iexplore.exe - Internet Explorer

info
MZ
PE
resources
imports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	iexplore.exe
size	754784 (0xb8460)
md5	1223acbfc1093852dff039e189599bbd

type	PE32+ executable (GUI) x86-64, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf8

Rich Header

lib id	version	times used
171	30319	1
158	30319	2
156	30319	25
1	0	312
132	21022	1
170	30319	20
175	30319	29
154	30319	1
157	30319	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	6
TimeDateStamp	0x4fed2526
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x22
Magic	0x20b
LinkerVersion	10.0
SizeOfCode	0x4a00
SizeOfInitializedData	0xb1c00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x2ce8
BaseOfCode	0x1000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.1
ImageVersion	6.1
SubsystemVersion	6.0
Reserved1	0
SizeOfImage	0xbb000
SizeOfHeaders	0x400
CheckSum	0xbc161
Subsystem	2
DllCharacteristics	0x8140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0xe000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x49c1	0x4a00	R-X CODE
.rdata	0x6000	0x32d4	0x3400	R-- IDATA
.data	0xa000	0xba8	0xc00	RW- IDATA
.pdata	0xb000	0x30c	0x400	R-- IDATA
.rsrc	0xc000	0xad498	0xad600	R-- IDATA
.reloc	0xba000	0x7c	0x200	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x8228	0xdc
RESOURCE	0xc000	0xad498
EXCEPTION	0xb000	0x30c
SECURITY	0xb6a00	0x1a60
BASERELOC	0xba000	0x7c
DEBUG	0x5960	0x38
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x6000	0x410
Delay_IAT	0x8138	0x60
CLR_Header	0	0

show previews

type	name	size
MUI	#1	256
WEVT_TEMPLATE	#1	39970
ICON	#1	1640
ICON	#2	744
ICON	#3	488
ICON	#4	296
ICON	#5	3752
ICON	#6	2216
ICON	#7	1736
ICON	#8	1384
ICON	#9	52209
ICON	#10	9640
ICON	#11	4264
ICON	#12	2440
ICON	#13	1128
ICON	#14	1640
ICON	#15	744
ICON	#16	488
ICON	#17	296
ICON	#18	3752
ICON	#19	2216
ICON	#20	1736
ICON	#21	1384
ICON	#22	38866
ICON	#23	9640
ICON	#24	4264
ICON	#25	2440
ICON	#26	1128
ICON	#27	744
ICON	#28	2216
ICON	#29	4264
ICON	#30	744
ICON	#31	744
ICON	#32	296
ICON	#33	2216
ICON	#34	1384
ICON	#35	4264
ICON	#36	1128
ICON	#37	744
ICON	#38	296
ICON	#39	2216
ICON	#40	1384
ICON	#41	4264
ICON	#42	1128
ICON	#43	744
ICON	#44	2216
ICON	#45	4264
ICON	#46	744
ICON	#47	2216
ICON	#48	4264
ICON	#49	744
ICON	#50	296
ICON	#51	2216
ICON	#52	1384
ICON	#53	4264
ICON	#54	1128
ICON	#55	744
ICON	#56	296
ICON	#57	296
ICON	#58	1384
ICON	#59	1128
ICON	#60	296
ICON	#61	1384
ICON	#62	1128
ICON	#63	296
ICON	#64	1384
ICON	#65	1128
ICON	#66	1640
ICON	#67	744
ICON	#68	296
ICON	#69	3752
ICON	#70	2216
ICON	#71	1384
ICON	#72	9640
ICON	#73	4264
ICON	#74	1128
ICON	#75	744
ICON	#76	296
ICON	#77	2216
ICON	#78	1384
ICON	#79	4264
ICON	#80	1128
ICON	#81	744
ICON	#82	296
ICON	#83	2216
ICON	#84	1384
ICON	#85	4264
ICON	#86	1128
ICON	#87	744
ICON	#88	296
ICON	#89	2216
ICON	#90	1384
ICON	#91	4264
ICON	#92	1128
ICON	#93	744
ICON	#94	296
ICON	#95	2216
ICON	#96	1384
ICON	#97	4264
ICON	#98	1128
ICON	#99	744
ICON	#100	296
ICON	#101	2216
ICON	#102	1384
ICON	#103	4264
ICON	#104	1128
ICON	#105	744
ICON	#106	296
ICON	#107	2216
ICON	#108	1384
ICON	#109	4264
ICON	#110	1128
ICON	#111	744
ICON	#112	2216
ICON	#113	4264
ICON	#114	744
ICON	#115	2216
ICON	#116	4264
ICON	#117	1640
ICON	#118	744
ICON	#119	296
ICON	#120	3752
ICON	#121	2216
ICON	#122	1384
ICON	#123	16716
ICON	#124	9640
ICON	#125	4264
ICON	#126	1128
ICON	#127	1640
ICON	#128	744
ICON	#129	488
ICON	#130	296
ICON	#131	3752
ICON	#132	2216
ICON	#133	1736
ICON	#134	1384
ICON	#135	52209
ICON	#136	9640
ICON	#137	4264
ICON	#138	2440
ICON	#139	1128
ICON	#140	1640
ICON	#141	744
ICON	#142	488
ICON	#143	296
ICON	#144	3752
ICON	#145	2216
ICON	#146	1736
ICON	#147	1384
ICON	#148	38866
ICON	#149	9640
ICON	#150	4264
ICON	#151	2440
ICON	#152	1128
ICON	#153	1640
ICON	#154	744
ICON	#155	488
ICON	#156	296
ICON	#157	3752
ICON	#158	2216
ICON	#159	1736
ICON	#160	1384
ICON	#161	52209
ICON	#162	9640
ICON	#163	4264
ICON	#164	2440
ICON	#165	1128
ICON	#166	1640
ICON	#167	744
ICON	#168	488
ICON	#169	296
ICON	#170	3752
ICON	#171	2216
ICON	#172	1736
ICON	#173	1384
ICON	#174	38866
ICON	#175	9640
ICON	#176	4264
ICON	#177	2440
ICON	#178	1128
GROUP_ICON	#7	188
GROUP_ICON	#9	188
GROUP_ICON	#17	188
GROUP_ICON	#19	188
GROUP_ICON	#32528	188
GROUP_ICON	#32529	188
GROUP_ICON	#32534	48
GROUP_ICON	#32535	20
GROUP_ICON	#32536	90
GROUP_ICON	#32537	90
GROUP_ICON	#32538	48
GROUP_ICON	#32539	48
GROUP_ICON	#32540	34
GROUP_ICON	#32541	90
GROUP_ICON	#32542	90
GROUP_ICON	#32543	48
GROUP_ICON	#32544	48
GROUP_ICON	#32545	48
GROUP_ICON	#32546	90
GROUP_ICON	#32547	132
GROUP_ICON	#32548	90
GROUP_ICON	#32549	90
GROUP_ICON	#32550	90
GROUP_ICON	#32551	90
GROUP_ICON	#32552	48
GROUP_ICON	#32553	48
GROUP_ICON	#32554	146
VERSION	#1	1540

