MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

TLS

StringTable 040904E4

VS_FIXEDFILEINFO

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Code Signing PCA 2011
serial: 3300000188AF52D6B9926DE8F9000000000188

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:00:01:56:ba:eb:14:2c:46:7c:88:ae:00:00:00:00:01:56
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA
        Validity
            Not Before: Dec 19 01:13:01 2019 GMT
            Not After : Mar 17 01:13:01 2021 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft Operations Puerto Rico, OU=Thales TSS ESN:2164-E35C-2044, CN=Microsoft Time-Stamp Service
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:98:24:97:86:da:03:70:1a:57:fd:25:db:c9:
                    32:1d:70:a0:a2:ea:59:7c:c1:f2:b6:a6:23:a4:b6:
                    3d:d0:6a:d2:1f:26:77:2e:30:47:79:53:14:d6:e5:
                    6b:ba:8c:3b:d1:0b:21:92:a2:b6:c2:bb:69:43:33:
                    3b:af:8c:ab:c1:60:8a:ad:85:df:3c:7a:af:89:37:
                    bb:28:86:4a:de:87:b2:0a:77:b3:44:c0:41:d4:d2:
                    12:52:fa:60:fa:b9:98:f3:08:9c:13:b8:a0:b5:48:
                    1e:ea:fa:52:47:7f:8b:1c:17:12:f3:f0:50:70:b3:
                    fe:19:da:49:3e:3a:26:34:21:16:b6:45:56:98:e7:
                    aa:83:0a:19:09:d2:e7:dc:5c:fe:04:b8:7a:40:d9:
                    33:84:a7:e5:f2:b3:0a:17:92:cf:39:6c:d2:b6:2a:
                    a0:76:bd:18:6e:9d:e2:a2:56:9b:a2:3d:ed:c7:9b:
                    89:fc:cb:19:88:76:79:a2:ff:17:d8:3d:cb:1a:98:
                    d3:73:f8:28:0b:c1:52:16:40:03:8c:b9:bf:80:88:
                    b0:85:fb:6e:79:94:ac:d7:ed:53:1c:c4:05:63:a6:
                    74:d5:d0:8c:34:91:df:dd:4f:ba:fd:fd:96:e0:46:
                    9a:7f:90:2a:18:28:f3:23:c9:48:77:81:eb:ca:6f:
                    2b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                17:3F:4A:7C:DE:24:93:37:2F:0C:FD:DB:80:73:0F:80:69:FA:B6:F7
            X509v3 Authority Key Identifier: 
                keyid:23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt

            X509v3 Extended Key Usage: 
                Time Stamping
    Signature Algorithm: sha1WithRSAEncryption
         54:c7:31:ed:20:a8:2d:1f:62:c0:6d:5c:9c:a4:d3:11:28:c1:
         e6:2c:a9:e6:64:6e:ee:8c:db:62:9c:2b:26:bc:47:07:27:74:
         ab:57:98:3f:2c:b7:78:c9:46:d0:bc:bb:6d:1c:b1:63:01:bb:
         a5:53:46:1e:92:34:2a:13:be:80:0e:3e:b0:bb:e7:fb:aa:16:
         af:7e:f6:1e:06:7c:93:6a:99:9e:f8:f4:4a:c9:80:68:52:ea:
         9f:b6:b8:84:9c:39:d0:cd:1e:e8:be:8c:a4:cb:1e:44:e7:25:
         8b:bb:7f:41:c6:1c:3c:8d:98:86:45:b4:c3:63:90:44:d2:87:
         44:a8:2c:e5:ff:87:3b:4a:51:c7:ac:9a:70:a6:f4:d9:c3:58:
         22:e3:b9:77:66:9e:42:35:af:81:de:87:10:94:0f:17:43:ab:
         b8:88:a7:53:68:bb:57:8c:6a:30:ab:93:c0:c3:de:a8:77:94:
         a5:f6:2b:bf:89:c9:45:ad:c8:ab:72:e5:0b:a4:26:69:0a:c6:
         09:d1:a0:26:03:a5:21:3c:7e:42:a7:9a:66:7b:0c:4b:44:69:
         d0:d0:d6:7b:30:f9:26:9f:06:14:79:c2:ff:08:f1:9c:46:d3:
         2f:32:0f:48:62:08:d3:38:48:85:65:2d:eb:6a:44:9e:a7:19:
         f1:79:f0:f2

