MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

TLS

StringTable 040904E4

VS_FIXEDFILEINFO

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Code Signing PCA
serial: 33000000CA6CD5321235C4E1550001000000CA

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:00:00:62:41:2f:c7:4d:8a:ae:13:26:00:00:00:00:00:62
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA
        Validity
            Not Before: Feb 10 18:33:37 2015 GMT
            Not After : May 10 18:33:37 2016 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, OU=nCipher DSE ESN:C0F4-3086-DEF8, CN=Microsoft Time-Stamp Service
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:97:29:12:78:ce:83:5e:9e:7c:2a:0e:8d:69:
                    93:c5:ee:0d:39:a7:74:ee:48:fe:18:d9:40:19:bd:
                    1e:7a:5e:dc:a6:95:fa:e2:e1:8f:71:4b:ef:38:f4:
                    80:9b:18:5e:a9:38:cc:d8:f0:44:b4:71:8d:aa:3a:
                    83:e8:ce:d2:4c:73:39:86:c5:49:d1:d5:ac:2b:ee:
                    4a:11:8f:08:6c:86:07:23:12:49:ac:dc:85:e6:b0:
                    cb:27:79:4a:94:a1:55:a3:59:a0:9f:fa:19:33:87:
                    0c:0a:07:e8:90:b3:9a:ca:32:2f:cb:1b:89:20:5a:
                    c5:6e:93:be:9c:5f:8f:86:e2:37:31:84:fe:96:c1:
                    ca:76:0d:84:ac:23:45:d1:8d:ca:36:f9:83:b4:ff:
                    57:06:24:4a:88:64:bb:a5:59:4a:07:8a:1a:b9:e0:
                    7e:f7:87:2c:c1:ea:bb:2d:7a:d4:4e:b3:9c:3f:c6:
                    ba:85:12:b3:36:a8:d1:e2:90:1c:c9:bc:2f:e7:4f:
                    01:e2:8b:4a:fa:36:d7:96:61:36:95:db:04:ca:cb:
                    bd:9b:08:cd:d5:fc:83:55:29:d6:85:ea:06:66:25:
                    f0:de:9c:46:f4:57:9e:5e:c3:a4:34:b8:9b:4e:d5:
                    15:ae:39:1c:a2:1a:ba:86:f6:fb:ee:ae:1d:72:8e:
                    de:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9B:2E:88:55:DB:14:5D:DA:C8:C2:ED:83:D8:F9:68:7E:83:A1:39:C7
            X509v3 Authority Key Identifier: 
                keyid:23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt

            X509v3 Extended Key Usage: 
                Time Stamping
    Signature Algorithm: sha1WithRSAEncryption
         0c:ad:ce:f4:f0:f3:9f:4d:ec:ae:b8:54:cc:e6:9e:15:c6:57:
         86:4e:78:c9:e7:fc:02:60:a8:e5:06:b0:8a:d5:aa:6b:61:a2:
         ab:1c:a8:aa:bd:7d:29:e3:dd:09:42:de:4c:97:14:80:fb:4b:
         af:46:9a:f0:df:ca:50:3f:9a:ee:87:49:ed:26:ca:d8:3c:b2:
         f6:d8:bb:ba:7a:6a:b4:16:7b:ca:b5:da:47:5a:81:2d:64:14:
         f0:6a:53:24:b2:13:1e:69:74:8d:2b:fb:d5:9e:8d:6f:7c:94:
         d8:98:e0:f3:60:a2:a7:6f:15:96:94:e1:fa:75:b6:c6:c9:f1:
         fe:ab:25:9e:d4:b5:50:8b:39:81:db:0e:f9:61:53:42:e3:2a:
         96:c2:81:9d:15:95:1e:0a:93:54:94:b9:c9:71:b4:85:44:4e:
         91:d2:e5:3a:02:d4:4c:d0:44:81:8b:b2:f9:0e:c6:0e:e9:29:
         ff:cc:92:e1:8c:e1:1e:1d:60:85:59:a4:f4:18:2d:e4:db:d2:
         8d:21:76:75:d7:7b:3d:73:6b:d6:bd:cd:a6:bf:8a:62:97:ca:
         25:79:df:3d:65:a0:61:55:55:8a:87:02:76:27:08:cc:39:33:
         5e:a8:59:d2:9e:1b:b3:9a:4f:ea:85:40:be:5a:2b:44:9a:a1:
         94:87:a6:eb

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:00:00:ca:6c:d5:32:12:35:c4:e1:55:00:01:00:00:00:ca
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA
        Validity
            Not Before: Apr 22 17:39:00 2014 GMT
            Not After : Jul 22 17:39:00 2015 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, CN=Microsoft Corporation
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:71:5d:ed:06:46:fa:84:cb:9d:5b:b7:46:c7:
                    b0:e1:b4:11:39:03:ad:b1:15:73:60:9c:eb:a7:b6:
                    6e:1a:3c:3f:ff:65:e3:34:f1:a6:a5:21:5e:56:99:
                    6c:58:e4:92:a1:0a:5c:c2:d3:dc:52:2f:0c:65:9a:
                    20:61:40:53:31:9c:6c:8f:21:7d:ba:f9:fe:13:50:
                    52:60:95:3a:5b:b9:58:a5:74:61:41:a9:94:e0:ad:
                    26:4e:4c:a1:97:70:49:27:5e:7c:67:ca:4f:1e:71:
                    84:46:bc:1d:4b:b6:e2:0f:c5:c6:27:c9:07:e6:7a:
                    0a:a5:17:00:19:4c:70:45:38:2d:81:b4:50:aa:c5:
                    67:d1:fa:79:bc:c5:cc:a1:72:9b:f4:25:34:98:f8:
                    54:df:12:39:38:12:2f:a4:6b:a5:9a:7e:c7:62:d1:
                    dc:cf:ed:3d:34:f8:b9:df:35:30:ba:ec:79:32:a9:
                    e1:a9:ac:55:4d:4c:7f:4c:56:c3:13:0b:76:f1:07:
                    f9:cc:47:ac:fb:88:d5:52:a5:1e:28:fa:3d:2d:cf:
                    cf:84:98:86:71:65:11:cf:85:c9:09:44:86:e1:6f:
                    e7:b1:fc:ac:40:44:a5:a9:8b:23:3f:82:49:9d:d5:
                    96:59:50:13:59:18:73:ff:43:0c:ad:2b:d4:7f:30:
                    40:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Subject Key Identifier: 
                1F:5E:E2:5D:50:8D:56:86:BE:4A:3C:CF:04:E8:A7:87:B5:CB:BF:83
            X509v3 Subject Alternative Name: 
                DirName:/OU=MOPR/serialNumber=31595+b4218f13-6fca-490f-9c47-3fc557dfc440
            X509v3 Authority Key Identifier: 
                keyid:CB:11:E8:CA:D2:B4:16:58:01:C9:37:2E:33:16:16:B9:4C:9A:0A:1F

