MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

TLS

StringTable 040904E4

VS_FIXEDFILEINFO

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Code Signing PCA
serial: 33000000CA6CD5321235C4E1550001000000CA

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:00:00:59:d6:73:cd:51:8e:f0:22:c5:00:00:00:00:00:59
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA
        Validity
            Not Before: May 23 17:13:15 2014 GMT
            Not After : Aug 23 17:13:15 2015 GMT
        Subject: C=US, ST=WA, L=Redmond, O=Microsoft Corporation, OU=MOPR, OU=nCipher DSE ESN:F528-3777-8A76, CN=Microsoft Time-Stamp Service
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6c:4e:cf:68:53:fd:ef:80:de:e8:8b:c4:b1:
                    f0:7e:07:ce:1e:3c:ec:0c:8c:35:87:4c:e9:51:3a:
                    bc:b6:b0:96:77:42:fa:ff:3c:cf:e1:da:e2:89:fa:
                    6e:42:00:99:5b:16:dd:09:64:38:e2:52:fb:df:8e:
                    fa:93:a3:3d:bb:87:8f:6e:b8:87:c9:d0:60:4f:cf:
                    9c:82:91:6d:91:1b:72:10:b3:d8:43:7c:59:4a:60:
                    5d:c6:b0:55:d0:27:db:f2:f6:bd:f2:20:c6:22:2c:
                    9e:6b:8b:2d:6c:ea:78:04:c9:4b:c1:70:09:e7:b6:
                    1d:af:9a:8c:06:3f:78:70:fa:76:ee:d2:24:14:76:
                    b2:ae:20:28:83:1c:a9:f0:48:92:3f:a2:85:f7:83:
                    ca:c5:51:d0:95:20:03:79:d2:57:bc:13:b5:4e:b8:
                    b4:6c:56:1f:53:1e:15:bb:cf:30:3f:fd:3b:01:cd:
                    5f:72:68:f7:ca:f3:99:66:33:a8:5d:22:8f:1d:6e:
                    ca:da:65:d2:2b:1c:24:ac:9f:7c:a9:10:8a:85:e2:
                    6d:2e:5c:4a:fd:49:b9:7b:40:b1:53:c6:df:47:b9:
                    b3:23:4e:22:47:1c:d3:c1:b9:49:76:42:72:ce:90:
                    86:0e:24:f5:c2:3c:b9:09:36:3f:a8:53:5c:56:fe:
                    5f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5B:28:1A:B3:CD:75:0D:63:3D:FD:99:F5:9B:15:02:48:1A:CB:A6:AC
            X509v3 Authority Key Identifier: 
                keyid:23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt

            X509v3 Extended Key Usage: 
                Time Stamping
    Signature Algorithm: sha1WithRSAEncryption
         7a:f0:0d:f4:45:6c:34:96:0e:77:f0:e2:c0:42:05:61:f7:88:
         d3:7a:fd:88:d5:a7:f5:f7:7f:f2:08:f6:d5:fd:cb:ca:74:7c:
         db:09:a9:df:d6:15:07:99:bf:d0:3e:87:84:62:7b:c2:06:8e:
         ca:8b:68:e2:3d:df:9e:5a:c5:8c:b2:a9:5c:fe:59:62:26:f5:
         d7:f9:78:b6:6e:b4:0a:90:65:66:e9:51:08:f1:7c:c9:a3:b7:
         04:37:46:c5:e7:82:3e:28:5c:ef:4f:71:a4:e7:b1:25:5a:e5:
         43:54:33:08:7f:a4:b0:55:2d:d1:82:70:48:11:20:0d:26:81:
         0e:ef:06:25:74:ab:85:c3:c3:8c:e2:14:5f:e8:05:54:8f:ba:
         86:89:aa:96:ae:94:62:25:f9:af:69:88:0a:0c:b1:51:c4:09:
         ef:b8:80:7c:53:90:79:bb:e9:8f:d0:48:f0:62:c8:99:f1:65:
         34:3b:f7:ce:b5:fb:66:98:b9:a2:59:99:5d:3e:95:9f:14:bf:
         35:b4:fb:98:72:24:29:0c:f3:ba:04:7a:82:39:fb:46:cd:f1:
         e0:b2:16:bc:7d:20:f8:9c:39:15:25:a1:26:2d:d6:8b:81:bd:
         c6:bd:b0:9d:54:fe:47:0b:5f:2d:4e:2a:f4:87:ea:b5:0f:b5:
         b7:ed:92:29

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:00:00:ca:6c:d5:32:12:35:c4:e1:55:00:01:00:00:00:ca
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA
        Validity
            Not Before: Apr 22 17:39:00 2014 GMT
            Not After : Jul 22 17:39:00 2015 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, CN=Microsoft Corporation
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:71:5d:ed:06:46:fa:84:cb:9d:5b:b7:46:c7:
                    b0:e1:b4:11:39:03:ad:b1:15:73:60:9c:eb:a7:b6:
                    6e:1a:3c:3f:ff:65:e3:34:f1:a6:a5:21:5e:56:99:
                    6c:58:e4:92:a1:0a:5c:c2:d3:dc:52:2f:0c:65:9a:
                    20:61:40:53:31:9c:6c:8f:21:7d:ba:f9:fe:13:50:
                    52:60:95:3a:5b:b9:58:a5:74:61:41:a9:94:e0:ad:
                    26:4e:4c:a1:97:70:49:27:5e:7c:67:ca:4f:1e:71:
                    84:46:bc:1d:4b:b6:e2:0f:c5:c6:27:c9:07:e6:7a:
                    0a:a5:17:00:19:4c:70:45:38:2d:81:b4:50:aa:c5:
                    67:d1:fa:79:bc:c5:cc:a1:72:9b:f4:25:34:98:f8:
                    54:df:12:39:38:12:2f:a4:6b:a5:9a:7e:c7:62:d1:
                    dc:cf:ed:3d:34:f8:b9:df:35:30:ba:ec:79:32:a9:
                    e1:a9:ac:55:4d:4c:7f:4c:56:c3:13:0b:76:f1:07:
                    f9:cc:47:ac:fb:88:d5:52:a5:1e:28:fa:3d:2d:cf:
                    cf:84:98:86:71:65:11:cf:85:c9:09:44:86:e1:6f:
                    e7:b1:fc:ac:40:44:a5:a9:8b:23:3f:82:49:9d:d5:
                    96:59:50:13:59:18:73:ff:43:0c:ad:2b:d4:7f:30:
                    40:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Subject Key Identifier: 
                1F:5E:E2:5D:50:8D:56:86:BE:4A:3C:CF:04:E8:A7:87:B5:CB:BF:83
            X509v3 Subject Alternative Name: 
                DirName:/OU=MOPR/serialNumber=31595+b4218f13-6fca-490f-9c47-3fc557dfc440
            X509v3 Authority Key Identifier: 
                keyid:CB:11:E8:CA:D2:B4:16:58:01:C9:37:2E:33:16:16:B9:4C:9A:0A:1F

