MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Code Signing PCA
serial: 61062781000000000008

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ab:11:dc:50:ff:5c:9d:cb:c0
    Signature Algorithm: sha1WithRSA
        Issuer: OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
        Validity
            Not Before: Aug 22 22:31:02 2007 GMT
            Not After : Aug 25 07:00:00 2012 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b7:79:7d:d6:5d:b3:45:39:a8:34:ac:31:da:f9:
                    25:35:49:77:c0:fb:1f:9e:c7:45:71:ef:d1:46:e8:
                    d4:8c:c3:6b:4c:52:62:f4:99:02:c3:4d:d8:49:6c:
                    2f:24:3e:65:bf:ce:23:b7:0b:48:b7:7f:75:dd:45:
                    bd:aa:8f:0e:50:c5:25:2b:f2:a0:e7:0d:23:1f:d1:
                    41:24:fa:62:99:cf:19:45:a5:93:4a:1f:99:cd:b3:
                    2f:22:c3:4a:2d:7c:6f:d9:15:1e:3b:8c:39:10:39:
                    dd:bd:29:f4:66:3b:2d:01:32:ff:fe:27:48:a6:b5:
                    6c:01:87:9c:fb:ba:b2:63:7f:82:f9:5c:a0:81:84:
                    85:8e:b0:f2:b8:94:a3:cf:38:a6:50:85:17:27:87:
                    4e:dd:30:f6:00:3d:f4:c6:f9:3d:81:be:86:ed:6c:
                    39:a7:2e:34:f6:b4:2e:af:0a:7d:62:91:78:66:9c:
                    98:73:0d:86:af:f2:c4:f3:20:b9:4f:12:8d:63:cb:
                    2c:d9:32:45:19:ee:bb:4a:96:3b:50:53:18:ce:66:
                    51:79:aa:ad:87:c8:56:3e:9f:82:50:88:6e:05:b1:
                    35:c1:7b:24:bd:52:66:3d:99:4e:cc:2b:7e:33:6e:
                    84:47:06:d1:9e:d0:4a:86:02:6e:86:00:a4:c0:87:
                    df:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Code Signing
            2.5.29.1: 
                0....[.p.ir.#Q~..M....r0p1+0)..U..."Copyright (c) 1997 Microsoft Corp.1.0...U....Microsoft Corporation1!0...U....Microsoft Root Authority......<<...>.c..@
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                CC:1D:CE:76:00:70:5B:AF:F1:DA:C4:4E:9A:51:44:2E:A3:44:63:F0
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
    Signature Algorithm: sha1WithRSA
         7b:ab:ae:7e:4a:26:f2:ce:bc:4e:74:a2:58:27:74:2a:75:b3:
         86:fd:ab:4c:94:78:00:4d:e9:ca:eb:18:dc:69:c5:0e:a2:7c:
         f3:02:43:c6:ca:87:cc:f8:53:cc:c2:9f:bd:56:6f:f0:63:44:
         a9:44:00:ee:96:c8:9a:d5:1c:b8:0b:9f:19:0d:94:d7:da:1e:
         ad:29:7d:ef:ed:a6:73:ac:8f:de:39:8e:3d:98:6a:bc:38:6d:
         d2:88:af:23:fd:df:e9:d6:69:09:91:88:bd:fe:e1:00:bb:34:
         f3:f7:7c:f9:10:12:2e:05:eb:29:96:93:42:6b:28:71:b7:38:
         8f:e0:07:0d:c9:5d:68:cd:bd:80:41:6b:66:a8:bb:b7:bb:8e:
         34:ca:f2:03:10:7c:7a:f5:d2:e0:42:df:7b:fe:e1:e1:ac:fe:
         f6:df:d5:0d:b3:70:d6:92:e3:4f:b6:38:a2:7c:2d:d4:3d:db:
         34:0b:62:37:02:9f:81:6a:23:89:f6:5c:63:8f:b0:5a:bb:39:
         d7:60:8c:55:84:1a:33:f5:3b:98:a0:82:0c:a2:5f:8b:b3:2c:
         b7:a1:a5:cb:ab:da:20:b6:bf:30:19:85:20:14:0d:2a:bc:52:
         f4:41:e0:5e:30:e3:92:28:69:87:c1:70:e2:f3:a7:ab:ce:80:
         42:72:76:0e

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:06:27:81:00:00:00:00:00:08
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA
        Validity
            Not Before: Oct 22 21:24:55 2008 GMT
            Not After : Jan 22 21:34:55 2010 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, CN=Microsoft Corporation
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bd:72:b4:89:e7:1c:9f:85:c7:74:b8:60:5c:03:
                    36:3d:9c:fd:99:7a:9a:29:46:22:b0:a7:87:53:ed:
                    ee:46:3a:c7:5b:05:0b:57:a8:b7:ca:05:cc:d3:4c:
                    77:47:70:85:b3:e5:cb:df:67:e7:a3:fd:74:27:93:
                    67:9f:d7:8a:03:44:30:c6:f7:c9:ba:c9:3a:1d:08:
                    56:44:4f:17:08:0d:f9:b4:19:68:aa:24:1c:fb:05:
                    57:85:e9:c5:4e:07:21:37:a7:eb:ce:2c:2f:b6:42:
                    cd:21:05:a7:d6:e6:d3:28:57:c7:1b:7a:ce:29:36:
                    07:cd:9e:55:cc:bb:f1:22:eb:a8:23:a4:0d:29:c2:
                    fb:d0:c3:5a:3e:63:3d:c7:2c:49:0b:7b:79:85:f0:
                    88:ef:71:bd:43:5a:e3:a3:b3:0d:f3:55:fb:25:e0:
                    e2:20:d3:e7:9a:5e:94:a5:33:2d:28:7f:57:1b:55:
                    6a:0c:32:44:ef:66:6c:6f:f0:38:9c:ef:02:ad:9a:
                    a1:dd:98:07:10:0e:3c:18:69:e2:79:4e:46:14:e0:
                    b9:8c:d0:75:6d:9c:ac:00:9c:2d:42:f5:51:b8:5a:
                    f4:78:45:83:e9:2e:7c:2b:bb:5d:cd:19:61:28:ad:
                    94:43:0a:c5:6a:42:ff:b5:32:ae:a4:29:22:de:16:
                    e8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Subject Key Identifier: 
                23:D1:73:2A:4C:BD:FB:E5:21:FA:71:1E:99:15:D1:17:F9:C4:A6:8A
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Authority Key Identifier: 
                keyid:CC:1D:CE:76:00:70:5B:AF:F1:DA:C4:4E:9A:51:44:2E:A3:44:63:F0

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/CSPCA.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/CSPCA.crt

    Signature Algorithm: sha1WithRSAEncryption
         43:29:cf:63:bd:6c:e3:73:6d:c3:99:d7:6d:0c:88:3b:c6:48:
         73:7a:25:ce:2c:e2:37:7b:9d:34:9f:bd:23:ce:be:df:d8:5c:
         79:11:6b:13:51:20:01:63:b9:72:f7:08:e3:c6:7d:51:2a:16:
         28:d4:d1:e7:9b:2a:cf:18:0d:d2:13:71:91:29:ec:56:bd:f9:
         d6:c5:0d:2f:af:65:2d:6d:4d:45:29:56:72:84:4f:3f:d2:6a:
         1d:41:62:a9:79:5c:8e:f0:c7:77:8a:cb:02:28:2e:9d:c7:9c:
         2b:e5:b9:2a:09:dd:ec:97:e2:e5:7a:8d:5e:10:88:53:a1:dd:
         60:4f:77:98:71:60:a8:5b:39:91:d3:ab:12:1f:05:e9:c3:45:
         a9:d3:c2:51:b9:af:b8:dc:fc:06:84:00:f4:74:a3:db:ff:cc:
         1d:a0:23:05:07:e4:27:35:c2:97:90:19:aa:82:60:27:e8:fb:
         84:2b:1e:d1:04:cb:8e:cf:82:0d:d7:a8:4d:43:40:75:d2:de:
         dd:77:ef:8a:5c:6b:0f:87:64:8f:b4:ba:b7:ba:ab:67:54:21:
         45:aa:4a:68:e7:54:5e:8b:14:5c:67:78:ec:90:5c:03:10:91:
         08:9d:24:20:97:e8:df:00:11:70:a9:f9:b2:72:70:b7:ae:e2:
         c2:9f:16:02

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:49:7c:ed:00:00:00:00:00:05
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Timestamping PCA
        Validity
            Not Before: Sep 16 01:55:22 2006 GMT
            Not After : Sep 16 02:05:22 2011 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=nCipher DSE ESN:10D8-5847-CBF8, CN=Microsoft Timestamping Service
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ea:ba:05:63:c8:d9:79:ae:84:44:3e:a5:b3:c4:
                    ed:4c:9e:24:df:39:76:1e:09:d6:32:4a:58:78:d2:
                    2b:d9:a5:07:90:ef:e7:3d:fb:bd:26:7c:a3:fb:e5:
                    7d:7e:32:cf:d9:3d:8b:39:37:f2:f8:d8:3b:34:16:
                    d4:92:82:fb:34:ec:68:85:72:1a:8f:e0:b8:4c:e0:
                    b8:85:f3:33:0a:02:c1:a2:76:73:35:4c:5d:f1:b7:
                    e1:4a:7d:1d:b8:94:78:db:ff:1e:85:15:42:46:71:
                    ce:7f:27:57:12:d1:83:4f:3b:cf:fa:de:f6:8b:ed:
                    3f:00:e3:d5:de:61:f9:17:8d:4b:a4:81:3c:f5:69:
                    40:ea:e1:89:bf:07:4f:ba:74:7b:e9:0c:e5:47:ea:
                    ab:6c:f1:d5:67:81:08:f8:16:ca:7d:13:bb:73:e2:
                    09:4c:fa:62:fb:ed:a0:39:9a:3a:fe:eb:11:c8:61:
                    1e:62:58:d8:0a:54:83:d5:3b:4b:4b:e2:55:bd:2f:
                    60:1a:8e:92:05:43:da:5d:eb:82:0a:23:97:09:a0:
                    05:31:65:8b:93:4e:1e:41:21:a2:92:90:fd:45:44:
                    45:6f:35:b1:45:37:ad:69:a9:65:f9:34:43:b1:17:
                    c2:3b:39:e1:10:8c:f2:1a:87:e3:54:50:1f:3b:9d:
                    31:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7E:72:F0:2E:3F:56:29:E0:25:F7:68:B8:01:FC:4B:E1:7E:CF:E3:3E
            X509v3 Authority Key Identifier: 
                keyid:6F:E8:4E:3F:97:B9:34:AB:4B:86:8F:BC:9C:EA:AC:3B:41:43:C6:D0

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/tspca.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/tspca.crt

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
    Signature Algorithm: sha1WithRSAEncryption
         69:7a:82:09:0c:16:d1:de:cf:46:89:2e:bf:d1:34:7a:81:7f:
         27:28:41:2a:f3:d3:21:92:0e:97:ad:5f:53:5e:29:f9:ed:c1:
         54:4a:a8:7d:f7:13:d0:0b:14:f9:4d:f2:86:15:00:6e:e3:83:
         1d:28:45:a7:2c:39:32:dd:6f:9a:37:5a:ee:23:52:8f:54:03:
         8d:3f:a7:9c:64:38:f6:36:c8:14:43:b6:3a:3e:98:c9:0d:c3:
         71:81:28:f3:66:a7:31:e2:5c:5d:8f:f9:52:52:e1:5c:eb:93:
         90:9d:69:09:4c:89:d1:d1:76:4c:34:0d:6a:e1:7c:44:a7:2b:
         5b:83:54:7f:45:24:19:25:c4:8a:46:c5:25:e3:19:80:69:29:
         14:f6:17:c6:f0:22:2c:81:46:5e:2b:f4:f9:a6:c6:77:3e:23:
         6f:f9:a6:64:85:8e:a2:62:0d:a9:2d:1e:a8:e5:90:3e:7f:ff:
         b0:8e:fc:97:ec:f1:fd:04:af:cd:49:ce:5a:74:ac:fa:f3:13:
         1f:1b:39:ce:a3:b4:d6:bc:f4:b4:ee:c8:ad:f2:56:1e:fb:3c:
         f1:c8:d6:2a:44:bc:bf:9c:3f:7d:66:18:cd:b2:20:63:0a:ca:
         40:3d:65:32:19:7c:b2:b8:3d:c1:26:48:4e:22:19:99:6e:8c:
         30:c1:f1:91

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
        Validity
            Not Before: Sep 16 01:04:47 2006 GMT
            Not After : Sep 15 07:00:00 2019 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Timestamping PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:dc:37:6e:fb:af:c8:42:4a:71:18:c8:ce:48:3e:
                    53:c0:fa:ab:14:ba:2c:32:bb:12:4f:52:c8:83:ed:
                    3e:33:d9:49:31:92:28:b6:91:64:e0:1f:50:84:ba:
                    c2:4b:d1:7f:05:f8:ef:75:be:8b:c7:a8:d5:ae:69:
                    70:66:78:27:66:e8:b6:b7:ef:85:b9:cd:ee:aa:fd:
                    12:a4:0b:59:22:29:2f:cf:40:d9:56:04:1b:76:b5:
                    6d:64:6d:4a:54:db:dd:f1:de:bf:9f:83:c7:80:df:
                    7f:4c:02:37:94:f5:c0:9e:08:56:1e:68:47:cd:d9:
                    c0:76:5c:2f:7d:b6:25:04:b4:56:5b:6a:1c:63:ff:
                    80:7c:3c:ee:d5:04:25:4d:39:77:74:07:5d:c2:5c:
                    d8:86:37:2c:75:c9:0e:ea:1e:39:09:7c:76:fe:9d:
                    6c:6e:7a:e0:ec:3e:8f:97:9e:71:0e:5f:2a:4f:18:
                    62:60:32:9e:d2:83:4e:2b:22:5c:68:45:8b:de:2f:
                    84:10:50:b2:f9:b5:1a:8d:6c:ee:25:9b:13:f8:cb:
                    10:d7:85:0e:f4:82:76:73:36:c6:95:7a:a2:cc:60:
                    06:ec:05:b0:86:33:b7:f8:94:5b:84:41:84:58:85:
                    94:6e:b0:1f:2c:48:cc:6f:9c:43:e0:6a:e8:7f:26:
                    8e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Time Stamping
            2.5.29.1: 
                0....[.p.ir.#Q~..M....r0p1+0)..U..."Copyright (c) 1997 Microsoft Corp.1.0...U....Microsoft Corporation1!0...U....Microsoft Root Authority......<<...>.c..@
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Subject Key Identifier: 
                6F:E8:4E:3F:97:B9:34:AB:4B:86:8F:BC:9C:EA:AC:3B:41:43:C6:D0
            1.3.6.1.4.1.311.20.2: 
                .
.S.u.b.C.A
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha1WithRSAEncryption
         94:4d:11:31:c2:7c:50:bb:11:8e:a1:61:07:01:0e:8c:70:45:
         8d:ef:73:54:bd:3f:09:05:2d:ff:b8:51:53:85:1c:ed:39:91:
         b7:a3:56:0b:de:8c:b6:3b:1b:d1:fb:ac:a7:c9:b7:b1:51:21:
         1b:6f:08:69:7e:6b:03:a2:22:46:ed:6c:b4:6d:7c:22:b8:46:
         d3:84:f3:8d:0f:be:07:8a:36:c1:eb:7e:e9:70:5d:45:9f:92:
         d2:cc:ce:dd:8e:c0:e1:bf:2a:cd:7c:ec:c9:ae:32:d5:87:b9:
         cb:63:c4:36:d1:18:21:bf:76:de:3b:9a:b3:1b:73:9e:21:88:
         d8:b4:b4:12:54:8c:f4:9c:c2:65:4a:9a:28:26:9c:60:8a:0f:
         3b:c7:13:65:78:48:bb:cf:ad:83:3a:4f:b0:62:58:de:30:e9:
         e9:39:1d:e3:89:f2:da:39:81:f9:13:21:8c:64:80:63:06:04:
         96:f2:9a:02:43:2f:7b:46:88:ba:ff:02:d9:65:f9:4a:de:da:
         03:74:93:b3:05:6e:0c:cc:9d:dc:28:61:7c:48:f1:17:9c:11:
         21:38:02:1c:87:ac:06:c5:96:32:b8:e5:40:c6:53:3d:bd:a9:
         89:de:e8:66:37:8d:f4:22:96:9c:cc:b0:77:54:51:3a:d6:72:
         44:b2:23:f6
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
            00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • SHA1
          • 85 57 d3 2e 0d f6 69 c5  28 ca 72 93 cb 7f 98 b3  |.W....i.(.r.....|
            7f 8e d4 49                                       |...I            |
    • unnamed
      • #0
        • 2
          • 2E:AB:11:DC:50:FF:5C:9D:CB:C0
          • RSA-SHA1-2: nil
          • #2
            • OU: Copyright (c) 1997 Microsoft Corp.