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:00:01:88:af:52:d6:b9:92:6d:e8:f9:00:00:00:00:01:88
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA 2011
        Validity
            Not Before: Mar  4 18:39:48 2020 GMT
            Not After : Mar  3 18:39:48 2021 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Corporation
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:08:da:f2:13:e0:9e:c3:2d:a6:e2:df:da:ef:
                    8c:19:ec:2f:58:4f:0b:f5:3f:20:b8:06:f3:3f:91:
                    25:8f:36:cf:27:d1:14:de:f8:5b:d8:7d:4f:84:f6:
                    e7:f4:b7:b9:d8:94:0c:c7:8c:af:a9:96:27:f6:06:
                    10:fe:36:07:61:21:44:3c:b1:5c:16:3b:7f:6d:8e:
                    f4:11:1e:33:f6:ff:fb:d2:bc:87:e6:9a:44:68:30:
                    bd:48:86:78:ec:f6:44:22:65:0c:d8:44:36:18:46:
                    9f:71:49:06:26:47:04:23:93:98:65:f3:f5:3b:46:
                    03:a2:40:38:ad:54:76:94:ec:14:f5:30:8f:76:95:
                    f6:51:b8:82:03:0d:80:5d:bd:7b:5b:72:56:09:31:
                    53:b0:a9:9b:6f:d0:ef:73:40:2a:de:b7:a4:7e:7d:
                    14:86:68:33:5f:10:4a:5c:20:b2:fe:0f:b4:55:dc:
                    ce:2e:68:91:38:4d:ae:8a:00:e7:6f:57:e3:15:68:
                    9a:75:61:71:53:64:f2:ad:a6:31:ce:e9:df:69:1d:
                    03:d9:88:6e:cd:74:2e:90:6e:74:46:9a:c6:b8:f2:
                    e3:50:ad:be:80:7e:62:ca:0c:8d:4b:a7:7d:56:32:
                    88:13:69:7e:6d:65:ff:82:65:3f:4f:4a:eb:e3:38:
                    22:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                1.3.6.1.4.1.311.76.8.1, Code Signing
            X509v3 Subject Key Identifier: 
                8F:D4:49:2F:DC:CD:AC:F7:0B:D7:44:59:74:C4:08:5D:93:7B:30:6F
            X509v3 Subject Alternative Name: 
                DirName:/OU=Microsoft Ireland Operations Limited/serialNumber=230012+458386
            X509v3 Authority Key Identifier: 
                keyid:48:6E:64:E5:50:05:D3:82:AA:17:37:37:22:B5:6D:A8:CA:75:02:95

