Microsoft.LightSwitch.Toolkit.exe - WEXTRACT.EXE .MUI

info
MZ
PE
resources
strings
imports
foremost
7zip
version info
signature
hexdump
disasm
log
discuss
donate

filename	Microsoft.LightSwitch.Toolkit.exe
size	418176 (0x66180)
md5	0fc7f8f00e074dd6d36405551cbf6d93

type	PE32 executable (GUI) Intel 80386, for MS Windows, MS CAB-Installer self-extracting archive
mimetype	application/x-dosexec

clamav	scan pending
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf0

Rich Header

lib id	version	times used
149	30729	7
132	30729	16
147	30729	15
1	0	214
131	30729	94
126	50727	1
148	30729	1
145	30729	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x4a5bc673
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0xac00
SizeOfInitializedData	0x59600
SizeOfUninitializedData	0
AddressOfEntryPoint	0x6af8
BaseOfCode	0x1000
BaseOfData	0xc000
ImageBase	0x1000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.1
ImageVersion	6.1
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0x69000
SizeOfHeaders	0x400
CheckSum	0x69391
Subsystem	2
DllCharacteristics	0x8140
SizeOfStackReserve	0x40000
SizeOfStackCommit	0x2000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xaae4	0xac00	R-X CODE
.data	0xc000	0x225c	0x600	RW- IDATA
.rsrc	0xf000	0x59000	0x58200	R-- IDATA
.reloc	0x68000	0xd98	0xe00	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0xad0c	0xa0
RESOURCE	0xf000	0x58120
EXCEPTION	0	0
SECURITY	0x64600	0x1b80
BASERELOC	0x68000	0x828
DEBUG	0x12a0	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x16f0	0x40
Bound_IAT	0	0
IAT	0x1000	0x280
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
AVI	#3001	11802	1252
ICON	#1	1640	1252
ICON	#2	744	1252
ICON	#3	488	1252
ICON	#4	296	1252
ICON	#5	3752	1252
ICON	#6	2216	1252
ICON	#7	1736	1252
ICON	#8	1384	1252
ICON	#9	55762	1252
ICON	#10	9640	1252
ICON	#11	4264	1252
ICON	#12	2440	1252
ICON	#13	1128	1252
DIALOG	#2001	754	1252
DIALOG	#2002	432	1252
DIALOG	#2003	358	1252
DIALOG	#2004	448	1252
DIALOG	#2005	304	1252
DIALOG	#2006	288	1252
STRING	#63	140	1252
STRING	#76	1312	1252
STRING	#77	1484	1252
STRING	#80	1200	1252
STRING	#83	1098	1252
STRING	#85	974	1252
RCDATA	CABINET	249598	1252
RCDATA	EXTRACTOPT	4	1252
RCDATA	FILESIZES	36	1252
RCDATA	FINISHMSG	70	1252
RCDATA	LICENSE	7	1252
RCDATA	PACKINSTSPACE	4	1252
RCDATA	REBOOT	4	1252
RCDATA	RUNPROGRAM	7	1252
RCDATA	SHOWWINDOW	4	1252
RCDATA	TITLE	39	1252
RCDATA	UPROMPT	7	1252
GROUP_ICON	#3000	188	1252
VERSION	#1	1060	1252
MANIFEST	#1	1260	1252

id	lang	string
1000	1033	Please select a folder to store the extracted files.
1001	1033	%s
1200	1033	Failed to get disk space information from: %s. System Message: %s.
1201	1033	A required resource cannot be located.
1202	1033	Are you sure you want to cancel?
1204	1033	Unable to retrieve operating system version information.
1205	1033	Memory allocation request failed.
1208	1033	Unable to create extraction thread.
1210	1033	Cabinet is not valid.
1211	1033	Filetable full.
1212	1033	Can not change to destination folder.
1213	1033	Setup could not find a drive with %s KB free disk space to install the program. Please free up some space first and press RETRY or press CANCEL to exit setup.
1214	1033	That folder is invalid. Please make sure the folder exists and is writable.
1215	1033	You must specify a folder with fully qualified pathname or choose Cancel.
1216	1033	Could not update folder edit box.
1217	1033	Could not load functions required for browser dialog.
1218	1033	Could not load Shell32.dll required for browser dialog.
1220	1033	Error creating process <%s>. Reason: %s
1221	1033	The cluster size in this system is not supported.
1222	1033	A required resource appears to be corrupted.
1223	1033	Windows 95 or Windows NT 4.0 Beta 2 or greater is required for this installation.
1224	1033	Error loading %s
1225	1033	GetProcAddress() failed on function '%s'. Possible reason: incorrect version of advpack.dll being used.
1226	1033	Windows 95 or Windows NT is required to install
1227	1033	Could not create folder '%s'
1228	1033	To install this program, you need %s KB disk space on drive %s. It is recommended that you free up the required disk space before you continue. Do you still want to continue?
1264	1033	Error retrieving Windows folder
1269	1033	NT Shutdown: OpenProcessToken error.
1270	1033	NT Shutdown: AdjustTokenPrivileges error.
1271	1033	NT Shutdown: ExitWindowsEx error.
1272	1033	Extracting file failed. It is most likely caused by low memory (low disk space for swapping file) or corrupted Cabinet file.
1273	1033	The setup program could not retrieve the volume information for drive (%s) . System message: %s.
1274	1033	Setup could not find a drive with %s KB free disk space to install the program. Please free up some space and try again.
1275	1033	The installation program appears to be damaged or corrupted. Contact the vendor of this application.
1312	1033	Command line option syntax error. Type Command /? for Help.
1313	1033	Command line options: /Q -- Quiet modes for package, /T:<full path> -- Specifies temporary working folder, /C -- Extract files only to the folder when used also with /T. /C:<Cmd> -- Override Install Command defined by author.
1314	1033	You must restart your computer before the new settings will take effect. Do you want to restart your computer now?
1316	1033	Another copy of the '%s' package is already running on your system. Do you want to run another copy?
1317	1033	Could not find the file: %s.
1351	1033	You do not have administrator privileges on this machine. Some installations cannot be completed correctly unless they are run by an administrator.
1354	1033	The folder '%s' does not exist. Do you want to create it?
1355	1033	Another copy of the '%s' package is already running on your system. You can only run one copy at a time.
1356	1033	The '%s' package is not compatible with the version of Windows you are running.
1357	1033	The '%s' package is not compatible with the version of the file: %s on your system.