module_name	hint	ord	function_name
ADVAPI32.dll	272		EventWrite
ADVAPI32.dll	347		GetTraceEnableFlags
ADVAPI32.dll	622		RegQueryValueExW
ADVAPI32.dll	271		EventUnregister
ADVAPI32.dll	349		GetTraceLoggerHandle
ADVAPI32.dll	756		TraceEvent
ADVAPI32.dll	770		UnregisterTraceGuids
ADVAPI32.dll	609		RegOpenKeyExW
ADVAPI32.dll	270		EventRegister
ADVAPI32.dll	348		GetTraceEnableLevel
ADVAPI32.dll	560		RegCloseKey
ADVAPI32.dll	650		RegisterTraceGuidsW
KERNEL32.dll	1230		TerminateProcess
KERNEL32.dll	143		CreateFileW
KERNEL32.dll	1377		lstrlenW
KERNEL32.dll	1271		VerifyVersionInfoW
KERNEL32.dll	588		GetProcAddress
KERNEL32.dll	838		LocalAlloc
KERNEL32.dll	784		IsWow64Process
KERNEL32.dll	731		HeapSetInformation
KERNEL32.dll	505		GetFileTime
KERNEL32.dll	210		DeleteCriticalSection
KERNEL32.dll	82		CloseHandle
KERNEL32.dll	695		GetWindowsDirectoryW
KERNEL32.dll	842		LocalFree
KERNEL32.dll	291		ExpandEnvironmentStringsW
KERNEL32.dll	833		LoadLibraryW
KERNEL32.dll	397		GetCommandLineW
KERNEL32.dll	746		InitializeCriticalSection
KERNEL32.dll	542		GetModuleHandleW
KERNEL32.dll	454		GetCurrentProcess
KERNEL32.dll	1267		VerSetConditionMask
KERNEL32.dll	1119		SetDllDirectoryW
KERNEL32.dll	168		CreateProcessW
KERNEL32.dll	1126		SetErrorMode
KERNEL32.dll	948		RaiseException
KERNEL32.dll	830		LoadLibraryA
KERNEL32.dll	520		GetLastError
KERNEL32.dll	626		GetSystemDefaultLCID
KERNEL32.dll	675		GetUserDefaultLCID
KERNEL32.dll	242		EnterCriticalSection
KERNEL32.dll	538		GetModuleFileNameW
KERNEL32.dll	827		LeaveCriticalSection
KERNEL32.dll	747		InitializeCriticalSectionAndSpinCount
KERNEL32.dll	683		GetVersionExA
KERNEL32.dll	360		FreeLibrary
KERNEL32.dll	1250		UnhandledExceptionFilter
KERNEL32.dll	640		GetSystemTimeAsFileTime
KERNEL32.dll	455		GetCurrentProcessId
KERNEL32.dll	459		GetCurrentThreadId
KERNEL32.dll	666		GetTickCount
KERNEL32.dll	937		QueryPerformanceCounter
KERNEL32.dll	1203		SetUnhandledExceptionFilter
KERNEL32.dll	618		GetStartupInfoW
KERNEL32.dll	1216		Sleep
KERNEL32.dll	453		GetCurrentDirectoryW
USER32.dll	480		IsWindowEnabled
USER32.dll	49		CharNextW
USER32.dll	510		LoadStringW
USER32.dll	424		GetWindowThreadProcessId
USER32.dll	639		SendMessageTimeoutW
USER32.dll	249		FindWindowExW
USER32.dll	6		AllowSetForegroundWindow
USER32.dll	484		IsWindowVisible
USER32.dll	537		MessageBoxW
msvcrt.dll	1156		memset
msvcrt.dll	21		void __cdecl operator delete(void * __ptr64) ??3@YAXPEAX@Z
msvcrt.dll	19		void * __ptr64 __cdecl operator new(unsigned __int64) ??2@YAPEAX_K@Z
msvcrt.dll	1263		wcschr
msvcrt.dll	1117		iswalpha
msvcrt.dll	856		_vsnwprintf
msvcrt.dll	1126		iswspace
msvcrt.dll	639		_onexit
msvcrt.dll	469		_lock
msvcrt.dll	109		__dllonexit
msvcrt.dll	816		_unlock
msvcrt.dll	48		void __cdecl terminate(void) ?terminate@@YAXXZ
msvcrt.dll	128		__set_app_type
msvcrt.dll	280		_fmode
msvcrt.dll	196		_commode
msvcrt.dll	130		__setusermatherr
msvcrt.dll	160		_amsg_exit
msvcrt.dll	364		_initterm
msvcrt.dll	881		_wcmdln
msvcrt.dll	1056		exit
msvcrt.dll	179		_cexit
msvcrt.dll	255		_exit
msvcrt.dll	82		_XcptFilter
msvcrt.dll	83		__C_specific_handler
msvcrt.dll	143		__wgetmainargs
msvcrt.dll	1273		wcsncmp
msvcrt.dll	1152		memcpy
ntdll.dll	1264		RtlVirtualUnwind
ntdll.dll	635		RtlCaptureContext
ntdll.dll	1025		RtlLookupFunctionEntry
SHLWAPI.dll		154
SHLWAPI.dll	194		SHGetValueW
SHLWAPI.dll	232		SHRegGetValueW
SHLWAPI.dll	252		SHSetValueW
SHLWAPI.dll	338		UrlApplySchemeW
SHLWAPI.dll	115		PathIsURLW
SHLWAPI.dll	340		UrlCanonicalizeW
SHLWAPI.dll		158
SHLWAPI.dll	73		PathFindFileNameW
SHLWAPI.dll	346		UrlCreateFromPathW
SHLWAPI.dll	328		StrStrW
SHELL32.dll	6		CommandLineToArgvW
ole32.dll	112		CoUninitialize
ole32.dll	66		CoInitialize
urlmon.dll		410
urlmon.dll		111
iertutil.dll		42
iertutil.dll		32
iertutil.dll		44
iertutil.dll		325
iertutil.dll		9
iertutil.dll		31
iertutil.dll		163
iertutil.dll		650
iertutil.dll		58

StringTable 040904B0

CompanyName	Microsoft Corporation
FileDescription	Internet Explorer
FileVersion	9.00.8112.16448 (WIN7_IE9_GDR.120628-1849)
InternalName	iexplore
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	IEXPLORE.EXE
ProductName	Windows® Internet Explorer
ProductVersion	9.00.8112.16448

StringTable 0c0904E4

CompanyName	Microsoft Corporation
FileDescription	Internet Explorer
FileVersion	9.00.8112.16448
InternalName	iexplore
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	IEXPLORE.EXE
ProductName	Windows® Internet Explorer
ProductVersion	9.00.8112.16448

VS_FIXEDFILEINFO

FileVersion	9.0.8112.16448
ProductVersion	9.0.8112.16448
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Code Signing PCA

serial: 6119CC93000100000066

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:19:cc:93:00:01:00:00:00:66
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA
        Validity
            Not Before: Oct 10 20:32:25 2011 GMT
            Not After : Jan 10 20:32:25 2013 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, CN=Microsoft Corporation
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:5b:be:7d:11:24:e3:86:06:e0:66:ff:48:b5:
                    17:bd:02:e4:b4:0c:32:f0:72:3e:7d:2e:87:d7:4e:
                    a1:b1:a7:43:2f:f7:65:9e:31:e1:32:31:45:ae:d7:
                    c1:24:84:21:d7:2e:b5:84:7e:fa:35:d3:53:1c:d7:
                    b6:51:1e:4f:ce:66:b9:eb:b7:0c:02:fd:29:5c:ad:
                    a8:87:f6:ca:22:b4:d5:bf:08:75:f5:8a:70:8f:63:
                    d7:ef:8a:1e:e9:8f:43:24:64:5a:d3:87:7d:90:6d:
                    3b:ac:76:cd:57:36:7d:e8:bc:10:56:ac:98:f0:89:
                    5d:2e:64:c6:af:26:09:5e:1e:63:15:f1:3d:bf:16:
                    8f:99:88:02:c3:30:b7:c1:0b:60:1f:0f:72:cc:d6:
                    b7:a8:35:12:86:9b:a1:0b:0a:e6:93:5b:8e:fa:54:
                    9c:c1:f3:19:5f:42:8d:12:9f:1d:3f:90:b7:27:13:
                    83:19:32:82:1d:f3:d9:87:d4:21:b2:3c:a2:b6:07:
                    4f:d7:24:aa:ee:8d:f5:b3:d9:fa:f9:39:4f:a7:e9:
                    f2:af:59:52:f4:dc:41:9b:2f:11:70:63:dd:ea:de:
                    aa:f1:6d:21:04:10:53:33:bb:b2:4f:c5:e1:53:b2:
                    41:65:47:6e:37:f6:bc:e9:9b:16:41:91:6b:2e:5b:
                    30:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Subject Key Identifier: 
                1B:52:0E:F3:11:2A:B7:C0:89:C3:11:81:3D:D4:96:58:B9:A3:53:6E
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Authority Key Identifier: 
                keyid:CB:11:E8:CA:D2:B4:16:58:01:C9:37:2E:33:16:16:B9:4C:9A:0A:1F