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt

            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
         29:d7:a3:c8:63:a7:b1:5e:4f:e1:fa:89:09:55:dc:27:06:9e:
         44:9b:16:f2:29:29:86:9f:83:36:02:16:8d:d4:1d:8d:55:1d:
         82:55:6f:98:c7:10:ef:28:1b:6e:90:a8:11:0b:99:a9:3a:31:
         32:3e:ad:ad:d6:28:c4:c6:84:4d:6c:10:89:68:c1:37:29:e0:
         80:2c:f1:ae:70:a4:28:7a:55:fe:19:fd:b0:2d:22:9a:4f:de:
         9d:e0:5e:4d:97:f1:45:d3:73:e5:b1:8d:06:2c:0e:41:62:4b:
         3a:3f:38:16:b9:86:47:56:d6:0e:04:a4:ee:37:97:d9:a3:4e:
         80:5d:a8:43:ed:21:7b:19:ec:78:b5:ff:ac:b8:80:ad:0f:98:
         c8:b0:1b:c2:cc:a5:29:f4:9f:fa:12:1c:68:eb:50:d0:60:1c:
         93:f1:82:ce:b7:4a:57:f9:f1:01:81:ce:7b:97:89:16:97:99:
         f4:d4:0d:da:ef:85:1a:1c:77:12:0c:8b:c9:d7:43:05:80:08:
         c8:90:cc:94:91:cc:13:f9:4b:6c:14:ab:b9:cc:02:a8:da:4d:
         b7:97:84:9a:83:d9:21:55:1d:d5:18:94:aa:ee:be:d3:d2:c1:
         b9:ea:49:15:93:18:8f:2c:e0:51:17:b7:e4:cb:df:0e:49:9f:
         05:59:99:99:14:16:88:a8:40:33:0c:8c:5c:9a:2a:ea:dd:27:
         aa:67:cd:ba:f5:87:a4:16:d1:1f:7b:7d:67:3c:c4:42:33:2c:
         83:a2:53:6a:e3:c1:60:2d:95:0a:85:3b:c2:8d:8b:29:23:60:
         6c:84:7f:92:f2:00:92:80:3b:ea:c9:77:d7:ec:61:1f:95:05:
         ab:88:11:0a:18:9a:39:d4:6d:35:cc:49:8d:8b:7f:92:8c:96:
         e5:a5:0c:e1:95:87:ca:ba:5e:39:81:71:ca:5a:4f:ef:2d:09:
         fc:69:69:56:0f:8b:59:dc:9f:04:f0:68:f4:2f:56:af:11:8d:
         60:d1:07:b3:da:f2:bb:87:82:3d:87:24:58:ba:f7:e8:5c:ab:
         b9:96:c7:99:d3:52:dc:f3:15:ae:d1:49:97:c4:e5:ad:5a:e4:
         0b:81:98:63:51:af:b7:fc:70:d7:da:d3:5f:ad:89:68:d5:2a:
         4d:5a:fa:02:54:05:23:f4:b0:8c:5e:70:56:d5:49:74:d9:ed:
         ba:9e:6a:5e:39:5d:20:c8:8a:c6:41:91:66:fe:f3:74:db:5d:
         d4:c6:30:34:94:14:a4:c0:76:d0:be:af:7e:46:7e:c3:7c:41:
         5c:b9:f4:76:f9:65:8c:c0:5d:cc:e1:81:19:a4:ec:dc:84:ea:
         30:f4:62:6e:53:2a:25:b9

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:16:68:34:00:00:00:00:00:1c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
        Validity
            Not Before: Apr  3 12:53:09 2007 GMT
            Not After : Apr  3 13:03:09 2021 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a1:6c:b1:df:db:48:92:2a:7c:6b:2e:19:e1:
                    bd:e2:e3:c5:99:51:23:50:ad:ce:dd:18:4e:24:0f:
                    ee:d1:a7:d1:4c:ad:74:30:20:11:eb:07:d5:54:95:
                    15:49:94:1b:42:92:ae:98:5c:30:26:da:00:6b:e8:
                    7b:bd:ec:89:07:0f:f7:0e:04:98:f0:89:cc:1f:cb:
                    33:24:87:9d:f2:f4:67:1c:2c:fc:7b:e7:88:1d:ea:
                    e7:4e:a3:a1:c1:23:53:ca:8d:fa:45:cf:09:d0:5e:
                    af:d0:b0:42:04:a2:f9:a6:6c:93:67:d7:28:dc:46:
                    53:b0:86:d0:e5:28:46:2e:27:ac:86:4f:55:52:0c:
                    e4:03:2c:fb:6a:90:90:30:6e:87:f3:59:30:9d:fa:
                    7e:d6:97:b3:e8:21:97:7e:f8:d2:13:f3:08:b7:53:
                    6d:52:b4:45:90:9f:48:00:4a:47:66:11:27:29:66:
                    a8:97:e4:d3:06:81:4a:a2:f9:84:a7:11:47:14:09:
                    82:9f:84:ed:55:78:fe:01:9a:1d:50:08:85:00:10:
                    30:46:ed:b7:de:23:46:bb:c4:2d:54:9f:af:1e:78:
                    41:31:77:cc:9b:df:3b:83:93:a1:61:02:b5:1d:0d:
                    b1:fc:f7:9b:b2:01:ce:22:4b:54:ff:f9:05:c3:c2:
                    20:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Authority Key Identifier: 
                keyid:0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4
                DirName:/DC=com/DC=microsoft/CN=Microsoft Root Certificate Authority
                serial:79:AD:16:A1:4A:A0:A5:AD:4C:73:58:F4:07:13:2E:65

