4c  |......X..w.K.Q.L|
08 4a 7a 8f e2 a3 52 e2  8e 8e cc 26 e4 b2 d8 e5  |.Jz...R....&....|
38 c2 a8 ed c6 81 9c 35  6b a9 58 61 4a 0a 97 b4  |8......5k.XaJ...|
4b 42 b6 55 9d be 99 e7  70 6d 59 f8 6d 2a 0c 7f  |KB.U....pmY.m*..|
19 60 5f 0c 9a 88 6c 30  ac 52 09 90 16 1b ff 2b  |.`_...l0.R.....+|
9d db d0 20 ca 89 ea 28  7e 32 8e 19 df 7b 48 33  |... ...(~2...{H3|
1e d7 65 f8 ae c9 f8 83  14 93 76 7d 64 d0 8e ce  |..e.......v}d...|
be 35 7d ff 72 31 4d 9f  9e bd 1e 6c 2f a8 8f 0c  |.5}.r1M....l/...|
06 50 fb 8c 27 b3 76 c9  f4 e6 d7 c3 34 e2 8c 87  |.P..'.v.....4...|
21 86 61 fe bf 55 74 e1  21 77 03 0a 68 6c bb e4  |!.a..Ut.!w..hl..|
c9 a9 e6 cf 59 25 eb 7c  ec 45 0e 79 66 68 e8 22  |....Y%.|.E.yfh."|
cd b8 ef 98 85 4d 96 11  3c 09 8a d0 7f bc 28 28  |.....M..<.....((|
13 fb 6a ca 54 8d 92 5c  cd c2 65 98 06 9e ce 48  |..j.T..\..e....H|
5b d4 b5 37 93 46 41 7c  07 dd cf fa 43 ef ba 67  |[..7.FA|....C..g|
61 ff 7d 49 e0 bb 30 7d  5c 80 e3 e6 16 39 4b a7  |a.}I..0}\....9K.|
    • Signer
      • 1
      • unnamed
        • #0
          • C: GB
          • ST: Greater Manchester
          • L: Salford
          • O: COMODO CA Limited
          • CN: COMODO RSA Code Signing CA
        • C1:20:BE:F1:D6:73:AC:26:D4:71:A5:95:7D:E3:A5:82
      • SHA1: nil
      • #3
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest: 
          bf 5f 46 86 e5 83 36 72  1f 2f 71 96 44 ca c4 e5  |._F...6r./q.D...|
06 44 f2 f1                                       |.D..            |
      • rsaEncryption: 
        36 67 f1 f9 c9 cc e6 a6  61 0a ec f7 17 c2 73 94  |6g......a.....s.|
24 02 6b 23 1f 23 4b 64  fc d4 63 5f d7 5d 47 43  |$.k#.#Kd..c_.]GC|
d7 03 be bf 00 22 db 4c  bc 2a 7d bf c7 d7 82 51  |.....".L.*}....Q|
35 e1 2f 66 1d b2 7b 33  85 ea 0b 63 49 e4 69 67  |5./f..{3...cI.ig|
74 49 47 9c 2c ed 6e 79  9e bd 30 d9 71 18 da 18  |tIG.,.ny..0.q...|
09 83 f9 86 35 62 c5 d9  d4 5b 93 f3 01 85 c5 99  |....5b...[......|
11 fc 44 bc e8 f9 aa 5f  db 48 7e 80 d0 37 c6 b8  |..D...._.H~..7..|
b8 74 b9 9d 6d eb 01 80  d0 53 b7 79 9c bc 5b 97  |.t..m....S.y..[.|
8f 54 54 2f f6 f9 92 83  70 5a b8 4c b9 cc 7c 3a  |.TT/....pZ.L..|:|
35 3d a0 26 4e e1 67 43  01 93 18 07 cd 94 bd 78  |5=.&N.gC.......x|
c6 a0 cb 64 2c 06 f3 29  97 fc 17 9a 9d e5 86 a1  |...d,..)........|
02 7c c5 fc 6c 39 5a 9b  13 ad bf 91 44 aa b8 ad  |.|..l9Z.....D...|
47 e8 08 18 69 e6 17 a8  3a d6 a7 2a d1 82 9c 20  |G...i...:..*... |
4c 7c a6 f5 fa b2 5a e4  7c 0c 52 7e 9a 88 41 a3  |L|....Z.|.R~..A.|
92 e6 9c de da 7f 3a 18  7c 99 3c 7b 14 99 37 b5  |......:.|.<{..7.|
22 c6 d9 e8 52 68 06 42  bf ee 0b 93 e8 48 18 e6  |"...Rh.B.....H..|
      • countersignature
        • 0
          • unnamed
            • #0
              • C: US
              • ST: UT
              • L: Salt Lake City
              • O: The USERTRUST Network
              • OU: http://www.usertrust.com
              • CN: UTN-USERFirst-Object
            • 16:88:F0:39:25:5E:63:8E:69:14:39:07:E6:33:0B
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2016-07-04 17:49:08 UTC