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt

    Signature Algorithm: sha1WithRSAEncryption
         77:5c:eb:d7:91:3d:cd:bd:7b:83:d9:85:a9:b0:43:9d:73:7c:
         17:c9:0f:ed:36:db:c7:b5:2c:1b:5e:fb:54:05:3a:83:71:40:
         81:09:a2:b7:71:26:5e:d6:7d:b6:6c:3b:c9:aa:5f:5d:03:18:
         2a:1d:27:7e:07:e9:c5:65:1f:b5:cf:0d:b7:54:c7:28:38:5a:
         88:e7:7b:c1:19:b6:56:32:ba:e2:cc:cb:93:db:af:6e:0f:5d:
         44:f5:d4:b0:ef:1b:d5:4e:c1:af:0e:ef:20:9b:f2:e1:fe:27:
         5d:e8:c5:ff:61:f6:19:d2:28:0a:22:9d:df:cd:70:82:9e:18:
         72:d8:23:cc:7a:2c:43:ee:ff:ea:c0:e0:e6:1d:aa:9e:97:33:
         00:52:6f:07:b8:d3:88:6c:de:a4:06:35:a7:c2:53:86:65:11:
         77:09:8f:35:59:b9:d8:86:a8:00:fe:f8:31:7d:2c:f4:8c:05:
         9d:c0:c1:d5:77:72:6c:e9:4d:59:26:83:f1:c2:b2:88:57:93:
         35:00:7c:50:2b:bc:59:fc:fe:1c:29:38:82:d3:de:52:97:45:
         29:18:4e:96:5b:9d:ba:5f:1b:a3:f1:27:50:ea:07:95:e8:6d:
         34:0d:38:57:dc:37:28:35:95:3a:38:9c:d4:ed:6a:85:5d:0e:
         22:11:5e:7b

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:33:26:1a:00:00:00:00:00:31
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
        Validity
            Not Before: Aug 31 22:19:32 2010 GMT
            Not After : Aug 31 22:29:32 2020 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:72:59:5c:19:30:64:bf:1d:9a:60:20:20:42:
                    99:76:53:6c:3e:1b:d6:6f:cc:cb:f1:ea:6b:fe:97:
                    16:10:e0:df:3a:74:83:1a:b7:2f:a0:32:ec:ff:de:
                    c2:42:4e:23:d5:72:00:db:35:57:0a:89:ca:ae:20:
                    49:f4:f0:68:ac:4d:4b:8d:a5:bd:79:4b:71:9b:47:
                    07:da:fd:25:df:9d:75:88:cf:aa:73:44:7f:d7:81:
                    db:f3:bd:f2:36:a4:c9:5c:45:dc:af:ad:3d:e0:28:
                    68:97:1a:a7:a5:72:73:56:f1:17:94:e4:fd:35:94:
                    72:a0:d6:76:5f:1e:77:45:83:85:38:16:d0:73:5b:
                    05:ba:67:52:8d:a5:b2:69:2f:da:19:0b:fe:92:74:
                    29:e2:76:2f:54:dd:14:30:59:f8:d2:8d:62:fd:cb:
                    c9:5f:46:31:50:b9:27:13:e4:40:30:cf:72:29:10:
                    28:22:c7:37:4e:3d:a0:32:3d:90:cd:a1:38:06:85:
                    5c:4e:56:82:28:2a:05:32:b7:4b:d7:4f:63:e7:d2:
                    2d:62:f1:45:3d:e7:ac:08:00:f6:46:a1:9e:d1:5b:
                    8c:26:53:e8:7a:aa:4a:f2:46:cf:37:3c:38:9e:b4:
                    77:5c:a5:17:9e:8d:cb:11:8f:56:3c:c1:ac:09:5f:
                    03:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                CB:11:E8:CA:D2:B4:16:58:01:C9:37:2E:33:16:16:B9:4C:9A:0A:1F
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            1.3.6.1.4.1.311.21.1: 
                .....
            1.3.6.1.4.1.311.21.2: 
                ....1N.&....`;.1o.<..-
            1.3.6.1.4.1.311.20.2: 
                .
.S.u.b.C.A
            X509v3 Authority Key Identifier: 
                keyid:0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt

    Signature Algorithm: sha1WithRSAEncryption
         59:39:3e:7f:26:46:af:eb:6f:40:b1:32:b5:6a:eb:0e:2f:6e:
         a8:49:f7:eb:5f:75:ed:4c:3b:2d:d7:43:ad:0b:fe:cb:e9:2d:
         31:a3:23:cc:7c:50:98:80:21:5d:ac:3d:2f:4c:ba:a2:a8:56:
         9c:e3:70:bb:b8:b4:f8:79:b5:49:72:f7:3e:ea:41:7f:ca:e1:
         0c:17:69:cb:a5:9c:20:2d:fa:0b:50:c4:56:cd:2d:e3:4a:d2:
         bc:70:e7:a8:0d:a2:03:a5:56:e0:b8:8a:4b:57:f2:95:42:9c:
         f1:f3:ef:ee:e3:86:1f:34:3c:b8:56:9a:f0:53:23:85:2a:a4:
         82:1c:93:e2:94:07:1d:f2:e2:4e:f8:8c:a1:ca:e8:13:a5:91:
         4e:c8:1b:d2:8f:72:95:2a:71:6d:9b:1a:f8:1c:f0:53:d6:67:
         cc:22:ff:5c:1d:cd:a2:8c:bd:27:b2:79:63:56:44:a2:51:cd:
         f9:e9:a3:58:56:dd:9b:02:45:44:2f:5f:f4:da:ae:d4:82:32:
         6e:fc:a4:95:13:e4:eb:69:e7:a9:a2:2c:be:c8:2b:10:0e:65:
         8e:99:db:f5:a2:fa:12:26:09:65:38:94:f1:7a:1f:4a:bb:d1:
         e1:56:e8:d0:78:96:18:5c:c9:35:16:5f:dd:93:1d:49:8e:2d:
         be:ad:34:44:1c:ee:10:15:1a:00:5d:dd:35:5b:21:ce:98:c7:
         09:ee:85:0e:8c:4f:6d:0e:13:4e:3d:7c:29:48:9c:72:d1:f3:
         6c:ca:c1:ec:70:a3:57:92:57:7d:94:8d:a0:1b:48:03:5a:f7:
         cf:a3:67:0a:74:a5:36:ed:2d:2f:17:c8:e6:72:37:12:f4:6f:
         b1:3c:67:82:f9:52:b2:8d:33:16:65:1e:0e:8a:dd:10:de:64:
         f4:6f:ce:46:d4:d3:17:e9:79:c4:04:b4:d3:fb:2c:df:1f:8a:
         9e:ac:0a:fb:13:27:40:ad:e4:f9:e1:a9:7f:46:bb:07:60:47:
         65:60:40:4e:b0:42:ec:4e:ed:b3:76:79:d8:0a:34:09:6d:1c:
         80:31:1f:e2:0e:54:dd:e5:a1:fb:e5:47:10:ad:64:98:ff:50:
         16:2e:7c:bf:05:21:7a:e2:95:41:27:69:c3:93:8f:95:c9:8d:
         d8:9b:21:ae:0d:5c:9c:f0:a2:ae:86:68:83:0c:6a:2d:bb:76:
         6b:00:1d:96:ad:f2:16:7b:f6:16:83:24:b9:88:cf:6a:a8:47:
         31:2f:9a:dc:e3:71:3d:d7:00:7e:62:47:d1:ce:88:c9:b8:18:
         fa:0e:72:8d:c1:a3:3d:af:02:40:6a:ff:69:9b:96:e2:10:a8:
         10:b4:37:50:08:d6:c3:3d

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:16:68:34:00:00:00:00:00:1c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
        Validity
            Not Before: Apr  3 12:53:09 2007 GMT
            Not After : Apr  3 13:03:09 2021 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a1:6c:b1:df:db:48:92:2a:7c:6b:2e:19:e1:
                    bd:e2:e3:c5:99:51:23:50:ad:ce:dd:18:4e:24:0f:
                    ee:d1:a7:d1:4c:ad:74:30:20:11:eb:07:d5:54:95:
                    15:49:94:1b:42:92:ae:98:5c:30:26:da:00:6b:e8:
                    7b:bd:ec:89:07:0f:f7:0e:04:98:f0:89:cc:1f:cb:
                    33:24:87:9d:f2:f4:67:1c:2c:fc:7b:e7:88:1d:ea:
                    e7:4e:a3:a1:c1:23:53:ca:8d:fa:45:cf:09:d0:5e:
                    af:d0:b0:42:04:a2:f9:a6:6c:93:67:d7:28:dc:46:
                    53:b0:86:d0:e5:28:46:2e:27:ac:86:4f:55:52:0c:
                    e4:03:2c:fb:6a:90:90:30:6e:87:f3:59:30:9d:fa:
                    7e:d6:97:b3:e8:21:97:7e:f8:d2:13:f3:08:b7:53:
                    6d:52:b4:45:90:9f:48:00:4a:47:66:11:27:29:66:
                    a8:97:e4:d3:06:81:4a:a2:f9:84:a7:11:47:14:09:
                    82:9f:84:ed:55:78:fe:01:9a:1d:50:08:85:00:10:
                    30:46:ed:b7:de:23:46:bb:c4:2d:54:9f:af:1e:78:
                    41:31:77:cc:9b:df:3b:83:93:a1:61:02:b5:1d:0d:
                    b1:fc:f7:9b:b2:01:ce:22:4b:54:ff:f9:05:c3:c2:
                    20:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Authority Key Identifier: 
                keyid:0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4
                DirName:/DC=com/DC=microsoft/CN=Microsoft Root Certificate Authority
                serial:79:AD:16:A1:4A:A0:A5:AD:4C:73:58:F4:07:13:2E:65

