winload.exe - osloader.exe

info
MZ
PE
resources
exports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	winload.exe
size	538816 (0x838c0)
md5	25667d6fe4b6f83c6d50f8d52b928343

type	PE32 executable Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe8

Rich Header

lib id	version	times used
131	30729	94
132	30729	22
137	30729	191
149	30729	33
146	30729	1
148	30729	1
145	30729	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	0xb
TimeDateStamp	0x4ce78f47
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0x68400
SizeOfInitializedData	0x18200
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1000
BaseOfCode	0x1000
BaseOfData	0x6a000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	0.0
ImageVersion	0.0
SubsystemVersion	1.0
Reserved1	0
SizeOfImage	0xaf000
SizeOfHeaders	0x400
CheckSum	0x8431b
Subsystem	0x10
DllCharacteristics	0x400
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0 DLL

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x5ab10	0x5ac00	R-X CODE
PAGER32C	0x5c000	0x8675	0x8800	R-X CODE
PAGE	0x65000	0x3e0d	0x4000	R-X CODE
INIT	0x69000	0xffa	0x1000	R-X CODE
.rdata	0x6a000	0xcea6	0xd000	R-- IDATA
.data	0x77000	0x29c64	0xe00	RW- IDATA
PAGER32R	0xa1000	0x380	0x400	R-- IDATA
INITDATA	0xa2000	6	0x200	RW- IDATA
PAGEDATA	0xa3000	1	0x200	RW- IDATA
.rsrc	0xa4000	0x63c0	0x6400	R-- IDATA
.reloc	0xab000	0x36e0	0x3800	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x76e00	0x34
IMPORT	0	0
RESOURCE	0xa4000	0x63c0
EXCEPTION	0	0
SECURITY	0x80a00	0x2ec0
BASERELOC	0xab000	0x2df8
DEBUG	0x6a000	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
MUI	#1	216	1252
MESSAGETABLE	#1	2284	1252
VERSION	#1	904	1252
HTML	OSLOADER.XSL	21790	1252

ord	entry_va	function_name

module_name	winload.dll
flags	0
timestamp	2010-11-20 09:04:17
version	0.0
ordinal_base	1
nFunctions	0
nNames	0
Names(0)	0
Functions(0)	0
NameOrdinals(0)	0

StringTable 040904B0

CompanyName	Microsoft Corporation
FileDescription	OS Loader
FileVersion	6.1.7601.17514 (win7sp1_rtm.101119-1850)
InternalName	osloader.exe
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	osloader.exe
ProductName	Microsoft® Windows® Operating System
ProductVersion	6.1.7601.17514

VS_FIXEDFILEINFO

FileVersion	6.1.7601.17514
ProductVersion	6.1.7601.17514
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	1
FileOS	0x40004
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Windows Verification PCA

