PUBFILT.DLL - Microsoft Publisher IFilter

info
MZ
PE
resources
imports
exports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	PUBFILT.DLL
size	36216 (0x8d78)
md5	0434003c9bf1b8ee0f9f3f1069bf2bef

type	PE32+ executable (DLL) (console) x86-64, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

Rich Header

lib id	version	times used
109	50727	3
123	50727	6
147	30729	3
1	0	59
150	20413	1
131	30729	12
149	30729	1
148	30729	1
132	30729	7
146	30729	1
145	30729	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	6
TimeDateStamp	0x4b8a3877
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x2022
Magic	0x20b
LinkerVersion	9.0
SizeOfCode	0x4200
SizeOfInitializedData	0x3600
SizeOfUninitializedData	0
AddressOfEntryPoint	0x49b0
BaseOfCode	0x1000
ImageBase	0x180000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.2
ImageVersion	0.0
SubsystemVersion	5.2
Reserved1	0
SizeOfImage	0xc000
SizeOfHeaders	0x400
CheckSum	0x9d7b
Subsystem	3
DllCharacteristics	0x40
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x1000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x4127	0x4200	R-X CODE
.rdata	0x6000	0x1e80	0x2000	R-- IDATA
.data	0x8000	0x788	0x200	RW- IDATA
.pdata	0x9000	0x36c	0x400	R-- IDATA
.rsrc	0xa000	0x798	0x800	R-- IDATA
.reloc	0xb000	0xc0	0x200	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x7190	0xb4
IMPORT	0x7244	0x64
RESOURCE	0xa000	0x798
EXCEPTION	0x9000	0x36c
SECURITY	0x7600	0x1778
BASERELOC	0xb000	0xc0
DEBUG	0x508c	0x38
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x6000	0x1f8
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
VERSION	#1	1184	1252
MANIFEST	#2	600	1252

module_name	hint	function_name
MSVCR90.dll	1007	_wcsicmp
MSVCR90.dll	67	void __cdecl terminate(void) ?terminate@@YAXXZ
MSVCR90.dll	740	_onexit
MSVCR90.dll	573	_lock
MSVCR90.dll	133	__dllonexit
MSVCR90.dll	932	_unlock
MSVCR90.dll	123	__clean_type_info_names_internal
MSVCR90.dll	131	__crt_debugger_hook
MSVCR90.dll	157	__lconv_init
MSVCR90.dll	90	__CppXcptFilter
MSVCR90.dll	89	__C_specific_handler
MSVCR90.dll	226	_amsg_exit
MSVCR90.dll	301	_decode_pointer
MSVCR90.dll	312	_encoded_null
MSVCR90.dll	463	_initterm_e
MSVCR90.dll	462	_initterm
MSVCR90.dll	590	_malloc_crt
MSVCR90.dll	311	_encode_pointer
MSVCR90.dll	1286	realloc
MSVCR90.dll	1253	malloc
MSVCR90.dll	1196	free
MSVCR90.dll	17	void * __ptr64 __cdecl operator new(unsigned __int64) ??2@YAPEAX_K@Z
MSVCR90.dll	99	__CxxFrameHandler3
MSVCR90.dll	1268	memset
MSVCR90.dll	19	void __cdecl operator delete(void * __ptr64) ??3@YAXPEAX@Z
MSVCR90.dll	56	public: void __cdecl type_info::_type_info_dtor_internal_method(void) __ptr64 ?_type_info_dtor_internal_method@type_info@@QEAAXXZ
KERNEL32.dll	204	DisableThreadLibraryCalls
KERNEL32.dll	905	RtlCaptureContext
KERNEL32.dll	912	RtlLookupFunctionEntry
KERNEL32.dll	919	RtlVirtualUnwind
KERNEL32.dll	715	IsDebuggerPresent
KERNEL32.dll	1049	SetUnhandledExceptionFilter
KERNEL32.dll	1090	UnhandledExceptionFilter
KERNEL32.dll	426	GetCurrentProcess
KERNEL32.dll	1073	TerminateProcess
KERNEL32.dll	1061	Sleep
KERNEL32.dll	505	GetModuleHandleW
KERNEL32.dll	544	GetProcAddress
KERNEL32.dll	547	GetProcessHeap
KERNEL32.dll	591	GetSystemTimeAsFileTime
KERNEL32.dll	427	GetCurrentProcessId
KERNEL32.dll	430	GetCurrentThreadId
KERNEL32.dll	846	QueryPerformanceCounter
KERNEL32.dll	852	RaiseException
KERNEL32.dll	630	GetVersionExW
KERNEL32.dll	1118	VirtualProtect
KERNEL32.dll	614	GetTickCount
ADVAPI32.dll	585	RegEnumKeyExW
ADVAPI32.dll	616	RegQueryValueExW
ADVAPI32.dll	574	RegDeleteKeyW
ADVAPI32.dll	603	RegOpenKeyExW
ADVAPI32.dll	578	RegDeleteValueW
ADVAPI32.dll	554	RegCloseKey
ADVAPI32.dll	563	RegCreateKeyExW
ADVAPI32.dll	632	RegSetValueExW
ole32.dll	371	StgOpenStorageOnILockBytes
ole32.dll	131	CreateILockBytesOnHGlobal
ole32.dll	368	StgOpenStorage
ole32.dll	106	CoTaskMemAlloc

ord	entry_va	function_name
1	0x2808	DllCanUnloadNow
2	0x2e78	DllGetClassObject
3	0x32c4	DllRegisterServer
4	0x2814	DllUnregisterServer

module_name	PUBFILT.dll
flags	0
timestamp	2010-02-28 09:33:43
version	0.0
ordinal_base	1
nFunctions	4
nNames	4
Names(4)	0x71c8
Functions(4)	0x71b8
NameOrdinals(4)	0x71e8

StringTable 000004E4

CompanyName	Microsoft Corporation
FileDescription	Microsoft Publisher IFilter
FileVersion	14.0.4750.1000
InternalName	PubFilt
LegalCopyright	© 2010 Microsoft Corporation. All rights reserved.
LegalTrademarks1	Microsoft® is a registered trademark of Microsoft Corporation.
LegalTrademarks2	Windows® is a registered trademark of Microsoft Corporation.
OriginalFilename	pubfilt.dll
ProductName	Microsoft Office 2010
ProductVersion	14.0.4750.1000