module_name	hint	ord	function_name
ADVAPI32.dll	288		FreeSid
ADVAPI32.dll	32		AllocateAndInitializeSid
ADVAPI32.dll	263		EqualSid
ADVAPI32.dll	346		GetTokenInformation
ADVAPI32.dll	503		OpenProcessToken
ADVAPI32.dll	31		AdjustTokenPrivileges
ADVAPI32.dll	406		LookupPrivilegeValueA
ADVAPI32.dll	560		RegCloseKey
ADVAPI32.dll	583		RegDeleteValueA
ADVAPI32.dll	608		RegOpenKeyExA
ADVAPI32.dll	621		RegQueryValueExA
ADVAPI32.dll	615		RegQueryInfoKeyA
ADVAPI32.dll	637		RegSetValueExA
ADVAPI32.dll	568		RegCreateKeyExA
KERNEL32.dll	840		LocalFree
KERNEL32.dll	836		LocalAlloc
KERNEL32.dll	514		GetLastError
KERNEL32.dll	448		GetCurrentProcess
KERNEL32.dll	1357		lstrlenA
KERNEL32.dll	1335		_lclose
KERNEL32.dll	1337		_llseek
KERNEL32.dll	1338		_lopen
KERNEL32.dll	1322		WritePrivateProfileStringA
KERNEL32.dll	686		GetWindowsDirectoryA
KERNEL32.dll	124		CreateDirectoryA
KERNEL32.dll	485		GetFileAttributesA
KERNEL32.dll	531		GetModuleFileNameA
KERNEL32.dll	623		GetSystemDirectoryA
KERNEL32.dll	1024		RemoveDirectoryA
KERNEL32.dll	302		FindClose
KERNEL32.dll	323		FindNextFileA
KERNEL32.dll	211		DeleteFileA
KERNEL32.dll	1118		SetFileAttributesA
KERNEL32.dll	1345		lstrcmpA
KERNEL32.dll	306		FindFirstFileA
KERNEL32.dll	284		ExpandEnvironmentStringsA
KERNEL32.dll	698		GlobalFree
KERNEL32.dll	709		GlobalUnlock
KERNEL32.dll	702		GlobalLock
KERNEL32.dll	691		GlobalAlloc
KERNEL32.dll	766		IsDBCSLeadByte
KERNEL32.dll	608		GetShortPathNameA
KERNEL32.dll	577		GetPrivateProfileStringA
KERNEL32.dll	571		GetPrivateProfileIntA
KERNEL32.dll	97		CompareStringA
KERNEL32.dll	674		GetVersion
KERNEL32.dll	536		GetModuleHandleW
KERNEL32.dll	357		FreeResource
KERNEL32.dll	852		LockResource
KERNEL32.dll	833		LoadResource
KERNEL32.dll	1201		SizeofResource
KERNEL32.dll	82		CloseHandle
KERNEL32.dll	960		ReadFile
KERNEL32.dll	1317		WriteFile
KERNEL32.dll	1126		SetFilePointer
KERNEL32.dll	1130		SetFileTime
KERNEL32.dll	838		LocalFileTimeToFileTime
KERNEL32.dll	228		DosDateTimeToFileTime
KERNEL32.dll	136		CreateFileA
KERNEL32.dll	1100		SetCurrentDirectoryA
KERNEL32.dll	642		GetTempFileNameA
KERNEL32.dll	677		GetVolumeInformationA
KERNEL32.dll	349		FormatMessageA
KERNEL32.dll	446		GetCurrentDirectoryA
KERNEL32.dll	281		ExitProcess
KERNEL32.dll	829		LoadLibraryExA
KERNEL32.dll	675		GetVersionExA
KERNEL32.dll	479		GetExitCodeProcess
KERNEL32.dll	581		GetProcAddress
KERNEL32.dll	164		CreateProcessA
KERNEL32.dll	644		GetTempPathA
KERNEL32.dll	627		GetSystemInfo
KERNEL32.dll	155		CreateMutexA
KERNEL32.dll	1113		SetEvent
KERNEL32.dll	130		CreateEventA
KERNEL32.dll	181		CreateThread
KERNEL32.dll	1039		ResetEvent
KERNEL32.dll	1217		TerminateThread
KERNEL32.dll	466		GetDriveTypeA
KERNEL32.dll	331		FindResourceA
KERNEL32.dll	828		LoadLibraryA
KERNEL32.dll	354		FreeLibrary
KERNEL32.dll	748		InterlockedExchange
KERNEL32.dll	1202		Sleep
KERNEL32.dll	745		InterlockedCompareExchange
KERNEL32.dll	610		GetStartupInfoA
KERNEL32.dll	1048		RtlUnwind
KERNEL32.dll	1189		SetUnhandledExceptionFilter
KERNEL32.dll	533		GetModuleHandleA
KERNEL32.dll	935		QueryPerformanceCounter
KERNEL32.dll	659		GetTickCount
KERNEL32.dll	453		GetCurrentThreadId
KERNEL32.dll	449		GetCurrentProcessId
KERNEL32.dll	633		GetSystemTimeAsFileTime
KERNEL32.dll	1216		TerminateProcess
KERNEL32.dll	1235		UnhandledExceptionFilter
KERNEL32.dll	251		EnumResourceLanguagesA
KERNEL32.dll	870		MulDiv
KERNEL32.dll	460		GetDiskFreeSpaceA
KERNEL32.dll	1273		WaitForSingleObject
GDI32.dll	459		GetDeviceCaps
USER32.dll	626		SendDlgItemMessageA
USER32.dll	295		GetDlgItem
USER32.dll	659		SetForegroundWindow
USER32.dll	714		SetWindowTextA
USER32.dll	526		MessageBoxA
USER32.dll	168		DialogBoxIndirectParamA
USER32.dll	735		ShowWindow
USER32.dll	216		EnableWindow
USER32.dll	297		GetDlgItemTextA
USER32.dll	289		GetDC
USER32.dll	613		ReleaseDC
USER32.dll	710		SetWindowPos
USER32.dll	631		SendMessageA
USER32.dll	562		PeekMessageA
USER32.dll	540		MsgWaitForMultipleObjects
USER32.dll	174		DispatchMessageA
USER32.dll	29		CallWindowProcA
USER32.dll	405		GetWindowLongA
USER32.dll	707		SetWindowLongA
USER32.dll	50		CharPrevA
USER32.dll	57		CharUpperA
USER32.dll	47		CharNextA
USER32.dll	245		ExitWindowsEx
USER32.dll	218		EndDialog
USER32.dll	291		GetDesktopWindow
USER32.dll	505		LoadStringA
USER32.dll	655		SetDlgItemTextA
USER32.dll	525		MessageBeep
USER32.dll	412		GetWindowRect
USER32.dll	382		GetSystemMetrics
msvcrt.dll	276		_cexit
msvcrt.dll	354		_exit
msvcrt.dll	106		_XcptFilter
msvcrt.dll	500		_ismbblead
msvcrt.dll	1167		exit
msvcrt.dll	231		_acmdln
msvcrt.dll	469		_initterm
msvcrt.dll	257		_amsg_exit
msvcrt.dll	212		__setusermatherr
msvcrt.dll	185		__p__commode
msvcrt.dll	190		__p__fmode
msvcrt.dll	210		__set_app_type
msvcrt.dll	55		void __cdecl terminate(void) ?terminate@@YAXXZ
msvcrt.dll	295		_controlfp
msvcrt.dll	145		__getmainargs
msvcrt.dll	1258		memcpy
msvcrt.dll	1262		memset
msvcrt.dll	968		_vsnprintf
COMCTL32.dll		17
VERSION.dll	3		GetFileVersionInfoSizeA
VERSION.dll			GetFileVersionInfoA
VERSION.dll	13		VerQueryValueA

StringTable 040904B0

CompanyName	Microsoft Corporation
FileDescription	Win32 Cabinet Self-Extractor
FileVersion	8.00.7600.16385 (win7_rtm.090713-1255)
InternalName	Wextract
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	WEXTRACT.EXE .MUI
ProductName	Windows® Internet Explorer
ProductVersion	8.00.7600.16385

VS_FIXEDFILEINFO

FileVersion	8.0.7600.16385
ProductVersion	8.0.7600.16385
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Code Signing PCA