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt

            X509v3 Extended Key Usage: 
                Time Stamping
    Signature Algorithm: sha1WithRSAEncryption
         10:97:8a:c3:5c:03:44:36:dd:e9:b4:ad:77:db:ce:79:51:4d:
         01:b1:2e:74:71:5b:6d:0c:13:ab:ce:be:7b:8f:b8:2e:d4:12:
         a2:8c:6d:62:b8:57:02:cb:4e:20:13:50:99:dd:7a:40:e2:57:
         bb:af:58:9a:1c:e1:1d:01:86:ac:bb:78:f2:8b:d0:ec:3b:01:
         ee:e2:be:8f:0a:05:c8:8d:48:e2:f0:53:15:dd:4f:ab:92:e4:
         e7:8d:6a:d5:80:c1:e6:94:f2:06:2f:85:03:e9:91:2a:24:22:
         70:fb:f6:fc:e4:78:99:2e:0d:f7:07:e2:70:bc:18:4e:9d:8e:
         6b:0a:72:95:b8:a1:39:9c:67:2d:c5:51:0e:ea:62:5c:3f:16:
         98:8b:20:3f:e2:07:1a:32:f9:cc:31:4a:76:31:3d:2b:72:0b:
         c8:ea:70:3d:ff:85:0a:13:df:c2:0a:61:8e:f0:d7:b8:17:eb:
         4e:8b:7f:c5:35:2b:5e:a3:bf:eb:bc:7d:0b:42:7b:d4:53:72:
         21:ee:30:ca:bb:78:65:5c:5b:01:17:0a:14:0e:d2:da:14:98:
         f5:3c:b9:66:58:b3:2d:2f:e7:f9:85:86:cc:51:56:e8:9d:70:
         94:6c:ac:39:4c:d4:f6:79:bf:aa:18:7a:62:29:ef:a2:9b:29:
         34:06:77:1a:62:c9:3d:1e:6d:1f:82:f0:0b:c7:2c:bb:cf:43:
         b3:e5:f9:ec:7d:b5:e3:a4:a8:74:35:b8:4e:c5:71:23:12:26:
         76:0b:3c:52:8c:71:5a:46:43:14:bc:b3:b3:b0:4d:67:c8:9f:
         42:ff:80:79:21:80:9e:15:30:66:e8:42:12:5e:1a:c8:9e:22:
         21:d0:43:e9:2b:e9:bb:f4:48:cc:2c:d4:d8:32:80:4c:26:2a:
         48:24:5f:5a:ea:56:ef:a6:de:99:9d:ca:3a:6f:bd:81:27:74:
         06:11:ee:76:21:bf:9b:82:c1:27:54:b6:b1:6a:3d:89:a1:76:
         61:b4:6e:a1:13:a6:bf:aa:47:f0:12:6f:fd:8a:32:6c:b2:fe:
         df:51:c8:8c:23:c9:66:bd:9d:1d:87:12:64:02:3d:2d:af:59:
         8f:b8:e4:21:e5:b5:b0:ca:63:b4:78:54:05:d4:41:2e:50:ac:
         94:b0:a5:78:ab:b3:a0:96:75:1a:d9:92:87:13:75:22:2f:32:
         a8:08:6e:a0:5b:8c:25:bf:a0:ef:84:ca:21:d6:eb:1e:4f:c9:
         9a:ee:49:e0:f7:01:65:6f:89:0b:7d:c8:69:c8:e6:6e:ea:a7:
         97:ce:31:29:ff:0e:c5:5b:5c:d8:4d:1b:a1:d8:fa:2f:9e:3f:
         2e:55:16:6b:c9:13:a3:fd