VS_FIXEDFILEINFO

FileVersion	14.0.4750.1000
ProductVersion	14.0.4750.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	0
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Code Signing PCA

serial: 6101CF3E00000000000F

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ab:11:dc:50:ff:5c:9d:cb:c0
        Signature Algorithm: sha1WithRSA
        Issuer: OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
        Validity
            Not Before: Aug 22 22:31:02 2007 GMT
            Not After : Aug 25 07:00:00 2012 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b7:79:7d:d6:5d:b3:45:39:a8:34:ac:31:da:f9:
                    25:35:49:77:c0:fb:1f:9e:c7:45:71:ef:d1:46:e8:
                    d4:8c:c3:6b:4c:52:62:f4:99:02:c3:4d:d8:49:6c:
                    2f:24:3e:65:bf:ce:23:b7:0b:48:b7:7f:75:dd:45:
                    bd:aa:8f:0e:50:c5:25:2b:f2:a0:e7:0d:23:1f:d1:
                    41:24:fa:62:99:cf:19:45:a5:93:4a:1f:99:cd:b3:
                    2f:22:c3:4a:2d:7c:6f:d9:15:1e:3b:8c:39:10:39:
                    dd:bd:29:f4:66:3b:2d:01:32:ff:fe:27:48:a6:b5:
                    6c:01:87:9c:fb:ba:b2:63:7f:82:f9:5c:a0:81:84:
                    85:8e:b0:f2:b8:94:a3:cf:38:a6:50:85:17:27:87:
                    4e:dd:30:f6:00:3d:f4:c6:f9:3d:81:be:86:ed:6c:
                    39:a7:2e:34:f6:b4:2e:af:0a:7d:62:91:78:66:9c:
                    98:73:0d:86:af:f2:c4:f3:20:b9:4f:12:8d:63:cb:
                    2c:d9:32:45:19:ee:bb:4a:96:3b:50:53:18:ce:66:
                    51:79:aa:ad:87:c8:56:3e:9f:82:50:88:6e:05:b1:
                    35:c1:7b:24:bd:52:66:3d:99:4e:cc:2b:7e:33:6e:
                    84:47:06:d1:9e:d0:4a:86:02:6e:86:00:a4:c0:87:
                    df:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Code Signing
            2.5.29.1: 
                0....[.p.ir.#Q~..M....r0p1+0)..U..."Copyright (c) 1997 Microsoft Corp.1.0...U....Microsoft Corporation1!0...U....Microsoft Root Authority......<<...>.c..@
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                CC:1D:CE:76:00:70:5B:AF:F1:DA:C4:4E:9A:51:44:2E:A3:44:63:F0
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
    Signature Algorithm: sha1WithRSA
    Signature Value:
        7b:ab:ae:7e:4a:26:f2:ce:bc:4e:74:a2:58:27:74:2a:75:b3:
        86:fd:ab:4c:94:78:00:4d:e9:ca:eb:18:dc:69:c5:0e:a2:7c:
        f3:02:43:c6:ca:87:cc:f8:53:cc:c2:9f:bd:56:6f:f0:63:44:
        a9:44:00:ee:96:c8:9a:d5:1c:b8:0b:9f:19:0d:94:d7:da:1e:
        ad:29:7d:ef:ed:a6:73:ac:8f:de:39:8e:3d:98:6a:bc:38:6d:
        d2:88:af:23:fd:df:e9:d6:69:09:91:88:bd:fe:e1:00:bb:34:
        f3:f7:7c:f9:10:12:2e:05:eb:29:96:93:42:6b:28:71:b7:38:
        8f:e0:07:0d:c9:5d:68:cd:bd:80:41:6b:66:a8:bb:b7:bb:8e:
        34:ca:f2:03:10:7c:7a:f5:d2:e0:42:df:7b:fe:e1:e1:ac:fe:
        f6:df:d5:0d:b3:70:d6:92:e3:4f:b6:38:a2:7c:2d:d4:3d:db:
        34:0b:62:37:02:9f:81:6a:23:89:f6:5c:63:8f:b0:5a:bb:39:
        d7:60:8c:55:84:1a:33:f5:3b:98:a0:82:0c:a2:5f:8b:b3:2c:
        b7:a1:a5:cb:ab:da:20:b6:bf:30:19:85:20:14:0d:2a:bc:52:
        f4:41:e0:5e:30:e3:92:28:69:87:c1:70:e2:f3:a7:ab:ce:80:
        42:72:76:0e