            • OU: Microsoft Corporation
            • CN: Microsoft Root Authority
          • 2007-08-22 22:31:02 UTC: 2012-08-25 07:00:00 UTC
          • Subject
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • CN: Microsoft Code Signing PCA
          • #5
            • rsaEncryption: nil
            • B7:79:7D:D6:5D:B3:45:39:A8:34:AC:31:DA:F9:25:35:
              49:77:C0:FB:1F:9E:C7:45:71:EF:D1:46:E8:D4:8C:C3:
              6B:4C:52:62:F4:99:02:C3:4D:D8:49:6C:2F:24:3E:65:
              BF:CE:23:B7:0B:48:B7:7F:75:DD:45:BD:AA:8F:0E:50:
              C5:25:2B:F2:A0:E7:0D:23:1F:D1:41:24:FA:62:99:CF:
              19:45:A5:93:4A:1F:99:CD:B3:2F:22:C3:4A:2D:7C:6F:
              D9:15:1E:3B:8C:39:10:39:DD:BD:29:F4:66:3B:2D:01:
              32:FF:FE:27:48:A6:B5:6C:01:87:9C:FB:BA:B2:63:7F:
              82:F9:5C:A0:81:84:85:8E:B0:F2:B8:94:A3:CF:38:A6:
              50:85:17:27:87:4E:DD:30:F6:00:3D:F4:C6:F9:3D:81:
              BE:86:ED:6C:39:A7:2E:34:F6:B4:2E:AF:0A:7D:62:91:
              78:66:9C:98:73:0D:86:AF:F2:C4:F3:20:B9:4F:12:8D:
              63:CB:2C:D9:32:45:19:EE:BB:4A:96:3B:50:53:18:CE:
              66:51:79:AA:AD:87:C8:56:3E:9F:82:50:88:6E:05:B1:
              35:C1:7B:24:BD:52:66:3D:99:4E:CC:2B:7E:33:6E:84:
              47:06:D1:9E:D0:4A:86:02:6E:86:00:A4:C0:87:DF:53
              : 0x010001
          • #6
            • extendedKeyUsage: codeSigning
            • 2.5.29.1
              • 5b d0 70 ef 69 72 9e 23  51 7e 14 b2 4d 8e ff cb  |[.p.ir.#Q~..M...|
                • #0
                  • OU: Copyright (c) 1997 Microsoft Corp.
                  • OU: Microsoft Corporation
                  • CN: Microsoft Root Authority
                • 00 c1 00 8b 3c 3c 88 11  d1 3e f6 63 ec df 40     |....<<...>.c..@ |
            • basicConstraints: true, true
            • subjectKeyIdentifier:
              cc 1d ce 76 00 70 5b af  f1 da c4 4e 9a 51 44 2e  |...v.p[....N.QD.|
              a3 44 63 f0                                       |.Dc.            |
            • keyUsage: 0x86
        • RSA-SHA1-2:
          7b ab ae 7e 4a 26 f2 ce  bc 4e 74 a2 58 27 74 2a  |{..~J&...Nt.X't*|
          75 b3 86 fd ab 4c 94 78  00 4d e9 ca eb 18 dc 69  |u....L.x.M.....i|
          c5 0e a2 7c f3 02 43 c6  ca 87 cc f8 53 cc c2 9f  |...|..C.....S...|
          bd 56 6f f0 63 44 a9 44  00 ee 96 c8 9a d5 1c b8  |.Vo.cD.D........|
          0b 9f 19 0d 94 d7 da 1e  ad 29 7d ef ed a6 73 ac  |.........)}...s.|
          8f de 39 8e 3d 98 6a bc  38 6d d2 88 af 23 fd df  |..9.=.j.8m...#..|
          e9 d6 69 09 91 88 bd fe  e1 00 bb 34 f3 f7 7c f9  |..i........4..|.|
          10 12 2e 05 eb 29 96 93  42 6b 28 71 b7 38 8f e0  |.....)..Bk(q.8..|
          07 0d c9 5d 68 cd bd 80  41 6b 66 a8 bb b7 bb 8e  |...]h...Akf.....|
          34 ca f2 03 10 7c 7a f5  d2 e0 42 df 7b fe e1 e1  |4....|z...B.{...|
          ac fe f6 df d5 0d b3 70  d6 92 e3 4f b6 38 a2 7c  |.......p...O.8.||
          2d d4 3d db 34 0b 62 37  02 9f 81 6a 23 89 f6 5c  |-.=.4.b7...j#..\|
          63 8f b0 5a bb 39 d7 60  8c 55 84 1a 33 f5 3b 98  |c..Z.9.`.U..3.;.|
          a0 82 0c a2 5f 8b b3 2c  b7 a1 a5 cb ab da 20 b6  |...._..,...... .|
          bf 30 19 85 20 14 0d 2a  bc 52 f4 41 e0 5e 30 e3  |.0.. ..*.R.A.^0.|
          92 28 69 87 c1 70 e2 f3  a7 ab ce 80 42 72 76 0e  |.(i..p......Brv.|
      • Certificate #1
        • 2
          • 61:06:27:81:00:00:00:00:00:08
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • CN: Microsoft Code Signing PCA