serial: 6115346400000000000C

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:04:b3:f5:00:00:00:00:00:0d
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA
        Validity
            Not Before: Jul 25 19:13:45 2008 GMT
            Not After : Jul 25 19:23:45 2011 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, OU=nCipher DSE ESN:9E78-864B-039D, CN=Microsoft Time-Stamp Service
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:46:2f:bc:a8:14:f2:f8:46:3f:0c:05:a1:a4:
                    63:45:05:7f:9a:e9:33:72:cc:27:d3:32:ec:98:c3:
                    e0:34:88:85:ce:a1:12:97:ae:48:50:4e:48:20:7f:
                    70:e4:59:33:fc:99:5b:b9:07:80:48:28:bc:8d:b8:
                    fa:66:02:66:b5:f1:7f:1c:50:96:28:93:55:8d:81:
                    55:aa:70:5b:a5:c9:ce:ef:2e:e2:e7:25:c3:76:6f:
                    29:0b:9f:2c:c8:53:80:9a:c1:0d:e3:bd:a7:45:bf:
                    31:df:e6:86:8b:7d:89:01:8b:1c:78:58:38:b2:dd:
                    93:4a:5b:9e:1d:d7:9c:c6:f0:c4:4d:d0:bf:27:4a:
                    07:94:04:71:02:88:0d:70:e6:f8:2a:e7:0e:61:e3:
                    98:4b:d1:dd:ab:54:b6:37:fb:c6:46:fd:a4:1c:bc:
                    ff:af:ec:b2:97:80:dc:b8:93:fd:b8:22:a8:9d:25:
                    59:70:3e:5c:7b:1c:41:29:fe:73:99:22:49:81:d7:
                    55:26:c0:ec:f2:4e:28:54:62:3b:70:2d:61:93:1d:
                    50:d5:9f:01:c2:05:c3:55:1a:4a:87:a4:00:86:54:
                    a0:7b:62:b2:ea:0f:fa:5d:5c:c5:2a:11:82:97:be:
                    86:1b:1d:ab:b7:ab:0a:29:fc:cc:cd:34:89:bf:40:
                    b6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A0:85:31:5E:87:AE:0F:AA:0A:04:EB:E1:C0:D3:64:BD:3C:BB:69:F5
            X509v3 Authority Key Identifier: 
                keyid:23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
    Signature Algorithm: sha1WithRSAEncryption
         47:71:4f:b6:48:45:c0:08:eb:9c:2f:d3:25:5b:db:67:51:11:
         92:a6:d9:d9:b2:14:9a:26:c2:fd:06:c1:cc:d7:88:f5:a6:35:
         b5:cd:2b:b6:6b:58:6a:cd:f9:9d:f3:5a:eb:46:2f:a1:fa:a7:
         1f:7d:7a:42:b2:b0:d1:1a:09:28:54:6c:6f:99:8b:38:fc:3a:
         e4:c1:24:aa:72:4c:12:04:2f:f1:d4:7a:76:3b:c5:cf:71:27:
         0b:6d:fc:38:67:a7:c5:22:62:2b:7b:7f:c1:76:ac:a7:c5:26:
         4c:a9:af:98:dd:8a:38:5d:cf:65:a4:81:2e:a9:ef:56:02:4c:
         b9:08:be:65:c4:1e:8b:21:2d:6e:a7:f2:75:64:b4:dc:1a:6b:
         d0:f1:25:e5:c2:e7:80:44:39:d4:2f:0a:79:7e:01:2a:a7:78:
         5b:a3:6b:5b:ce:09:ef:39:3a:39:b7:c4:67:53:b9:aa:f3:61:
         ff:9d:79:e3:cf:48:67:ff:ab:c8:c6:2b:62:09:94:d0:1f:a2:
         78:f7:73:49:3b:58:53:c1:09:ab:4c:06:0b:d5:40:28:7e:f6:
         b1:66:c5:bf:52:c4:be:3e:3b:e0:f9:8e:74:8d:e6:22:0c:c1:
         c6:33:98:b5:79:e8:0c:f7:00:7c:ea:b2:4e:cc:80:9a:16:2d:
         c8:a4:10:05

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:15:34:64:00:00:00:00:00:0c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows Verification PCA
        Validity
            Not Before: Dec  7 21:57:44 2009 GMT
            Not After : Mar  7 21:57:44 2011 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, CN=Microsoft Windows
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a6:b9:79:c4:d4:08:cc:d0:41:d3:f3:49:47:
                    d0:0a:51:50:c3:e8:01:f7:0b:ce:e7:eb:5e:eb:6c:
                    4d:c5:9d:03:56:27:ae:d1:dc:e9:4e:70:f1:40:db:
                    ca:43:76:5e:99:cb:ba:1e:2a:83:29:44:67:88:79:
                    5d:33:c1:0c:2d:10:3f:b9:30:23:31:20:3f:7d:97:
                    7f:4b:e2:e5:bb:5a:3d:3e:0a:13:fa:51:4c:b6:9b:
                    94:a5:42:f9:18:6c:fe:28:51:75:eb:6a:56:ef:89:
                    d2:b4:c0:9f:71:67:a3:09:f2:12:f2:4d:20:d2:7a:
                    d3:ca:ea:6b:f4:61:26:d6:b3:73:f4:6c:00:b0:46:
                    ea:ea:40:2c:64:9b:fe:87:94:0f:8a:e6:10:52:83:
                    f7:5d:0a:60:92:0d:e2:c9:38:76:ba:0a:bd:e5:51:
                    5c:2a:2c:c8:c4:11:9f:fc:64:ee:9b:31:92:b7:4b:
                    c1:e0:8d:60:27:a8:71:a6:81:4c:5e:40:1e:32:c3:
                    00:aa:38:d7:62:d1:28:df:0f:39:4a:7f:d4:36:4c:
                    33:8f:fe:b7:4b:12:cc:e6:31:d0:b2:92:23:81:24:
                    41:bb:ab:14:d1:ef:7e:32:b2:86:6c:f0:ca:a1:03:
                    4c:16:ed:d5:d2:fe:1c:25:61:13:45:c3:e1:3f:0e:
                    55:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Code Signing, 1.3.6.1.4.1.311.10.3.6
            X509v3 Subject Key Identifier: 
                A8:A1:14:56:9C:B5:21:F1:25:A0:F3:E7:1A:AF:9E:78:D1:6B:28:83
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Authority Key Identifier: 
                keyid:90:8B:11:A5:70:ED:E0:F9:A9:C0:AC:08:C7:B5:F4:82:B1:3C:C5:4A