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:01:cf:3e:00:00:00:00:00:0f
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA
        Validity
            Not Before: Dec  7 22:40:29 2009 GMT
            Not After : Mar  7 22:40:29 2011 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, CN=Microsoft Corporation
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:89:fb:45:72:a8:53:6b:9e:89:4f:00:23:
                    c0:be:d4:1d:3d:b1:59:40:38:f3:73:91:82:26:e6:
                    96:12:00:53:d9:1c:82:0e:3c:ce:1d:bb:bd:f7:42:
                    8d:97:d4:fc:38:1a:e4:b9:f9:e3:ec:d3:61:03:bf:
                    a0:d3:d6:75:4d:5c:46:a9:ed:5e:f0:d2:e2:69:5b:
                    1a:73:ea:b3:1c:8d:04:cd:29:44:a0:64:59:2f:1e:
                    98:5d:6e:c7:ab:18:39:82:65:c4:a7:bc:ab:75:88:
                    19:ea:87:97:14:26:b3:7f:26:76:a4:d4:38:39:84:
                    e3:b3:26:d5:18:f9:2b:e9:d2:c9:16:5a:54:21:f2:
                    97:8d:87:86:29:fe:f4:49:2c:e6:8b:f8:04:3f:7d:
                    cd:cd:96:92:86:0d:71:03:e2:d0:fe:0c:42:35:ff:
                    d7:b8:3f:dd:8e:45:0a:7d:f6:d7:4b:ad:5b:f0:76:
                    72:1d:77:23:7d:89:35:c4:1c:5d:b2:50:03:4b:47:
                    6d:07:a7:55:88:98:06:80:a6:81:ad:54:4e:d8:81:
                    d6:fa:bf:42:c0:31:be:55:0d:99:d5:53:49:12:30:
                    eb:e5:a5:88:7c:5e:c4:7a:5a:14:87:08:b4:37:69:
                    a0:eb:32:24:8c:08:eb:f9:d4:14:ba:e0:fc:cd:ea:
                    a4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Subject Key Identifier: 
                38:78:05:73:C8:1B:32:9B:5F:92:86:55:AF:89:BA:C6:99:B1:74:8E
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Authority Key Identifier: 
                CC:1D:CE:76:00:70:5B:AF:F1:DA:C4:4E:9A:51:44:2E:A3:44:63:F0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/CSPCA.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/CSPCA.crt
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        28:03:83:ab:13:0d:f1:fe:11:6f:42:76:d8:43:ab:b8:c6:42:
        fa:24:65:34:ae:75:b0:71:30:8e:96:b6:83:fa:72:e4:fe:cd:
        37:e7:3a:70:98:51:20:0e:ba:71:b4:c9:f4:d5:e4:8a:e8:28:
        70:73:d5:ed:e1:c2:7b:ee:f1:56:34:5a:80:82:eb:10:d7:72:
        03:ea:12:4e:ec:dd:0d:8c:7b:44:4f:0c:61:75:fd:6e:9c:07:
        dd:ce:2b:5a:18:0d:39:b0:60:fd:da:ff:04:aa:02:a3:d8:fa:
        8e:a3:bb:bd:c1:6a:54:3b:31:5f:e4:2c:6e:cb:f1:4d:2a:1c:
        f2:1e:76:7b:86:af:c6:87:d6:b1:2a:ed:ac:cc:0e:c0:e4:9f:
        7f:e8:cf:e8:84:72:54:82:18:6e:2a:c8:9e:95:b4:1a:1e:c1:
        6f:93:db:62:a6:c1:4b:6b:ad:c9:ed:3d:92:e3:b2:2f:ab:7a:
        77:39:67:6a:00:7b:82:9d:03:10:de:63:95:49:26:42:de:95:
        22:c1:87:0b:d0:14:a3:5f:dc:73:32:72:36:1e:ff:c8:29:c5:
        24:52:4f:66:48:c9:1d:1d:a9:c5:26:39:69:50:4e:a7:ec:c2:
        06:6c:2e:72:1b:f1:21:da:6d:24:48:80:81:15:40:7c:9f:cc:
        74:38:4a:4f