serial: 6108775F00000000004A

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:08:77:5f:00:00:00:00:00:4a
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA
        Validity
            Not Before: Jul 19 22:53:10 2010 GMT
            Not After : Oct 19 22:53:10 2011 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, CN=Microsoft Corporation
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cc:7e:80:7b:41:fa:8b:b4:4d:99:29:43:dd:e6:
                    f8:52:df:5b:42:97:bd:33:19:9c:ef:b5:da:d0:c0:
                    dc:e8:f1:b7:be:5c:e1:0a:b2:c2:35:a0:7e:e4:f3:
                    d4:38:a7:f2:0f:42:72:a7:ba:9b:cf:1f:24:de:56:
                    0d:84:73:cc:d3:63:f7:17:cd:af:69:6f:61:4d:4c:
                    80:4f:c8:77:1c:51:64:c8:d3:04:f3:14:26:b3:b8:
                    42:3f:33:43:b0:db:26:59:58:93:b5:6d:89:62:0f:
                    07:56:5b:d5:12:a0:b1:09:cc:16:2b:f9:8c:df:61:
                    56:e8:06:78:7f:d7:73:88:26:03:67:d1:a3:ff:34:
                    82:ac:2d:4c:d8:02:ec:ed:6f:b9:a2:31:c5:32:4c:
                    bb:f6:fd:5f:62:5b:5e:f1:f6:64:91:c7:85:77:47:
                    1c:f6:a7:2b:47:2d:0b:37:54:4f:b6:1f:04:8d:b5:
                    ec:60:27:a7:f3:7e:b6:7c:a1:4c:91:a6:8b:71:d6:
                    c6:35:61:47:bc:c1:15:4b:dd:ac:33:22:be:06:19:
                    96:4b:8a:1e:6e:00:eb:be:1e:69:dd:58:59:21:03:
                    2b:3c:be:e6:13:05:17:66:35:a7:86:2d:1a:f1:d9:
                    34:c0:01:80:1a:fc:9a:46:9d:6e:a4:e7:48:dc:35:
                    ea:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Subject Key Identifier: 
                E4:6F:5F:CA:89:F9:53:BE:F0:70:57:06:50:AA:C2:79:0D:AC:56:9B
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Authority Key Identifier: 
                57:45:74:1C:5D:B0:F6:C8:43:05:E0:8C:54:2D:8F:32:A7:FE:48:96
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/CodeSigPCA.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/CodeSigPCA.crt
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        96:41:5d:3d:5c:2b:a4:ce:b8:2a:45:2f:42:02:5e:a1:90:1c:
        4c:74:27:09:ce:0b:54:7d:70:28:41:72:3b:a4:15:bc:d1:04:
        52:57:af:77:74:6d:0b:55:57:87:37:10:49:1e:d6:e6:d4:c2:
        63:94:b4:fd:a4:2e:2d:fa:5f:e2:19:59:15:84:d9:b7:b6:e9:
        52:a2:52:de:23:5f:20:2f:59:d3:ab:1a:84:7f:1d:e3:bd:ea:
        0f:df:01:88:39:25:d8:ed:64:61:19:1b:7a:af:a6:14:4a:46:
        50:48:d9:72:4b:d5:4b:92:dd:f0:0f:84:7c:cb:d3:c6:f2:4c:
        78:6e:fd:bc:ff:66:10:0a:f7:03:5d:15:ea:5e:98:0c:09:d2:
        99:8f:2e:b5:20:bd:61:e6:c9:6f:05:14:11:cb:7b:fb:42:08:
        bd:03:f1:26:57:67:4d:8f:59:8b:b8:44:c7:45:d3:62:04:0c:
        2d:30:03:58:5e:ec:48:f4:6e:a8:14:31:04:fd:34:a2:b8:04:
        2d:02:dd:3a:a1:09:5e:ad:61:b1:8f:70:c0:78:55:23:63:a8:
        9f:59:77:a2:db:b9:1b:71:28:1c:fc:2e:e1:04:8f:b5:ef:34:
        be:4a:99:47:e3:64:52:16:3c:fa:bd:e0:e8:e0:14:0c:10:22:
        34:82:82:1e

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:05:19:96:00:00:00:00:00:1b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA
        Validity
            Not Before: Jul 25 20:42:19 2011 GMT
            Not After : Oct 25 20:42:19 2012 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, OU=nCipher DSE ESN:9E78-864B-039D, CN=Microsoft Time-Stamp Service
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d3:cb:3b:53:a2:9f:44:a3:7a:ab:4d:56:71:53:
                    8a:77:aa:37:93:7e:01:3e:fd:ab:02:a3:53:a9:ff:
                    d1:b1:22:c5:00:90:e7:75:6e:ee:18:e8:81:0e:13:
                    c5:d8:61:00:be:1f:a0:76:3b:04:0d:04:c5:04:a0:
                    a8:fc:43:53:06:a1:04:04:b9:0b:92:98:02:62:38:
                    ef:d4:33:12:f7:2b:3d:7b:ef:ad:45:57:85:95:20:
                    9f:d7:63:34:9c:62:46:8e:be:ae:e0:d9:9e:39:f6:
                    a9:55:fd:cf:e7:77:e6:35:13:ef:5c:e8:bf:48:93:
                    4f:1a:43:07:58:38:8a:7f:85:14:6c:ea:c9:d0:4b:
                    7a:82:6e:cb:d3:15:60:08:14:89:94:a8:5b:3f:3a:
                    c9:3f:20:7d:6d:2f:58:1a:7d:ca:8a:38:bc:c3:c2:
                    39:68:d8:2d:58:1a:23:ed:2a:10:08:5a:20:8c:82:
                    a5:ed:d1:97:45:92:85:cc:c3:37:83:df:0d:98:7c:
                    c5:d3:b6:e0:99:53:d8:78:08:f5:e5:23:21:07:62:
                    86:5a:6a:69:19:fd:70:f9:53:34:81:f7:25:31:19:
                    86:87:8b:c0:55:9a:fd:aa:4c:35:15:fd:5b:e9:95:
                    c9:ab:53:98:29:5f:2c:a5:e1:25:0f:64:c5:f2:b0:
                    27:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                79:23:E7:A1:0D:BE:55:2C:68:18:29:62:82:67:D6:F3:E1:36:38:5A
            X509v3 Authority Key Identifier: 
                23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt
            X509v3 Extended Key Usage: 
                Time Stamping
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        47:c2:76:81:5b:31:dd:6f:d3:3c:99:f2:7a:6c:7e:97:13:50:
        2c:05:17:1b:10:b8:44:a1:b5:8c:f4:56:cf:bd:b0:21:b4:64:
        6d:61:1c:d8:ee:e8:eb:f5:92:ee:43:a2:18:44:c3:fa:fa:ef:
        ad:b6:5c:7f:97:6d:4b:b5:43:fb:27:61:78:08:54:7c:b1:f9:
        af:98:0a:b4:74:c4:aa:e8:2d:50:c4:7d:fe:7d:4e:a1:99:d6:
        27:28:b7:ae:d8:df:b1:8f:83:22:8e:ce:f3:79:fc:61:14:6d:
        bf:eb:cc:84:b0:df:a3:bb:5b:05:b7:ea:54:f5:62:1d:6c:27:
        a6:63:4b:fa:e3:a1:fa:bb:df:85:96:65:69:53:b0:b6:71:98:
        64:26:66:bd:c5:f1:5c:62:bc:91:f4:3d:9c:4b:42:00:0d:cf:
        38:05:14:26:5a:dc:2a:05:4b:7f:6a:99:38:d8:dd:73:99:a2:
        ce:8c:50:24:9e:a4:eb:f5:3f:8a:78:cc:54:99:5d:25:66:a4:
        41:06:28:af:49:c4:b4:52:94:ec:de:02:83:64:fe:4d:d4:ff:
        4b:a2:fc:29:80:db:ee:3f:ab:3c:ed:33:88:ca:bf:22:60:d0:
        5c:3b:04:b0:0a:b4:98:6d:3c:a7:3a:4f:9a:d1:01:16:11:62:
        8a:41:76:a0