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt

    Signature Algorithm: sha1WithRSAEncryption
         77:5c:eb:d7:91:3d:cd:bd:7b:83:d9:85:a9:b0:43:9d:73:7c:
         17:c9:0f:ed:36:db:c7:b5:2c:1b:5e:fb:54:05:3a:83:71:40:
         81:09:a2:b7:71:26:5e:d6:7d:b6:6c:3b:c9:aa:5f:5d:03:18:
         2a:1d:27:7e:07:e9:c5:65:1f:b5:cf:0d:b7:54:c7:28:38:5a:
         88:e7:7b:c1:19:b6:56:32:ba:e2:cc:cb:93:db:af:6e:0f:5d:
         44:f5:d4:b0:ef:1b:d5:4e:c1:af:0e:ef:20:9b:f2:e1:fe:27:
         5d:e8:c5:ff:61:f6:19:d2:28:0a:22:9d:df:cd:70:82:9e:18:
         72:d8:23:cc:7a:2c:43:ee:ff:ea:c0:e0:e6:1d:aa:9e:97:33:
         00:52:6f:07:b8:d3:88:6c:de:a4:06:35:a7:c2:53:86:65:11:
         77:09:8f:35:59:b9:d8:86:a8:00:fe:f8:31:7d:2c:f4:8c:05:
         9d:c0:c1:d5:77:72:6c:e9:4d:59:26:83:f1:c2:b2:88:57:93:
         35:00:7c:50:2b:bc:59:fc:fe:1c:29:38:82:d3:de:52:97:45:
         29:18:4e:96:5b:9d:ba:5f:1b:a3:f1:27:50:ea:07:95:e8:6d:
         34:0d:38:57:dc:37:28:35:95:3a:38:9c:d4:ed:6a:85:5d:0e:
         22:11:5e:7b

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:33:26:1a:00:00:00:00:00:31
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
        Validity
            Not Before: Aug 31 22:19:32 2010 GMT
            Not After : Aug 31 22:29:32 2020 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:72:59:5c:19:30:64:bf:1d:9a:60:20:20:42:
                    99:76:53:6c:3e:1b:d6:6f:cc:cb:f1:ea:6b:fe:97:
                    16:10:e0:df:3a:74:83:1a:b7:2f:a0:32:ec:ff:de:
                    c2:42:4e:23:d5:72:00:db:35:57:0a:89:ca:ae:20:
                    49:f4:f0:68:ac:4d:4b:8d:a5:bd:79:4b:71:9b:47:
                    07:da:fd:25:df:9d:75:88:cf:aa:73:44:7f:d7:81:
                    db:f3:bd:f2:36:a4:c9:5c:45:dc:af:ad:3d:e0:28:
                    68:97:1a:a7:a5:72:73:56:f1:17:94:e4:fd:35:94:
                    72:a0:d6:76:5f:1e:77:45:83:85:38:16:d0:73:5b:
                    05:ba:67:52:8d:a5:b2:69:2f:da:19:0b:fe:92:74:
                    29:e2:76:2f:54:dd:14:30:59:f8:d2:8d:62:fd:cb:
                    c9:5f:46:31:50:b9:27:13:e4:40:30:cf:72:29:10:
                    28:22:c7:37:4e:3d:a0:32:3d:90:cd:a1:38:06:85:
                    5c:4e:56:82:28:2a:05:32:b7:4b:d7:4f:63:e7:d2:
                    2d:62:f1:45:3d:e7:ac:08:00:f6:46:a1:9e:d1:5b:
                    8c:26:53:e8:7a:aa:4a:f2:46:cf:37:3c:38:9e:b4:
                    77:5c:a5:17:9e:8d:cb:11:8f:56:3c:c1:ac:09:5f:
                    03:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                CB:11:E8:CA:D2:B4:16:58:01:C9:37:2E:33:16:16:B9:4C:9A:0A:1F
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            1.3.6.1.4.1.311.21.1: 
                .....
            1.3.6.1.4.1.311.21.2: 
                ....1N.&....`;.1o.<..-
            1.3.6.1.4.1.311.20.2: 
                .
.S.u.b.C.A
            X509v3 Authority Key Identifier: 
                keyid:0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt

    Signature Algorithm: sha1WithRSAEncryption
         59:39:3e:7f:26:46:af:eb:6f:40:b1:32:b5:6a:eb:0e:2f:6e:
         a8:49:f7:eb:5f:75:ed:4c:3b:2d:d7:43:ad:0b:fe:cb:e9:2d:
         31:a3:23:cc:7c:50:98:80:21:5d:ac:3d:2f:4c:ba:a2:a8:56:
         9c:e3:70:bb:b8:b4:f8:79:b5:49:72:f7:3e:ea:41:7f:ca:e1:
         0c:17:69:cb:a5:9c:20:2d:fa:0b:50:c4:56:cd:2d:e3:4a:d2:
         bc:70:e7:a8:0d:a2:03:a5:56:e0:b8:8a:4b:57:f2:95:42:9c:
         f1:f3:ef:ee:e3:86:1f:34:3c:b8:56:9a:f0:53:23:85:2a:a4:
         82:1c:93:e2:94:07:1d:f2:e2:4e:f8:8c:a1:ca:e8:13:a5:91:
         4e:c8:1b:d2:8f:72:95:2a:71:6d:9b:1a:f8:1c:f0:53:d6:67:
         cc:22:ff:5c:1d:cd:a2:8c:bd:27:b2:79:63:56:44:a2:51:cd:
         f9:e9:a3:58:56:dd:9b:02:45:44:2f:5f:f4:da:ae:d4:82:32:
         6e:fc:a4:95:13:e4:eb:69:e7:a9:a2:2c:be:c8:2b:10:0e:65:
         8e:99:db:f5:a2:fa:12:26:09:65:38:94:f1:7a:1f:4a:bb:d1:
         e1:56:e8:d0:78:96:18:5c:c9:35:16:5f:dd:93:1d:49:8e:2d:
         be:ad:34:44:1c:ee:10:15:1a:00:5d:dd:35:5b:21:ce:98:c7:
         09:ee:85:0e:8c:4f:6d:0e:13:4e:3d:7c:29:48:9c:72:d1:f3:
         6c:ca:c1:ec:70:a3:57:92:57:7d:94:8d:a0:1b:48:03:5a:f7:
         cf:a3:67:0a:74:a5:36:ed:2d:2f:17:c8:e6:72:37:12:f4:6f:
         b1:3c:67:82:f9:52:b2:8d:33:16:65:1e:0e:8a:dd:10:de:64:
         f4:6f:ce:46:d4:d3:17:e9:79:c4:04:b4:d3:fb:2c:df:1f:8a:
         9e:ac:0a:fb:13:27:40:ad:e4:f9:e1:a9:7f:46:bb:07:60:47:
         65:60:40:4e:b0:42:ec:4e:ed:b3:76:79:d8:0a:34:09:6d:1c:
         80:31:1f:e2:0e:54:dd:e5:a1:fb:e5:47:10:ad:64:98:ff:50:
         16:2e:7c:bf:05:21:7a:e2:95:41:27:69:c3:93:8f:95:c9:8d:
         d8:9b:21:ae:0d:5c:9c:f0:a2:ae:86:68:83:0c:6a:2d:bb:76:
         6b:00:1d:96:ad:f2:16:7b:f6:16:83:24:b9:88:cf:6a:a8:47:
         31:2f:9a:dc:e3:71:3d:d7:00:7e:62:47:d1:ce:88:c9:b8:18:
         fa:0e:72:8d:c1:a3:3d:af:02:40:6a:ff:69:9b:96:e2:10:a8:
         10:b4:37:50:08:d6:c3:3d

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:16:68:34:00:00:00:00:00:1c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
        Validity
            Not Before: Apr  3 12:53:09 2007 GMT
            Not After : Apr  3 13:03:09 2021 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a1:6c:b1:df:db:48:92:2a:7c:6b:2e:19:e1:
                    bd:e2:e3:c5:99:51:23:50:ad:ce:dd:18:4e:24:0f:
                    ee:d1:a7:d1:4c:ad:74:30:20:11:eb:07:d5:54:95:
                    15:49:94:1b:42:92:ae:98:5c:30:26:da:00:6b:e8:
                    7b:bd:ec:89:07:0f:f7:0e:04:98:f0:89:cc:1f:cb:
                    33:24:87:9d:f2:f4:67:1c:2c:fc:7b:e7:88:1d:ea:
                    e7:4e:a3:a1:c1:23:53:ca:8d:fa:45:cf:09:d0:5e:
                    af:d0:b0:42:04:a2:f9:a6:6c:93:67:d7:28:dc:46:
                    53:b0:86:d0:e5:28:46:2e:27:ac:86:4f:55:52:0c:
                    e4:03:2c:fb:6a:90:90:30:6e:87:f3:59:30:9d:fa:
                    7e:d6:97:b3:e8:21:97:7e:f8:d2:13:f3:08:b7:53:
                    6d:52:b4:45:90:9f:48:00:4a:47:66:11:27:29:66:
                    a8:97:e4:d3:06:81:4a:a2:f9:84:a7:11:47:14:09:
                    82:9f:84:ed:55:78:fe:01:9a:1d:50:08:85:00:10:
                    30:46:ed:b7:de:23:46:bb:c4:2d:54:9f:af:1e:78:
                    41:31:77:cc:9b:df:3b:83:93:a1:61:02:b5:1d:0d:
                    b1:fc:f7:9b:b2:01:ce:22:4b:54:ff:f9:05:c3:c2:
                    20:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Authority Key Identifier: 
                keyid:0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4
                DirName:/DC=com/DC=microsoft/CN=Microsoft Root Certificate Authority
                serial:79:AD:16:A1:4A:A0:A5:AD:4C:73:58:F4:07:13:2E:65