          • 2008-10-22 21:24:55 UTC: 2010-01-22 21:34:55 UTC
          • Subject
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • OU: MOPR
            • CN: Microsoft Corporation
          • #5
            • rsaEncryption: nil
            • BD:72:B4:89:E7:1C:9F:85:C7:74:B8:60:5C:03:36:3D:
              9C:FD:99:7A:9A:29:46:22:B0:A7:87:53:ED:EE:46:3A:
              C7:5B:05:0B:57:A8:B7:CA:05:CC:D3:4C:77:47:70:85:
              B3:E5:CB:DF:67:E7:A3:FD:74:27:93:67:9F:D7:8A:03:
              44:30:C6:F7:C9:BA:C9:3A:1D:08:56:44:4F:17:08:0D:
              F9:B4:19:68:AA:24:1C:FB:05:57:85:E9:C5:4E:07:21:
              37:A7:EB:CE:2C:2F:B6:42:CD:21:05:A7:D6:E6:D3:28:
              57:C7:1B:7A:CE:29:36:07:CD:9E:55:CC:BB:F1:22:EB:
              A8:23:A4:0D:29:C2:FB:D0:C3:5A:3E:63:3D:C7:2C:49:
              0B:7B:79:85:F0:88:EF:71:BD:43:5A:E3:A3:B3:0D:F3:
              55:FB:25:E0:E2:20:D3:E7:9A:5E:94:A5:33:2D:28:7F:
              57:1B:55:6A:0C:32:44:EF:66:6C:6F:F0:38:9C:EF:02:
              AD:9A:A1:DD:98:07:10:0E:3C:18:69:E2:79:4E:46:14:
              E0:B9:8C:D0:75:6D:9C:AC:00:9C:2D:42:F5:51:B8:5A:
              F4:78:45:83:E9:2E:7C:2B:BB:5D:CD:19:61:28:AD:94:
              43:0A:C5:6A:42:FF:B5:32:AE:A4:29:22:DE:16:E8:D3
              : 0x010001
          • #6
            • extendedKeyUsage: codeSigning
            • subjectKeyIdentifier:
              23 d1 73 2a 4c bd fb e5  21 fa 71 1e 99 15 d1 17  |#.s*L...!.q.....|
              f9 c4 a6 8a                                       |....            |
            • keyUsage: true, 0x80
            • authorityKeyIdentifier:
              cc 1d ce 76 00 70 5b af  f1 da c4 4e 9a 51 44 2e  |...v.p[....N.QD.|
              a3 44 63 f0                                       |.Dc.            |
            • crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/CSPCA.crl
            • authorityInfoAccess
              • caIssuers: http://www.microsoft.com/pki/certs/CSPCA.crt
        • RSA-SHA1:
          43 29 cf 63 bd 6c e3 73  6d c3 99 d7 6d 0c 88 3b  |C).c.l.sm...m..;|
          c6 48 73 7a 25 ce 2c e2  37 7b 9d 34 9f bd 23 ce  |.Hsz%.,.7{.4..#.|
          be df d8 5c 79 11 6b 13  51 20 01 63 b9 72 f7 08  |...\y.k.Q .c.r..|
          e3 c6 7d 51 2a 16 28 d4  d1 e7 9b 2a cf 18 0d d2  |..}Q*.(....*....|
          13 71 91 29 ec 56 bd f9  d6 c5 0d 2f af 65 2d 6d  |.q.).V...../.e-m|
          4d 45 29 56 72 84 4f 3f  d2 6a 1d 41 62 a9 79 5c  |ME)Vr.O?.j.Ab.y\|
          8e f0 c7 77 8a cb 02 28  2e 9d c7 9c 2b e5 b9 2a  |...w...(....+..*|
          09 dd ec 97 e2 e5 7a 8d  5e 10 88 53 a1 dd 60 4f  |......z.^..S..`O|
          77 98 71 60 a8 5b 39 91  d3 ab 12 1f 05 e9 c3 45  |w.q`.[9........E|
          a9 d3 c2 51 b9 af b8 dc  fc 06 84 00 f4 74 a3 db  |...Q.........t..|
          ff cc 1d a0 23 05 07 e4  27 35 c2 97 90 19 aa 82  |....#...'5......|
          60 27 e8 fb 84 2b 1e d1  04 cb 8e cf 82 0d d7 a8  |`'...+..........|
          4d 43 40 75 d2 de dd 77  ef 8a 5c 6b 0f 87 64 8f  |MC@u...w..\k..d.|
          b4 ba b7 ba ab 67 54 21  45 aa 4a 68 e7 54 5e 8b  |.....gT!E.Jh.T^.|
          14 5c 67 78 ec 90 5c 03  10 91 08 9d 24 20 97 e8  |.\gx..\.....$ ..|
          df 00 11 70 a9 f9 b2 72  70 b7 ae e2 c2 9f 16 02  |...p...rp.......|
      • Certificate #2
        • 2
          • 61:49:7C:ED:00:00:00:00:00:05
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • CN: Microsoft Timestamping PCA