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt

            X509v3 Extended Key Usage: 
                Time Stamping
    Signature Algorithm: sha1WithRSAEncryption
         10:97:8a:c3:5c:03:44:36:dd:e9:b4:ad:77:db:ce:79:51:4d:
         01:b1:2e:74:71:5b:6d:0c:13:ab:ce:be:7b:8f:b8:2e:d4:12:
         a2:8c:6d:62:b8:57:02:cb:4e:20:13:50:99:dd:7a:40:e2:57:
         bb:af:58:9a:1c:e1:1d:01:86:ac:bb:78:f2:8b:d0:ec:3b:01:
         ee:e2:be:8f:0a:05:c8:8d:48:e2:f0:53:15:dd:4f:ab:92:e4:
         e7:8d:6a:d5:80:c1:e6:94:f2:06:2f:85:03:e9:91:2a:24:22:
         70:fb:f6:fc:e4:78:99:2e:0d:f7:07:e2:70:bc:18:4e:9d:8e:
         6b:0a:72:95:b8:a1:39:9c:67:2d:c5:51:0e:ea:62:5c:3f:16:
         98:8b:20:3f:e2:07:1a:32:f9:cc:31:4a:76:31:3d:2b:72:0b:
         c8:ea:70:3d:ff:85:0a:13:df:c2:0a:61:8e:f0:d7:b8:17:eb:
         4e:8b:7f:c5:35:2b:5e:a3:bf:eb:bc:7d:0b:42:7b:d4:53:72:
         21:ee:30:ca:bb:78:65:5c:5b:01:17:0a:14:0e:d2:da:14:98:
         f5:3c:b9:66:58:b3:2d:2f:e7:f9:85:86:cc:51:56:e8:9d:70:
         94:6c:ac:39:4c:d4:f6:79:bf:aa:18:7a:62:29:ef:a2:9b:29:
         34:06:77:1a:62:c9:3d:1e:6d:1f:82:f0:0b:c7:2c:bb:cf:43:
         b3:e5:f9:ec:7d:b5:e3:a4:a8:74:35:b8:4e:c5:71:23:12:26:
         76:0b:3c:52:8c:71:5a:46:43:14:bc:b3:b3:b0:4d:67:c8:9f:
         42:ff:80:79:21:80:9e:15:30:66:e8:42:12:5e:1a:c8:9e:22:
         21:d0:43:e9:2b:e9:bb:f4:48:cc:2c:d4:d8:32:80:4c:26:2a:
         48:24:5f:5a:ea:56:ef:a6:de:99:9d:ca:3a:6f:bd:81:27:74:
         06:11:ee:76:21:bf:9b:82:c1:27:54:b6:b1:6a:3d:89:a1:76:
         61:b4:6e:a1:13:a6:bf:aa:47:f0:12:6f:fd:8a:32:6c:b2:fe:
         df:51:c8:8c:23:c9:66:bd:9d:1d:87:12:64:02:3d:2d:af:59:
         8f:b8:e4:21:e5:b5:b0:ca:63:b4:78:54:05:d4:41:2e:50:ac:
         94:b0:a5:78:ab:b3:a0:96:75:1a:d9:92:87:13:75:22:2f:32:
         a8:08:6e:a0:5b:8c:25:bf:a0:ef:84:ca:21:d6:eb:1e:4f:c9:
         9a:ee:49:e0:f7:01:65:6f:89:0b:7d:c8:69:c8:e6:6e:ea:a7:
         97:ce:31:29:ff:0e:c5:5b:5c:d8:4d:1b:a1:d8:fa:2f:9e:3f:
         2e:55:16:6b:c9:13:a3:fd
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
        • SHA1
          • 06 b9 7e c2 7f 3b b2 97  da d9 88 c8 31 ee 54 6b  |..~..;......1.Tk|
            1f cd e7 6f                                       |...o            |
    • unnamed
      • Certificate #0
        • 2
          • 33:00:00:00:59:D6:73:CD:51:8E:F0:22:C5:00:00:00:
            00:00:59
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • CN: Microsoft Time-Stamp PCA
          • 2014-05-23 17:13:15 UTC: 2015-08-23 17:13:15 UTC
          • Subject
            • C: US
            • ST: WA
            • L: Redmond
            • O: Microsoft Corporation
            • OU: MOPR
            • OU: nCipher DSE ESN:F528-3777-8A76
            • CN: Microsoft Time-Stamp Service
          • #5
            • rsaEncryption: nil
            • C6:6C:4E:CF:68:53:FD:EF:80:DE:E8:8B:C4:B1:F0:7E:
              07:CE:1E:3C:EC:0C:8C:35:87:4C:E9:51:3A:BC:B6:B0:
              96:77:42:FA:FF:3C:CF:E1:DA:E2:89:FA:6E:42:00:99:
              5B:16:DD:09:64:38:E2:52:FB:DF:8E:FA:93:A3:3D:BB:
              87:8F:6E:B8:87:C9:D0:60:4F:CF:9C:82:91:6D:91:1B:
              72:10:B3:D8:43:7C:59:4A:60:5D:C6:B0:55:D0:27:DB:
              F2:F6:BD:F2:20:C6:22:2C:9E:6B:8B:2D:6C:EA:78:04:
              C9:4B:C1:70:09:E7:B6:1D:AF:9A:8C:06:3F:78:70:FA:
              76:EE:D2:24:14:76:B2:AE:20:28:83:1C:A9:F0:48:92:
              3F:A2:85:F7:83:CA:C5:51:D0:95:20:03:79:D2:57:BC:
              13:B5:4E:B8:B4:6C:56:1F:53:1E:15:BB:CF:30:3F:FD:
              3B:01:CD:5F:72:68:F7:CA:F3:99:66:33:A8:5D:22:8F:
              1D:6E:CA:DA:65:D2:2B:1C:24:AC:9F:7C:A9:10:8A:85:
              E2:6D:2E:5C:4A:FD:49:B9:7B:40:B1:53:C6:DF:47:B9:
              B3:23:4E:22:47:1C:D3:C1:B9:49:76:42:72:CE:90:86:
              0E:24:F5:C2:3C:B9:09:36:3F:A8:53:5C:56:FE:5F:61
              : 0x010001
          • #6
            • subjectKeyIdentifier:
              5b 28 1a b3 cd 75 0d 63  3d fd 99 f5 9b 15 02 48  |[(...u.c=......H|
              1a cb a6 ac                                       |....            |
            • authorityKeyIdentifier:
              23 34 f8 d9 52 46 70 0a  ed 40 fb 76 fb b3 2b b0  |#4..RFp..@.v..+.|
              c3 35 b3 0f                                       |.5..            |
            • crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl
            • authorityInfoAccess
              • caIssuers: http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt
            • extendedKeyUsage: timeStamping
        • RSA-SHA1:
          7a f0 0d f4 45 6c 34 96  0e 77 f0 e2 c0 42 05 61  |z...El4..w...B.a|
          f7 88 d3 7a fd 88 d5 a7  f5 f7 7f f2 08 f6 d5 fd  |...z............|
          cb ca 74 7c db 09 a9 df  d6 15 07 99 bf d0 3e 87  |..t|..........>.|
          84 62 7b c2 06 8e ca 8b  68 e2 3d df 9e 5a c5 8c  |.b{.....h.=..Z..|
          b2 a9 5c fe 59 62 26 f5  d7 f9 78 b6 6e b4 0a 90  |..\.Yb&...x.n...|
          65 66 e9 51 08 f1 7c c9  a3 b7 04 37 46 c5 e7 82  |ef.Q..|....7F...|
          3e 28 5c ef 4f 71 a4 e7  b1 25 5a e5 43 54 33 08  |>(\.Oq...%Z.CT3.|
          7f a4 b0 55 2d d1 82 70  48 11 20 0d 26 81 0e ef  |...U-..pH. .&...|
          06 25 74 ab 85 c3 c3 8c  e2 14 5f e8 05 54 8f ba  |.%t......._..T..|
          86 89 aa 96 ae 94 62 25  f9 af 69 88 0a 0c b1 51  |......b%..i....Q|
          c4 09 ef b8 80 7c 53 90  79 bb e9 8f d0 48 f0 62  |.....|S.y....H.b|
          c8 99 f1 65 34 3b f7 ce  b5 fb 66 98 b9 a2 59 99  |...e4;....f...Y.|