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/WinPCA.crl
                  URI:http://www.microsoft.com/pki/crl/products/WinPCA.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftWinPCA.crt

    Signature Algorithm: sha1WithRSAEncryption
         4f:b0:a7:39:9c:22:5c:d9:4f:b7:28:59:df:7f:c8:5d:b3:61:
         59:33:d9:09:ef:57:0b:bb:40:69:a3:c6:27:60:c5:65:48:f1:
         c8:d8:ec:81:4e:de:1b:c0:bc:42:27:33:9e:57:b3:e6:f3:b9:
         64:89:5d:6c:1f:3e:5e:1a:e3:5d:3f:c3:65:99:38:f2:76:36:
         41:75:76:b2:01:45:ba:c3:18:d5:4d:7d:58:19:64:df:1d:f3:
         85:7f:da:d6:3e:7d:ce:48:71:82:be:d8:e3:43:a1:07:f2:60:
         f5:14:42:36:1e:aa:b3:ff:03:1e:53:c1:4d:d7:52:d8:10:f2:
         fa:d4:35:4e:1a:7f:2c:07:21:09:81:ad:83:a2:2f:b0:31:15:
         ee:b6:64:0e:2f:b3:c1:9a:ee:10:3e:6a:39:5c:bb:79:a9:8c:
         41:e8:19:8a:32:27:af:06:f8:3a:72:08:3b:43:93:b2:98:49:
         22:e8:42:12:78:28:c1:48:ec:ef:ba:b0:78:03:19:e1:20:ce:
         fa:16:1c:1c:df:84:f2:cb:83:3d:e4:2a:01:1a:2d:4d:6b:f3:
         2e:b1:bf:6c:95:ae:e9:ef:19:67:7c:94:0b:97:4c:a8:99:aa:
         32:de:67:0b:e2:f6:18:a5:42:34:c6:eb:52:24:d2:4a:f7:db:
         e7:b9:bb:2b

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:16:68:34:00:00:00:00:00:1c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
        Validity
            Not Before: Apr  3 12:53:09 2007 GMT
            Not After : Apr  3 13:03:09 2021 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a1:6c:b1:df:db:48:92:2a:7c:6b:2e:19:e1:
                    bd:e2:e3:c5:99:51:23:50:ad:ce:dd:18:4e:24:0f:
                    ee:d1:a7:d1:4c:ad:74:30:20:11:eb:07:d5:54:95:
                    15:49:94:1b:42:92:ae:98:5c:30:26:da:00:6b:e8:
                    7b:bd:ec:89:07:0f:f7:0e:04:98:f0:89:cc:1f:cb:
                    33:24:87:9d:f2:f4:67:1c:2c:fc:7b:e7:88:1d:ea:
                    e7:4e:a3:a1:c1:23:53:ca:8d:fa:45:cf:09:d0:5e:
                    af:d0:b0:42:04:a2:f9:a6:6c:93:67:d7:28:dc:46:
                    53:b0:86:d0:e5:28:46:2e:27:ac:86:4f:55:52:0c:
                    e4:03:2c:fb:6a:90:90:30:6e:87:f3:59:30:9d:fa:
                    7e:d6:97:b3:e8:21:97:7e:f8:d2:13:f3:08:b7:53:
                    6d:52:b4:45:90:9f:48:00:4a:47:66:11:27:29:66:
                    a8:97:e4:d3:06:81:4a:a2:f9:84:a7:11:47:14:09:
                    82:9f:84:ed:55:78:fe:01:9a:1d:50:08:85:00:10:
                    30:46:ed:b7:de:23:46:bb:c4:2d:54:9f:af:1e:78:
                    41:31:77:cc:9b:df:3b:83:93:a1:61:02:b5:1d:0d:
                    b1:fc:f7:9b:b2:01:ce:22:4b:54:ff:f9:05:c3:c2:
                    20:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Authority Key Identifier: 
                keyid:0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4
                DirName:/DC=com/DC=microsoft/CN=Microsoft Root Certificate Authority
                serial:79:AD:16:A1:4A:A0:A5:AD:4C:73:58:F4:07:13:2E:65