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:16:68:34:00:00:00:00:00:1c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
        Validity
            Not Before: Apr  3 12:53:09 2007 GMT
            Not After : Apr  3 13:03:09 2021 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:9f:a1:6c:b1:df:db:48:92:2a:7c:6b:2e:19:e1:
                    bd:e2:e3:c5:99:51:23:50:ad:ce:dd:18:4e:24:0f:
                    ee:d1:a7:d1:4c:ad:74:30:20:11:eb:07:d5:54:95:
                    15:49:94:1b:42:92:ae:98:5c:30:26:da:00:6b:e8:
                    7b:bd:ec:89:07:0f:f7:0e:04:98:f0:89:cc:1f:cb:
                    33:24:87:9d:f2:f4:67:1c:2c:fc:7b:e7:88:1d:ea:
                    e7:4e:a3:a1:c1:23:53:ca:8d:fa:45:cf:09:d0:5e:
                    af:d0:b0:42:04:a2:f9:a6:6c:93:67:d7:28:dc:46:
                    53:b0:86:d0:e5:28:46:2e:27:ac:86:4f:55:52:0c:
                    e4:03:2c:fb:6a:90:90:30:6e:87:f3:59:30:9d:fa:
                    7e:d6:97:b3:e8:21:97:7e:f8:d2:13:f3:08:b7:53:
                    6d:52:b4:45:90:9f:48:00:4a:47:66:11:27:29:66:
                    a8:97:e4:d3:06:81:4a:a2:f9:84:a7:11:47:14:09:
                    82:9f:84:ed:55:78:fe:01:9a:1d:50:08:85:00:10:
                    30:46:ed:b7:de:23:46:bb:c4:2d:54:9f:af:1e:78:
                    41:31:77:cc:9b:df:3b:83:93:a1:61:02:b5:1d:0d:
                    b1:fc:f7:9b:b2:01:ce:22:4b:54:ff:f9:05:c3:c2:
                    20:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Authority Key Identifier: 
                keyid:0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4
                DirName:/DC=com/DC=microsoft/CN=Microsoft Root Certificate Authority
                serial:79:AD:16:A1:4A:A0:A5:AD:4C:73:58:F4:07:13:2E:65
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt
            X509v3 Extended Key Usage: 
                Time Stamping
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        10:97:8a:c3:5c:03:44:36:dd:e9:b4:ad:77:db:ce:79:51:4d:
        01:b1:2e:74:71:5b:6d:0c:13:ab:ce:be:7b:8f:b8:2e:d4:12:
        a2:8c:6d:62:b8:57:02:cb:4e:20:13:50:99:dd:7a:40:e2:57:
        bb:af:58:9a:1c:e1:1d:01:86:ac:bb:78:f2:8b:d0:ec:3b:01:
        ee:e2:be:8f:0a:05:c8:8d:48:e2:f0:53:15:dd:4f:ab:92:e4:
        e7:8d:6a:d5:80:c1:e6:94:f2:06:2f:85:03:e9:91:2a:24:22:
        70:fb:f6:fc:e4:78:99:2e:0d:f7:07:e2:70:bc:18:4e:9d:8e:
        6b:0a:72:95:b8:a1:39:9c:67:2d:c5:51:0e:ea:62:5c:3f:16:
        98:8b:20:3f:e2:07:1a:32:f9:cc:31:4a:76:31:3d:2b:72:0b:
        c8:ea:70:3d:ff:85:0a:13:df:c2:0a:61:8e:f0:d7:b8:17:eb:
        4e:8b:7f:c5:35:2b:5e:a3:bf:eb:bc:7d:0b:42:7b:d4:53:72:
        21:ee:30:ca:bb:78:65:5c:5b:01:17:0a:14:0e:d2:da:14:98:
        f5:3c:b9:66:58:b3:2d:2f:e7:f9:85:86:cc:51:56:e8:9d:70:
        94:6c:ac:39:4c:d4:f6:79:bf:aa:18:7a:62:29:ef:a2:9b:29:
        34:06:77:1a:62:c9:3d:1e:6d:1f:82:f0:0b:c7:2c:bb:cf:43:
        b3:e5:f9:ec:7d:b5:e3:a4:a8:74:35:b8:4e:c5:71:23:12:26:
        76:0b:3c:52:8c:71:5a:46:43:14:bc:b3:b3:b0:4d:67:c8:9f:
        42:ff:80:79:21:80:9e:15:30:66:e8:42:12:5e:1a:c8:9e:22:
        21:d0:43:e9:2b:e9:bb:f4:48:cc:2c:d4:d8:32:80:4c:26:2a:
        48:24:5f:5a:ea:56:ef:a6:de:99:9d:ca:3a:6f:bd:81:27:74:
        06:11:ee:76:21:bf:9b:82:c1:27:54:b6:b1:6a:3d:89:a1:76:
        61:b4:6e:a1:13:a6:bf:aa:47:f0:12:6f:fd:8a:32:6c:b2:fe:
        df:51:c8:8c:23:c9:66:bd:9d:1d:87:12:64:02:3d:2d:af:59:
        8f:b8:e4:21:e5:b5:b0:ca:63:b4:78:54:05:d4:41:2e:50:ac:
        94:b0:a5:78:ab:b3:a0:96:75:1a:d9:92:87:13:75:22:2f:32:
        a8:08:6e:a0:5b:8c:25:bf:a0:ef:84:ca:21:d6:eb:1e:4f:c9:
        9a:ee:49:e0:f7:01:65:6f:89:0b:7d:c8:69:c8:e6:6e:ea:a7:
        97:ce:31:29:ff:0e:c5:5b:5c:d8:4d:1b:a1:d8:fa:2f:9e:3f:
        2e:55:16:6b:c9:13:a3:fd

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:15:08:27:00:00:00:00:00:0c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
        Validity
            Not Before: Jan 25 23:22:32 2006 GMT
            Not After : Jan 25 23:32:32 2017 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:9f:8d:df:85:37:8c:b1:06:56:66:36:4e:d4:0a:
                    eb:36:23:91:1e:af:ab:8d:58:e9:c4:cf:c1:9f:3a:
                    0a:24:c4:c4:c4:5e:b0:ee:15:14:c5:fa:3e:99:33:
                    6b:19:69:72:f4:7c:05:5f:e5:99:25:44:d7:35:19:
                    8a:90:dc:28:8e:90:0c:ef:d5:90:61:ad:de:dc:18:
                    70:2d:83:c9:6f:af:85:2c:f8:dd:b9:b9:30:fd:71:
                    78:1c:83:fd:c8:a9:b9:82:67:0d:7a:b8:c1:09:c2:
                    bc:16:97:57:3f:1c:98:d3:69:d7:30:90:90:90:8d:
                    30:1f:d8:26:d4:9e:7b:88:d9:e2:09:ed:97:49:45:
                    eb:04:52:81:75:7b:b8:b5:22:b8:2e:56:bb:d7:cf:
                    a9:4e:3c:0a:83:a2:a8:3a:c5:ad:b6:01:0e:6a:cf:
                    22:b4:23:1f:6c:d5:27:e7:b7:7e:c1:b4:d5:32:ad:
                    79:25:1c:42:86:e2:9d:85:f4:57:da:1b:59:2f:2d:
                    26:92:29:c5:b3:d7:85:a3:9e:60:5a:94:e6:7b:9c:
                    7b:5e:82:34:4b:6d:ff:d4:ee:27:d0:a2:dc:d1:90:
                    0c:ce:7d:0e:15:7c:88:ac:34:c7:c0:6c:98:84:4a:
                    c9:44:79:68:28:df:22:83:0d:b8:8a:2c:48:61:e2:
                    fe:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Subject Key Identifier: 
                57:45:74:1C:5D:B0:F6:C8:43:05:E0:8C:54:2D:8F:32:A7:FE:48:96
            X509v3 Key Usage: 
                Digital Signature, Non Repudiation, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4
                DirName:/DC=com/DC=microsoft/CN=Microsoft Root Certificate Authority
                serial:79:AD:16:A1:4A:A0:A5:AD:4C:73:58:F4:07:13:2E:65
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.311.21.47
                  User Notice:
                    Explicit Text: 
            X509v3 Extended Key Usage: 
                Code Signing
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        30:bc:b0:20:a4:62:a0:a7:ef:39:26:61:3d:dc:ac:c6:99:d0:
        86:c4:2e:f5:83:32:65:5e:22:3e:9b:d6:86:f8:e8:b6:9f:ca:
        8b:d6:3b:75:0b:a1:91:3e:4c:dd:64:74:8c:49:f2:88:8c:18:
        67:6c:fe:15:66:46:b8:3a:46:42:97:c8:91:37:d4:24:b1:e7:
        ac:d3:ea:41:14:83:77:d3:c9:4f:05:5f:a3:14:52:bf:96:a4:
        2f:3e:56:5b:10:75:ce:53:c3:ce:05:54:69:b4:65:c9:24:a5:
        0f:e1:25:b8:1a:b9:4d:e5:02:b9:50:1e:4f:b3:98:0c:1d:95:
        02:ee:22:59:ad:22:cb:05:74:0b:04:45:7b:04:59:e0:d8:0f:
        b3:eb:4c:f8:60:dd:c2:78:9e:d1:ba:9f:6b:f7:f3:ee:7e:44:
        11:40:d2:bd:ba:9b:4b:16:08:6e:a4:be:55:e4:a6:38:12:a3:
        48:f4:1c:55:7a:8a:20:d1:7d:fe:91:db:94:8f:2f:c2:7b:6b:
        a6:64:85:4f:a3:e5:2c:34:29:5d:0b:bf:f5:c7:38:2f:c4:20:
        c4:56:31:f6:69:ce:85:f8:0a:91:ec:d0:d6:ae:ba:38:05:0c:
        eb:6e:4f:4c:9c:03:29:aa:a2:fc:18:a0:29:0c:0d:5c:5c:56:
        23:57:da:1c:96:0d:c8:26:36:c1:44:cb:e5:e1:e6:6f:89:e7:
        8f:e9:98:b5:73:d3:78:e3:ed:a3:01:3c:74:e5:5e:bc:6c:f6:
        21:89:67:05:ec:97:9d:b5:b1:fd:af:a6:e9:72:a5:c3:34:e1:
        2f:9f:f9:f4:6a:39:e2:2d:04:82:5b:fc:d0:9c:ae:7c:9d:11:
        f9:e6:b5:53:19:74:ba:39:4a:39:eb:7d:42:b3:4a:3b:37:3d:
        c2:4a:7b:27:98:e7:e2:4e:9b:1b:4a:54:38:6a:23:37:be:6a:
        b7:48:ee:ea:42:0d:49:24:91:8e:b7:04:2e:97:6f:e4:e7:45:
        bb:8f:4d:fd:60:d9:d7:59:c2:d8:80:d6:60:34:7b:b7:a1:93:
        20:fe:81:b8:aa:a5:5c:09:e9:8a:0d:be:28:4d:7e:d7:e8:0f:
        ed:65:78:d1:31:5f:b9:66:db:df:42:e7:0b:cc:02:07:8d:df:
        ff:20:06:a3:45:65:b4:b3:32:8d:2e:91:e2:4d:b4:a9:c9:fa:
        bc:6b:04:0e:b2:9f:ea:9f:de:a4:c9:0a:96:f4:8d:f7:d8:98:
        a8:f0:85:02:08:59:a4:20:a6:2c:0b:1a:f2:52:06:ed:69:e5:
        64:18:1b:e0:a3:ab:de:ca:7c:14:61:43:b8:65:f5:36:a3:55:
        13:2b:67:2c:4d:1b:30:4c