          5d 3e 95 9f 14 bf 35 b4  fb 98 72 24 29 0c f3 ba  |]>....5...r$)...|
          04 7a 82 39 fb 46 cd f1  e0 b2 16 bc 7d 20 f8 9c  |.z.9.F......} ..|
          39 15 25 a1 26 2d d6 8b  81 bd c6 bd b0 9d 54 fe  |9.%.&-........T.|
          47 0b 5f 2d 4e 2a f4 87  ea b5 0f b5 b7 ed 92 29  |G._-N*.........)|
      • Certificate #1
        • 2
          • 33:00:00:00:CA:6C:D5:32:12:35:C4:E1:55:00:01:00:
            00:00:CA
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • CN: Microsoft Code Signing PCA
          • 2014-04-22 17:39:00 UTC: 2015-07-22 17:39:00 UTC
          • Subject
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • OU: MOPR
            • CN: Microsoft Corporation
          • #5
            • rsaEncryption: nil
            • 96:71:5D:ED:06:46:FA:84:CB:9D:5B:B7:46:C7:B0:E1:
              B4:11:39:03:AD:B1:15:73:60:9C:EB:A7:B6:6E:1A:3C:
              3F:FF:65:E3:34:F1:A6:A5:21:5E:56:99:6C:58:E4:92:
              A1:0A:5C:C2:D3:DC:52:2F:0C:65:9A:20:61:40:53:31:
              9C:6C:8F:21:7D:BA:F9:FE:13:50:52:60:95:3A:5B:B9:
              58:A5:74:61:41:A9:94:E0:AD:26:4E:4C:A1:97:70:49:
              27:5E:7C:67:CA:4F:1E:71:84:46:BC:1D:4B:B6:E2:0F:
              C5:C6:27:C9:07:E6:7A:0A:A5:17:00:19:4C:70:45:38:
              2D:81:B4:50:AA:C5:67:D1:FA:79:BC:C5:CC:A1:72:9B:
              F4:25:34:98:F8:54:DF:12:39:38:12:2F:A4:6B:A5:9A:
              7E:C7:62:D1:DC:CF:ED:3D:34:F8:B9:DF:35:30:BA:EC:
              79:32:A9:E1:A9:AC:55:4D:4C:7F:4C:56:C3:13:0B:76:
              F1:07:F9:CC:47:AC:FB:88:D5:52:A5:1E:28:FA:3D:2D:
              CF:CF:84:98:86:71:65:11:CF:85:C9:09:44:86:E1:6F:
              E7:B1:FC:AC:40:44:A5:A9:8B:23:3F:82:49:9D:D5:96:
              59:50:13:59:18:73:FF:43:0C:AD:2B:D4:7F:30:40:67
              : 0x010001
          • #6
            • extendedKeyUsage: codeSigning
            • subjectKeyIdentifier:
              1f 5e e2 5d 50 8d 56 86  be 4a 3c cf 04 e8 a7 87  |.^.]P.V..J<.....|
              b5 cb bf 83                                       |....            |
            • subjectAltName
              • #0
                • OU: MOPR
                • serialNumber: 31595+b4218f13-6fca-490f-9c47-3fc557dfc440
            • authorityKeyIdentifier:
              cb 11 e8 ca d2 b4 16 58  01 c9 37 2e 33 16 16 b9  |.......X..7.3...|
              4c 9a 0a 1f                                       |L...            |
            • crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl
            • authorityInfoAccess
              • caIssuers: http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt
        • RSA-SHA1:
          77 5c eb d7 91 3d cd bd  7b 83 d9 85 a9 b0 43 9d  |w\...=..{.....C.|
          73 7c 17 c9 0f ed 36 db  c7 b5 2c 1b 5e fb 54 05  |s|....6...,.^.T.|
          3a 83 71 40 81 09 a2 b7  71 26 5e d6 7d b6 6c 3b  |:.q@....q&^.}.l;|
          c9 aa 5f 5d 03 18 2a 1d  27 7e 07 e9 c5 65 1f b5  |.._]..*.'~...e..|
          cf 0d b7 54 c7 28 38 5a  88 e7 7b c1 19 b6 56 32  |...T.(8Z..{...V2|
          ba e2 cc cb 93 db af 6e  0f 5d 44 f5 d4 b0 ef 1b  |.......n.]D.....|
          d5 4e c1 af 0e ef 20 9b  f2 e1 fe 27 5d e8 c5 ff  |.N.... ....']...|
          61 f6 19 d2 28 0a 22 9d  df cd 70 82 9e 18 72 d8  |a...(."...p...r.|
          23 cc 7a 2c 43 ee ff ea  c0 e0 e6 1d aa 9e 97 33  |#.z,C..........3|
          00 52 6f 07 b8 d3 88 6c  de a4 06 35 a7 c2 53 86  |.Ro....l...5..S.|
          65 11 77 09 8f 35 59 b9  d8 86 a8 00 fe f8 31 7d  |e.w..5Y.......1}|
          2c f4 8c 05 9d c0 c1 d5  77 72 6c e9 4d 59 26 83  |,.......wrl.MY&.|
          f1 c2 b2 88 57 93 35 00  7c 50 2b bc 59 fc fe 1c  |....W.5.|P+.Y...|
          29 38 82 d3 de 52 97 45  29 18 4e 96 5b 9d ba 5f  |)8...R.E).N.[.._|
          1b a3 f1 27 50 ea 07 95  e8 6d 34 0d 38 57 dc 37  |...'P....m4.8W.7|
          28 35 95 3a 38 9c d4 ed  6a 85 5d 0e 22 11 5e 7b  |(5.:8...j.].".^{|
      • #2
        • 2
          • 61:33:26:1A:00:00:00:00:00:31
          • RSA-SHA1: nil
          • #2
            • DC: com
            • DC: microsoft
            • CN: Microsoft Root Certificate Authority
          • 2010-08-31 22:19:32 UTC: 2020-08-31 22:29:32 UTC
          • Subject
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • CN: Microsoft Code Signing PCA
          • #5
            • rsaEncryption: nil
            • B2:72:59:5C:19:30:64:BF:1D:9A:60:20:20:42:99:76:
              53:6C:3E:1B:D6:6F:CC:CB:F1:EA:6B:FE:97:16:10:E0:
              DF:3A:74:83:1A:B7:2F:A0:32:EC:FF:DE:C2:42:4E:23:
              D5:72:00:DB:35:57:0A:89:CA:AE:20:49:F4:F0:68:AC:
              4D:4B:8D:A5:BD:79:4B:71:9B:47:07:DA:FD:25:DF:9D:
              75:88:CF:AA:73:44:7F:D7:81:DB:F3:BD:F2:36:A4:C9:
              5C:45:DC:AF:AD:3D:E0:28:68:97:1A:A7:A5:72:73:56:
              F1:17:94:E4:FD:35:94:72:A0:D6:76:5F:1E:77:45:83:
              85:38:16:D0:73:5B:05:BA:67:52:8D:A5:B2:69:2F:DA:
              19:0B:FE:92:74:29:E2:76:2F:54:DD:14:30:59:F8:D2:
              8D:62:FD:CB:C9:5F:46:31:50:B9:27:13:E4:40:30:CF:
              72:29:10:28:22:C7:37:4E:3D:A0:32:3D:90:CD:A1:38:
              06:85:5C:4E:56:82:28:2A:05:32:B7:4B:D7:4F:63:E7:
              D2:2D:62:F1:45:3D:E7:AC:08:00:F6:46:A1:9E:D1:5B:
              8C:26:53:E8:7A:AA:4A:F2:46:CF:37:3C:38:9E:B4:77:
              5C:A5:17:9E:8D:CB:11:8F:56:3C:C1:AC:09:5F:03:D3
              : 0x010001
          • X509v3 extensions