          • 2006-09-16 01:55:22 UTC: 2011-09-16 02:05:22 UTC
          • Subject
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • OU: nCipher DSE ESN:10D8-5847-CBF8
            • CN: Microsoft Timestamping Service
          • #5
            • rsaEncryption: nil
            • EA:BA:05:63:C8:D9:79:AE:84:44:3E:A5:B3:C4:ED:4C:
              9E:24:DF:39:76:1E:09:D6:32:4A:58:78:D2:2B:D9:A5:
              07:90:EF:E7:3D:FB:BD:26:7C:A3:FB:E5:7D:7E:32:CF:
              D9:3D:8B:39:37:F2:F8:D8:3B:34:16:D4:92:82:FB:34:
              EC:68:85:72:1A:8F:E0:B8:4C:E0:B8:85:F3:33:0A:02:
              C1:A2:76:73:35:4C:5D:F1:B7:E1:4A:7D:1D:B8:94:78:
              DB:FF:1E:85:15:42:46:71:CE:7F:27:57:12:D1:83:4F:
              3B:CF:FA:DE:F6:8B:ED:3F:00:E3:D5:DE:61:F9:17:8D:
              4B:A4:81:3C:F5:69:40:EA:E1:89:BF:07:4F:BA:74:7B:
              E9:0C:E5:47:EA:AB:6C:F1:D5:67:81:08:F8:16:CA:7D:
              13:BB:73:E2:09:4C:FA:62:FB:ED:A0:39:9A:3A:FE:EB:
              11:C8:61:1E:62:58:D8:0A:54:83:D5:3B:4B:4B:E2:55:
              BD:2F:60:1A:8E:92:05:43:DA:5D:EB:82:0A:23:97:09:
              A0:05:31:65:8B:93:4E:1E:41:21:A2:92:90:FD:45:44:
              45:6F:35:B1:45:37:AD:69:A9:65:F9:34:43:B1:17:C2:
              3B:39:E1:10:8C:F2:1A:87:E3:54:50:1F:3B:9D:31:AD
              : 0x010001
          • #6
            • subjectKeyIdentifier:
              7e 72 f0 2e 3f 56 29 e0  25 f7 68 b8 01 fc 4b e1  |~r..?V).%.h...K.|
              7e cf e3 3e                                       |~..>            |
            • authorityKeyIdentifier:
              6f e8 4e 3f 97 b9 34 ab  4b 86 8f bc 9c ea ac 3b  |o.N?..4.K......;|
              41 43 c6 d0                                       |AC..            |
            • crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/tspca.crl
            • authorityInfoAccess
              • caIssuers: http://www.microsoft.com/pki/certs/tspca.crt
            • extendedKeyUsage: timeStamping
            • keyUsage: true, 0xc0
        • RSA-SHA1:
          69 7a 82 09 0c 16 d1 de  cf 46 89 2e bf d1 34 7a  |iz.......F....4z|
          81 7f 27 28 41 2a f3 d3  21 92 0e 97 ad 5f 53 5e  |..'(A*..!...._S^|
          29 f9 ed c1 54 4a a8 7d  f7 13 d0 0b 14 f9 4d f2  |)...TJ.}......M.|
          86 15 00 6e e3 83 1d 28  45 a7 2c 39 32 dd 6f 9a  |...n...(E.,92.o.|
          37 5a ee 23 52 8f 54 03  8d 3f a7 9c 64 38 f6 36  |7Z.#R.T..?..d8.6|
          c8 14 43 b6 3a 3e 98 c9  0d c3 71 81 28 f3 66 a7  |..C.:>....q.(.f.|
          31 e2 5c 5d 8f f9 52 52  e1 5c eb 93 90 9d 69 09  |1.\]..RR.\....i.|
          4c 89 d1 d1 76 4c 34 0d  6a e1 7c 44 a7 2b 5b 83  |L...vL4.j.|D.+[.|
          54 7f 45 24 19 25 c4 8a  46 c5 25 e3 19 80 69 29  |T.E$.%..F.%...i)|
          14 f6 17 c6 f0 22 2c 81  46 5e 2b f4 f9 a6 c6 77  |.....",.F^+....w|
          3e 23 6f f9 a6 64 85 8e  a2 62 0d a9 2d 1e a8 e5  |>#o..d...b..-...|
          90 3e 7f ff b0 8e fc 97  ec f1 fd 04 af cd 49 ce  |.>............I.|
          5a 74 ac fa f3 13 1f 1b  39 ce a3 b4 d6 bc f4 b4  |Zt......9.......|
          ee c8 ad f2 56 1e fb 3c  f1 c8 d6 2a 44 bc bf 9c  |....V..<...*D...|
          3f 7d 66 18 cd b2 20 63  0a ca 40 3d 65 32 19 7c  |?}f... c..@=e2.||
          b2 b8 3d c1 26 48 4e 22  19 99 6e 8c 30 c1 f1 91  |..=.&HN"..n.0...|
      • #3
        • 2
          • 6A:0B:99:4F:C0:00:25:AB:11:DB:45:1F:58:7A:67:A2
          • RSA-SHA1: nil
          • #2
            • OU: Copyright (c) 1997 Microsoft Corp.