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt

            X509v3 Extended Key Usage: 
                Time Stamping
    Signature Algorithm: sha1WithRSAEncryption
         10:97:8a:c3:5c:03:44:36:dd:e9:b4:ad:77:db:ce:79:51:4d:
         01:b1:2e:74:71:5b:6d:0c:13:ab:ce:be:7b:8f:b8:2e:d4:12:
         a2:8c:6d:62:b8:57:02:cb:4e:20:13:50:99:dd:7a:40:e2:57:
         bb:af:58:9a:1c:e1:1d:01:86:ac:bb:78:f2:8b:d0:ec:3b:01:
         ee:e2:be:8f:0a:05:c8:8d:48:e2:f0:53:15:dd:4f:ab:92:e4:
         e7:8d:6a:d5:80:c1:e6:94:f2:06:2f:85:03:e9:91:2a:24:22:
         70:fb:f6:fc:e4:78:99:2e:0d:f7:07:e2:70:bc:18:4e:9d:8e:
         6b:0a:72:95:b8:a1:39:9c:67:2d:c5:51:0e:ea:62:5c:3f:16:
         98:8b:20:3f:e2:07:1a:32:f9:cc:31:4a:76:31:3d:2b:72:0b:
         c8:ea:70:3d:ff:85:0a:13:df:c2:0a:61:8e:f0:d7:b8:17:eb:
         4e:8b:7f:c5:35:2b:5e:a3:bf:eb:bc:7d:0b:42:7b:d4:53:72:
         21:ee:30:ca:bb:78:65:5c:5b:01:17:0a:14:0e:d2:da:14:98:
         f5:3c:b9:66:58:b3:2d:2f:e7:f9:85:86:cc:51:56:e8:9d:70:
         94:6c:ac:39:4c:d4:f6:79:bf:aa:18:7a:62:29:ef:a2:9b:29:
         34:06:77:1a:62:c9:3d:1e:6d:1f:82:f0:0b:c7:2c:bb:cf:43:
         b3:e5:f9:ec:7d:b5:e3:a4:a8:74:35:b8:4e:c5:71:23:12:26:
         76:0b:3c:52:8c:71:5a:46:43:14:bc:b3:b3:b0:4d:67:c8:9f:
         42:ff:80:79:21:80:9e:15:30:66:e8:42:12:5e:1a:c8:9e:22:
         21:d0:43:e9:2b:e9:bb:f4:48:cc:2c:d4:d8:32:80:4c:26:2a:
         48:24:5f:5a:ea:56:ef:a6:de:99:9d:ca:3a:6f:bd:81:27:74:
         06:11:ee:76:21:bf:9b:82:c1:27:54:b6:b1:6a:3d:89:a1:76:
         61:b4:6e:a1:13:a6:bf:aa:47:f0:12:6f:fd:8a:32:6c:b2:fe:
         df:51:c8:8c:23:c9:66:bd:9d:1d:87:12:64:02:3d:2d:af:59:
         8f:b8:e4:21:e5:b5:b0:ca:63:b4:78:54:05:d4:41:2e:50:ac:
         94:b0:a5:78:ab:b3:a0:96:75:1a:d9:92:87:13:75:22:2f:32:
         a8:08:6e:a0:5b:8c:25:bf:a0:ef:84:ca:21:d6:eb:1e:4f:c9:
         9a:ee:49:e0:f7:01:65:6f:89:0b:7d:c8:69:c8:e6:6e:ea:a7:
         97:ce:31:29:ff:0e:c5:5b:5c:d8:4d:1b:a1:d8:fa:2f:9e:3f:
         2e:55:16:6b:c9:13:a3:fd
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
        • SHA1
          • af 79 5f 82 41 dd bc f3  1b 91 3e 40 5e d7 4e 3c  |.y_.A.....>@^.N<|
            51 51 a5 e0                                       |QQ..            |
    • unnamed
      • Certificate #0
        • 2
          • 33:00:00:00:62:41:2F:C7:4D:8A:AE:13:26:00:00:00:
            00:00:62
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • CN: Microsoft Time-Stamp PCA
          • 2015-02-10 18:33:37 UTC: 2016-05-10 18:33:37 UTC
          • Subject
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • OU: MOPR
            • OU: nCipher DSE ESN:C0F4-3086-DEF8
            • CN: Microsoft Time-Stamp Service
          • #5
            • rsaEncryption: nil
            • CE:97:29:12:78:CE:83:5E:9E:7C:2A:0E:8D:69:93:C5:
              EE:0D:39:A7:74:EE:48:FE:18:D9:40:19:BD:1E:7A:5E:
              DC:A6:95:FA:E2:E1:8F:71:4B:EF:38:F4:80:9B:18:5E:
              A9:38:CC:D8:F0:44:B4:71:8D:AA:3A:83:E8:CE:D2:4C:
              73:39:86:C5:49:D1:D5:AC:2B:EE:4A:11:8F:08:6C:86:
              07:23:12:49:AC:DC:85:E6:B0:CB:27:79:4A:94:A1:55:
              A3:59:A0:9F:FA:19:33:87:0C:0A:07:E8:90:B3:9A:CA:
              32:2F:CB:1B:89:20:5A:C5:6E:93:BE:9C:5F:8F:86:E2:
              37:31:84:FE:96:C1:CA:76:0D:84:AC:23:45:D1:8D:CA:
              36:F9:83:B4:FF:57:06:24:4A:88:64:BB:A5:59:4A:07:
              8A:1A:B9:E0:7E:F7:87:2C:C1:EA:BB:2D:7A:D4:4E:B3:
              9C:3F:C6:BA:85:12:B3:36:A8:D1:E2:90:1C:C9:BC:2F:
              E7:4F:01:E2:8B:4A:FA:36:D7:96:61:36:95:DB:04:CA:
              CB:BD:9B:08:CD:D5:FC:83:55:29:D6:85:EA:06:66:25:
              F0:DE:9C:46:F4:57:9E:5E:C3:A4:34:B8:9B:4E:D5:15:
              AE:39:1C:A2:1A:BA:86:F6:FB:EE:AE:1D:72:8E:DE:9D
              : 0x010001
          • #6
            • subjectKeyIdentifier:
              9b 2e 88 55 db 14 5d da  c8 c2 ed 83 d8 f9 68 7e  |...U..].......h~|
              83 a1 39 c7                                       |..9.            |
            • authorityKeyIdentifier:
              23 34 f8 d9 52 46 70 0a  ed 40 fb 76 fb b3 2b b0  |#4..RFp..@.v..+.|
              c3 35 b3 0f                                       |.5..            |
            • crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl
            • authorityInfoAccess
              • caIssuers: http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt
            • extendedKeyUsage: timeStamping
        • RSA-SHA1:
          0c ad ce f4 f0 f3 9f 4d  ec ae b8 54 cc e6 9e 15  |.......M...T....|
          c6 57 86 4e 78 c9 e7 fc  02 60 a8 e5 06 b0 8a d5  |.W.Nx....`......|
          aa 6b 61 a2 ab 1c a8 aa  bd 7d 29 e3 dd 09 42 de  |.ka......})...B.|
          4c 97 14 80 fb 4b af 46  9a f0 df ca 50 3f 9a ee  |L....K.F....P?..|
          87 49 ed 26 ca d8 3c b2  f6 d8 bb ba 7a 6a b4 16  |.I.&..<.....zj..|
          7b ca b5 da 47 5a 81 2d  64 14 f0 6a 53 24 b2 13  |{...GZ.-d..jS$..|
          1e 69 74 8d 2b fb d5 9e  8d 6f 7c 94 d8 98 e0 f3  |.it.+....o|.....|
          60 a2 a7 6f 15 96 94 e1  fa 75 b6 c6 c9 f1 fe ab  |`..o.....u......|
          25 9e d4 b5 50 8b 39 81  db 0e f9 61 53 42 e3 2a  |%...P.9....aSB.*|
          96 c2 81 9d 15 95 1e 0a  93 54 94 b9 c9 71 b4 85  |.........T...q..|
          44 4e 91 d2 e5 3a 02 d4  4c d0 44 81 8b b2 f9 0e  |DN...:..L.D.....|
          c6 0e e9 29 ff cc 92 e1  8c e1 1e 1d 60 85 59 a4  |...)........`.Y.|