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt

    Signature Algorithm: sha1WithRSAEncryption
         a5:5b:36:6c:ad:4e:9b:69:12:e3:6f:8a:02:9b:69:77:c3:6c:
         64:72:28:88:d9:3d:45:6d:2c:18:7b:d4:28:2f:13:e2:59:6a:
         1b:c2:0b:34:b7:8a:fd:ea:b9:94:ec:07:31:e6:6a:f4:75:04:
         d3:a7:da:5e:3a:06:9e:10:fd:a9:0d:bd:9c:51:43:6f:ff:67:
         94:9c:e1:cf:7c:f0:24:b0:35:cc:83:5d:ee:da:c0:6f:36:49:
         c0:5a:0a:57:f6:73:e1:9e:f3:e3:08:4c:3b:3e:2f:cc:d2:cd:
         ee:4f:22:70:f7:04:1f:02:a6:4b:9b:b8:8f:5c:88:0e:36:94:
         6c:33:07:b8:a9:ad:51:a0:d0:c2:dc:8e:22:12:bd:c3:df:82:
         d7:56:a1:f7:dd:f0:a5:20:57:10:10:9d:ee:ac:86:74:6c:71:
         9b:c1:f0:f2:c2:70:5e:a7:db:6d:4d:37:58:99:4d:79:40:d0:
         34:5d:5a:25:ae:67:eb:1b:4e:46:06:b0:8c:29:1f:a3:10:8f:
         a5:33:9f:23:d5:f8:b5:46:7d:e0:ee:63:98:90:4b:3e:05:a8:
         2f:b0:18:b3:59:a4:af:41:53:8e:08:05:10:2d:2a:c9:3a:06:
         4c:1c:2e:a9:31:51:56:64:ac:9a:cc:ac:97:98:29:8a:97:90:
         87:ea:9d:b6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0d:af:8d:00:00:00:00:00:28
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA
        Validity
            Not Before: Feb 20 21:36:47 2012 GMT
            Not After : May 20 21:46:47 2013 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, OU=nCipher DSE ESN:C0F4-3086-DEF8, CN=Microsoft Time-Stamp Service
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c9:f6:b2:be:1a:ef:ee:2d:7c:f8:00:60:1e:
                    08:b6:9a:61:62:92:b4:a9:d7:0e:31:03:3d:ba:5c:
                    7d:d3:f4:00:1a:b8:9b:78:5c:44:77:61:ab:82:67:
                    af:a2:30:a9:e0:59:26:45:3b:de:80:3d:8f:a9:54:
                    f3:b7:fc:e2:d3:9d:80:01:03:40:16:23:2b:04:71:
                    5c:b9:05:6d:09:c4:ac:82:8a:57:03:9c:1e:0c:b4:
                    dc:1f:f0:a4:2c:cc:5b:19:7b:65:c3:3f:09:cf:84:
                    8d:12:40:ad:e0:e6:3f:71:30:76:1c:ea:79:18:c5:
                    9a:66:a5:f2:93:a2:e4:83:ce:3a:6f:22:e0:b5:4e:
                    b5:f1:51:0c:9c:a7:1c:c8:ff:81:fe:33:35:51:f7:
                    9b:32:29:fb:ff:69:66:1c:49:4d:c1:4e:26:85:57:
                    76:ed:d3:a4:8f:64:7f:d1:44:10:21:1f:4e:02:52:
                    1c:a2:25:f5:98:bd:a5:2b:ae:45:98:03:4f:ca:f4:
                    b6:c6:7a:18:f7:4d:9d:9b:d1:a2:98:b5:3d:b2:4d:
                    60:3b:28:8b:72:db:8d:37:db:87:2c:e9:64:dd:c8:
                    18:fa:09:dd:e3:4d:a7:45:8e:a0:ba:2a:af:35:8b:
                    e8:c9:ef:f4:35:19:45:15:85:82:f1:77:fd:09:12:
                    e3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                37:E7:F0:49:47:76:45:8C:0E:E3:52:F2:B2:F4:7A:37:32:6B:85:D3
            X509v3 Authority Key Identifier: 
                keyid:23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt

    Signature Algorithm: sha1WithRSAEncryption
         6f:2b:f9:64:77:e4:a6:1b:8f:a2:c5:8c:94:d6:e3:68:81:01:
         f2:fe:c4:84:9f:e9:26:bd:e5:67:6c:5c:6f:7d:cd:75:65:65:
         00:68:00:54:09:86:39:7a:b8:e2:7a:af:27:49:9a:45:12:f7:
         2c:9f:6a:46:38:8d:7e:53:af:94:e8:7e:66:37:0b:fa:54:d0:
         16:c3:f1:e8:d8:c3:6b:33:07:82:17:34:90:8e:1a:40:46:cc:
         9c:d9:a2:69:7e:df:5f:47:6a:3a:98:0b:6e:48:8a:99:fe:69:
         14:38:6f:d8:2f:64:1b:20:47:8f:02:5c:c0:ab:69:63:33:37:
         3f:48:2b:8c:6e:86:56:de:aa:22:34:e6:38:0b:1d:32:a7:4c:
         b0:f7:8f:46:1e:e7:51:ae:80:88:48:23:96:09:83:09:3a:a6:
         3f:ce:2a:07:21:f4:b0:4b:c8:f5:9a:4d:61:fd:97:6e:12:45:
         65:92:6c:9e:c5:f8:48:92:29:65:5c:65:d1:3d:59:14:f0:4b:
         ec:55:39:0b:34:5c:14:ca:49:6f:37:5f:72:e4:d3:44:90:3f:
         08:73:3a:78:1e:b0:fd:c8:2b:6b:05:45:d8:0e:d8:09:eb:d4:
         4f:5c:90:68:48:be:6e:06:2a:c2:df:ae:2d:8b:9c:7f:1c:11:
         26:72:3e:65