            • OU: Microsoft Corporation
            • CN: Microsoft Root Authority
          • 2006-09-16 01:04:47 UTC: 2019-09-15 07:00:00 UTC
          • Subject
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • CN: Microsoft Timestamping PCA
          • #5
            • rsaEncryption: nil
            • DC:37:6E:FB:AF:C8:42:4A:71:18:C8:CE:48:3E:53:C0:
              FA:AB:14:BA:2C:32:BB:12:4F:52:C8:83:ED:3E:33:D9:
              49:31:92:28:B6:91:64:E0:1F:50:84:BA:C2:4B:D1:7F:
              05:F8:EF:75:BE:8B:C7:A8:D5:AE:69:70:66:78:27:66:
              E8:B6:B7:EF:85:B9:CD:EE:AA:FD:12:A4:0B:59:22:29:
              2F:CF:40:D9:56:04:1B:76:B5:6D:64:6D:4A:54:DB:DD:
              F1:DE:BF:9F:83:C7:80:DF:7F:4C:02:37:94:F5:C0:9E:
              08:56:1E:68:47:CD:D9:C0:76:5C:2F:7D:B6:25:04:B4:
              56:5B:6A:1C:63:FF:80:7C:3C:EE:D5:04:25:4D:39:77:
              74:07:5D:C2:5C:D8:86:37:2C:75:C9:0E:EA:1E:39:09:
              7C:76:FE:9D:6C:6E:7A:E0:EC:3E:8F:97:9E:71:0E:5F:
              2A:4F:18:62:60:32:9E:D2:83:4E:2B:22:5C:68:45:8B:
              DE:2F:84:10:50:B2:F9:B5:1A:8D:6C:EE:25:9B:13:F8:
              CB:10:D7:85:0E:F4:82:76:73:36:C6:95:7A:A2:CC:60:
              06:EC:05:B0:86:33:B7:F8:94:5B:84:41:84:58:85:94:
              6E:B0:1F:2C:48:CC:6F:9C:43:E0:6A:E8:7F:26:8E:6B
              : 0x010001
          • #6
            • extendedKeyUsage: timeStamping
            • 2.5.29.1
              • 5b d0 70 ef 69 72 9e 23  51 7e 14 b2 4d 8e ff cb  |[.p.ir.#Q~..M...|
                • #0
                  • OU: Copyright (c) 1997 Microsoft Corp.
                  • OU: Microsoft Corporation
                  • CN: Microsoft Root Authority
                • 00 c1 00 8b 3c 3c 88 11  d1 3e f6 63 ec df 40     |....<<...>.c..@ |
            • 1.3.6.1.4.1.311.21.1: 0
            • subjectKeyIdentifier:
              6f e8 4e 3f 97 b9 34 ab  4b 86 8f bc 9c ea ac 3b  |o.N?..4.K......;|
              41 43 c6 d0                                       |AC..            |
            • 1.3.6.1.4.1.311.20.2:
              00 53 00 75 00 62 00 43  00 41                    |.S.u.b.C.A      |
            • keyUsage: 0x86
            • basicConstraints: true, true
        • RSA-SHA1:
          94 4d 11 31 c2 7c 50 bb  11 8e a1 61 07 01 0e 8c  |.M.1.|P....a....|
          70 45 8d ef 73 54 bd 3f  09 05 2d ff b8 51 53 85  |pE..sT.?..-..QS.|
          1c ed 39 91 b7 a3 56 0b  de 8c b6 3b 1b d1 fb ac  |..9...V....;....|
          a7 c9 b7 b1 51 21 1b 6f  08 69 7e 6b 03 a2 22 46  |....Q!.o.i~k.."F|
          ed 6c b4 6d 7c 22 b8 46  d3 84 f3 8d 0f be 07 8a  |.l.m|".F........|
          36 c1 eb 7e e9 70 5d 45  9f 92 d2 cc ce dd 8e c0  |6..~.p]E........|
          e1 bf 2a cd 7c ec c9 ae  32 d5 87 b9 cb 63 c4 36  |..*.|...2....c.6|
          d1 18 21 bf 76 de 3b 9a  b3 1b 73 9e 21 88 d8 b4  |..!.v.;...s.!...|
          b4 12 54 8c f4 9c c2 65  4a 9a 28 26 9c 60 8a 0f  |..T....eJ.(&.`..|
          3b c7 13 65 78 48 bb cf  ad 83 3a 4f b0 62 58 de  |;..exH....:O.bX.|
          30 e9 e9 39 1d e3 89 f2  da 39 81 f9 13 21 8c 64  |0..9.....9...!.d|
          80 63 06 04 96 f2 9a 02  43 2f 7b 46 88 ba ff 02  |.c......C/{F....|
          d9 65 f9 4a de da 03 74  93 b3 05 6e 0c cc 9d dc  |.e.J...t...n....|
          28 61 7c 48 f1 17 9c 11  21 38 02 1c 87 ac 06 c5  |(a|H....!8......|
          96 32 b8 e5 40 c6 53 3d  bd a9 89 de e8 66 37 8d  |.2..@.S=.....f7.|
          f4 22 96 9c cc b0 77 54  51 3a d6 72 44 b2 23 f6  |."....wTQ:.rD.#.|
    • Signer
      • 1
      • unnamed
        • #0
          • C: US
          • ST: Washington
          • L: Redmond
          • O: Microsoft Corporation
          • CN: Microsoft Code Signing PCA
        • 61:06:27:81:00:00:00:00:00:08
      • SHA1: nil
      • #3