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0e:90:d2:00:00:00:00:00:03
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
        Validity
            Not Before: Jul  8 20:59:09 2011 GMT
            Not After : Jul  8 21:09:09 2026 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA 2011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (4096 bit)
                Modulus:
                    00:ab:f0:fa:72:10:1c:2e:ad:d8:6e:aa:82:10:4d:
                    34:ba:f2:b6:58:21:9f:42:1b:2a:6b:e9:5a:50:aa:
                    b8:06:38:1a:04:49:ba:7f:c3:0c:1e:dd:37:6b:c6:
                    12:d8:0b:f0:38:c2:99:06:b0:c8:39:d5:01:14:31:
                    42:d3:89:0d:79:64:87:7e:94:60:24:6c:af:9e:49:
                    9c:e9:68:5e:d2:df:9b:53:b2:0a:2c:c3:af:d9:a9:
                    2b:ae:7a:09:af:d7:96:59:ca:60:1a:05:e9:66:76:
                    e8:32:52:26:12:2f:e7:ab:08:50:cf:b3:44:b7:5d:
                    d8:c4:2e:03:75:ab:68:f3:cb:6d:f3:3a:5c:a1:16:
                    f4:46:ba:e0:38:64:ac:6e:64:35:78:a6:a0:63:0f:
                    2d:d3:40:93:f8:e3:de:07:0d:d5:5c:79:a5:49:29:
                    e7:0d:be:a0:13:77:be:94:3d:ef:fb:e3:2b:5a:10:
                    1f:4d:56:28:a2:7a:72:e0:12:3a:b7:49:5e:d8:ed:
                    ed:43:91:83:d9:7b:b2:7b:86:1b:d9:3e:b1:8c:5d:
                    e8:89:4f:84:1a:f2:a1:2f:59:e4:90:3b:2d:ae:33:
                    58:c5:b7:3e:fe:32:d3:b3:03:3d:b1:b2:af:92:38:
                    7e:d2:9d:80:2c:f5:4e:56:91:21:35:25:c3:39:6e:
                    64:7f:53:ba:9c:0f:ad:19:23:84:cb:f4:ba:03:86:
                    8d:f7:5f:f0:d0:52:bf:8c:94:87:bc:c0:21:74:25:
                    5f:18:28:b6:cc:27:28:38:25:98:39:4a:36:cf:7c:
                    b1:92:ae:1c:23:a7:a9:66:ec:61:1f:6a:e1:28:49:
                    9d:5f:88:e2:25:5d:d3:21:4b:3e:52:c4:b5:57:3f:
                    24:03:f0:d1:7a:5b:2f:d5:23:e3:70:5d:0f:51:46:
                    77:b3:f8:00:e1:bc:ac:02:82:5f:db:c0:15:b3:bd:
                    1b:d4:55:4b:e7:39:a1:0f:e9:23:49:bc:18:b8:44:
                    7c:45:e4:c1:c3:72:7a:e0:72:e7:24:df:bf:46:99:
                    c5:ef:c2:1c:57:db:83:8d:ec:4d:49:30:a7:ab:8e:
                    df:ec:5b:9f:af:fc:dd:b0:66:e2:c1:97:81:7b:ed:
                    d6:ed:4b:e7:49:29:a7:13:28:a6:a7:7d:67:80:e6:
                    8a:62:78:5f:b2:2f:84:d7:57:9c:5c:bf:77:28:28:
                    f1:ed:6d:c3:28:8f:2c:8f:40:37:4f:c1:e1:85:44:
                    89:c4:09:4c:c5:d4:a5:43:2f:74:95:f7:6e:f8:78:
                    20:58:2c:13:5d:60:95:9a:3e:4f:33:84:da:b0:88:
                    17:de:9e:4e:f4:96:b0:bc:46:a0:6c:98:d2:e0:d6:
                    88:8c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Subject Key Identifier: 
                48:6E:64:E5:50:05:D3:82:AA:17:37:37:22:B5:6D:A8:CA:75:02:95
            1.3.6.1.4.1.311.20.2: 
                .
.S.u.b.C.A
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:72:2D:3A:02:31:90:43:B9:14:05:4E:E1:EA:A7:C7:31:D1:23:89:34