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:33:26:1a:00:00:00:00:00:31
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
        Validity
            Not Before: Aug 31 22:19:32 2010 GMT
            Not After : Aug 31 22:29:32 2020 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:72:59:5c:19:30:64:bf:1d:9a:60:20:20:42:
                    99:76:53:6c:3e:1b:d6:6f:cc:cb:f1:ea:6b:fe:97:
                    16:10:e0:df:3a:74:83:1a:b7:2f:a0:32:ec:ff:de:
                    c2:42:4e:23:d5:72:00:db:35:57:0a:89:ca:ae:20:
                    49:f4:f0:68:ac:4d:4b:8d:a5:bd:79:4b:71:9b:47:
                    07:da:fd:25:df:9d:75:88:cf:aa:73:44:7f:d7:81:
                    db:f3:bd:f2:36:a4:c9:5c:45:dc:af:ad:3d:e0:28:
                    68:97:1a:a7:a5:72:73:56:f1:17:94:e4:fd:35:94:
                    72:a0:d6:76:5f:1e:77:45:83:85:38:16:d0:73:5b:
                    05:ba:67:52:8d:a5:b2:69:2f:da:19:0b:fe:92:74:
                    29:e2:76:2f:54:dd:14:30:59:f8:d2:8d:62:fd:cb:
                    c9:5f:46:31:50:b9:27:13:e4:40:30:cf:72:29:10:
                    28:22:c7:37:4e:3d:a0:32:3d:90:cd:a1:38:06:85:
                    5c:4e:56:82:28:2a:05:32:b7:4b:d7:4f:63:e7:d2:
                    2d:62:f1:45:3d:e7:ac:08:00:f6:46:a1:9e:d1:5b:
                    8c:26:53:e8:7a:aa:4a:f2:46:cf:37:3c:38:9e:b4:
                    77:5c:a5:17:9e:8d:cb:11:8f:56:3c:c1:ac:09:5f:
                    03:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                CB:11:E8:CA:D2:B4:16:58:01:C9:37:2E:33:16:16:B9:4C:9A:0A:1F
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            1.3.6.1.4.1.311.21.1: 
                .....
            1.3.6.1.4.1.311.21.2: 
                ....1N.&....`;.1o.<..-
            1.3.6.1.4.1.311.20.2: 
                .
.S.u.b.C.A
            X509v3 Authority Key Identifier: 
                keyid:0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt

    Signature Algorithm: sha1WithRSAEncryption
         59:39:3e:7f:26:46:af:eb:6f:40:b1:32:b5:6a:eb:0e:2f:6e:
         a8:49:f7:eb:5f:75:ed:4c:3b:2d:d7:43:ad:0b:fe:cb:e9:2d:
         31:a3:23:cc:7c:50:98:80:21:5d:ac:3d:2f:4c:ba:a2:a8:56:
         9c:e3:70:bb:b8:b4:f8:79:b5:49:72:f7:3e:ea:41:7f:ca:e1:
         0c:17:69:cb:a5:9c:20:2d:fa:0b:50:c4:56:cd:2d:e3:4a:d2:
         bc:70:e7:a8:0d:a2:03:a5:56:e0:b8:8a:4b:57:f2:95:42:9c:
         f1:f3:ef:ee:e3:86:1f:34:3c:b8:56:9a:f0:53:23:85:2a:a4:
         82:1c:93:e2:94:07:1d:f2:e2:4e:f8:8c:a1:ca:e8:13:a5:91:
         4e:c8:1b:d2:8f:72:95:2a:71:6d:9b:1a:f8:1c:f0:53:d6:67:
         cc:22:ff:5c:1d:cd:a2:8c:bd:27:b2:79:63:56:44:a2:51:cd:
         f9:e9:a3:58:56:dd:9b:02:45:44:2f:5f:f4:da:ae:d4:82:32:
         6e:fc:a4:95:13:e4:eb:69:e7:a9:a2:2c:be:c8:2b:10:0e:65:
         8e:99:db:f5:a2:fa:12:26:09:65:38:94:f1:7a:1f:4a:bb:d1:
         e1:56:e8:d0:78:96:18:5c:c9:35:16:5f:dd:93:1d:49:8e:2d:
         be:ad:34:44:1c:ee:10:15:1a:00:5d:dd:35:5b:21:ce:98:c7:
         09:ee:85:0e:8c:4f:6d:0e:13:4e:3d:7c:29:48:9c:72:d1:f3:
         6c:ca:c1:ec:70:a3:57:92:57:7d:94:8d:a0:1b:48:03:5a:f7:
         cf:a3:67:0a:74:a5:36:ed:2d:2f:17:c8:e6:72:37:12:f4:6f:
         b1:3c:67:82:f9:52:b2:8d:33:16:65:1e:0e:8a:dd:10:de:64:
         f4:6f:ce:46:d4:d3:17:e9:79:c4:04:b4:d3:fb:2c:df:1f:8a:
         9e:ac:0a:fb:13:27:40:ad:e4:f9:e1:a9:7f:46:bb:07:60:47:
         65:60:40:4e:b0:42:ec:4e:ed:b3:76:79:d8:0a:34:09:6d:1c:
         80:31:1f:e2:0e:54:dd:e5:a1:fb:e5:47:10:ad:64:98:ff:50:
         16:2e:7c:bf:05:21:7a:e2:95:41:27:69:c3:93:8f:95:c9:8d:
         d8:9b:21:ae:0d:5c:9c:f0:a2:ae:86:68:83:0c:6a:2d:bb:76:
         6b:00:1d:96:ad:f2:16:7b:f6:16:83:24:b9:88:cf:6a:a8:47:
         31:2f:9a:dc:e3:71:3d:d7:00:7e:62:47:d1:ce:88:c9:b8:18:
         fa:0e:72:8d:c1:a3:3d:af:02:40:6a:ff:69:9b:96:e2:10:a8:
         10:b4:37:50:08:d6:c3:3d

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:16:68:34:00:00:00:00:00:1c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
        Validity
            Not Before: Apr  3 12:53:09 2007 GMT
            Not After : Apr  3 13:03:09 2021 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a1:6c:b1:df:db:48:92:2a:7c:6b:2e:19:e1:
                    bd:e2:e3:c5:99:51:23:50:ad:ce:dd:18:4e:24:0f:
                    ee:d1:a7:d1:4c:ad:74:30:20:11:eb:07:d5:54:95:
                    15:49:94:1b:42:92:ae:98:5c:30:26:da:00:6b:e8:
                    7b:bd:ec:89:07:0f:f7:0e:04:98:f0:89:cc:1f:cb:
                    33:24:87:9d:f2:f4:67:1c:2c:fc:7b:e7:88:1d:ea:
                    e7:4e:a3:a1:c1:23:53:ca:8d:fa:45:cf:09:d0:5e:
                    af:d0:b0:42:04:a2:f9:a6:6c:93:67:d7:28:dc:46:
                    53:b0:86:d0:e5:28:46:2e:27:ac:86:4f:55:52:0c:
                    e4:03:2c:fb:6a:90:90:30:6e:87:f3:59:30:9d:fa:
                    7e:d6:97:b3:e8:21:97:7e:f8:d2:13:f3:08:b7:53:
                    6d:52:b4:45:90:9f:48:00:4a:47:66:11:27:29:66:
                    a8:97:e4:d3:06:81:4a:a2:f9:84:a7:11:47:14:09:
                    82:9f:84:ed:55:78:fe:01:9a:1d:50:08:85:00:10:
                    30:46:ed:b7:de:23:46:bb:c4:2d:54:9f:af:1e:78:
                    41:31:77:cc:9b:df:3b:83:93:a1:61:02:b5:1d:0d:
                    b1:fc:f7:9b:b2:01:ce:22:4b:54:ff:f9:05:c3:c2:
                    20:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Authority Key Identifier: 
                keyid:0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4
                DirName:/DC=com/DC=microsoft/CN=Microsoft Root Certificate Authority
                serial:79:AD:16:A1:4A:A0:A5:AD:4C:73:58:F4:07:13:2E:65