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
        Validity
            Not Before: Sep 16 01:04:47 2006 GMT
            Not After : Sep 15 07:00:00 2019 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Timestamping PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:dc:37:6e:fb:af:c8:42:4a:71:18:c8:ce:48:3e:
                    53:c0:fa:ab:14:ba:2c:32:bb:12:4f:52:c8:83:ed:
                    3e:33:d9:49:31:92:28:b6:91:64:e0:1f:50:84:ba:
                    c2:4b:d1:7f:05:f8:ef:75:be:8b:c7:a8:d5:ae:69:
                    70:66:78:27:66:e8:b6:b7:ef:85:b9:cd:ee:aa:fd:
                    12:a4:0b:59:22:29:2f:cf:40:d9:56:04:1b:76:b5:
                    6d:64:6d:4a:54:db:dd:f1:de:bf:9f:83:c7:80:df:
                    7f:4c:02:37:94:f5:c0:9e:08:56:1e:68:47:cd:d9:
                    c0:76:5c:2f:7d:b6:25:04:b4:56:5b:6a:1c:63:ff:
                    80:7c:3c:ee:d5:04:25:4d:39:77:74:07:5d:c2:5c:
                    d8:86:37:2c:75:c9:0e:ea:1e:39:09:7c:76:fe:9d:
                    6c:6e:7a:e0:ec:3e:8f:97:9e:71:0e:5f:2a:4f:18:
                    62:60:32:9e:d2:83:4e:2b:22:5c:68:45:8b:de:2f:
                    84:10:50:b2:f9:b5:1a:8d:6c:ee:25:9b:13:f8:cb:
                    10:d7:85:0e:f4:82:76:73:36:c6:95:7a:a2:cc:60:
                    06:ec:05:b0:86:33:b7:f8:94:5b:84:41:84:58:85:
                    94:6e:b0:1f:2c:48:cc:6f:9c:43:e0:6a:e8:7f:26:
                    8e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Time Stamping
            2.5.29.1: 
                0....[.p.ir.#Q~..M....r0p1+0)..U..."Copyright (c) 1997 Microsoft Corp.1.0...U....Microsoft Corporation1!0...U....Microsoft Root Authority......<<...>.c..@
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Subject Key Identifier: 
                6F:E8:4E:3F:97:B9:34:AB:4B:86:8F:BC:9C:EA:AC:3B:41:43:C6:D0
            1.3.6.1.4.1.311.20.2: 
                .
.S.u.b.C.A
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        94:4d:11:31:c2:7c:50:bb:11:8e:a1:61:07:01:0e:8c:70:45:
        8d:ef:73:54:bd:3f:09:05:2d:ff:b8:51:53:85:1c:ed:39:91:
        b7:a3:56:0b:de:8c:b6:3b:1b:d1:fb:ac:a7:c9:b7:b1:51:21:
        1b:6f:08:69:7e:6b:03:a2:22:46:ed:6c:b4:6d:7c:22:b8:46:
        d3:84:f3:8d:0f:be:07:8a:36:c1:eb:7e:e9:70:5d:45:9f:92:
        d2:cc:ce:dd:8e:c0:e1:bf:2a:cd:7c:ec:c9:ae:32:d5:87:b9:
        cb:63:c4:36:d1:18:21:bf:76:de:3b:9a:b3:1b:73:9e:21:88:
        d8:b4:b4:12:54:8c:f4:9c:c2:65:4a:9a:28:26:9c:60:8a:0f:
        3b:c7:13:65:78:48:bb:cf:ad:83:3a:4f:b0:62:58:de:30:e9:
        e9:39:1d:e3:89:f2:da:39:81:f9:13:21:8c:64:80:63:06:04:
        96:f2:9a:02:43:2f:7b:46:88:ba:ff:02:d9:65:f9:4a:de:da:
        03:74:93:b3:05:6e:0c:cc:9d:dc:28:61:7c:48:f1:17:9c:11:
        21:38:02:1c:87:ac:06:c5:96:32:b8:e5:40:c6:53:3d:bd:a9:
        89:de:e8:66:37:8d:f4:22:96:9c:cc:b0:77:54:51:3a:d6:72:
        44:b2:23:f6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:06:94:2d:00:00:00:00:00:09
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Timestamping PCA
        Validity
            Not Before: Jul 25 19:02:17 2008 GMT
            Not After : Jul 25 19:12:17 2013 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, OU=nCipher DSE ESN:7A82-688A-9F92, CN=Microsoft Time-Stamp Service
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:95:81:0a:20:42:18:51:7a:d9:95:ed:9b:fd:dc:
                    87:d1:fb:0e:8f:13:ea:aa:37:28:12:76:fe:4d:50:
                    ab:76:97:2a:93:47:e0:a9:56:69:02:e5:94:7e:4d:
                    85:db:7f:71:ef:75:00:db:bb:43:6c:fb:6f:ac:71:
                    f0:2b:d1:7c:92:ce:94:17:9d:a1:c5:ba:f9:f7:7e:
                    dd:61:e1:2d:30:1e:9c:26:2d:76:3f:e6:46:96:8e:
                    ae:d8:89:37:d8:cc:ef:f3:cf:5b:c3:fc:68:e0:f2:
                    64:8f:9b:e8:c3:12:f9:a3:be:84:fc:d6:8b:ce:05:
                    3d:bd:01:76:50:27:03:f8:84:b7:16:86:8d:60:be:
                    5d:29:2c:3c:cf:a5:fd:98:5a:35:1d:4f:16:c0:38:
                    d8:1e:61:3f:3d:36:b3:56:14:15:77:95:3b:10:fa:
                    00:b0:93:e2:5d:37:ab:27:bb:63:2c:48:14:81:55:
                    e3:6c:ea:a9:2b:95:8d:88:0e:7e:a3:00:a5:77:24:
                    07:98:2a:70:03:b8:2a:24:90:9a:de:c5:a2:22:4b:
                    bf:4c:59:06:77:54:72:43:b0:3e:64:dd:93:84:08:
                    58:b6:fe:e9:87:49:09:36:b3:b3:f8:33:a9:7e:4c:
                    a2:79:7f:32:59:29:0e:9e:b5:f5:e0:3c:9e:3f:ec:
                    46:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                28:95:88:BF:02:3B:EB:DA:94:BA:7D:46:0F:FA:CB:F4:7E:9D:FF:D1
            X509v3 Authority Key Identifier: 
                6F:E8:4E:3F:97:B9:34:AB:4B:86:8F:BC:9C:EA:AC:3B:41:43:C6:D0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/tspca.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/tspca.crt
            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        00:ee:ac:fc:e2:d2:88:66:ca:29:e3:5a:b9:cd:00:82:7e:17:
        5c:c5:24:59:12:bb:a8:f7:6b:d7:87:fe:8d:cb:b5:76:1f:1b:
        22:f6:f7:e1:ca:b4:b9:41:01:1a:37:ad:48:37:96:70:fa:cc:
        33:a7:28:8c:b8:0b:b6:74:13:28:b7:b3:75:e1:2a:09:e2:8b:
        4f:df:98:3f:97:b7:34:12:81:ea:10:dd:1d:dc:ba:64:cf:4e:
        50:3b:4c:8a:fd:19:dd:25:ae:d5:96:87:ea:4b:c4:e5:f0:f9:
        41:17:5d:01:eb:57:88:7d:76:7a:e5:6f:fe:87:20:ac:93:9c:
        8c:9a:bf:5f:1a:a0:15:30:24:e0:a2:7e:61:91:1d:29:29:c3:
        49:90:3a:43:83:89:ee:de:d5:83:dd:4f:2c:35:3b:e7:41:41:
        01:aa:00:0c:0b:f2:d6:49:1b:ce:42:8d:7b:b0:f3:2d:8d:5d:
        29:e1:be:8d:7f:91:15:76:b4:60:fb:14:27:aa:6f:12:63:42:
        28:58:3a:8a:3b:8b:40:e4:b7:c5:cc:92:57:1c:46:56:6b:8f:
        cb:92:4d:56:05:00:ca:f8:30:40:45:4e:df:19:88:bd:f5:10:
        f0:dd:1a:df:28:1e:b4:51:f2:77:e0:26:e3:bb:09:81:12:dc:
        1e:3a:d0:45

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

a7 6f f2 f9 47 4e ea 55 1a 0a 02 81 db 7e 06 62 |.o..GN.U.....~.b| c3 42 8a 8f |.B.. |