            • messageDigest: 
              5f 4a b2 67 23 a7 64 b0  b1 79 ac b6 f4 05 63 fa  |_J.g#.d..y....c.|
58 8b 65 05                                       |X.e.            |
          • rsaEncryption: 
            5b 42 d6 69 3d 3f e8 cb  f8 4c 06 d2 2e c8 10 8a  |[B.i=?...L......|
1a fa c8 3f ed b0 e4 4c  89 32 01 6a 2a 37 f8 57  |...?...L.2.j*7.W|
d3 92 07 46 a7 13 3e 0b  2b ee f8 d5 b8 24 3e 5a  |...F..>.+....$>Z|
a3 81 3b c8 9f 95 ec 21  65 ad 41 90 b3 2f a7 4c  |..;....!e.A../.L|
75 00 82 f4 bf 09 ea 51  df 46 2f 1e dc 25 17 55  |u......Q.F/..%.U|
e8 ef 97 60 64 76 ae b1  69 0f 77 5d cf f8 7a b5  |...`dv..i.w]..z.|
55 c0 4a b3 d3 5e bb d6  e0 d0 23 88 91 4e f2 c8  |U.J..^....#..N..|
b9 62 7e 38 76 6b 1c 95  c6 7e f1 98 96 c1 7c fc  |.b~8vk...~....|.|
45 b4 e4 b3 11 01 09 28  98 a6 b4 88 7c dd c5 a4  |E......(....|...|
c5 12 8c ea d4 24 05 d2  46 b5 b4 fc 75 85 04 ae  |.....$..F...u...|
9b 3b 87 8d 91 b7 f2 94  6f be 2b f8 da cc 7b b5  |.;......o.+...{.|
27 d0 28 95 74 2d 50 12  90 b8 79 af 77 c1 54 1c  |'.(.t-P...y.w.T.|
51 7d 8f df f9 93 6a 25  aa 4b 88 8a 8e 91 a0 96  |Q}....j%.K......|
91 cd 74 8e b3 f1 8c 0f  6e d7 ea 9e 0a e6 81 d5  |..t.....n.......|
a6 86 25 07 f9 42 3c 85  59 d9 c3 3e 45 80 08 18  |..%..B<.Y..>E...|
78 cc 8d d2 b3 4d b9 dc  63 b2 2e ec 08 41 97 9a  |x....M..c....A..|
offsetsizetypecomment
15c115HTM#
cfeb811951461ZIP#
baf058271PNG(16 x 16)#
baf19e2268PNG(281 x 271)#
bafaad1870PNG(376 x 119)#
bb038b5013PNG(111 x 29)#
bb18331495PNG(218 x 170)#
bc0d53646PNG(277 x 49)#
bc10101126PNG(191 x 186)#
bc3d2b621PNG(20 x 74)#
bc53c91966PNG(387 x 292)#
bc5bae1174PNG(32 x 32)#
c18c82608PNG(18 x 19)#
c1f1d5270PNG(16 x 16)#
c1f319424PNG(32 x 32)#
c1f4fc722PNG(32 x 32)#
c1f80c586PNG(32 x 32)#
c1fa8d500PNG(32 x 32)#
c1fcba608PNG(32 x 32)#
c1ff593455PNG(32 x 32)#
c20d0f395PNG(32 x 32)#
c20ed63322PNG(32 x 32)#
c21e43528PNG(32 x 32)#
c2208f895PNG(32 x 32)#
c22449769PNG(32 x 32)#
c229a83332PNG(32 x 32)#
c236e3917PNG(32 x 32)#
c23ab2962PNG(32 x 32)#
c23ea9601PNG(32 x 32)#
c2413a1248PNG(32 x 32)#
c24654211PNG(32 x 32)#
c247651189PNG(32 x 32)#
c24c43193PNG(32 x 32)#
c24d3b172PNG(16 x 16)#
c24e1c898PNG(123 x 88)#
c251d91669PNG(469 x 104)#
c25892560PNG(32 x 32)#
c25baf3013PNG(316 x 117)#
c267a8561PNG(20 x 51)#
c26a0e191PNG(16 x 16)#
c31d241729PNG(372 x 132)#
c333d44309PNG(24 x 24)#
c35c1d5315BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 12808416 bytes (13 MiB)


--
Type = PE
Physical Size = 12808416
CPU = x64
64-bit = +
Characteristics = Executable LargeAddress NoLineNums NoLocalSyms NoDebugInfo
Created = 2016-07-04 17:48:21
Headers Size = 1552
Checksum = 12815688
Image Size = 794624
Section Alignment = 4096
File Alignment = 512
Code Size = 450560
Initialized Data Size = 28672
Uninitialized Data Size = 0
Linker Version = 8.0
OS Version = 5.2
Image Version = 0.0
Subsystem Version = 4.0
Subsystem = Windows GUI
Stack Reserve = 1048576
Stack Commit = 8192
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
Comment = FileVersion: 6.1.0.0
ProductVersion: 6.1.0.0
CompanyName: GoldWave Inc.