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt

            X509v3 Extended Key Usage: 
                Time Stamping
    Signature Algorithm: sha1WithRSAEncryption
         10:97:8a:c3:5c:03:44:36:dd:e9:b4:ad:77:db:ce:79:51:4d:
         01:b1:2e:74:71:5b:6d:0c:13:ab:ce:be:7b:8f:b8:2e:d4:12:
         a2:8c:6d:62:b8:57:02:cb:4e:20:13:50:99:dd:7a:40:e2:57:
         bb:af:58:9a:1c:e1:1d:01:86:ac:bb:78:f2:8b:d0:ec:3b:01:
         ee:e2:be:8f:0a:05:c8:8d:48:e2:f0:53:15:dd:4f:ab:92:e4:
         e7:8d:6a:d5:80:c1:e6:94:f2:06:2f:85:03:e9:91:2a:24:22:
         70:fb:f6:fc:e4:78:99:2e:0d:f7:07:e2:70:bc:18:4e:9d:8e:
         6b:0a:72:95:b8:a1:39:9c:67:2d:c5:51:0e:ea:62:5c:3f:16:
         98:8b:20:3f:e2:07:1a:32:f9:cc:31:4a:76:31:3d:2b:72:0b:
         c8:ea:70:3d:ff:85:0a:13:df:c2:0a:61:8e:f0:d7:b8:17:eb:
         4e:8b:7f:c5:35:2b:5e:a3:bf:eb:bc:7d:0b:42:7b:d4:53:72:
         21:ee:30:ca:bb:78:65:5c:5b:01:17:0a:14:0e:d2:da:14:98:
         f5:3c:b9:66:58:b3:2d:2f:e7:f9:85:86:cc:51:56:e8:9d:70:
         94:6c:ac:39:4c:d4:f6:79:bf:aa:18:7a:62:29:ef:a2:9b:29:
         34:06:77:1a:62:c9:3d:1e:6d:1f:82:f0:0b:c7:2c:bb:cf:43:
         b3:e5:f9:ec:7d:b5:e3:a4:a8:74:35:b8:4e:c5:71:23:12:26:
         76:0b:3c:52:8c:71:5a:46:43:14:bc:b3:b3:b0:4d:67:c8:9f:
         42:ff:80:79:21:80:9e:15:30:66:e8:42:12:5e:1a:c8:9e:22:
         21:d0:43:e9:2b:e9:bb:f4:48:cc:2c:d4:d8:32:80:4c:26:2a:
         48:24:5f:5a:ea:56:ef:a6:de:99:9d:ca:3a:6f:bd:81:27:74:
         06:11:ee:76:21:bf:9b:82:c1:27:54:b6:b1:6a:3d:89:a1:76:
         61:b4:6e:a1:13:a6:bf:aa:47:f0:12:6f:fd:8a:32:6c:b2:fe:
         df:51:c8:8c:23:c9:66:bd:9d:1d:87:12:64:02:3d:2d:af:59:
         8f:b8:e4:21:e5:b5:b0:ca:63:b4:78:54:05:d4:41:2e:50:ac:
         94:b0:a5:78:ab:b3:a0:96:75:1a:d9:92:87:13:75:22:2f:32:
         a8:08:6e:a0:5b:8c:25:bf:a0:ef:84:ca:21:d6:eb:1e:4f:c9:
         9a:ee:49:e0:f7:01:65:6f:89:0b:7d:c8:69:c8:e6:6e:ea:a7:
         97:ce:31:29:ff:0e:c5:5b:5c:d8:4d:1b:a1:d8:fa:2f:9e:3f:
         2e:55:16:6b:c9:13:a3:fd

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

69 66 e5 08 4d 0b 07 f5 72 77 44 15 fe ea 23 98 |if..M...rwD...#.| 25 14 6d a0 |%.m. |

unnamed

Certificate #0

2
- 61:19:CC:93:00:01:00:00:00:66
- RSA-SHA1: nil
- Issuer
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Code Signing PCA
- 2011-10-10 20:32:25 UTC: 2013-01-10 20:32:25 UTC
- Subject
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - OU: MOPR
  - CN: Microsoft Corporation
- #5
  - rsaEncryption: nil
  - EE:5B:BE:7D:11:24:E3:86:06:E0:66:FF:48:B5:17:BD:
    02:E4:B4:0C:32:F0:72:3E:7D:2E:87:D7:4E:A1:B1:A7:
    43:2F:F7:65:9E:31:E1:32:31:45:AE:D7:C1:24:84:21:
    D7:2E:B5:84:7E:FA:35:D3:53:1C:D7:B6:51:1E:4F:CE:
    66:B9:EB:B7:0C:02:FD:29:5C:AD:A8:87:F6:CA:22:B4:
    D5:BF:08:75:F5:8A:70:8F:63:D7:EF:8A:1E:E9:8F:43:
    24:64:5A:D3:87:7D:90:6D:3B:AC:76:CD:57:36:7D:E8:
    BC:10:56:AC:98:F0:89:5D:2E:64:C6:AF:26:09:5E:1E:
    63:15:F1:3D:BF:16:8F:99:88:02:C3:30:B7:C1:0B:60:
    1F:0F:72:CC:D6:B7:A8:35:12:86:9B:A1:0B:0A:E6:93:
    5B:8E:FA:54:9C:C1:F3:19:5F:42:8D:12:9F:1D:3F:90:
    B7:27:13:83:19:32:82:1D:F3:D9:87:D4:21:B2:3C:A2:
    B6:07:4F:D7:24:AA:EE:8D:F5:B3:D9:FA:F9:39:4F:A7:
    E9:F2:AF:59:52:F4:DC:41:9B:2F:11:70:63:DD:EA:DE:
    AA:F1:6D:21:04:10:53:33:BB:B2:4F:C5:E1:53:B2:41:
    65:47:6E:37:F6:BC:E9:9B:16:41:91:6B:2E:5B:30:C3: 0x010001
- #6
  - extendedKeyUsage: codeSigning
  - subjectKeyIdentifier:
```
1b 52 0e f3 11 2a b7 c0  89 c3 11 81 3d d4 96 58  |.R...*......=..X|
b9 a3 53 6e                                       |..Sn            |
```
  - keyUsage: true, 0x80
  - authorityKeyIdentifier:
```
cb 11 e8 ca d2 b4 16 58  01 c9 37 2e 33 16 16 b9  |.......X..7.3...|
4c 9a 0a 1f                                       |L...            |
```
  - crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl
  - authorityInfoAccess
    - caIssuers: http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt

RSA-SHA1:

a5 5b 36 6c ad 4e 9b 69  12 e3 6f 8a 02 9b 69 77  |.[6l.N.i..o...iw|
c3 6c 64 72 28 88 d9 3d  45 6d 2c 18 7b d4 28 2f  |.ldr(..=Em,.{.(/|
13 e2 59 6a 1b c2 0b 34  b7 8a fd ea b9 94 ec 07  |..Yj...4........|
31 e6 6a f4 75 04 d3 a7  da 5e 3a 06 9e 10 fd a9  |1.j.u....^:.....|
0d bd 9c 51 43 6f ff 67  94 9c e1 cf 7c f0 24 b0  |...QCo.g....|.$.|
35 cc 83 5d ee da c0 6f  36 49 c0 5a 0a 57 f6 73  |5..]...o6I.Z.W.s|
e1 9e f3 e3 08 4c 3b 3e  2f cc d2 cd ee 4f 22 70  |.....L;>/....O"p|
f7 04 1f 02 a6 4b 9b b8  8f 5c 88 0e 36 94 6c 33  |.....K...\..6.l3|
07 b8 a9 ad 51 a0 d0 c2  dc 8e 22 12 bd c3 df 82  |....Q.....".....|
d7 56 a1 f7 dd f0 a5 20  57 10 10 9d ee ac 86 74  |.V..... W......t|
6c 71 9b c1 f0 f2 c2 70  5e a7 db 6d 4d 37 58 99  |lq.....p^..mM7X.|
4d 79 40 d0 34 5d 5a 25  ae 67 eb 1b 4e 46 06 b0  |My@.4]Z%.g..NF..|
8c 29 1f a3 10 8f a5 33  9f 23 d5 f8 b5 46 7d e0  |.).....3.#...F}.|
ee 63 98 90 4b 3e 05 a8  2f b0 18 b3 59 a4 af 41  |.c..K>../...Y..A|
53 8e 08 05 10 2d 2a c9  3a 06 4c 1c 2e a9 31 51  |S....-*.:.L...1Q|
56 64 ac 9a cc ac 97 98  29 8a 97 90 87 ea 9d b6  |Vd......).......|