unnamed

2
- 2E:AB:11:DC:50:FF:5C:9D:CB:C0
- RSA-SHA1-2: nil
- #2
  - OU: Copyright (c) 1997 Microsoft Corp.
  - OU: Microsoft Corporation
  - CN: Microsoft Root Authority
- 2007-08-22 22:31:02 UTC: 2012-08-25 07:00:00 UTC
- Subject
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Code Signing PCA
- #5
  - rsaEncryption: nil
  - B7:79:7D:D6:5D:B3:45:39:A8:34:AC:31:DA:F9:25:35:
    49:77:C0:FB:1F:9E:C7:45:71:EF:D1:46:E8:D4:8C:C3:
    6B:4C:52:62:F4:99:02:C3:4D:D8:49:6C:2F:24:3E:65:
    BF:CE:23:B7:0B:48:B7:7F:75:DD:45:BD:AA:8F:0E:50:
    C5:25:2B:F2:A0:E7:0D:23:1F:D1:41:24:FA:62:99:CF:
    19:45:A5:93:4A:1F:99:CD:B3:2F:22:C3:4A:2D:7C:6F:
    D9:15:1E:3B:8C:39:10:39:DD:BD:29:F4:66:3B:2D:01:
    32:FF:FE:27:48:A6:B5:6C:01:87:9C:FB:BA:B2:63:7F:
    82:F9:5C:A0:81:84:85:8E:B0:F2:B8:94:A3:CF:38:A6:
    50:85:17:27:87:4E:DD:30:F6:00:3D:F4:C6:F9:3D:81:
    BE:86:ED:6C:39:A7:2E:34:F6:B4:2E:AF:0A:7D:62:91:
    78:66:9C:98:73:0D:86:AF:F2:C4:F3:20:B9:4F:12:8D:
    63:CB:2C:D9:32:45:19:EE:BB:4A:96:3B:50:53:18:CE:
    66:51:79:AA:AD:87:C8:56:3E:9F:82:50:88:6E:05:B1:
    35:C1:7B:24:BD:52:66:3D:99:4E:CC:2B:7E:33:6E:84:
    47:06:D1:9E:D0:4A:86:02:6E:86:00:A4:C0:87:DF:53: 0x010001
- #6
  - extendedKeyUsage: codeSigning
  - 2.5.29.1
    - 5b d0 70 ef 69 72 9e 23 51 7e 14 b2 4d 8e ff cb |[.p.ir.#Q~..M...|
      - #0
        OU: Copyright (c) 1997 Microsoft Corp.
        OU: Microsoft Corporation
        CN: Microsoft Root Authority
      - 00 c1 00 8b 3c 3c 88 11 d1 3e f6 63 ec df 40 |....<<...>.c..@ |
  - basicConstraints: true, true
  - subjectKeyIdentifier:
```
cc 1d ce 76 00 70 5b af  f1 da c4 4e 9a 51 44 2e  |...v.p[....N.QD.|
a3 44 63 f0                                       |.Dc.            |
```
  - keyUsage: 0x86

RSA-SHA1-2:

7b ab ae 7e 4a 26 f2 ce  bc 4e 74 a2 58 27 74 2a  |{..~J&...Nt.X't*|
75 b3 86 fd ab 4c 94 78  00 4d e9 ca eb 18 dc 69  |u....L.x.M.....i|
c5 0e a2 7c f3 02 43 c6  ca 87 cc f8 53 cc c2 9f  |...|..C.....S...|
bd 56 6f f0 63 44 a9 44  00 ee 96 c8 9a d5 1c b8  |.Vo.cD.D........|
0b 9f 19 0d 94 d7 da 1e  ad 29 7d ef ed a6 73 ac  |.........)}...s.|
8f de 39 8e 3d 98 6a bc  38 6d d2 88 af 23 fd df  |..9.=.j.8m...#..|
e9 d6 69 09 91 88 bd fe  e1 00 bb 34 f3 f7 7c f9  |..i........4..|.|
10 12 2e 05 eb 29 96 93  42 6b 28 71 b7 38 8f e0  |.....)..Bk(q.8..|
07 0d c9 5d 68 cd bd 80  41 6b 66 a8 bb b7 bb 8e  |...]h...Akf.....|
34 ca f2 03 10 7c 7a f5  d2 e0 42 df 7b fe e1 e1  |4....|z...B.{...|
ac fe f6 df d5 0d b3 70  d6 92 e3 4f b6 38 a2 7c  |.......p...O.8.||
2d d4 3d db 34 0b 62 37  02 9f 81 6a 23 89 f6 5c  |-.=.4.b7...j#..\|
63 8f b0 5a bb 39 d7 60  8c 55 84 1a 33 f5 3b 98  |c..Z.9.`.U..3.;.|
a0 82 0c a2 5f 8b b3 2c  b7 a1 a5 cb ab da 20 b6  |...._..,...... .|
bf 30 19 85 20 14 0d 2a  bc 52 f4 41 e0 5e 30 e3  |.0.. ..*.R.A.^0.|
92 28 69 87 c1 70 e2 f3  a7 ab ce 80 42 72 76 0e  |.(i..p......Brv.|

Certificate #1

2
- 61:01:CF:3E:00:00:00:00:00:0F
- RSA-SHA1: nil
- Issuer
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Code Signing PCA
- 2009-12-07 22:40:29 UTC: 2011-03-07 22:40:29 UTC
- Subject
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - OU: MOPR
  - CN: Microsoft Corporation
- #5
  - rsaEncryption: nil
  - BD:30:89:FB:45:72:A8:53:6B:9E:89:4F:00:23:C0:BE:
    D4:1D:3D:B1:59:40:38:F3:73:91:82:26:E6:96:12:00:
    53:D9:1C:82:0E:3C:CE:1D:BB:BD:F7:42:8D:97:D4:FC:
    38:1A:E4:B9:F9:E3:EC:D3:61:03:BF:A0:D3:D6:75:4D:
    5C:46:A9:ED:5E:F0:D2:E2:69:5B:1A:73:EA:B3:1C:8D:
    04:CD:29:44:A0:64:59:2F:1E:98:5D:6E:C7:AB:18:39:
    82:65:C4:A7:BC:AB:75:88:19:EA:87:97:14:26:B3:7F:
    26:76:A4:D4:38:39:84:E3:B3:26:D5:18:F9:2B:E9:D2:
    C9:16:5A:54:21:F2:97:8D:87:86:29:FE:F4:49:2C:E6:
    8B:F8:04:3F:7D:CD:CD:96:92:86:0D:71:03:E2:D0:FE:
    0C:42:35:FF:D7:B8:3F:DD:8E:45:0A:7D:F6:D7:4B:AD:
    5B:F0:76:72:1D:77:23:7D:89:35:C4:1C:5D:B2:50:03:
    4B:47:6D:07:A7:55:88:98:06:80:A6:81:AD:54:4E:D8:
    81:D6:FA:BF:42:C0:31:BE:55:0D:99:D5:53:49:12:30:
    EB:E5:A5:88:7C:5E:C4:7A:5A:14:87:08:B4:37:69:A0:
    EB:32:24:8C:08:EB:F9:D4:14:BA:E0:FC:CD:EA:A4:15: 0x010001
- #6
  - extendedKeyUsage: codeSigning
  - subjectKeyIdentifier:
```
38 78 05 73 c8 1b 32 9b  5f 92 86 55 af 89 ba c6  |8x.s..2._..U....|
99 b1 74 8e                                       |..t.            |
```
  - keyUsage: true, 0x80
  - authorityKeyIdentifier:
```
cc 1d ce 76 00 70 5b af  f1 da c4 4e 9a 51 44 2e  |...v.p[....N.QD.|
a3 44 63 f0                                       |.Dc.            |
```
  - crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/CSPCA.crl
  - authorityInfoAccess
    - caIssuers: http://www.microsoft.com/pki/certs/CSPCA.crt