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

10 de 85 ef 3e 55 8e eb 0d e1 77 c9 38 fc e1 33 |....>U....w.8..3| 3d 4a dc 6d |=J.m |

unnamed

Certificate #0

2
- 61:08:77:5F:00:00:00:00:00:4A
- RSA-SHA1: nil
- Issuer
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Code Signing PCA
- 2010-07-19 22:53:10 UTC: 2011-10-19 22:53:10 UTC
- Subject
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - OU: MOPR
  - CN: Microsoft Corporation
- #5
  - rsaEncryption: nil
  - CC:7E:80:7B:41:FA:8B:B4:4D:99:29:43:DD:E6:F8:52:
    DF:5B:42:97:BD:33:19:9C:EF:B5:DA:D0:C0:DC:E8:F1:
    B7:BE:5C:E1:0A:B2:C2:35:A0:7E:E4:F3:D4:38:A7:F2:
    0F:42:72:A7:BA:9B:CF:1F:24:DE:56:0D:84:73:CC:D3:
    63:F7:17:CD:AF:69:6F:61:4D:4C:80:4F:C8:77:1C:51:
    64:C8:D3:04:F3:14:26:B3:B8:42:3F:33:43:B0:DB:26:
    59:58:93:B5:6D:89:62:0F:07:56:5B:D5:12:A0:B1:09:
    CC:16:2B:F9:8C:DF:61:56:E8:06:78:7F:D7:73:88:26:
    03:67:D1:A3:FF:34:82:AC:2D:4C:D8:02:EC:ED:6F:B9:
    A2:31:C5:32:4C:BB:F6:FD:5F:62:5B:5E:F1:F6:64:91:
    C7:85:77:47:1C:F6:A7:2B:47:2D:0B:37:54:4F:B6:1F:
    04:8D:B5:EC:60:27:A7:F3:7E:B6:7C:A1:4C:91:A6:8B:
    71:D6:C6:35:61:47:BC:C1:15:4B:DD:AC:33:22:BE:06:
    19:96:4B:8A:1E:6E:00:EB:BE:1E:69:DD:58:59:21:03:
    2B:3C:BE:E6:13:05:17:66:35:A7:86:2D:1A:F1:D9:34:
    C0:01:80:1A:FC:9A:46:9D:6E:A4:E7:48:DC:35:EA:37: 0x010001
- #6
  - extendedKeyUsage: codeSigning
  - subjectKeyIdentifier:
```
e4 6f 5f ca 89 f9 53 be  f0 70 57 06 50 aa c2 79  |.o_...S..pW.P..y|
0d ac 56 9b                                       |..V.            |
```
  - keyUsage: true, 0x80
  - authorityKeyIdentifier:
```
57 45 74 1c 5d b0 f6 c8  43 05 e0 8c 54 2d 8f 32  |WEt.]...C...T-.2|
a7 fe 48 96                                       |..H.            |
```
  - crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/CodeSigPCA.crl
  - authorityInfoAccess
    - caIssuers: http://www.microsoft.com/pki/certs/CodeSigPCA.crt

RSA-SHA1:

96 41 5d 3d 5c 2b a4 ce  b8 2a 45 2f 42 02 5e a1  |.A]=\+...*E/B.^.|
90 1c 4c 74 27 09 ce 0b  54 7d 70 28 41 72 3b a4  |..Lt'...T}p(Ar;.|
15 bc d1 04 52 57 af 77  74 6d 0b 55 57 87 37 10  |....RW.wtm.UW.7.|
49 1e d6 e6 d4 c2 63 94  b4 fd a4 2e 2d fa 5f e2  |I.....c.....-._.|
19 59 15 84 d9 b7 b6 e9  52 a2 52 de 23 5f 20 2f  |.Y......R.R.#_ /|
59 d3 ab 1a 84 7f 1d e3  bd ea 0f df 01 88 39 25  |Y.............9%|
d8 ed 64 61 19 1b 7a af  a6 14 4a 46 50 48 d9 72  |..da..z...JFPH.r|
4b d5 4b 92 dd f0 0f 84  7c cb d3 c6 f2 4c 78 6e  |K.K.....|....Lxn|
fd bc ff 66 10 0a f7 03  5d 15 ea 5e 98 0c 09 d2  |...f....]..^....|
99 8f 2e b5 20 bd 61 e6  c9 6f 05 14 11 cb 7b fb  |.... .a..o....{.|
42 08 bd 03 f1 26 57 67  4d 8f 59 8b b8 44 c7 45  |B....&WgM.Y..D.E|
d3 62 04 0c 2d 30 03 58  5e ec 48 f4 6e a8 14 31  |.b..-0.X^.H.n..1|
04 fd 34 a2 b8 04 2d 02  dd 3a a1 09 5e ad 61 b1  |..4...-..:..^.a.|
8f 70 c0 78 55 23 63 a8  9f 59 77 a2 db b9 1b 71  |.p.xU#c..Yw....q|
28 1c fc 2e e1 04 8f b5  ef 34 be 4a 99 47 e3 64  |(........4.J.G.d|
52 16 3c fa bd e0 e8 e0  14 0c 10 22 34 82 82 1e  |R.<........"4...|