          f4 18 2d e4 db d2 8d 21  76 75 d7 7b 3d 73 6b d6  |..-....!vu.{=sk.|
          bd cd a6 bf 8a 62 97 ca  25 79 df 3d 65 a0 61 55  |.....b..%y.=e.aU|
          55 8a 87 02 76 27 08 cc  39 33 5e a8 59 d2 9e 1b  |U...v'..93^.Y...|
          b3 9a 4f ea 85 40 be 5a  2b 44 9a a1 94 87 a6 eb  |..O..@.Z+D......|
      • Certificate #1
        • 2
          • 33:00:00:00:CA:6C:D5:32:12:35:C4:E1:55:00:01:00:
            00:00:CA
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • CN: Microsoft Code Signing PCA
          • 2014-04-22 17:39:00 UTC: 2015-07-22 17:39:00 UTC
          • Subject
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • OU: MOPR
            • CN: Microsoft Corporation
          • #5
            • rsaEncryption: nil
            • 96:71:5D:ED:06:46:FA:84:CB:9D:5B:B7:46:C7:B0:E1:
              B4:11:39:03:AD:B1:15:73:60:9C:EB:A7:B6:6E:1A:3C:
              3F:FF:65:E3:34:F1:A6:A5:21:5E:56:99:6C:58:E4:92:
              A1:0A:5C:C2:D3:DC:52:2F:0C:65:9A:20:61:40:53:31:
              9C:6C:8F:21:7D:BA:F9:FE:13:50:52:60:95:3A:5B:B9:
              58:A5:74:61:41:A9:94:E0:AD:26:4E:4C:A1:97:70:49:
              27:5E:7C:67:CA:4F:1E:71:84:46:BC:1D:4B:B6:E2:0F:
              C5:C6:27:C9:07:E6:7A:0A:A5:17:00:19:4C:70:45:38:
              2D:81:B4:50:AA:C5:67:D1:FA:79:BC:C5:CC:A1:72:9B:
              F4:25:34:98:F8:54:DF:12:39:38:12:2F:A4:6B:A5:9A:
              7E:C7:62:D1:DC:CF:ED:3D:34:F8:B9:DF:35:30:BA:EC:
              79:32:A9:E1:A9:AC:55:4D:4C:7F:4C:56:C3:13:0B:76:
              F1:07:F9:CC:47:AC:FB:88:D5:52:A5:1E:28:FA:3D:2D:
              CF:CF:84:98:86:71:65:11:CF:85:C9:09:44:86:E1:6F:
              E7:B1:FC:AC:40:44:A5:A9:8B:23:3F:82:49:9D:D5:96:
              59:50:13:59:18:73:FF:43:0C:AD:2B:D4:7F:30:40:67
              : 0x010001
          • #6
            • extendedKeyUsage: codeSigning
            • subjectKeyIdentifier:
              1f 5e e2 5d 50 8d 56 86  be 4a 3c cf 04 e8 a7 87  |.^.]P.V..J<.....|
              b5 cb bf 83                                       |....            |
            • subjectAltName
              • #0
                • OU: MOPR
                • serialNumber: 31595+b4218f13-6fca-490f-9c47-3fc557dfc440
            • authorityKeyIdentifier:
              cb 11 e8 ca d2 b4 16 58  01 c9 37 2e 33 16 16 b9  |.......X..7.3...|
              4c 9a 0a 1f                                       |L...            |
            • crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl
            • authorityInfoAccess
              • caIssuers: http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt
        • RSA-SHA1:
          77 5c eb d7 91 3d cd bd  7b 83 d9 85 a9 b0 43 9d  |w\...=..{.....C.|
          73 7c 17 c9 0f ed 36 db  c7 b5 2c 1b 5e fb 54 05  |s|....6...,.^.T.|
          3a 83 71 40 81 09 a2 b7  71 26 5e d6 7d b6 6c 3b  |:.q@....q&^.}.l;|
          c9 aa 5f 5d 03 18 2a 1d  27 7e 07 e9 c5 65 1f b5  |.._]..*.'~...e..|
          cf 0d b7 54 c7 28 38 5a  88 e7 7b c1 19 b6 56 32  |...T.(8Z..{...V2|
          ba e2 cc cb 93 db af 6e  0f 5d 44 f5 d4 b0 ef 1b  |.......n.]D.....|
          d5 4e c1 af 0e ef 20 9b  f2 e1 fe 27 5d e8 c5 ff  |.N.... ....']...|
          61 f6 19 d2 28 0a 22 9d  df cd 70 82 9e 18 72 d8  |a...(."...p...r.|
          23 cc 7a 2c 43 ee ff ea  c0 e0 e6 1d aa 9e 97 33  |#.z,C..........3|
          00 52 6f 07 b8 d3 88 6c  de a4 06 35 a7 c2 53 86  |.Ro....l...5..S.|
          65 11 77 09 8f 35 59 b9  d8 86 a8 00 fe f8 31 7d  |e.w..5Y.......1}|
          2c f4 8c 05 9d c0 c1 d5  77 72 6c e9 4d 59 26 83  |,.......wrl.MY&.|
          f1 c2 b2 88 57 93 35 00  7c 50 2b bc 59 fc fe 1c  |....W.5.|P+.Y...|
          29 38 82 d3 de 52 97 45  29 18 4e 96 5b 9d ba 5f  |)8...R.E).N.[.._|
          1b a3 f1 27 50 ea 07 95  e8 6d 34 0d 38 57 dc 37  |...'P....m4.8W.7|
          28 35 95 3a 38 9c d4 ed  6a 85 5d 0e 22 11 5e 7b  |(5.:8...j.].".^{|
      • #2
        • 2
          • 61:33:26:1A:00:00:00:00:00:31
          • RSA-SHA1: nil
          • #2
            • DC: com
            • DC: microsoft
            • CN: Microsoft Root Certificate Authority
          • 2010-08-31 22:19:32 UTC: 2020-08-31 22:29:32 UTC
          • Subject
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • CN: Microsoft Code Signing PCA
          • #5
            • rsaEncryption: nil
            • B2:72:59:5C:19:30:64:BF:1D:9A:60:20:20:42:99:76:
              53:6C:3E:1B:D6:6F:CC:CB:F1:EA:6B:FE:97:16:10:E0:
              DF:3A:74:83:1A:B7:2F:A0:32:EC:FF:DE:C2:42:4E:23:
              D5:72:00:DB:35:57:0A:89:CA:AE:20:49:F4:F0:68:AC:
              4D:4B:8D:A5:BD:79:4B:71:9B:47:07:DA:FD:25:DF:9D:
              75:88:CF:AA:73:44:7F:D7:81:DB:F3:BD:F2:36:A4:C9:
              5C:45:DC:AF:AD:3D:E0:28:68:97:1A:A7:A5:72:73:56:
              F1:17:94:E4:FD:35:94:72:A0:D6:76:5F:1E:77:45:83:
              85:38:16:D0:73:5B:05:BA:67:52:8D:A5:B2:69:2F:DA:
              19:0B:FE:92:74:29:E2:76:2F:54:DD:14:30:59:F8:D2:
              8D:62:FD:CB:C9:5F:46:31:50:B9:27:13:E4:40:30:CF:
              72:29:10:28:22:C7:37:4E:3D:A0:32:3D:90:CD:A1:38:
              06:85:5C:4E:56:82:28:2A:05:32:B7:4B:D7:4F:63:E7:
              D2:2D:62:F1:45:3D:E7:AC:08:00:F6:46:A1:9E:D1:5B:
              8C:26:53:E8:7A:AA:4A:F2:46:CF:37:3C:38:9E:B4:77:
              5C:A5:17:9E:8D:CB:11:8F:56:3C:C1:AC:09:5F:03:D3
              : 0x010001
          • X509v3 extensions
            • basicConstraints: true, true