RSA-SHA1:

28 03 83 ab 13 0d f1 fe  11 6f 42 76 d8 43 ab b8  |(........oBv.C..|
c6 42 fa 24 65 34 ae 75  b0 71 30 8e 96 b6 83 fa  |.B.$e4.u.q0.....|
72 e4 fe cd 37 e7 3a 70  98 51 20 0e ba 71 b4 c9  |r...7.:p.Q ..q..|
f4 d5 e4 8a e8 28 70 73  d5 ed e1 c2 7b ee f1 56  |.....(ps....{..V|
34 5a 80 82 eb 10 d7 72  03 ea 12 4e ec dd 0d 8c  |4Z.....r...N....|
7b 44 4f 0c 61 75 fd 6e  9c 07 dd ce 2b 5a 18 0d  |{DO.au.n....+Z..|
39 b0 60 fd da ff 04 aa  02 a3 d8 fa 8e a3 bb bd  |9.`.............|
c1 6a 54 3b 31 5f e4 2c  6e cb f1 4d 2a 1c f2 1e  |.jT;1_.,n..M*...|
76 7b 86 af c6 87 d6 b1  2a ed ac cc 0e c0 e4 9f  |v{......*.......|
7f e8 cf e8 84 72 54 82  18 6e 2a c8 9e 95 b4 1a  |.....rT..n*.....|
1e c1 6f 93 db 62 a6 c1  4b 6b ad c9 ed 3d 92 e3  |..o..b..Kk...=..|
b2 2f ab 7a 77 39 67 6a  00 7b 82 9d 03 10 de 63  |./.zw9gj.{.....c|
95 49 26 42 de 95 22 c1  87 0b d0 14 a3 5f dc 73  |.I&B.."......_.s|
32 72 36 1e ff c8 29 c5  24 52 4f 66 48 c9 1d 1d  |2r6...).$ROfH...|
a9 c5 26 39 69 50 4e a7  ec c2 06 6c 2e 72 1b f1  |..&9iPN....l.r..|
21 da 6d 24 48 80 81 15  40 7c 9f cc 74 38 4a 4f  |!.m$H...@|..t8JO|

2
- 6A:0B:99:4F:C0:00:25:AB:11:DB:45:1F:58:7A:67:A2
- RSA-SHA1: nil
- #2
  - OU: Copyright (c) 1997 Microsoft Corp.
  - OU: Microsoft Corporation
  - CN: Microsoft Root Authority
- 2006-09-16 01:04:47 UTC: 2019-09-15 07:00:00 UTC
- Subject
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Timestamping PCA
- #5
  - rsaEncryption: nil
  - DC:37:6E:FB:AF:C8:42:4A:71:18:C8:CE:48:3E:53:C0:
    FA:AB:14:BA:2C:32:BB:12:4F:52:C8:83:ED:3E:33:D9:
    49:31:92:28:B6:91:64:E0:1F:50:84:BA:C2:4B:D1:7F:
    05:F8:EF:75:BE:8B:C7:A8:D5:AE:69:70:66:78:27:66:
    E8:B6:B7:EF:85:B9:CD:EE:AA:FD:12:A4:0B:59:22:29:
    2F:CF:40:D9:56:04:1B:76:B5:6D:64:6D:4A:54:DB:DD:
    F1:DE:BF:9F:83:C7:80:DF:7F:4C:02:37:94:F5:C0:9E:
    08:56:1E:68:47:CD:D9:C0:76:5C:2F:7D:B6:25:04:B4:
    56:5B:6A:1C:63:FF:80:7C:3C:EE:D5:04:25:4D:39:77:
    74:07:5D:C2:5C:D8:86:37:2C:75:C9:0E:EA:1E:39:09:
    7C:76:FE:9D:6C:6E:7A:E0:EC:3E:8F:97:9E:71:0E:5F:
    2A:4F:18:62:60:32:9E:D2:83:4E:2B:22:5C:68:45:8B:
    DE:2F:84:10:50:B2:F9:B5:1A:8D:6C:EE:25:9B:13:F8:
    CB:10:D7:85:0E:F4:82:76:73:36:C6:95:7A:A2:CC:60:
    06:EC:05:B0:86:33:B7:F8:94:5B:84:41:84:58:85:94:
    6E:B0:1F:2C:48:CC:6F:9C:43:E0:6A:E8:7F:26:8E:6B: 0x010001
- #6
  - extendedKeyUsage: timeStamping
  - 2.5.29.1
    - 5b d0 70 ef 69 72 9e 23 51 7e 14 b2 4d 8e ff cb |[.p.ir.#Q~..M...|
      - #0
        OU: Copyright (c) 1997 Microsoft Corp.
        OU: Microsoft Corporation
        CN: Microsoft Root Authority
      - 00 c1 00 8b 3c 3c 88 11 d1 3e f6 63 ec df 40 |....<<...>.c..@ |
  - 1.3.6.1.4.1.311.21.1: 0
  - subjectKeyIdentifier:
```
6f e8 4e 3f 97 b9 34 ab  4b 86 8f bc 9c ea ac 3b  |o.N?..4.K......;|
41 43 c6 d0                                       |AC..            |
```
  - 1.3.6.1.4.1.311.20.2:
```
00 53 00 75 00 62 00 43  00 41                    |.S.u.b.C.A      |
```
  - keyUsage: 0x86
  - basicConstraints: true, true

RSA-SHA1:

94 4d 11 31 c2 7c 50 bb  11 8e a1 61 07 01 0e 8c  |.M.1.|P....a....|
70 45 8d ef 73 54 bd 3f  09 05 2d ff b8 51 53 85  |pE..sT.?..-..QS.|
1c ed 39 91 b7 a3 56 0b  de 8c b6 3b 1b d1 fb ac  |..9...V....;....|
a7 c9 b7 b1 51 21 1b 6f  08 69 7e 6b 03 a2 22 46  |....Q!.o.i~k.."F|
ed 6c b4 6d 7c 22 b8 46  d3 84 f3 8d 0f be 07 8a  |.l.m|".F........|
36 c1 eb 7e e9 70 5d 45  9f 92 d2 cc ce dd 8e c0  |6..~.p]E........|
e1 bf 2a cd 7c ec c9 ae  32 d5 87 b9 cb 63 c4 36  |..*.|...2....c.6|
d1 18 21 bf 76 de 3b 9a  b3 1b 73 9e 21 88 d8 b4  |..!.v.;...s.!...|
b4 12 54 8c f4 9c c2 65  4a 9a 28 26 9c 60 8a 0f  |..T....eJ.(&.`..|
3b c7 13 65 78 48 bb cf  ad 83 3a 4f b0 62 58 de  |;..exH....:O.bX.|
30 e9 e9 39 1d e3 89 f2  da 39 81 f9 13 21 8c 64  |0..9.....9...!.d|
80 63 06 04 96 f2 9a 02  43 2f 7b 46 88 ba ff 02  |.c......C/{F....|
d9 65 f9 4a de da 03 74  93 b3 05 6e 0c cc 9d dc  |.e.J...t...n....|
28 61 7c 48 f1 17 9c 11  21 38 02 1c 87 ac 06 c5  |(a|H....!8......|
96 32 b8 e5 40 c6 53 3d  bd a9 89 de e8 66 37 8d  |.2..@.S=.....f7.|
f4 22 96 9c cc b0 77 54  51 3a d6 72 44 b2 23 f6  |."....wTQ:.rD.#.|

Certificate #3
- 2
  - 61:06:94:2D:00:00:00:00:00:09
  - RSA-SHA1: nil
  - Issuer
    - C: US
    - ST: Washington
    - L: Redmond
    - O: Microsoft Corporation
    - CN: Microsoft Timestamping PCA
  - 2008-07-25 19:02:17 UTC: 2013-07-25 19:12:17 UTC
  - Subject
    - C: US
    - ST: Washington
    - L: Redmond
    - O: Microsoft Corporation
    - OU: MOPR
    - OU: nCipher DSE ESN:7A82-688A-9F92
    - CN: Microsoft Time-Stamp Service
  - #5
    - rsaEncryption: nil
    - 95:81:0A:20:42:18:51:7A:D9:95:ED:9B:FD:DC:87:D1:
      FB:0E:8F:13:EA:AA:37:28:12:76:FE:4D:50:AB:76:97:
      2A:93:47:E0:A9:56:69:02:E5:94:7E:4D:85:DB:7F:71:
      EF:75:00:DB:BB:43:6C:FB:6F:AC:71:F0:2B:D1:7C:92:
      CE:94:17:9D:A1:C5:BA:F9:F7:7E:DD:61:E1:2D:30:1E:
      9C:26:2D:76:3F:E6:46:96:8E:AE:D8:89:37:D8:CC:EF:
      F3:CF:5B:C3:FC:68:E0:F2:64:8F:9B:E8:C3:12:F9:A3:
      BE:84:FC:D6:8B:CE:05:3D:BD:01:76:50:27:03:F8:84:
      B7:16:86:8D:60:BE:5D:29:2C:3C:CF:A5:FD:98:5A:35:
      1D:4F:16:C0:38:D8:1E:61:3F:3D:36:B3:56:14:15:77:
      95:3B:10:FA:00:B0:93:E2:5D:37:AB:27:BB:63:2C:48:
      14:81:55:E3:6C:EA:A9:2B:95:8D:88:0E:7E:A3:00:A5:
      77:24:07:98:2A:70:03:B8:2A:24:90:9A:DE:C5:A2:22:
      4B:BF:4C:59:06:77:54:72:43:B0:3E:64:DD:93:84:08:
      58:B6:FE:E9:87:49:09:36:B3:B3:F8:33:A9:7E:4C:A2:
      79:7F:32:59:29:0E:9E:B5:F5:E0:3C:9E:3F:EC:46:3B: 0x010001
  - #6
    - subjectKeyIdentifier:
```
28 95 88 bf 02 3b eb da  94 ba 7d 46 0f fa cb f4  |(....;....}F....|
7e 9d ff d1                                       |~...            |
```
    - authorityKeyIdentifier:
```
6f e8 4e 3f 97 b9 34 ab  4b 86 8f bc 9c ea ac 3b  |o.N?..4.K......;|
41 43 c6 d0                                       |AC..            |
```
    - crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/tspca.crl
    - authorityInfoAccess
      - caIssuers: http://www.microsoft.com/pki/certs/tspca.crt
    - extendedKeyUsage: timeStamping
    - keyUsage: true, 0xc0
- RSA-SHA1:
```
00 ee ac fc e2 d2 88 66  ca 29 e3 5a b9 cd 00 82  |.......f.).Z....|
7e 17 5c c5 24 59 12 bb  a8 f7 6b d7 87 fe 8d cb  |~.\.$Y....k.....|
b5 76 1f 1b 22 f6 f7 e1  ca b4 b9 41 01 1a 37 ad  |.v.."......A..7.|
48 37 96 70 fa cc 33 a7  28 8c b8 0b b6 74 13 28  |H7.p..3.(....t.(|
b7 b3 75 e1 2a 09 e2 8b  4f df 98 3f 97 b7 34 12  |..u.*...O..?..4.|
81 ea 10 dd 1d dc ba 64  cf 4e 50 3b 4c 8a fd 19  |.......d.NP;L...|
dd 25 ae d5 96 87 ea 4b  c4 e5 f0 f9 41 17 5d 01  |.%.....K....A.].|
eb 57 88 7d 76 7a e5 6f  fe 87 20 ac 93 9c 8c 9a  |.W.}vz.o.. .....|
bf 5f 1a a0 15 30 24 e0  a2 7e 61 91 1d 29 29 c3  |._...0$..~a..)).|
49 90 3a 43 83 89 ee de  d5 83 dd 4f 2c 35 3b e7  |I.:C.......O,5;.|
41 41 01 aa 00 0c 0b f2  d6 49 1b ce 42 8d 7b b0  |AA.......I..B.{.|
f3 2d 8d 5d 29 e1 be 8d  7f 91 15 76 b4 60 fb 14  |.-.])......v.`..|
27 aa 6f 12 63 42 28 58  3a 8a 3b 8b 40 e4 b7 c5  |'.o.cB(X:.;.@...|
cc 92 57 1c 46 56 6b 8f  cb 92 4d 56 05 00 ca f8  |..W.FVk...MV....|
30 40 45 4e df 19 88 bd  f5 10 f0 dd 1a df 28 1e  |0@EN..........(.|
b4 51 f2 77 e0 26 e3 bb  09 81 12 dc 1e 3a d0 45  |.Q.w.&.......:.E|
```