            • basicConstraints: true, true
            • subjectKeyIdentifier:
              cb 11 e8 ca d2 b4 16 58  01 c9 37 2e 33 16 16 b9  |.......X..7.3...|
              4c 9a 0a 1f                                       |L...            |
            • keyUsage: 0x86
            • 1.3.6.1.4.1.311.21.1: 0x010001
            • 1.3.6.1.4.1.311.21.2:
              fd d1 31 4e d3 26 8a 95  e1 98 60 3b a8 31 6f a6  |..1N.&....`;.1o.|
              3c bc d8 2d                                       |<..-            |
            • 1.3.6.1.4.1.311.20.2:
              00 53 00 75 00 62 00 43  00 41                    |.S.u.b.C.A      |
            • authorityKeyIdentifier:
              0e ac 82 60 40 56 27 97  e5 25 13 fc 2a e1 0a 53  |...`@V'..%..*..S|
              95 59 e4 a4                                       |.Y..            |
            • crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl
            • authorityInfoAccess
              • caIssuers: http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt
        • RSA-SHA1:
          59 39 3e 7f 26 46 af eb  6f 40 b1 32 b5 6a eb 0e  |Y9>.&F..o@.2.j..|
          2f 6e a8 49 f7 eb 5f 75  ed 4c 3b 2d d7 43 ad 0b  |/n.I.._u.L;-.C..|
          fe cb e9 2d 31 a3 23 cc  7c 50 98 80 21 5d ac 3d  |...-1.#.|P..!].=|
          2f 4c ba a2 a8 56 9c e3  70 bb b8 b4 f8 79 b5 49  |/L...V..p....y.I|
          72 f7 3e ea 41 7f ca e1  0c 17 69 cb a5 9c 20 2d  |r.>.A.....i... -|
          fa 0b 50 c4 56 cd 2d e3  4a d2 bc 70 e7 a8 0d a2  |..P.V.-.J..p....|
          03 a5 56 e0 b8 8a 4b 57  f2 95 42 9c f1 f3 ef ee  |..V...KW..B.....|
          e3 86 1f 34 3c b8 56 9a  f0 53 23 85 2a a4 82 1c  |...4<.V..S#.*...|
          93 e2 94 07 1d f2 e2 4e  f8 8c a1 ca e8 13 a5 91  |.......N........|
          4e c8 1b d2 8f 72 95 2a  71 6d 9b 1a f8 1c f0 53  |N....r.*qm.....S|
          d6 67 cc 22 ff 5c 1d cd  a2 8c bd 27 b2 79 63 56  |.g.".\.....'.ycV|
          44 a2 51 cd f9 e9 a3 58  56 dd 9b 02 45 44 2f 5f  |D.Q....XV...ED/_|
          f4 da ae d4 82 32 6e fc  a4 95 13 e4 eb 69 e7 a9  |.....2n......i..|
          a2 2c be c8 2b 10 0e 65  8e 99 db f5 a2 fa 12 26  |.,..+..e.......&|
          09 65 38 94 f1 7a 1f 4a  bb d1 e1 56 e8 d0 78 96  |.e8..z.J...V..x.|
          18 5c c9 35 16 5f dd 93  1d 49 8e 2d be ad 34 44  |.\.5._...I.-..4D|
          1c ee 10 15 1a 00 5d dd  35 5b 21 ce 98 c7 09 ee  |......].5[!.....|
          85 0e 8c 4f 6d 0e 13 4e  3d 7c 29 48 9c 72 d1 f3  |...Om..N=|)H.r..|
          6c ca c1 ec 70 a3 57 92  57 7d 94 8d a0 1b 48 03  |l...p.W.W}....H.|
          5a f7 cf a3 67 0a 74 a5  36 ed 2d 2f 17 c8 e6 72  |Z...g.t.6.-/...r|
          37 12 f4 6f b1 3c 67 82  f9 52 b2 8d 33 16 65 1e  |7..o.
      • #3
        • 2
          • 61:16:68:34:00:00:00:00:00:1C
          • RSA-SHA1: nil
          • #2
            • DC: com
            • DC: microsoft
            • CN: Microsoft Root Certificate Authority
          • 2007-04-03 12:53:09 UTC: 2021-04-03 13:03:09 UTC
          • Subject
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • CN: Microsoft Time-Stamp PCA
          • #5
            • rsaEncryption: nil
            • 9F:A1:6C:B1:DF:DB:48:92:2A:7C:6B:2E:19:E1:BD:E2:
              E3:C5:99:51:23:50:AD:CE:DD:18:4E:24:0F:EE:D1:A7:
              D1:4C:AD:74:30:20:11:EB:07:D5:54:95:15:49:94:1B:
              42:92:AE:98:5C:30:26:DA:00:6B:E8:7B:BD:EC:89:07:
              0F:F7:0E:04:98:F0:89:CC:1F:CB:33:24:87:9D:F2:F4:
              67:1C:2C:FC:7B:E7:88:1D:EA:E7:4E:A3:A1:C1:23:53:
              CA:8D:FA:45:CF:09:D0:5E:AF:D0:B0:42:04:A2:F9:A6:
              6C:93:67:D7:28:DC:46:53:B0:86:D0:E5:28:46:2E:27:
              AC:86:4F:55:52:0C:E4:03:2C:FB:6A:90:90:30:6E:87:
              F3:59:30:9D:FA:7E:D6:97:B3:E8:21:97:7E:F8:D2:13:
              F3:08:B7:53:6D:52:B4:45:90:9F:48:00:4A:47:66:11:
              27:29:66:A8:97:E4:D3:06:81:4A:A2:F9:84:A7:11:47:
              14:09:82:9F:84:ED:55:78:FE:01:9A:1D:50:08:85:00:
              10:30:46:ED:B7:DE:23:46:BB:C4:2D:54:9F:AF:1E:78:
              41:31:77:CC:9B:DF:3B:83:93:A1:61:02:B5:1D:0D:B1:
              FC:F7:9B:B2:01:CE:22:4B:54:FF:F9:05:C3:C2:20:0B
              : 0x010001
          • X509v3 extensions
            • basicConstraints: true, true
            • subjectKeyIdentifier:
              23 34 f8 d9 52 46 70 0a  ed 40 fb 76 fb b3 2b b0  |#4..RFp..@.v..+.|
              c3 35 b3 0f                                       |.5..            |
            • keyUsage: 0x86
            • 1.3.6.1.4.1.311.21.1: 0
            • authorityKeyIdentifier
              • 0e ac 82 60 40 56 27 97  e5 25 13 fc 2a e1 0a 53  |...`@V'..%..*..S|
                95 59 e4 a4                                       |.Y..            |
                • #0
                  • DC: com
                  • DC: microsoft
                  • CN: Microsoft Root Certificate Authority
                • 79 ad 16 a1 4a a0 a5 ad  4c 73 58 f4 07 13 2e 65  |y...J...LsX....e|
            • crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl
            • authorityInfoAccess
              • caIssuers: http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt
            • extendedKeyUsage: timeStamping
        • RSA-SHA1:
          10 97 8a c3 5c 03 44 36  dd e9 b4 ad 77 db ce 79  |....\.D6....w..y|
          51 4d 01 b1 2e 74 71 5b  6d 0c 13 ab ce be 7b 8f  |QM...tq[m.....{.|
          b8 2e d4 12 a2 8c 6d 62  b8 57 02 cb 4e 20 13 50  |......mb.W..N .P|