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.311.46.3
                  CPS: http://www.microsoft.com/pkiops/docs/primarycps.htm
                  User Notice:
                    Explicit Text:  

    Signature Algorithm: sha256WithRSAEncryption
         67:f2:86:a5:98:e0:54:79:1a:2e:d3:d8:74:67:22:9b:0b:96:
         11:e1:63:92:99:42:96:7d:d2:79:0c:90:c1:65:5f:2e:2c:3e:
         f8:c3:72:d1:6d:83:fe:be:3f:e8:0a:ca:3b:bf:47:a9:a3:f3:
         69:db:63:bf:22:35:a5:97:5d:65:84:90:7d:8b:46:50:55:d8:
         0c:92:7c:d2:1a:4b:1c:f3:3c:42:8b:52:d0:b0:fd:6b:e3:3e:
         07:2e:29:9b:e6:3d:1b:a5:d4:b5:1d:77:94:39:e2:e9:64:c9:
         44:3d:78:7a:23:f3:13:7d:a6:90:74:83:8d:f4:cb:26:02:46:
         2a:c2:8a:10:bb:a4:a9:05:0c:9b:ed:68:fa:68:2e:95:a0:2a:
         3f:2a:6b:58:49:63:1f:09:69:6e:5a:98:96:e4:83:f4:c0:8f:
         f3:46:2b:de:fc:3b:d0:bd:35:ef:6e:25:ae:e5:af:27:ed:d0:
         dd:f3:0e:af:99:28:97:98:4d:0e:3d:0b:f2:08:89:d6:1f:c3:
         32:18:e2:f0:c5:2d:ce:5b:9e:b4:49:39:0a:c6:0a:c2:c6:ad:
         ae:e5:b2:d9:db:15:88:51:45:58:38:32:71:27:1a:7f:b1:f4:
         27:f8:de:2c:3a:20:69:98:b2:59:89:68:6e:6f:a7:b7:74:c3:
         40:05:06:a6:01:2a:28:3e:82:3f:13:4d:66:0b:c0:b3:4d:f5:
         e1:8f:7f:1c:6f:15:7d:45:a7:76:e5:40:2a:65:a3:c3:5d:52:
         62:86:c3:1d:63:36:97:86:df:da:f3:f8:f2:16:a1:9a:27:e1:
         cd:a5:97:d0:ee:5d:63:41:e3:5b:07:9c:87:3e:06:77:06:d1:
         06:b1:75:1f:14:be:61:61:b5:f0:dc:c6:1b:04:be:df:41:c7:
         0e:28:ee:de:65:2f:ec:97:f6:a1:5c:96:d8:00:d6:a1:46:bd:
         59:f3:97:a5:09:4b:48:10:99:80:1f:d0:00:29:c5:b1:9b:a5:
         3f:45:77:1e:35:c6:d2:a2:a2:9f:7a:7a:22:fa:48:95:1f:ab:
         fb:47:23:80:f5:9e:f8:bf:6b:b7:4b:97:e2:eb:75:78:1a:ec:
         ea:37:99:79:18:4b:ff:d6:b3:23:68:75:e6:af:fa:fc:8b:eb:
         0b:80:ea:69:3b:af:fc:30:ed:04:4c:8e:df:df:75:6d:63:91:
         3d:d1:9d:56:4e:4f:bf:80:57:22:a1:78:11:32:21:7a:ef:41:
         0a:b1:3f:fb:a8:cc:a4:5d:c1:a1:88:9b:57:71:56:4e:48:45:
         c0:42:c9:9b:76:5b:0a:80:48:6b:fd:79:9f:c1:bd:6d:6d:6a:
         c9:52:73:13:0d:7a:50:cd