Signer

1
unnamed
- #0
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Code Signing PCA
- 61:01:CF:3E:00:00:00:00:00:0F
SHA1: nil

contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

08 37 f5 d6 58 d8 f3 3f  59 49 e2 44 d5 5a cc b1  |.7..X..?YI.D.Z..|
c0 0a b5 20                                       |...             |

1.3.6.1.4.1.311.2.1.12

00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 |.M.i.c.r.o.s.o.f| 00 74 00 20 00 50 00 75 00 62 00 6c 00 69 00 73 |.t. .P.u.b.l.i.s| 00 68 00 65 00 72 00 20 00 49 00 46 00 69 00 6c |.h.e.r. .I.F.i.l| 00 74 00 65 00 72 |.t.e.r |
: http://office.microsoft.com

rsaEncryption:

7d 56 56 58 a8 33 22 c6  bf 96 be 0f d6 6e ff cc  |}VVX.3"......n..|
96 7c 39 2c 7d 88 fe 39  61 b3 5d 4c 5f 3d 61 9c  |.|9,}..9a.]L_=a.|
b3 d8 25 2b eb 4f 9c 64  c5 6b 1f 1d 31 b8 76 66  |..%+.O.d.k..1.vf|
f2 fe 2a 0a 55 25 8e ce  c8 04 ea eb e0 f9 f9 f2  |..*.U%..........|
2b 0a ee 2c 89 89 72 d1  70 e9 57 23 58 f4 32 48  |+..,..r.p.W#X.2H|
04 52 1e cf 42 0d b4 36  61 95 40 b4 d4 fc cb 94  |.R..B..6a.@.....|
64 5a 97 ec 64 d7 9d a0  35 a7 5c a3 30 bd 31 e7  |dZ..d...5.\.0.1.|
b4 a0 58 3f 40 11 b7 65  81 fc 07 a3 fd 62 73 32  |..X?@..e.....bs2|
3e 69 7a 80 17 d5 e4 64  c8 5c b7 17 eb 99 f8 d6  |>iz....d.\......|
a0 1f 3e 3d 32 61 f0 f3  bf fc 20 dc 63 1a 4c 7a  |..>=2a.... .c.Lz|
aa 15 8f 93 81 3c fd a3  09 26 f6 bd 56 09 8b af  |.....<...&..V...|
18 83 e8 99 3f 2e 14 7e  9c af 06 b9 97 b3 cc a1  |....?..~........|
a2 e4 51 8c 68 55 30 f4  de dd 94 06 33 a0 f1 09  |..Q.hU0.....3...|
11 54 62 e4 b6 3b 33 9b  a1 6d 03 74 78 56 86 dc  |.Tb..;3..m.txV..|
a6 a0 a2 9f 9a 03 20 42  aa 6a 41 69 bf 15 70 a9  |...... B.jAi..p.|
25 b2 15 e4 8f 7d 7e cf  37 3e 9e 68 bd 57 d7 e3  |%....}~.7>.h.W..|

countersignature

unnamed
- #0
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Timestamping PCA
- 61:06:94:2D:00:00:00:00:00:09
SHA1

contentType: pkcs7-data
signingTime: 2010-02-28 09:36:26 UTC

messageDigest:

31 43 10 87 31 9e e9 64  b5 02 e0 f2 b3 a3 25 80  |1C..1..d......%.|
69 f0 78 ee                                       |i.x.            |

RSA-SHA1:

18 2d b2 26 8f f3 9d 9c  a0 8a 20 62 df 1b 69 64  |.-.&...... b..id|
97 64 50 25 d6 9a dc f2  52 c2 d1 62 69 3c 6c 69  |.dP%....R..bi.CV...5..U.|
ae c7 fb 27 da 27 4c 93  fe b4 42 a7 75 c8 d5 df  |...'.'L...B.u...|
95 df e4 65 28 c7 06 74  e3 51 75 3c 3d 63 95 a7  |...e(..t.Qu<=c..|
17 d7 b4 2b ee f2 c6 c7  7b 3f 99 c8 fd af 78 97  |...+....{?....x.|
95 f9 33 a9 a0 e4 2d e1  dc 67 3a 97 af 31 db 28  |..3...-..g:..1.(|
23 39 ac 19 d2 5b 8a 8d  4d 44 60 1a 7d b4 e8 81  |#9...[..MD`.}...|
59 fd 43 30 d6 a4 61 3f  23 24 0c 7b 83 67 ca 09  |Y.C0..a?#$.{.g..|
6e ce e8 d4 43 1c e1 8f  8f 50 a3 74 ae a4 d0 f2  |n...C....P.t....|
ce 7f 2b 83 58 ec 37 ae  57 e4 ac 16 e6 17 87 08  |..+.X.7.W.......|
91 af 84 27 49 33 e5 c4  97 ca 44 aa 26 00 01 04  |...'I3....D.&...|
da d3 8a de ca 5c 24 b7  a8 d5 5e 3d ce 05 bb 6c  |.....\$...^=...l|

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	30632	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

PUBFILT.DLL-

MZ Header

Rich Header

DOS stub

PE Header

Sections

Data Directory

StringTable 000004E4

VS_FIXEDFILEINFO

Signers (1)

Certificates (4)

PUBFILT.DLL
-