          99 dd 7a 40 e2 57 bb af  58 9a 1c e1 1d 01 86 ac  |..z@.W..X.......|
          bb 78 f2 8b d0 ec 3b 01  ee e2 be 8f 0a 05 c8 8d  |.x....;.........|
          48 e2 f0 53 15 dd 4f ab  92 e4 e7 8d 6a d5 80 c1  |H..S..O.....j...|
          e6 94 f2 06 2f 85 03 e9  91 2a 24 22 70 fb f6 fc  |..../....*$"p...|
          e4 78 99 2e 0d f7 07 e2  70 bc 18 4e 9d 8e 6b 0a  |.x......p..N..k.|
          72 95 b8 a1 39 9c 67 2d  c5 51 0e ea 62 5c 3f 16  |r...9.g-.Q..b\?.|
          98 8b 20 3f e2 07 1a 32  f9 cc 31 4a 76 31 3d 2b  |.. ?...2..1Jv1=+|
          72 0b c8 ea 70 3d ff 85  0a 13 df c2 0a 61 8e f0  |r...p=.......a..|
          d7 b8 17 eb 4e 8b 7f c5  35 2b 5e a3 bf eb bc 7d  |....N...5+^....}|
          0b 42 7b d4 53 72 21 ee  30 ca bb 78 65 5c 5b 01  |.B{.Sr!.0..xe\[.|
          17 0a 14 0e d2 da 14 98  f5 3c b9 66 58 b3 2d 2f  |.........<.fX.-/|
          e7 f9 85 86 cc 51 56 e8  9d 70 94 6c ac 39 4c d4  |.....QV..p.l.9L.|
          f6 79 bf aa 18 7a 62 29  ef a2 9b 29 34 06 77 1a  |.y...zb)...)4.w.|
          62 c9 3d 1e 6d 1f 82 f0  0b c7 2c bb cf 43 b3 e5  |b.=.m.....,..C..|
          f9 ec 7d b5 e3 a4 a8 74  35 b8 4e c5 71 23 12 26  |..}....t5.N.q#.&|
          76 0b 3c 52 8c 71 5a 46  43 14 bc b3 b3 b0 4d 67  |v.
    • Signer
      • 1
      • unnamed
        • #0
          • C: US
          • ST: Washington
          • L: Redmond
          • O: Microsoft Corporation
          • CN: Microsoft Code Signing PCA
        • 33:00:00:00:CA:6C:D5:32:12:35:C4:E1:55:00:01:00:
          00:00:CA
      • SHA1: nil
      • #3
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest:
          54 ce 83 bc e4 24 e7 47  1b ef 66 36 ee 87 0f 63  |T....$.G..f6...c|
          30 97 2a f0                                       |0.*.            |
        • 1.3.6.1.4.1.311.2.1.12
          • 00 4d 00 69 00 63 00 72  00 6f 00 73 00 6f 00 66  |.M.i.c.r.o.s.o.f|
            00 74 00 20 00 57 00 69  00 6e 00 64 00 6f 00 77  |.t. .W.i.n.d.o.w|
            00 73                                             |.s              |
            : http://www.microsoft.com
      • rsaEncryption:
        0f 9b af 6a 4b d0 bd 15  7b 02 2b 7d a9 d8 f1 b6  |...jK...{.+}....|
        3a c4 5a 21 6f f2 2f 28  91 97 da f4 1a 75 25 6c  |:.Z!o./(.....u%l|
        5b 2d 6a db fd cd 21 b9  2c 0a d2 5a 4c 39 e1 91  |[-j...!.,..ZL9..|
        50 52 7e 47 44 75 09 47  53 90 8c ed f1 9c c7 5b  |PR~GDu.GS......[|
        82 3a 3a 68 12 a3 f3 26  eb 76 d9 54 02 06 59 5c  |.::h...&.v.T..Y\|
        19 98 33 6e 61 46 97 a4  88 74 be d4 c9 02 dc ba  |..3naF...t......|
        9c c0 e8 8c 2d 94 f7 a1  a0 57 74 14 2b 07 1b 89  |....-....Wt.+...|
        56 f5 27 f1 43 83 84 f3  ed 8b 87 5b 07 37 47 fb  |V.'.C......[.7G.|
        cf b4 f5 0f 4b f2 c7 8e  0c 7a 95 a7 97 5c 51 54  |....K....z...\QT|
        8d cc f8 fc 32 bf 5f 19  5d 33 86 c4 ef 8a cb 09  |....2._.]3......|
        50 cf 15 d8 a1 5b 01 7a  cb 06 0b fa f7 14 20 d0  |P....[.z...... .|
        ab 1b 87 e6 19 11 48 49  66 05 02 cf dd a4 bb 19  |......HIf.......|
        da 20 9d 08 30 5e 15 f1  e8 0a d7 a4 71 85 a6 70  |. ..0^......q..p|
        cc 27 62 eb ba 07 0f 08  68 28 d3 00 66 a6 51 41  |.'b.....h(..f.QA|
        07 5d 57 19 f5 c3 5f 90  de cd 53 0a 8c 41 4c cb  |.]W..._...S..AL.|
        32 3a c3 da 8e 28 d3 96  ba 9a d4 d4 f2 51 cd ed  |2:...(.......Q..|
      • countersignature
        • 1
          • unnamed
            • #0
              • C: US
              • ST: Washington
              • L: Redmond
              • O: Microsoft Corporation
              • CN: Microsoft Time-Stamp PCA
            • 33:00:00:00:59:D6:73:CD:51:8E:F0:22:C5:00:00:00:
              00:00:59
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2014-08-03 04:12:42 UTC
            • messageDigest:
              21 c1 ee 47 02 66 79 64  b4 dc 2d 5b cd 21 5b c4  |!..G.fyd..-[.![.|
              a9 85 b4 b6                                       |....            |
          • RSA-SHA1:
            8b bc 23 aa 7a eb da 64  4e 2b 7c 33 39 61 3e 0c  |..#.z..dN+|39a>.|
            4a 28 c7 b8 58 7e 0b ee  2e fe 0c 12 43 d0 b0 ed  |J(..X~......C...|
            c2 81 7f 2a ee 5b d8 da  7d c8 a8 2e fa 13 ef 6e  |...*.[..}......n|
            ed 1d 85 ce 48 76 63 dd  3b ba a0 fc 6c 44 ed 80  |....Hvc.;...lD..|
            cf 11 c7 03 2c 94 94 d3  30 f5 f2 63 2e eb ca ed  |....,...0..c....|
            10 19 ec 0c b3 19 8c f0  7a 06 42 07 7d 46 db 1a  |........z.B.}F..|
            73 c5 47 d3 1f fb 10 5f  7a 32 1c a6 a3 6e 0a a8  |s.G...._z2...n..|
            f5 de e8 ac ef 1d 64 58  6c 7b 25 05 8a 60 20 10  |......dXl{%..` .|
            dd ac b9 ba 24 dd 1f 83  3a fa 33 94 4b 84 03 d6  |....$...:.3.K...|
            c4 cf bd 7d 31 79 15 13  19 ad ee 39 31 c1 f4 c2  |...}1y.....91...|
            89 6e ff ac 41 d7 03 67  9c f9 5f 3c 33 22 61 98  |.n..A..g.._<3"a.|
            7c 57 d9 30 df f8 81 98  4f ed 81 b8 ed 6a 7a a9  ||W.0....O....jz.|
            e3 aa e5 fb cd da cf 94  40 d8 42 6a 7d 15 0a 3c  |........@.Bj}..<|
            5e a3 0d cb f1 8b 0c 98  0c 5a 01 27 0d b2 d1 0e  |^........Z.'....|
            9b 1e f8 72 9f f2 c5 b8  f7 84 68 03 82 db 46 94  |...r......h...F.|
            34 1c bd 39 c6 27 a3 a6  30 dc d1 fb df 69 6c fc  |4..9.'..0....il.|
offsetsizetypecomment
0585216EXE07/16/2014 00:36:04#
15c115HTM#
8ee00406752BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 991968 bytes (969 KiB)