undefined method `first' for #

offsetsizetypecomment
0463360EXE11/18/2017 21:37:28#
15c115HTM#
7120014538160BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 15001520 bytes (15 MiB)


--
Type = PE
Physical Size = 15001520
CPU = x86
Characteristics = Executable 32-bit RemovableRun NetRun
Created = 2017-11-18 21:37:28
Headers Size = 1024
Checksum = 15035859
Image Size = 487424
Section Alignment = 4096
File Alignment = 512
Code Size = 301056
Initialized Data Size = 161280
Uninitialized Data Size = 0
Linker Version = 14.0
OS Version = 5.1
Image Version = 0.0
Subsystem Version = 5.1
Subsystem = Windows GUI
DLL Characteristics = Relocated NX-Compatible TerminalServerAware
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
Comment = FileVersion: 14.27.29016.0
ProductVersion: 14.27.29016.0
InternalName: setup
----
Path = [0]
Size = 14521248
Packed Size = 14521248
Virtual Size = 14521248
Offset = 463360
--
Path = [0]
Type = Cab
WARNINGS:
There are data after the end of archive
Physical Size = 175123
Tail Size = 14346125
Method = MSZip
Blocks = 1
Volumes = 1
Volume Index = 0
ID = 0

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2020-06-16 10:54:48 ....A        14946               0
2019-02-13 16:56:32 ....A       195600               u0
2017-07-11 06:39:16 ....A         8332               u1
2020-05-06 09:27:12 ....A         2952               u2
2020-05-06 09:27:12 ....A         1861               u3
2020-05-26 08:54:16 ....A         9046               u4
2020-05-06 09:27:12 ....A         2980               u5
2020-05-26 08:54:16 ....A        18127               u6
2020-05-06 09:27:12 ....A         3333               u7
2020-05-26 08:54:16 ....A        13053               u8
2020-05-06 09:27:12 ....A         3379               u9
2020-05-26 08:54:16 ....A        11936               u10
2020-05-06 09:27:12 ....A         3366               u11
2020-05-26 08:54:16 ....A        11593               u12
2020-05-06 09:27:12 ....A         3319               u13
2020-05-26 08:54:16 ....A        11281               u14
2020-05-06 09:27:12 ....A         3959               u15
2020-05-26 08:54:16 ....A        28232               u16
2020-05-06 09:27:12 ....A         3249               u17
2020-05-26 08:54:16 ....A        27936               u18
2020-05-06 09:27:12 ....A         3212               u19
2020-05-26 08:54:16 ....A        13265               u20
2020-05-06 09:27:12 ....A         3095               u21
2020-05-26 08:54:16 ....A        10656               u22
2020-05-06 09:27:12 ....A         4150               u23
2020-05-26 08:54:16 ....A        31915               u24
2020-05-06 09:27:12 ....A         3221               u25
2020-05-26 08:54:16 ....A        13379               u26
2020-05-06 09:27:12 ....A         2978               u27
2020-05-26 08:54:16 ....A        17863               u28
2020-05-06 09:27:12 ....A         3265               u29
2020-05-26 08:54:16 ....A        10714               u30
2020-06-16 10:54:46 ....A        13188               u31
------------------- ----- ------------ ------------  ------------------------
2020-06-16 10:54:48             509381     15001520  33 files

Warnings: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] can't find file_offset of VA 0x6aac0