Certificate #1

2
- 61:0D:AF:8D:00:00:00:00:00:28
- RSA-SHA1: nil
- Issuer
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Time-Stamp PCA
- 2012-02-20 21:36:47 UTC: 2013-05-20 21:46:47 UTC
- Subject
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - OU: MOPR
  - OU: nCipher DSE ESN:C0F4-3086-DEF8
  - CN: Microsoft Time-Stamp Service
- #5
  - rsaEncryption: nil
  - D0:C9:F6:B2:BE:1A:EF:EE:2D:7C:F8:00:60:1E:08:B6:
    9A:61:62:92:B4:A9:D7:0E:31:03:3D:BA:5C:7D:D3:F4:
    00:1A:B8:9B:78:5C:44:77:61:AB:82:67:AF:A2:30:A9:
    E0:59:26:45:3B:DE:80:3D:8F:A9:54:F3:B7:FC:E2:D3:
    9D:80:01:03:40:16:23:2B:04:71:5C:B9:05:6D:09:C4:
    AC:82:8A:57:03:9C:1E:0C:B4:DC:1F:F0:A4:2C:CC:5B:
    19:7B:65:C3:3F:09:CF:84:8D:12:40:AD:E0:E6:3F:71:
    30:76:1C:EA:79:18:C5:9A:66:A5:F2:93:A2:E4:83:CE:
    3A:6F:22:E0:B5:4E:B5:F1:51:0C:9C:A7:1C:C8:FF:81:
    FE:33:35:51:F7:9B:32:29:FB:FF:69:66:1C:49:4D:C1:
    4E:26:85:57:76:ED:D3:A4:8F:64:7F:D1:44:10:21:1F:
    4E:02:52:1C:A2:25:F5:98:BD:A5:2B:AE:45:98:03:4F:
    CA:F4:B6:C6:7A:18:F7:4D:9D:9B:D1:A2:98:B5:3D:B2:
    4D:60:3B:28:8B:72:DB:8D:37:DB:87:2C:E9:64:DD:C8:
    18:FA:09:DD:E3:4D:A7:45:8E:A0:BA:2A:AF:35:8B:E8:
    C9:EF:F4:35:19:45:15:85:82:F1:77:FD:09:12:E3:DB: 0x010001
- #6
  - subjectKeyIdentifier:
```
37 e7 f0 49 47 76 45 8c  0e e3 52 f2 b2 f4 7a 37  |7..IGvE...R...z7|
32 6b 85 d3                                       |2k..            |
```
  - authorityKeyIdentifier:
```
23 34 f8 d9 52 46 70 0a  ed 40 fb 76 fb b3 2b b0  |#4..RFp..@.v..+.|
c3 35 b3 0f                                       |.5..            |
```
  - crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl
  - authorityInfoAccess
    - caIssuers: http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt

RSA-SHA1:

6f 2b f9 64 77 e4 a6 1b  8f a2 c5 8c 94 d6 e3 68  |o+.dw..........h|
81 01 f2 fe c4 84 9f e9  26 bd e5 67 6c 5c 6f 7d  |........&..gl\o}|
cd 75 65 65 00 68 00 54  09 86 39 7a b8 e2 7a af  |.uee.h.T..9z..z.|
27 49 9a 45 12 f7 2c 9f  6a 46 38 8d 7e 53 af 94  |'I.E..,.jF8.~S..|
e8 7e 66 37 0b fa 54 d0  16 c3 f1 e8 d8 c3 6b 33  |.~f7..T.......k3|
07 82 17 34 90 8e 1a 40  46 cc 9c d9 a2 69 7e df  |...4...@F....i~.|
5f 47 6a 3a 98 0b 6e 48  8a 99 fe 69 14 38 6f d8  |_Gj:..nH...i.8o.|
2f 64 1b 20 47 8f 02 5c  c0 ab 69 63 33 37 3f 48  |/d. G..\..ic37?H|
2b 8c 6e 86 56 de aa 22  34 e6 38 0b 1d 32 a7 4c  |+.n.V.."4.8..2.L|
b0 f7 8f 46 1e e7 51 ae  80 88 48 23 96 09 83 09  |...F..Q...H#....|
3a a6 3f ce 2a 07 21 f4  b0 4b c8 f5 9a 4d 61 fd  |:.?.*.!..K...Ma.|
97 6e 12 45 65 92 6c 9e  c5 f8 48 92 29 65 5c 65  |.n.Ee.l...H.)e\e|
d1 3d 59 14 f0 4b ec 55  39 0b 34 5c 14 ca 49 6f  |.=Y..K.U9.4\..Io|
37 5f 72 e4 d3 44 90 3f  08 73 3a 78 1e b0 fd c8  |7_r..D.?.s:x....|
2b 6b 05 45 d8 0e d8 09  eb d4 4f 5c 90 68 48 be  |+k.E......O\.hH.|
6e 06 2a c2 df ae 2d 8b  9c 7f 1c 11 26 72 3e 65  |n.*...-.....&r>e|

2
- 61:33:26:1A:00:00:00:00:00:31
- RSA-SHA1: nil
- #2
  - DC: com
  - DC: microsoft
  - CN: Microsoft Root Certificate Authority
- 2010-08-31 22:19:32 UTC: 2020-08-31 22:29:32 UTC
- Subject
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Code Signing PCA
- #5
  - rsaEncryption: nil
  - B2:72:59:5C:19:30:64:BF:1D:9A:60:20:20:42:99:76:
    53:6C:3E:1B:D6:6F:CC:CB:F1:EA:6B:FE:97:16:10:E0:
    DF:3A:74:83:1A:B7:2F:A0:32:EC:FF:DE:C2:42:4E:23:
    D5:72:00:DB:35:57:0A:89:CA:AE:20:49:F4:F0:68:AC:
    4D:4B:8D:A5:BD:79:4B:71:9B:47:07:DA:FD:25:DF:9D:
    75:88:CF:AA:73:44:7F:D7:81:DB:F3:BD:F2:36:A4:C9:
    5C:45:DC:AF:AD:3D:E0:28:68:97:1A:A7:A5:72:73:56:
    F1:17:94:E4:FD:35:94:72:A0:D6:76:5F:1E:77:45:83:
    85:38:16:D0:73:5B:05:BA:67:52:8D:A5:B2:69:2F:DA:
    19:0B:FE:92:74:29:E2:76:2F:54:DD:14:30:59:F8:D2:
    8D:62:FD:CB:C9:5F:46:31:50:B9:27:13:E4:40:30:CF:
    72:29:10:28:22:C7:37:4E:3D:A0:32:3D:90:CD:A1:38:
    06:85:5C:4E:56:82:28:2A:05:32:B7:4B:D7:4F:63:E7:
    D2:2D:62:F1:45:3D:E7:AC:08:00:F6:46:A1:9E:D1:5B:
    8C:26:53:E8:7A:AA:4A:F2:46:CF:37:3C:38:9E:B4:77:
    5C:A5:17:9E:8D:CB:11:8F:56:3C:C1:AC:09:5F:03:D3: 0x010001
- X509v3 extensions
  - basicConstraints: true, true
  - subjectKeyIdentifier:
```
cb 11 e8 ca d2 b4 16 58  01 c9 37 2e 33 16 16 b9  |.......X..7.3...|
4c 9a 0a 1f                                       |L...            |
```
  - keyUsage: 0x86
  - 1.3.6.1.4.1.311.21.1: 0x010001
  - 1.3.6.1.4.1.311.21.2:
```
fd d1 31 4e d3 26 8a 95  e1 98 60 3b a8 31 6f a6  |..1N.&....`;.1o.|
3c bc d8 2d                                       |<..-            |
```
  - 1.3.6.1.4.1.311.20.2:
```
00 53 00 75 00 62 00 43  00 41                    |.S.u.b.C.A      |
```
  - authorityKeyIdentifier:
```
0e ac 82 60 40 56 27 97  e5 25 13 fc 2a e1 0a 53  |...`@V'..%..*..S|
95 59 e4 a4                                       |.Y..            |
```
  - crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl
  - authorityInfoAccess
    - caIssuers: http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt

RSA-SHA1:

59 39 3e 7f 26 46 af eb  6f 40 b1 32 b5 6a eb 0e  |Y9>.&F..o@.2.j..|
2f 6e a8 49 f7 eb 5f 75  ed 4c 3b 2d d7 43 ad 0b  |/n.I.._u.L;-.C..|
fe cb e9 2d 31 a3 23 cc  7c 50 98 80 21 5d ac 3d  |...-1.#.|P..!].=|
2f 4c ba a2 a8 56 9c e3  70 bb b8 b4 f8 79 b5 49  |/L...V..p....y.I|
72 f7 3e ea 41 7f ca e1  0c 17 69 cb a5 9c 20 2d  |r.>.A.....i... -|
fa 0b 50 c4 56 cd 2d e3  4a d2 bc 70 e7 a8 0d a2  |..P.V.-.J..p....|
03 a5 56 e0 b8 8a 4b 57  f2 95 42 9c f1 f3 ef ee  |..V...KW..B.....|
e3 86 1f 34 3c b8 56 9a  f0 53 23 85 2a a4 82 1c  |...4<.V..S#.*...|
93 e2 94 07 1d f2 e2 4e  f8 8c a1 ca e8 13 a5 91  |.......N........|
4e c8 1b d2 8f 72 95 2a  71 6d 9b 1a f8 1c f0 53  |N....r.*qm.....S|
d6 67 cc 22 ff 5c 1d cd  a2 8c bd 27 b2 79 63 56  |.g.".\.....'.ycV|
44 a2 51 cd f9 e9 a3 58  56 dd 9b 02 45 44 2f 5f  |D.Q....XV...ED/_|
f4 da ae d4 82 32 6e fc  a4 95 13 e4 eb 69 e7 a9  |.....2n......i..|
a2 2c be c8 2b 10 0e 65  8e 99 db f5 a2 fa 12 26  |.,..+..e.......&|
09 65 38 94 f1 7a 1f 4a  bb d1 e1 56 e8 d0 78 96  |.e8..z.J...V..x.|
18 5c c9 35 16 5f dd 93  1d 49 8e 2d be ad 34 44  |.\.5._...I.-..4D|
1c ee 10 15 1a 00 5d dd  35 5b 21 ce 98 c7 09 ee  |......].5[!.....|
85 0e 8c 4f 6d 0e 13 4e  3d 7c 29 48 9c 72 d1 f3  |...Om..N=|)H.r..|
6c ca c1 ec 70 a3 57 92  57 7d 94 8d a0 1b 48 03  |l...p.W.W}....H.|
5a f7 cf a3 67 0a 74 a5  36 ed 2d 2f 17 c8 e6 72  |Z...g.t.6.-/...r|
37 12 f4 6f b1 3c 67 82  f9 52 b2 8d 33 16 65 1e  |7..o.

2
- 61:16:68:34:00:00:00:00:00:1C
- RSA-SHA1: nil
- #2
  - DC: com
  - DC: microsoft
  - CN: Microsoft Root Certificate Authority
- 2007-04-03 12:53:09 UTC: 2021-04-03 13:03:09 UTC
- Subject
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Time-Stamp PCA
- #5
  - rsaEncryption: nil
  - 9F:A1:6C:B1:DF:DB:48:92:2A:7C:6B:2E:19:E1:BD:E2:
    E3:C5:99:51:23:50:AD:CE:DD:18:4E:24:0F:EE:D1:A7:
    D1:4C:AD:74:30:20:11:EB:07:D5:54:95:15:49:94:1B:
    42:92:AE:98:5C:30:26:DA:00:6B:E8:7B:BD:EC:89:07:
    0F:F7:0E:04:98:F0:89:CC:1F:CB:33:24:87:9D:F2:F4:
    67:1C:2C:FC:7B:E7:88:1D:EA:E7:4E:A3:A1:C1:23:53:
    CA:8D:FA:45:CF:09:D0:5E:AF:D0:B0:42:04:A2:F9:A6:
    6C:93:67:D7:28:DC:46:53:B0:86:D0:E5:28:46:2E:27:
    AC:86:4F:55:52:0C:E4:03:2C:FB:6A:90:90:30:6E:87:
    F3:59:30:9D:FA:7E:D6:97:B3:E8:21:97:7E:F8:D2:13:
    F3:08:B7:53:6D:52:B4:45:90:9F:48:00:4A:47:66:11:
    27:29:66:A8:97:E4:D3:06:81:4A:A2:F9:84:A7:11:47:
    14:09:82:9F:84:ED:55:78:FE:01:9A:1D:50:08:85:00:
    10:30:46:ED:B7:DE:23:46:BB:C4:2D:54:9F:AF:1E:78:
    41:31:77:CC:9B:DF:3B:83:93:A1:61:02:B5:1D:0D:B1:
    FC:F7:9B:B2:01:CE:22:4B:54:FF:F9:05:C3:C2:20:0B: 0x010001
- X509v3 extensions
  - basicConstraints: true, true
  - subjectKeyIdentifier:
```
23 34 f8 d9 52 46 70 0a  ed 40 fb 76 fb b3 2b b0  |#4..RFp..@.v..+.|
c3 35 b3 0f                                       |.5..            |
```
  - keyUsage: 0x86
  - 1.3.6.1.4.1.311.21.1: 0
  - authorityKeyIdentifier
    - 0e ac 82 60 40 56 27 97 e5 25 13 fc 2a e1 0a 53 |...`@V'..%..*..S| 95 59 e4 a4 |.Y.. |
      - #0
        DC: com
        DC: microsoft
        CN: Microsoft Root Certificate Authority
      - 79 ad 16 a1 4a a0 a5 ad 4c 73 58 f4 07 13 2e 65 |y...J...LsX....e|
  - crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl
  - authorityInfoAccess
    - caIssuers: http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt
  - extendedKeyUsage: timeStamping

RSA-SHA1:

10 97 8a c3 5c 03 44 36  dd e9 b4 ad 77 db ce 79  |....\.D6....w..y|
51 4d 01 b1 2e 74 71 5b  6d 0c 13 ab ce be 7b 8f  |QM...tq[m.....{.|
b8 2e d4 12 a2 8c 6d 62  b8 57 02 cb 4e 20 13 50  |......mb.W..N .P|
99 dd 7a 40 e2 57 bb af  58 9a 1c e1 1d 01 86 ac  |..z@.W..X.......|
bb 78 f2 8b d0 ec 3b 01  ee e2 be 8f 0a 05 c8 8d  |.x....;.........|
48 e2 f0 53 15 dd 4f ab  92 e4 e7 8d 6a d5 80 c1  |H..S..O.....j...|
e6 94 f2 06 2f 85 03 e9  91 2a 24 22 70 fb f6 fc  |..../....*$"p...|
e4 78 99 2e 0d f7 07 e2  70 bc 18 4e 9d 8e 6b 0a  |.x......p..N..k.|
72 95 b8 a1 39 9c 67 2d  c5 51 0e ea 62 5c 3f 16  |r...9.g-.Q..b\?.|
98 8b 20 3f e2 07 1a 32  f9 cc 31 4a 76 31 3d 2b  |.. ?...2..1Jv1=+|
72 0b c8 ea 70 3d ff 85  0a 13 df c2 0a 61 8e f0  |r...p=.......a..|
d7 b8 17 eb 4e 8b 7f c5  35 2b 5e a3 bf eb bc 7d  |....N...5+^....}|
0b 42 7b d4 53 72 21 ee  30 ca bb 78 65 5c 5b 01  |.B{.Sr!.0..xe\[.|
17 0a 14 0e d2 da 14 98  f5 3c b9 66 58 b3 2d 2f  |.........<.fX.-/|
e7 f9 85 86 cc 51 56 e8  9d 70 94 6c ac 39 4c d4  |.....QV..p.l.9L.|
f6 79 bf aa 18 7a 62 29  ef a2 9b 29 34 06 77 1a  |.y...zb)...)4.w.|
62 c9 3d 1e 6d 1f 82 f0  0b c7 2c bb cf 43 b3 e5  |b.=.m.....,..C..|
f9 ec 7d b5 e3 a4 a8 74  35 b8 4e c5 71 23 12 26  |..}....t5.N.q#.&|
76 0b 3c 52 8c 71 5a 46  43 14 bc b3 b3 b0 4d 67  |v.

Signer

1
unnamed
- #0
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Code Signing PCA
- 61:19:CC:93:00:01:00:00:00:66
SHA1: nil

contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

e5 14 3e ba da 1d 47 4d  ed 34 36 63 f8 8d 0f 09  |..>...GM.46c....|
22 aa e7 2e                                       |"...            |

1.3.6.1.4.1.311.2.1.12

00 57 00 69 00 6e 00 64 00 6f 00 77 00 73 00 20 |.W.i.n.d.o.w.s. | 00 49 00 6e 00 74 00 65 00 72 00 6e 00 65 00 74 |.I.n.t.e.r.n.e.t| 00 20 00 45 00 78 00 70 00 6c 00 6f 00 72 00 65 |. .E.x.p.l.o.r.e| 00 72 00 20 00 39 |.r. .9 |
: http://www.microsoft.com/windows/ie

rsaEncryption:

00 86 ad 7e af a1 71 a8  05 a0 92 81 96 7f e7 2b  |...~..q........+|
9a c2 4b ac 6b 47 77 8f  5a d4 1f 5a 95 5e 72 45  |..K.kGw.Z..Z.^rE|
63 94 d8 65 27 1f ca 80  5b dc 7f 32 d0 d1 5b d3  |c..e'...[..2..[.|
bc fb b1 07 49 d1 f9 73  be 36 35 d1 aa 40 0c 63  |....I..s.65..@.c|
81 cc 9e 0f bd 9b 20 e7  56 d3 80 dc 02 ac af bd  |...... .V.......|
08 4e 44 ea cf 04 97 55  a8 d1 10 9a 8f 94 02 da  |.ND....U........|
7e d1 25 81 b9 bd b4 d3  1a 67 d5 5b 00 a9 d8 05  |~.%......g.[....|
19 c2 da ca 30 6b 1f 32  33 31 9d 87 67 8b 30 82  |....0k.231..g.0.|
50 1e 78 d4 24 b1 70 99  98 8c c6 a0 90 47 5f ba  |P.x.$.p......G_.|
ba ca 76 77 aa 37 25 24  cb 20 25 f5 55 83 62 4a  |..vw.7%$. %.U.bJ|
9c b0 91 5d 72 dc 71 c5  07 dc ed ce 71 e8 df e1  |...]r.q.....q...|
dd 2b f6 de 30 c3 dc 8c  c7 19 cb 22 e5 c6 05 8f  |.+..0......"....|
ee 19 9e 23 74 28 5e 42  72 59 03 04 49 85 1e 65  |...#t(^BrY..I..e|
b0 3e df 55 5b a8 a9 ae  0c d2 66 24 af 6f d1 3e  |.>.U[.....f$.o.>|
3b e8 3d 50 3d 8f a6 35  9f 13 4f 02 74 1e b7 b4  |;.=P=..5..O.t...|
02 de b9 e1 5a 89 42 d0  16 5c fb f9 7d a2 64 d1  |....Z.B..\..}.d.|

countersignature

unnamed
- #0
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Time-Stamp PCA
- 61:0D:AF:8D:00:00:00:00:00:28
SHA1: nil

contentType: pkcs7-data
signingTime: 2012-06-29 05:02:45 UTC

messageDigest:

cc bf 8c 63 3f fa 97 d3  82 de 2b ee ec bf b7 c9  |...c?.....+.....|
f6 57 41 f1                                       |.WA.            |

RSA-SHA1:

b8 6f fa c0 a1 a7 f8 89  c6 22 cd 18 1a d8 99 7d  |.o.......".....}|
e8 e1 ec f6 b6 d4 de 47  9e a4 40 5a 29 ad a2 9a  |.......G..@Z)...|
ed a1 76 63 23 a4 13 c4  fc 59 e3 04 5d 7d 11 2a  |..vc#....Y..]}.*|
b8 6f 59 fc ed c1 27 d4  04 07 d5 46 de ff 8d fa  |.oY...'....F....|
5c fa bd 7d 81 bd 1b 0a  68 49 a8 cb 8b c7 02 c3  |\..}....hI......|
af b0 62 b0 89 17 5f 9e  9f 3c 0a a1 d1 20 25 9b  |..b..._..<... %.|
9e 47 76 53 92 98 dd c6  d1 d8 1a 70 4b bc f7 9d  |.GvS.......pK...|
35 4c 67 d4 e6 ce 3c a8  97 38 98 95 c5 de b8 63  |5Lg...<..8.....c|
1c d0 0b 66 ed 6a 57 a0  e5 07 d0 d3 1c 17 1a c8  |...f.jW.........|
50 8b 79 40 28 83 00 c0  14 1b 8b 8c d3 eb 83 49  |P.y@(..........I|
eb 6d 3f 50 f7 8f de 91  f0 d6 98 31 4c e6 8c b2  |.m?P.......1L...|
89 01 1b 8f 0c 2c e2 c8  6c 86 e1 b8 75 96 a9 39  |.....,..l...u..9|
a7 b6 28 77 af ff 42 ba  70 67 44 85 c8 a9 19 cd  |..(w..B.pgD.....|
05 8b e4 3c d2 53 c8 b7  d0 5d a9 48 1c 17 56 2b  |...<.S...].H..V+|
c7 c9 6e ce a3 47 9e b6  cd de f8 e8 f7 04 44 3f  |..n..G........D?|
70 a0 91 a4 41 ea 9f b3  25 23 78 85 f0 d7 28 cd  |p...A...%#x...(.|

show previews

offset	size	type	comment
15c1	15	HTM		#
185b8	52209	PNG	(256 x 256)	#
2c690	38866	PNG	(256 x 256)	#
647d0	16716	PNG	(256 x 256)	#
6f450	52209	PNG	(256 x 256)	#
83528	38866	PNG	(256 x 256)	#
941e0	52209	PNG	(256 x 256)	#
a82b8	38866	PNG	(256 x 256)	#
b1a8a	27094	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] ignoring invalid PEdump::BITMAPINFOHEADER

iexplore.exe- Internet Explorer

MZ Header

Rich Header

DOS stub

PE Header

Sections

Data Directory

StringTable 040904B0

StringTable 0c0904E4

VS_FIXEDFILEINFO

Signers (1)

Certificates (4)

iexplore.exe
- Internet Explorer