Certificate #1
- 2
  - 61:05:19:96:00:00:00:00:00:1B
  - RSA-SHA1: nil
  - Issuer
    - C: US
    - ST: Washington
    - L: Redmond
    - O: Microsoft Corporation
    - CN: Microsoft Time-Stamp PCA
  - 2011-07-25 20:42:19 UTC: 2012-10-25 20:42:19 UTC
  - Subject
    - C: US
    - ST: Washington
    - L: Redmond
    - O: Microsoft Corporation
    - OU: MOPR
    - OU: nCipher DSE ESN:9E78-864B-039D
    - CN: Microsoft Time-Stamp Service
  - #5
    - rsaEncryption: nil
    - D3:CB:3B:53:A2:9F:44:A3:7A:AB:4D:56:71:53:8A:77:
      AA:37:93:7E:01:3E:FD:AB:02:A3:53:A9:FF:D1:B1:22:
      C5:00:90:E7:75:6E:EE:18:E8:81:0E:13:C5:D8:61:00:
      BE:1F:A0:76:3B:04:0D:04:C5:04:A0:A8:FC:43:53:06:
      A1:04:04:B9:0B:92:98:02:62:38:EF:D4:33:12:F7:2B:
      3D:7B:EF:AD:45:57:85:95:20:9F:D7:63:34:9C:62:46:
      8E:BE:AE:E0:D9:9E:39:F6:A9:55:FD:CF:E7:77:E6:35:
      13:EF:5C:E8:BF:48:93:4F:1A:43:07:58:38:8A:7F:85:
      14:6C:EA:C9:D0:4B:7A:82:6E:CB:D3:15:60:08:14:89:
      94:A8:5B:3F:3A:C9:3F:20:7D:6D:2F:58:1A:7D:CA:8A:
      38:BC:C3:C2:39:68:D8:2D:58:1A:23:ED:2A:10:08:5A:
      20:8C:82:A5:ED:D1:97:45:92:85:CC:C3:37:83:DF:0D:
      98:7C:C5:D3:B6:E0:99:53:D8:78:08:F5:E5:23:21:07:
      62:86:5A:6A:69:19:FD:70:F9:53:34:81:F7:25:31:19:
      86:87:8B:C0:55:9A:FD:AA:4C:35:15:FD:5B:E9:95:C9:
      AB:53:98:29:5F:2C:A5:E1:25:0F:64:C5:F2:B0:27:75: 0x010001
  - #6
    - subjectKeyIdentifier:
```
79 23 e7 a1 0d be 55 2c  68 18 29 62 82 67 d6 f3  |y#....U,h.)b.g..|
e1 36 38 5a                                       |.68Z            |
```
    - authorityKeyIdentifier:
```
23 34 f8 d9 52 46 70 0a  ed 40 fb 76 fb b3 2b b0  |#4..RFp..@.v..+.|
c3 35 b3 0f                                       |.5..            |
```
    - crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl
    - authorityInfoAccess
      - caIssuers: http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt
    - extendedKeyUsage: timeStamping
- RSA-SHA1:
```
47 c2 76 81 5b 31 dd 6f  d3 3c 99 f2 7a 6c 7e 97  |G.v.[1.o.<..zl~.|
13 50 2c 05 17 1b 10 b8  44 a1 b5 8c f4 56 cf bd  |.P,.....D....V..|
b0 21 b4 64 6d 61 1c d8  ee e8 eb f5 92 ee 43 a2  |.!.dma........C.|
18 44 c3 fa fa ef ad b6  5c 7f 97 6d 4b b5 43 fb  |.D......\..mK.C.|
27 61 78 08 54 7c b1 f9  af 98 0a b4 74 c4 aa e8  |'ax.T|......t...|
2d 50 c4 7d fe 7d 4e a1  99 d6 27 28 b7 ae d8 df  |-P.}.}N...'(....|
b1 8f 83 22 8e ce f3 79  fc 61 14 6d bf eb cc 84  |..."...y.a.m....|
b0 df a3 bb 5b 05 b7 ea  54 f5 62 1d 6c 27 a6 63  |....[...T.b.l'.c|
4b fa e3 a1 fa bb df 85  96 65 69 53 b0 b6 71 98  |K........eiS..q.|
64 26 66 bd c5 f1 5c 62  bc 91 f4 3d 9c 4b 42 00  |d&f...\b...=.KB.|
0d cf 38 05 14 26 5a dc  2a 05 4b 7f 6a 99 38 d8  |..8..&Z.*.K.j.8.|
dd 73 99 a2 ce 8c 50 24  9e a4 eb f5 3f 8a 78 cc  |.s....P$....?.x.|
54 99 5d 25 66 a4 41 06  28 af 49 c4 b4 52 94 ec  |T.]%f.A.(.I..R..|
de 02 83 64 fe 4d d4 ff  4b a2 fc 29 80 db ee 3f  |...d.M..K..)...?|
ab 3c ed 33 88 ca bf 22  60 d0 5c 3b 04 b0 0a b4  |.<.3..."`.\;....|
98 6d 3c a7 3a 4f 9a d1  01 16 11 62 8a 41 76 a0  |.m<.:O.....b.Av.|
```

2
- 61:16:68:34:00:00:00:00:00:1C
- RSA-SHA1: nil
- #2
  - DC: com
  - DC: microsoft
  - CN: Microsoft Root Certificate Authority
- 2007-04-03 12:53:09 UTC: 2021-04-03 13:03:09 UTC
- Subject
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Time-Stamp PCA
- #5
  - rsaEncryption: nil
  - 9F:A1:6C:B1:DF:DB:48:92:2A:7C:6B:2E:19:E1:BD:E2:
    E3:C5:99:51:23:50:AD:CE:DD:18:4E:24:0F:EE:D1:A7:
    D1:4C:AD:74:30:20:11:EB:07:D5:54:95:15:49:94:1B:
    42:92:AE:98:5C:30:26:DA:00:6B:E8:7B:BD:EC:89:07:
    0F:F7:0E:04:98:F0:89:CC:1F:CB:33:24:87:9D:F2:F4:
    67:1C:2C:FC:7B:E7:88:1D:EA:E7:4E:A3:A1:C1:23:53:
    CA:8D:FA:45:CF:09:D0:5E:AF:D0:B0:42:04:A2:F9:A6:
    6C:93:67:D7:28:DC:46:53:B0:86:D0:E5:28:46:2E:27:
    AC:86:4F:55:52:0C:E4:03:2C:FB:6A:90:90:30:6E:87:
    F3:59:30:9D:FA:7E:D6:97:B3:E8:21:97:7E:F8:D2:13:
    F3:08:B7:53:6D:52:B4:45:90:9F:48:00:4A:47:66:11:
    27:29:66:A8:97:E4:D3:06:81:4A:A2:F9:84:A7:11:47:
    14:09:82:9F:84:ED:55:78:FE:01:9A:1D:50:08:85:00:
    10:30:46:ED:B7:DE:23:46:BB:C4:2D:54:9F:AF:1E:78:
    41:31:77:CC:9B:DF:3B:83:93:A1:61:02:B5:1D:0D:B1:
    FC:F7:9B:B2:01:CE:22:4B:54:FF:F9:05:C3:C2:20:0B: 0x010001
- X509v3 extensions
  - basicConstraints: true, true
  - subjectKeyIdentifier:
```
23 34 f8 d9 52 46 70 0a  ed 40 fb 76 fb b3 2b b0  |#4..RFp..@.v..+.|
c3 35 b3 0f                                       |.5..            |
```
  - keyUsage: 0x86
  - 1.3.6.1.4.1.311.21.1: 0
  - authorityKeyIdentifier
    - 0e ac 82 60 40 56 27 97 e5 25 13 fc 2a e1 0a 53 |...`@V'..%..*..S| 95 59 e4 a4 |.Y.. |
      - #0
        DC: com
        DC: microsoft
        CN: Microsoft Root Certificate Authority
      - 79 ad 16 a1 4a a0 a5 ad 4c 73 58 f4 07 13 2e 65 |y...J...LsX....e|
  - crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl
  - authorityInfoAccess
    - caIssuers: http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt
  - extendedKeyUsage: timeStamping

RSA-SHA1:

10 97 8a c3 5c 03 44 36  dd e9 b4 ad 77 db ce 79  |....\.D6....w..y|
51 4d 01 b1 2e 74 71 5b  6d 0c 13 ab ce be 7b 8f  |QM...tq[m.....{.|
b8 2e d4 12 a2 8c 6d 62  b8 57 02 cb 4e 20 13 50  |......mb.W..N .P|
99 dd 7a 40 e2 57 bb af  58 9a 1c e1 1d 01 86 ac  |..z@.W..X.......|
bb 78 f2 8b d0 ec 3b 01  ee e2 be 8f 0a 05 c8 8d  |.x....;.........|
48 e2 f0 53 15 dd 4f ab  92 e4 e7 8d 6a d5 80 c1  |H..S..O.....j...|
e6 94 f2 06 2f 85 03 e9  91 2a 24 22 70 fb f6 fc  |..../....*$"p...|
e4 78 99 2e 0d f7 07 e2  70 bc 18 4e 9d 8e 6b 0a  |.x......p..N..k.|
72 95 b8 a1 39 9c 67 2d  c5 51 0e ea 62 5c 3f 16  |r...9.g-.Q..b\?.|
98 8b 20 3f e2 07 1a 32  f9 cc 31 4a 76 31 3d 2b  |.. ?...2..1Jv1=+|
72 0b c8 ea 70 3d ff 85  0a 13 df c2 0a 61 8e f0  |r...p=.......a..|
d7 b8 17 eb 4e 8b 7f c5  35 2b 5e a3 bf eb bc 7d  |....N...5+^....}|
0b 42 7b d4 53 72 21 ee  30 ca bb 78 65 5c 5b 01  |.B{.Sr!.0..xe\[.|
17 0a 14 0e d2 da 14 98  f5 3c b9 66 58 b3 2d 2f  |.........<.fX.-/|
e7 f9 85 86 cc 51 56 e8  9d 70 94 6c ac 39 4c d4  |.....QV..p.l.9L.|
f6 79 bf aa 18 7a 62 29  ef a2 9b 29 34 06 77 1a  |.y...zb)...)4.w.|
62 c9 3d 1e 6d 1f 82 f0  0b c7 2c bb cf 43 b3 e5  |b.=.m.....,..C..|
f9 ec 7d b5 e3 a4 a8 74  35 b8 4e c5 71 23 12 26  |..}....t5.N.q#.&|
76 0b 3c 52 8c 71 5a 46  43 14 bc b3 b3 b0 4d 67  |v.

2
- 61:15:08:27:00:00:00:00:00:0C
- RSA-SHA1: nil
- #2
  - DC: com
  - DC: microsoft
  - CN: Microsoft Root Certificate Authority
- 2006-01-25 23:22:32 UTC: 2017-01-25 23:32:32 UTC
- Subject
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Code Signing PCA
- #5
  - rsaEncryption: nil
  - 9F:8D:DF:85:37:8C:B1:06:56:66:36:4E:D4:0A:EB:36:
    23:91:1E:AF:AB:8D:58:E9:C4:CF:C1:9F:3A:0A:24:C4:
    C4:C4:5E:B0:EE:15:14:C5:FA:3E:99:33:6B:19:69:72:
    F4:7C:05:5F:E5:99:25:44:D7:35:19:8A:90:DC:28:8E:
    90:0C:EF:D5:90:61:AD:DE:DC:18:70:2D:83:C9:6F:AF:
    85:2C:F8:DD:B9:B9:30:FD:71:78:1C:83:FD:C8:A9:B9:
    82:67:0D:7A:B8:C1:09:C2:BC:16:97:57:3F:1C:98:D3:
    69:D7:30:90:90:90:8D:30:1F:D8:26:D4:9E:7B:88:D9:
    E2:09:ED:97:49:45:EB:04:52:81:75:7B:B8:B5:22:B8:
    2E:56:BB:D7:CF:A9:4E:3C:0A:83:A2:A8:3A:C5:AD:B6:
    01:0E:6A:CF:22:B4:23:1F:6C:D5:27:E7:B7:7E:C1:B4:
    D5:32:AD:79:25:1C:42:86:E2:9D:85:F4:57:DA:1B:59:
    2F:2D:26:92:29:C5:B3:D7:85:A3:9E:60:5A:94:E6:7B:
    9C:7B:5E:82:34:4B:6D:FF:D4:EE:27:D0:A2:DC:D1:90:
    0C:CE:7D:0E:15:7C:88:AC:34:C7:C0:6C:98:84:4A:C9:
    44:79:68:28:DF:22:83:0D:B8:8A:2C:48:61:E2:FE:11: 0x010001
- #6
  - 1.3.6.1.4.1.311.21.1: 0
  - subjectKeyIdentifier:
```
57 45 74 1c 5d b0 f6 c8  43 05 e0 8c 54 2d 8f 32  |WEt.]...C...T-.2|
a7 fe 48 96                                       |..H.            |
```
  - keyUsage: 0xc6
  - basicConstraints: true, true
  - authorityKeyIdentifier
    - 0e ac 82 60 40 56 27 97 e5 25 13 fc 2a e1 0a 53 |...`@V'..%..*..S| 95 59 e4 a4 |.Y.. |
      - #0
        DC: com
        DC: microsoft
        CN: Microsoft Root Certificate Authority
      - 79 ad 16 a1 4a a0 a5 ad 4c 73 58 f4 07 13 2e 65 |y...J...LsX....e|
  - crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl
  - authorityInfoAccess
    - caIssuers: http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt
  - certificatePolicies
    - 1.3.6.1.4.1.311.21.47
      - id-qt-unotice:
        00 43 00 6f 00 70 00 79 00 72 00 69 00 67 00 68 |.C.o.p.y.r.i.g.h| 00 74 00 20 00 a9 00 20 00 32 00 30 00 30 00 36 |.t. ... .2.0.0.6| 00 20 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f |. .M.i.c.r.o.s.o| 00 66 00 74 00 20 00 43 00 6f 00 72 00 70 00 6f |.f.t. .C.o.r.p.o| 00 72 00 61 00 74 00 69 00 6f 00 6e 00 2e |.r.a.t.i.o.n.. |
  - extendedKeyUsage: codeSigning

RSA-SHA1:

30 bc b0 20 a4 62 a0 a7  ef 39 26 61 3d dc ac c6  |0.. .b...9&a=...|
99 d0 86 c4 2e f5 83 32  65 5e 22 3e 9b d6 86 f8  |.......2e^">....|
e8 b6 9f ca 8b d6 3b 75  0b a1 91 3e 4c dd 64 74  |......;u...>L.dt|
8c 49 f2 88 8c 18 67 6c  fe 15 66 46 b8 3a 46 42  |.I....gl..fF.:FB|
97 c8 91 37 d4 24 b1 e7  ac d3 ea 41 14 83 77 d3  |...7.$.....A..w.|
c9 4f 05 5f a3 14 52 bf  96 a4 2f 3e 56 5b 10 75  |.O._..R.../>V[.u|
ce 53 c3 ce 05 54 69 b4  65 c9 24 a5 0f e1 25 b8  |.S...Ti.e.$...%.|
1a b9 4d e5 02 b9 50 1e  4f b3 98 0c 1d 95 02 ee  |..M...P.O.......|
22 59 ad 22 cb 05 74 0b  04 45 7b 04 59 e0 d8 0f  |"Y."..t..E{.Y...|
b3 eb 4c f8 60 dd c2 78  9e d1 ba 9f 6b f7 f3 ee  |..L.`..x....k...|
7e 44 11 40 d2 bd ba 9b  4b 16 08 6e a4 be 55 e4  |~D.@....K..n..U.|
a6 38 12 a3 48 f4 1c 55  7a 8a 20 d1 7d fe 91 db  |.8..H..Uz. .}...|
94 8f 2f c2 7b 6b a6 64  85 4f a3 e5 2c 34 29 5d  |../.{k.d.O..,4)]|
0b bf f5 c7 38 2f c4 20  c4 56 31 f6 69 ce 85 f8  |....8/. .V1.i...|
0a 91 ec d0 d6 ae ba 38  05 0c eb 6e 4f 4c 9c 03  |.......8...nOL..|
29 aa a2 fc 18 a0 29 0c  0d 5c 5c 56 23 57 da 1c  |).....)..\\V#W..|
96 0d c8 26 36 c1 44 cb  e5 e1 e6 6f 89 e7 8f e9  |...&6.D....o....|
98 b5 73 d3 78 e3 ed a3  01 3c 74 e5 5e bc 6c f6  |..s.x....

