 Let me show you ZipDump. It's a small tool to look inside Zip files, for example ZipDump files.zip and now you can see that Zip files contain two files, file1.txt, file2.txt. They are not encrypted, you see 0.0 here for the field encrypted. This is the MD5 of contents of the file and this is the timestamp associated with the file. Now you can also do a HexDump like this. This is a HexDump of the first file and AsciiDump. AsciiDump of the first file. If you want the second file, you can just type its name like this as an argument and here you have the second file and you can also dump the file like this. So why is this useful? This utility, well I find it useful again to analyze McAfee quarantine files without having to write anything to this. So let's take back pnbub and look at the details of this quarantine file and you can see that this quarantine file contains a zip file. So now I can extract this, the first file, extract the first file and pipe it to ZipDump. I need to tell ZipDump that it has to handle input and standard thing. So that's with the minus. I do that. Okay. And now you can see that the zip file contains akr.com. It's not encrypted. This is the hash and the timestamp. And if I want, I can do an AsciiDump. And you can see here that it is indeed the akr test file that is inside the zip file that is on its turn inside the quarantine file.