--
Type = PE
Physical Size = 991968
CPU = x86
Characteristics = Executable 32-bit RemovableRun NetRun
Created = 2014-07-16 00:36:04
Headers Size = 1024
Checksum = 1014272
Image Size = 606208
Section Alignment = 4096
File Alignment = 512
Code Size = 310784
Initialized Data Size = 273408
Uninitialized Data Size = 0
Linker Version = 10.0
OS Version = 5.1
Image Version = 0.0
Subsystem Version = 5.1
Subsystem = Windows GUI
DLL Characteristics = Relocated NX-Compatible TerminalServerAware
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
Comment = FileVersion: 8.100.26846.0
ProductVersion: 8.100.26846.0
InternalName: setup
----
Path = [0]
Size = 399944
Packed Size = 399944
Virtual Size = 399944
Offset = 585216
--
Path = [0]
Type = Cab
Physical Size = 399943
Tail Size = 1
Method = MSZip
Blocks = 1
Volumes = 1
Volume Index = 0
ID = 0

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2014-08-02 21:10:54 ....A        69949               0
2012-03-23 13:37:32 ....A        77312               u0
2014-06-13 17:12:24 ....A        64354               u1
2013-07-19 13:38:26 ....A          797               u2
2013-07-19 13:38:26 ....A         3409               u3
2013-07-19 13:38:26 ....A         1320               u4
2013-07-19 13:38:26 ....A       155324               u5
2013-07-19 13:38:24 ....A          877               u6
2012-03-23 13:37:26 ....A        73728               u7
2012-03-23 13:37:18 ....A       124928               u8
2014-08-01 18:44:38 ....A       151040               u9
2014-08-01 18:46:18 ....A       192512               u10
2013-07-19 13:38:28 ....A       196416               u11
2014-08-02 19:03:32 ....A         9434               u12
2014-08-02 21:10:48 ....A        14408               u13
------------------- ----- ------------ ------------  ------------------------
2014-08-02 21:10:54            1135808       991968  15 files
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] can't find file_offset of VA 0x4ecc4