            • subjectKeyIdentifier:
              cb 11 e8 ca d2 b4 16 58  01 c9 37 2e 33 16 16 b9  |.......X..7.3...|
              4c 9a 0a 1f                                       |L...            |
            • keyUsage: 0x86
            • 1.3.6.1.4.1.311.21.1: 0x010001
            • 1.3.6.1.4.1.311.21.2:
              fd d1 31 4e d3 26 8a 95  e1 98 60 3b a8 31 6f a6  |..1N.&....`;.1o.|
              3c bc d8 2d                                       |<..-            |
            • 1.3.6.1.4.1.311.20.2:
              00 53 00 75 00 62 00 43  00 41                    |.S.u.b.C.A      |
            • authorityKeyIdentifier:
              0e ac 82 60 40 56 27 97  e5 25 13 fc 2a e1 0a 53  |...`@V'..%..*..S|
              95 59 e4 a4                                       |.Y..            |
            • crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl
            • authorityInfoAccess
              • caIssuers: http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt
        • RSA-SHA1:
          59 39 3e 7f 26 46 af eb  6f 40 b1 32 b5 6a eb 0e  |Y9>.&F..o@.2.j..|
          2f 6e a8 49 f7 eb 5f 75  ed 4c 3b 2d d7 43 ad 0b  |/n.I.._u.L;-.C..|
          fe cb e9 2d 31 a3 23 cc  7c 50 98 80 21 5d ac 3d  |...-1.#.|P..!].=|
          2f 4c ba a2 a8 56 9c e3  70 bb b8 b4 f8 79 b5 49  |/L...V..p....y.I|
          72 f7 3e ea 41 7f ca e1  0c 17 69 cb a5 9c 20 2d  |r.>.A.....i... -|
          fa 0b 50 c4 56 cd 2d e3  4a d2 bc 70 e7 a8 0d a2  |..P.V.-.J..p....|
          03 a5 56 e0 b8 8a 4b 57  f2 95 42 9c f1 f3 ef ee  |..V...KW..B.....|
          e3 86 1f 34 3c b8 56 9a  f0 53 23 85 2a a4 82 1c  |...4<.V..S#.*...|
          93 e2 94 07 1d f2 e2 4e  f8 8c a1 ca e8 13 a5 91  |.......N........|
          4e c8 1b d2 8f 72 95 2a  71 6d 9b 1a f8 1c f0 53  |N....r.*qm.....S|
          d6 67 cc 22 ff 5c 1d cd  a2 8c bd 27 b2 79 63 56  |.g.".\.....'.ycV|
          44 a2 51 cd f9 e9 a3 58  56 dd 9b 02 45 44 2f 5f  |D.Q....XV...ED/_|
          f4 da ae d4 82 32 6e fc  a4 95 13 e4 eb 69 e7 a9  |.....2n......i..|
          a2 2c be c8 2b 10 0e 65  8e 99 db f5 a2 fa 12 26  |.,..+..e.......&|
          09 65 38 94 f1 7a 1f 4a  bb d1 e1 56 e8 d0 78 96  |.e8..z.J...V..x.|
          18 5c c9 35 16 5f dd 93  1d 49 8e 2d be ad 34 44  |.\.5._...I.-..4D|
          1c ee 10 15 1a 00 5d dd  35 5b 21 ce 98 c7 09 ee  |......].5[!.....|
          85 0e 8c 4f 6d 0e 13 4e  3d 7c 29 48 9c 72 d1 f3  |...Om..N=|)H.r..|
          6c ca c1 ec 70 a3 57 92  57 7d 94 8d a0 1b 48 03  |l...p.W.W}....H.|
          5a f7 cf a3 67 0a 74 a5  36 ed 2d 2f 17 c8 e6 72  |Z...g.t.6.-/...r|
          37 12 f4 6f b1 3c 67 82  f9 52 b2 8d 33 16 65 1e  |7..o.
      • #3
        • 2
          • 61:16:68:34:00:00:00:00:00:1C
          • RSA-SHA1: nil
          • #2
            • DC: com
            • DC: microsoft
            • CN: Microsoft Root Certificate Authority
          • 2007-04-03 12:53:09 UTC: 2021-04-03 13:03:09 UTC
          • Subject
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • CN: Microsoft Time-Stamp PCA
          • #5
            • rsaEncryption: nil
            • 9F:A1:6C:B1:DF:DB:48:92:2A:7C:6B:2E:19:E1:BD:E2:
              E3:C5:99:51:23:50:AD:CE:DD:18:4E:24:0F:EE:D1:A7:
              D1:4C:AD:74:30:20:11:EB:07:D5:54:95:15:49:94:1B:
              42:92:AE:98:5C:30:26:DA:00:6B:E8:7B:BD:EC:89:07:
              0F:F7:0E:04:98:F0:89:CC:1F:CB:33:24:87:9D:F2:F4:
              67:1C:2C:FC:7B:E7:88:1D:EA:E7:4E:A3:A1:C1:23:53:
              CA:8D:FA:45:CF:09:D0:5E:AF:D0:B0:42:04:A2:F9:A6:
              6C:93:67:D7:28:DC:46:53:B0:86:D0:E5:28:46:2E:27:
              AC:86:4F:55:52:0C:E4:03:2C:FB:6A:90:90:30:6E:87:
              F3:59:30:9D:FA:7E:D6:97:B3:E8:21:97:7E:F8:D2:13:
              F3:08:B7:53:6D:52:B4:45:90:9F:48:00:4A:47:66:11:
              27:29:66:A8:97:E4:D3:06:81:4A:A2:F9:84:A7:11:47:
              14:09:82:9F:84:ED:55:78:FE:01:9A:1D:50:08:85:00:
              10:30:46:ED:B7:DE:23:46:BB:C4:2D:54:9F:AF:1E:78:
              41:31:77:CC:9B:DF:3B:83:93:A1:61:02:B5:1D:0D:B1:
              FC:F7:9B:B2:01:CE:22:4B:54:FF:F9:05:C3:C2:20:0B
              : 0x010001
          • X509v3 extensions
            • basicConstraints: true, true
            • subjectKeyIdentifier:
              23 34 f8 d9 52 46 70 0a  ed 40 fb 76 fb b3 2b b0  |#4..RFp..@.v..+.|
              c3 35 b3 0f                                       |.5..            |
            • keyUsage: 0x86
            • 1.3.6.1.4.1.311.21.1: 0
            • authorityKeyIdentifier
              • 0e ac 82 60 40 56 27 97  e5 25 13 fc 2a e1 0a 53  |...`@V'..%..*..S|
                95 59 e4 a4                                       |.Y..            |
                • #0
                  • DC: com
                  • DC: microsoft
                  • CN: Microsoft Root Certificate Authority
                • 79 ad 16 a1 4a a0 a5 ad  4c 73 58 f4 07 13 2e 65  |y...J...LsX....e|
            • crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl
            • authorityInfoAccess
              • caIssuers: http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt
            • extendedKeyUsage: timeStamping
        • RSA-SHA1:
          10 97 8a c3 5c 03 44 36  dd e9 b4 ad 77 db ce 79  |....\.D6....w..y|
          51 4d 01 b1 2e 74 71 5b  6d 0c 13 ab ce be 7b 8f  |QM...tq[m.....{.|
          b8 2e d4 12 a2 8c 6d 62  b8 57 02 cb 4e 20 13 50  |......mb.W..N .P|