FileDescription: Installer program for GoldWave software
InternalName: Install.exe
LegalCopyright: Copyright © 2016 GoldWave Inc.
----
Path = [0]
Size = 11951464
Packed Size = 11951464
Virtual Size = 11951464
Offset = 851640
--
Path = [0]
Type = zip
Physical Size = 11951461
Tail Size = 3

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2016-07-04 15:18:56 ....A     20734952      6651668  GoldWave.exe
2016-07-04 06:24:00 ....A      1480704       401214  GWSpeed64.dll
2016-07-04 06:24:00 ....A         8040         3190  ReadMe.txt
2016-07-04 06:24:00 ....A        79873        24985  WhatsNew.txt
2016-07-04 06:24:00 ....A       191690        15567  GWPreset.xml
2016-07-04 06:24:00 ....A       707455       229393  unstall.exe
2016-07-04 06:24:00 ....A      1462703       422142  File/OggFile.pig
2016-07-04 06:24:00 ....A      1061140       422560  File/OpusFile.pig
2016-07-04 06:24:00 ....A       725603       227463  File/WMAFile.pig
2016-07-04 06:24:00 ....A       877915       296320  File/FLACFile.pig
2016-07-04 06:24:00 ....A      8980963      2468526  Effect/GWVST32.pig
2016-07-04 15:18:08 ....A       167424        79906  Effect/GWVSTBridge.exe
2016-06-30 21:55:20 ....A         7341         2876  Effect/GWVST.html
2016-07-04 11:54:24 ....A       565176       144538  Help/GoldWaveManual.html
2015-11-18 11:02:26 ....A         1630          606  Help/GoldWave.html
2016-07-04 15:18:48 ....A        71515         7848  Help/Index.html
2016-07-04 06:24:00 ....A          271          271  Help/Figures/Add16.png
2016-07-04 06:24:00 ....A         2268         2268  Help/Figures/aliasing.png
2016-07-04 06:24:00 ....A         1870         1870  Help/Figures/bits.png
2016-07-04 06:24:00 ....A          294          293  Help/Figures/btnback.png
2016-07-04 06:24:00 ....A         5013         5013  Help/Figures/buynow.png
2016-07-04 06:24:00 ....A          172          168  Help/Figures/check.png
2016-07-04 06:24:00 ....A         1495         1495  Help/Figures/clipping.png
2016-07-04 06:24:00 ....A        38632        38380  Help/Figures/control.png
2016-07-04 06:24:00 ....A        23376        22540  Help/Figures/controlproperties.png
2016-07-04 06:24:00 ....A          125          119  Help/Figures/dash.png
2016-07-04 06:24:00 ....A          646          646  Help/Figures/db.png
2016-07-04 06:24:00 ....A         1126         1126  Help/Figures/dynamics.png
2016-07-04 06:24:00 ....A         9442         8411  Help/Figures/effectcontrols.png
2016-07-04 06:24:00 ....A         1869         1836  Help/Figures/evalinternal.png
2016-07-04 06:24:00 ....A          621          621  Help/Figures/example.png
2016-07-04 06:24:00 ....A         5247         5051  Help/Figures/fileformat.png
2016-07-04 06:24:00 ....A         1966         1966  Help/Figures/frequencyrange.png
2016-07-04 06:24:00 ....A         1174         1174  Help/Figures/gwlogo32.png
2016-07-04 06:24:00 ....A         1498         1487  Help/Figures/interpolate.png
2016-07-04 06:24:00 ....A       112232       108044  Help/Figures/main.png
2016-07-04 06:24:00 ....A       207887       203730  Help/Figures/mainhorizontal.png
2016-07-04 06:24:00 ....A        26482        25463  Help/Figures/noisereduction.png
2016-07-04 06:24:00 ....A          608          608  Help/Figures/note.png
2016-07-04 06:24:00 ....A         1536         1514  Help/Figures/offset.png
2016-07-04 06:24:00 ....A         2228         2072  Help/Figures/pan1.png
2016-07-04 06:24:00 ....A         2102         1918  Help/Figures/pan2.png