Signer

1
unnamed
- #0
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Code Signing PCA
- 61:08:77:5F:00:00:00:00:00:4A
SHA1: nil

contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

b8 95 a7 7e 38 3d 6d 92  78 6c 1c 88 e7 30 2f f8  |...~8=m.xl...0/.|
1c e3 a6 0c                                       |....            |

1.3.6.1.4.1.311.2.1.12

00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 |.M.i.c.r.o.s.o.f| 00 74 00 20 00 56 00 69 00 73 00 75 00 61 00 6c |.t. .V.i.s.u.a.l| 00 20 00 53 00 74 00 75 00 64 00 69 00 6f 00 20 |. .S.t.u.d.i.o. | 00 4c 00 69 00 67 00 68 00 74 00 53 00 77 00 69 |.L.i.g.h.t.S.w.i| 00 74 00 63 00 68 00 20 00 32 00 30 00 31 00 31 |.t.c.h. .2.0.1.1| 00 20 00 45 00 78 00 74 00 65 00 6e 00 73 00 69 |. .E.x.t.e.n.s.i| 00 62 00 69 00 6c 00 69 00 74 00 79 00 20 00 54 |.b.i.l.i.t.y. .T| 00 6f 00 6f 00 6c 00 6b 00 69 00 74 |.o.o.l.k.i.t |
: http://www.microsoft.com/visualstudio/en-us/lightswitch

rsaEncryption:

3a 27 10 22 ad 7e 4a 3f  f9 19 00 27 f5 06 4e cb  |:'.".~J?...'..N.|
cd ab 79 25 d1 d0 40 a7  aa 54 05 b5 53 53 a5 7b  |..y%..@..T..SS.{|
27 4f f3 13 0d 4b 11 98  55 0d 82 d2 2f c0 dc 0e  |'O...K..U.../...|
6e 3a fe 56 21 88 77 7c  89 3b bb 46 7c b7 74 18  |n:.V!.w|.;.F|.t.|
dc 51 2c 86 9a df 9d cd  c1 3e 68 76 11 10 43 67  |.Q,......>hv..Cg|
f0 5a ad 6b fa 29 63 c1  97 a5 1e bb c2 21 1b 76  |.Z.k.)c......!.v|
a1 54 ec 30 21 44 b7 15  11 87 25 95 9a 97 88 07  |.T.0!D....%.....|
00 52 9c 30 1c aa 47 56  68 ba 1d 03 91 60 ec 75  |.R.0..GVh....`.u|
c7 98 d8 c4 32 e7 b5 64  06 46 e3 db 4c 33 61 93  |....2..d.F..L3a.|
dc db 91 a6 26 75 6e 88  cd 2b 57 3d 77 fb b0 0e  |....&un..+W=w...|
b9 6e b6 73 75 e7 bf 8f  37 c8 f0 cf 95 88 e1 2a  |.n.su...7......*|
86 2d e2 e6 67 63 9f 45  67 26 16 52 92 55 ef 72  |.-..gc.Eg&.R.U.r|
9c 8a 03 25 8e 8c 97 85  26 65 5f 08 d3 b1 8f 52  |...%....&e_....R|
10 bd 53 30 78 41 91 3e  29 5b e5 63 cb 5a b5 0e  |..S0xA.>)[.c.Z..|
74 fa f9 38 34 5a 0d 3d  30 21 f3 5b 85 e3 23 59  |t..84Z.=0!.[..#Y|
c0 cb 51 a0 2e e7 ec 95  50 b5 a1 c6 b9 9f c6 96  |..Q.....P.......|

countersignature

unnamed
- #0
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Time-Stamp PCA
- 61:05:19:96:00:00:00:00:00:1B
SHA1

contentType: pkcs7-data
signingTime: 2011-07-26 21:35:19 UTC

messageDigest:

f4 ca eb 20 96 da 81 35  54 b3 a8 1b 47 2e 45 1d  |... ...5T...G.E.|
db 08 f9 b5                                       |....            |

RSA-SHA1:

95 46 2d da c0 a5 ed 97  ba 80 1b 9d 09 91 15 13  |.F-.............|
c9 19 f3 d1 78 58 97 b6  81 dc 72 64 11 d1 ca aa  |....xX....rd....|
da c2 a8 c8 76 45 0c 6d  a7 0a 60 68 f4 20 80 0a  |....vE.m..`h. ..|
aa 32 3b 66 ea 07 dc 2d  18 e5 96 33 7b c0 10 29  |.2;f...-...3{..)|
ea 05 e8 8b 3c 1b 9e 35  f6 b0 a9 a3 91 d7 bf 45  |....<..5.......E|
53 1e e6 e8 98 fd e8 b1  b5 cf 26 ca 57 33 e3 2f  |S.........&.W3./|
0a 81 25 b1 d4 ee 5c 39  18 91 a6 94 69 d9 b0 b5  |..%...\9....i...|
a9 f3 e6 47 e2 0f ef aa  f4 34 7c 11 5f ce 0e 70  |...G.....4|._..p|
1c 6a ea 43 32 41 c2 11  49 2b 19 e0 9e e5 42 0a  |.j.C2A..I+....B.|
67 0c 99 87 70 1c 72 31  6b d2 1b fe 29 89 d3 66  |g...p.r1k...)..f|
36 b9 a3 fa f9 7f c4 60  0b 30 bf 9e 2c 11 6b eb  |6......`.0..,.k.|
cd fb dc ef bc 07 ff 1e  10 fc 1f db c0 a2 03 8e  |................|
41 81 41 91 26 c7 a7 6f  93 17 47 df 64 d7 aa d7  |A.A.&..o..G.d...|
38 4d 1b 23 75 7b 74 1b  f9 ce a3 24 ee 4d 51 8b  |8M.#u{t....$.MQ.|
ab 35 ee 1e 1c f1 43 0a  c6 c9 61 75 f6 d5 37 51  |.5....C...au..7Q|
6d 7f d0 b2 34 1b 54 96  bc ba 55 ee bb ae 83 8f  |m...4.T...U.....|

show previews

offset	size	type	comment
0	411136	EXE	07/13/2009 23:42:43	#
15c1	15	HTM		#
bf28	11794	AVI		#
11d24	55762	PNG	(256 x 256)	#
64600	7040	PKCS7	Authenticode Signature	#

Scanning the drive for archives:
1 file, 418176 bytes (409 KiB)


--
Type = PE
Physical Size = 418176
CPU = x86
Characteristics = Executable 32-bit
Created = 2009-07-13 23:42:43
Headers Size = 1024
Checksum = 430993
Name = WEXTRACT.EXE            .MUI
Image Size = 430080
Section Alignment = 4096
File Alignment = 512
Code Size = 44032
Initialized Data Size = 366080
Uninitialized Data Size = 0
Linker Version = 9.0
OS Version = 6.1
Image Version = 6.1
Subsystem Version = 5.0
Subsystem = Windows GUI
DLL Characteristics = Relocated NX-Compatible TerminalServerAware
Stack Reserve = 262144
Stack Commit = 8192
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 16777216
Comment = FileVersion: 8.0.7600.16385
FileVersion: 8.00.7600.16385 (win7_rtm.090713-1255)
ProductVersion: 8.0.7600.16385
ProductVersion: 8.00.7600.16385
CompanyName: Microsoft Corporation
FileDescription: Win32 Cabinet Self-Extractor                                           
InternalName: Wextract                
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: WEXTRACT.EXE            .MUI
ProductName: Windows® Internet Explorer
----
Path = .rsrc/RCDATA/CABINET
Size = 249598
Packed Size = 249598
--
Path = .rsrc/RCDATA/CABINET
Type = Cab
Physical Size = 249598
Method = LZX:21
Blocks = 1
Volumes = 1
Volume Index = 0
ID = 9742

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2011-07-25 19:16:14 ....A          635               Installing the toolkit.txt
2011-07-12 16:45:44 ....A        17072               Microsoft.LightSwitch.Toolkit.targets
2011-07-25 13:41:34 ....A       495353               Microsoft.LightSwitch.Toolkit.vsix
------------------- ----- ------------ ------------  ------------------------
2011-07-25 19:16:14             513060       418176  3 files

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] ignoring invalid PEdump::BITMAPINFOHEADER

Microsoft.LightSwitch.Toolkit.exe-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

Signers (1)

Certificates (4)

Microsoft.LightSwitch.Toolkit.exe
-