          99 dd 7a 40 e2 57 bb af  58 9a 1c e1 1d 01 86 ac  |..z@.W..X.......|
          bb 78 f2 8b d0 ec 3b 01  ee e2 be 8f 0a 05 c8 8d  |.x....;.........|
          48 e2 f0 53 15 dd 4f ab  92 e4 e7 8d 6a d5 80 c1  |H..S..O.....j...|
          e6 94 f2 06 2f 85 03 e9  91 2a 24 22 70 fb f6 fc  |..../....*$"p...|
          e4 78 99 2e 0d f7 07 e2  70 bc 18 4e 9d 8e 6b 0a  |.x......p..N..k.|
          72 95 b8 a1 39 9c 67 2d  c5 51 0e ea 62 5c 3f 16  |r...9.g-.Q..b\?.|
          98 8b 20 3f e2 07 1a 32  f9 cc 31 4a 76 31 3d 2b  |.. ?...2..1Jv1=+|
          72 0b c8 ea 70 3d ff 85  0a 13 df c2 0a 61 8e f0  |r...p=.......a..|
          d7 b8 17 eb 4e 8b 7f c5  35 2b 5e a3 bf eb bc 7d  |....N...5+^....}|
          0b 42 7b d4 53 72 21 ee  30 ca bb 78 65 5c 5b 01  |.B{.Sr!.0..xe\[.|
          17 0a 14 0e d2 da 14 98  f5 3c b9 66 58 b3 2d 2f  |.........<.fX.-/|
          e7 f9 85 86 cc 51 56 e8  9d 70 94 6c ac 39 4c d4  |.....QV..p.l.9L.|
          f6 79 bf aa 18 7a 62 29  ef a2 9b 29 34 06 77 1a  |.y...zb)...)4.w.|
          62 c9 3d 1e 6d 1f 82 f0  0b c7 2c bb cf 43 b3 e5  |b.=.m.....,..C..|
          f9 ec 7d b5 e3 a4 a8 74  35 b8 4e c5 71 23 12 26  |..}....t5.N.q#.&|
          76 0b 3c 52 8c 71 5a 46  43 14 bc b3 b3 b0 4d 67  |v.
    • Signer
      • 1
      • unnamed
        • #0
          • C: US
          • ST: Washington
          • L: Redmond
          • O: Microsoft Corporation
          • CN: Microsoft Code Signing PCA
        • 33:00:00:00:CA:6C:D5:32:12:35:C4:E1:55:00:01:00:
          00:00:CA
      • SHA1: nil
      • #3
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest:
          ca 26 7f 90 84 e8 36 92  0a b6 8d 0e c0 08 13 4e  |.&....6........N|
          bc 28 ac e3                                       |.(..            |
        • 1.3.6.1.4.1.311.2.1.12
          • 00 4d 00 69 00 63 00 72  00 6f 00 73 00 6f 00 66  |.M.i.c.r.o.s.o.f|
            00 74 00 20 00 57 00 69  00 6e 00 64 00 6f 00 77  |.t. .W.i.n.d.o.w|
            00 73                                             |.s              |
            : http://www.microsoft.com
      • rsaEncryption:
        5a 00 ae 26 b7 a5 5b 86  d5 62 88 a7 4f a0 ec 3f  |Z..&..[..b..O..?|
        6a 3e 50 e1 4e 58 a0 45  99 c2 2f ba 6d 2a 63 c1  |j>P.NX.E../.m*c.|
        ee 0c 25 2a 81 09 7e 54  2a 6b 44 3e 2b 15 1f 1b  |..%*..~T*kD>+...|
        b6 54 2b 34 38 08 69 5f  09 39 9f bf e1 c6 f8 6b  |.T+48.i_.9.....k|
        02 2b 40 b0 be ef d2 53  1a 7c 74 6e 8c f4 7c bf  |.+@....S.|tn..|.|
        53 d4 86 9b 9f fd 5d 24  9d a8 1e 13 ff 76 17 51  |S.....]$.....v.Q|
        d2 68 98 3e 95 44 c3 e8  24 3c c1 87 eb 99 ef d0  |.h.>.D..$<......|
        c9 5d 88 1d 2c cf b3 98  9c 84 93 48 88 82 9c fb  |.]..,......H....|
        a9 5a b2 6b 07 0b 01 93  3e 7a 1c bc 2f a5 f9 f3  |.Z.k....>z../...|
        4c af 3a fc 53 0e e6 65  b1 85 ff a2 f7 b5 8f 63  |L.:.S..e.......c|
        bd 6c 3e 7a 67 c3 2e 0f  03 a2 af 3b 58 d6 08 36  |.l>zg......;X..6|
        29 cd 56 28 e0 f2 75 f0  13 f5 a4 a3 a1 46 d2 4a  |).V(..u......F.J|
        82 e0 a7 9d 5f 1b c8 10  5d b4 f2 25 27 4b 1e af  |...._...]..%'K..|
        50 c3 2d e5 86 52 b0 15  be c9 21 f2 7e 67 e4 ef  |P.-..R....!.~g..|
        78 af cb 53 3b 15 35 ea  dd e8 10 7e 95 23 df bd  |x..S;.5....~.#..|
        77 dd d7 f3 59 74 ad 8e  51 f4 62 33 26 15 aa 20  |w...Yt..Q.b3&.. |
      • countersignature
        • 1
          • unnamed
            • #0
              • C: US
              • ST: Washington
              • L: Redmond
              • O: Microsoft Corporation
              • CN: Microsoft Time-Stamp PCA
            • 33:00:00:00:62:41:2F:C7:4D:8A:AE:13:26:00:00:00:
              00:00:62
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2015-02-27 19:53:45 UTC
            • messageDigest:
              08 83 f9 39 8d 2d 77 93  6c 0b 83 bb 77 52 7a 78  |...9.-w.l...wRzx|
              2c b1 14 2d                                       |,..-            |
          • RSA-SHA1:
            b9 c6 5c 3e 0f cd 5a 7f  9c 17 a5 ef 03 56 f0 56  |..\>..Z......V.V|
            00 17 ec ae b4 de a1 a5  e6 22 6e 1d 56 8e 2d d0  |........."n.V.-.|
            70 08 05 6e 01 9b 7f aa  8d f8 ff d1 4b e0 95 41  |p..n........K..A|
            27 1b 90 dd a1 9c e4 5c  8c a9 59 16 62 d1 38 b6  |'......\..Y.b.8.|
            36 83 63 13 f3 bd d5 ea  51 2c af 74 41 b7 48 23  |6.c.....Q,.tA.H#|
            c8 91 2f da e9 4b 7f 56  a4 f2 16 f7 dd dd 7b 5a  |../..K.V......{Z|
            e3 dd 10 62 d1 21 cc de  28 27 95 ab 95 54 9f 4e  |...b.!..('...T.N|
            fa 88 bd 87 7a 4b 36 38  1e b3 57 0a 25 d5 bb c1  |....zK68..W.%...|
            49 02 cd a7 d6 33 7e 82  f3 5f 57 99 f0 ad ce 3d  |I....3~.._W....=|
            4d 2c c0 f0 95 4f 51 6b  6f a8 34 04 e2 96 71 27  |M,...OQko.4...q'|
            a2 2b 84 79 23 04 2c 12  04 3a f2 92 ab 9c 1f 6f  |.+.y#.,..:.....o|
            a3 49 fa 2b c7 fd 02 b1  75 bf 26 db a9 f3 dc 79  |.I.+....u.&....y|
            b6 d0 88 ad 33 cd d1 84  ba c5 a5 fa 7d 8c 4a 4c  |....3.......}.JL|
            94 9e 8e 5e a9 a1 98 05  94 91 cf ec c9 10 e8 19  |...^............|
            2a 96 dc 6d ee 6b 5d ed  6f ac d9 05 bf bf 56 8f  |*..m.k].o.....V.|
            50 03 b6 7b ba ff 40 71  bc 93 1f 8e ef d2 88 bb  |P..{..@q........|
offsetsizetypecomment
0585216EXE07/16/2014 00:36:04#
15c115HTM#
8ee00412840BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 998056 bytes (975 KiB)