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest:
          52 5e a5 b9 53 cd fc 76  7e 18 a3 37 23 81 69 68  |R^..S..v~..7#.ih|
          d7 6b 14 c0                                       |.k..            |
        • 1.3.6.1.4.1.311.2.1.12
          • 00 57 00 69 00 6e 00 64  00 6f 00 77 00 73 00 20  |.W.i.n.d.o.w.s. |
            00 4d 00 65 00 64 00 69  00 61 00 20 00 48 00 6f  |.M.e.d.i.a. .H.o|
            00 74 00 66 00 69 00 78  00 20 00 4b 00 42 00 39  |.t.f.i.x. .K.B.9|
            00 35 00 39 00 37 00 37  00 32 00 20 00 43 00 48  |.5.9.7.7.2. .C.H|
            00 53                                             |.S              |
            : http://www.microsoft.com/windows/windowsmedia
      • rsaEncryption:
        8b 50 38 4d 2b 4e ac 82  99 fa d5 57 43 c9 61 55  |.P8M+N.....WC.aU|
        39 71 39 3c 68 ed dc a6  dc 57 00 1e 19 21 69 e6  |9q9...%C....EMC.|
        ae 8c cc db 69 e7 99 66  61 1c bc b9 94 b7 57 d8  |....i..fa.....W.|
        69 67 0b 2b ee 1f 60 f6  30 6c 57 89 ab 11 84 2b  |ig.+..`.0lW....+|
        0f e3 0a e7 0d 69 77 57  e9 98 53 69 65 44 dc 88  |.....iwW..SieD..|
        ba f0 32 ed 01 7f e2 ea  4c 01 9e af 1e 77 27 5f  |..2.....L....w'_|
        d9 36 eb 8c 17 d2 db 6e  07 70 b0 bc 13 98 12 2e  |.6.....n.p......|
        4b c0 ea d9 70 da 94 2f  7e 6f 25 d8 9c 7c 7d a3  |K...p../~o%..|}.|
        65 27 d2 8a a5 5f e3 86  f7 66 58 e2 e0 18 c9 e8  |e'..._...fX.....|
        b5 3e fc 8a a3 fa 3f cd  81 01 5e 22 64 81 3d e8  |.>....?...^"d.=.|
        31 d8 31 04 f5 f5 09 e8  72 28 80 87 32 92 6b 98  |1.1.....r(..2.k.|
        24 e6 ed 4d 08 a7 c6 b0  cc f8 9b 06 dd 9f 92 80  |$..M............|
      • countersignature
        • 1
          • unnamed
            • #0
              • C: US
              • ST: Washington
              • L: Redmond
              • O: Microsoft Corporation
              • CN: Microsoft Timestamping PCA
            • 61:49:7C:ED:00:00:00:00:00:05
          • SHA1
          • #2
            • contentType: pkcs7-data
            • signingTime: 2009-02-04 03:39:30 UTC
            • messageDigest:
              63 93 23 f9 6f f6 24 52  99 9a b4 61 e7 74 36 97  |c.#.o.$R...a.t6.|
              6b ee 53 e5                                       |k.S.            |
          • RSA-SHA1:
            a6 ce b2 a0 93 2b 8a 26  60 b4 28 9d 6d b7 e4 2f  |.....+.&`.(.m../|
            10 9d 19 94 a8 70 be c4  1a 66 7b e4 88 08 98 38  |.....p...f{....8|
            ce 67 5d 65 7c 12 05 52  64 ef 8a cb 01 33 a1 81  |.g]e|..Rd....3..|
            f5 67 eb 8b 6c e5 83 3d  b5 1a 8d d9 74 b3 8d 7a  |.g..l..=....t..z|
            1d e4 cf 31 0a 98 6e 93  df 59 4f f3 ab 8e f4 7b  |...1..n..YO....{|
            3e 7c 27 38 65 b6 29 93  54 11 1b 22 c0 e7 a4 ed  |>|'8e.).T.."....|
            43 9f 54 27 6a 63 4a f4  f1 1c 76 99 ca 84 bb 73  |C.T'jcJ...v....s|
            3f 49 54 b6 92 35 dc 76  bd 26 34 ea f2 52 ba f5  |?IT..5.v.&4..R..|
            1c 96 36 71 87 d5 91 f7  34 b7 fa ab 45 07 72 6e  |..6q....4...E.rn|
            94 0a 8e d7 80 be 08 62  1a e2 17 af d9 6c 1a 1b  |.......b.....l..|
            fc 25 ed b9 85 67 2d 6d  6a 56 3a 47 04 ce 43 d7  |.%...g-mjV:G..C.|
            35 ac e2 a2 4f f8 ec 26  9c 0b 33 77 98 79 93 fd  |5...O..&..3w.y..|
            1f 6d a2 81 0f 5c 2d 0b  e5 fd 65 74 ce 93 cf ff  |.m...\-...et....|
            de f0 3a 02 12 96 2c 72  0c 02 50 d1 8c 8e d9 b2  |..:...,r..P.....|
            cd 15 ab ba aa e1 63 5f  3c 14 16 b5 d7 b3 78 f5  |......c_<.....x.|
            60 8b 74 93 8c b2 20 f9  16 86 0c ca 13 00 54 f6  |`.t... .......T.|
offsetsizetypecomment
031744EXE03/07/2013 16:01:26#
7c006024PKCS7Authenticode Signature#
93884BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] can't find file_offset of VA 0x9558