2016-07-04 06:24:00 ....A        21581        19560  Help/Figures/parametriceq.png
2016-07-04 06:24:00 ....A          270          270  Help/Figures/Play16.png
2016-07-04 06:24:00 ....A          424          424  Help/Figures/PlayAll.png
2016-07-04 06:24:00 ....A          722          722  Help/Figures/PlayContinue.png
2016-07-04 06:24:00 ....A          586          586  Help/Figures/PlayContinueEnd.png
2016-07-04 06:24:00 ....A          500          500  Help/Figures/PlayFast.png
2016-07-04 06:24:00 ....A          608          608  Help/Figures/PlayFinish.png
2016-07-04 06:24:00 ....A         3455         3455  Help/Figures/PlayIntroLoopEnd.png
2016-07-04 06:24:00 ....A          395          395  Help/Figures/PlayLoop.png
2016-07-04 06:24:00 ....A         3322         3322  Help/Figures/PlayLoopPoint.png
2016-07-04 06:24:00 ....A          519          514  Help/Figures/PlayPause.png
2016-07-04 06:24:00 ....A          528          528  Help/Figures/PlayRewind.png
2016-07-04 06:24:00 ....A          895          895  Help/Figures/PlaySelection.png
2016-07-04 06:24:00 ....A          769          769  Help/Figures/PlayStartEnd.png
2016-07-04 06:24:00 ....A          492          490  Help/Figures/PlayStop.png
2016-07-04 06:24:00 ....A         3332         3332  Help/Figures/PlayUnselected.png
2016-07-04 06:24:00 ....A          917          917  Help/Figures/PlayView.png
2016-07-04 06:24:00 ....A          962          962  Help/Figures/PlayViewEnd.png
2016-07-04 06:24:00 ....A          601          601  Help/Figures/Record.png
2016-07-04 06:24:00 ....A         1248         1248  Help/Figures/RecordNew.png
2016-07-04 06:24:00 ....A          211          211  Help/Figures/RecordPause.png
2016-07-04 06:24:00 ....A         1189         1189  Help/Figures/RecordSelection.png
2016-07-04 06:24:00 ....A          193          193  Help/Figures/RecordStop.png
2016-07-04 06:24:00 ....A          172          172  Help/Figures/Remove16.png
2016-07-04 06:24:00 ....A          898          898  Help/Figures/sample.png
2016-07-04 06:24:00 ....A         1669         1669  Help/Figures/samplingrate.png
2016-07-04 06:24:00 ....A          560          560  Help/Figures/Setup.png
2016-07-04 06:24:00 ....A          131          122  Help/Figures/solidtip.png
2016-07-04 06:24:00 ....A         3013         3013  Help/Figures/splittercable.png
2016-07-04 06:24:00 ....A          561          561  Help/Figures/steps.png
2016-07-04 06:24:00 ....A          191          191  Help/Figures/Stop16.png
2016-07-04 06:24:00 ....A        37691        36375  Help/Figures/toolbaroptions.png
2016-07-04 06:24:00 ....A          135          126  Help/Figures/transtip.png
2016-07-04 06:24:00 ....A         6953         6923  Help/Figures/turntableconnect.png
2016-07-04 06:24:00 ....A         2229         1937  Help/Figures/t_logo-a.png
2016-07-04 06:24:00 ....A         1729         1729  Help/Figures/viewselection.png
2016-07-04 06:24:00 ....A         3884         3710  Help/Figures/volumescales.png
2016-07-04 06:24:00 ....A          209          207  Help/Figures/warn.png
2016-07-04 06:24:00 ....A         4309         4309  Help/Figures/where.png
2016-07-04 06:24:00 ....A          198          196  Help/Figures/x.png
------------------- ----- ------------ ------------  ------------------------
2016-07-04 15:18:56           37682555     11941275  82 files
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







[?] can't find file_offset of VA 0x8d420