--
Type = PE
Physical Size = 998056
CPU = x86
Characteristics = Executable 32-bit RemovableRun NetRun
Created = 2014-07-16 00:36:04
Headers Size = 1024
Checksum = 1038055
Image Size = 606208
Section Alignment = 4096
File Alignment = 512
Code Size = 310784
Initialized Data Size = 273408
Uninitialized Data Size = 0
Linker Version = 10.0
OS Version = 5.1
Image Version = 0.0
Subsystem Version = 5.1
Subsystem = Windows GUI
DLL Characteristics = Relocated NX-Compatible TerminalServerAware
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
Comment = FileVersion: 8.100.26936.0
ProductVersion: 8.100.26936.0
InternalName: setup
----
Path = [0]
Size = 406024
Packed Size = 406024
Virtual Size = 406024
Offset = 585216
--
Path = [0]
Type = Cab
Physical Size = 406024
Method = MSZip
Blocks = 1
Volumes = 1
Volume Index = 0
ID = 0

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2015-02-27 11:52:42 ....A       125173               0
2012-03-23 13:37:32 ....A        77312               u0
2014-09-14 22:58:48 ....A        64354               u1
2014-09-14 22:58:48 ....A          797               u2
2014-09-14 22:58:48 ....A         3409               u3
2014-09-14 22:58:48 ....A         1320               u4
2014-09-14 22:58:48 ....A       155324               u5
2014-09-14 22:58:48 ....A          877               u6
2015-02-26 16:19:46 ....A       151040               u7
2015-02-26 16:20:28 ....A       192512               u8
2012-03-23 13:37:26 ....A        73728               u9
2014-09-14 22:58:48 ....A       196416               u10
2012-03-23 13:37:18 ....A       124928               u11
2015-02-27 11:51:56 ....A        16072               u12
2015-02-27 11:52:36 ....A        40782               u13
------------------- ----- ------------ ------------  ------------------------
2015-02-27 11:52:42            1224044       998056  15 files
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] can't find file_offset of VA 0x4ecc4