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt

            X509v3 Extended Key Usage: 
                Time Stamping
    Signature Algorithm: sha1WithRSAEncryption
         10:97:8a:c3:5c:03:44:36:dd:e9:b4:ad:77:db:ce:79:51:4d:
         01:b1:2e:74:71:5b:6d:0c:13:ab:ce:be:7b:8f:b8:2e:d4:12:
         a2:8c:6d:62:b8:57:02:cb:4e:20:13:50:99:dd:7a:40:e2:57:
         bb:af:58:9a:1c:e1:1d:01:86:ac:bb:78:f2:8b:d0:ec:3b:01:
         ee:e2:be:8f:0a:05:c8:8d:48:e2:f0:53:15:dd:4f:ab:92:e4:
         e7:8d:6a:d5:80:c1:e6:94:f2:06:2f:85:03:e9:91:2a:24:22:
         70:fb:f6:fc:e4:78:99:2e:0d:f7:07:e2:70:bc:18:4e:9d:8e:
         6b:0a:72:95:b8:a1:39:9c:67:2d:c5:51:0e:ea:62:5c:3f:16:
         98:8b:20:3f:e2:07:1a:32:f9:cc:31:4a:76:31:3d:2b:72:0b:
         c8:ea:70:3d:ff:85:0a:13:df:c2:0a:61:8e:f0:d7:b8:17:eb:
         4e:8b:7f:c5:35:2b:5e:a3:bf:eb:bc:7d:0b:42:7b:d4:53:72:
         21:ee:30:ca:bb:78:65:5c:5b:01:17:0a:14:0e:d2:da:14:98:
         f5:3c:b9:66:58:b3:2d:2f:e7:f9:85:86:cc:51:56:e8:9d:70:
         94:6c:ac:39:4c:d4:f6:79:bf:aa:18:7a:62:29:ef:a2:9b:29:
         34:06:77:1a:62:c9:3d:1e:6d:1f:82:f0:0b:c7:2c:bb:cf:43:
         b3:e5:f9:ec:7d:b5:e3:a4:a8:74:35:b8:4e:c5:71:23:12:26:
         76:0b:3c:52:8c:71:5a:46:43:14:bc:b3:b3:b0:4d:67:c8:9f:
         42:ff:80:79:21:80:9e:15:30:66:e8:42:12:5e:1a:c8:9e:22:
         21:d0:43:e9:2b:e9:bb:f4:48:cc:2c:d4:d8:32:80:4c:26:2a:
         48:24:5f:5a:ea:56:ef:a6:de:99:9d:ca:3a:6f:bd:81:27:74:
         06:11:ee:76:21:bf:9b:82:c1:27:54:b6:b1:6a:3d:89:a1:76:
         61:b4:6e:a1:13:a6:bf:aa:47:f0:12:6f:fd:8a:32:6c:b2:fe:
         df:51:c8:8c:23:c9:66:bd:9d:1d:87:12:64:02:3d:2d:af:59:
         8f:b8:e4:21:e5:b5:b0:ca:63:b4:78:54:05:d4:41:2e:50:ac:
         94:b0:a5:78:ab:b3:a0:96:75:1a:d9:92:87:13:75:22:2f:32:
         a8:08:6e:a0:5b:8c:25:bf:a0:ef:84:ca:21:d6:eb:1e:4f:c9:
         9a:ee:49:e0:f7:01:65:6f:89:0b:7d:c8:69:c8:e6:6e:ea:a7:
         97:ce:31:29:ff:0e:c5:5b:5c:d8:4d:1b:a1:d8:fa:2f:9e:3f:
         2e:55:16:6b:c9:13:a3:fd

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:07:02:dc:00:00:00:00:00:0b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
        Validity
            Not Before: Sep 15 21:55:41 2005 GMT
            Not After : Mar 15 22:05:41 2016 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows Verification PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ac:93:4e:e6:4a:11:9e:37:d0:35:d2:b0:06:
                    5c:83:14:a5:61:92:fc:fe:b3:89:c1:e6:cd:c8:1f:
                    31:84:09:91:34:46:92:2c:b8:ee:2c:c5:20:73:c4:
                    e8:1a:d8:8d:ce:7a:68:b5:66:78:8b:e5:60:15:a2:
                    f6:29:5a:1d:5e:5d:fc:62:d3:c1:5c:29:89:fb:33:
                    f8:16:95:36:dd:b1:46:74:69:72:53:d5:aa:e8:8a:
                    99:1a:d8:f7:67:09:d9:09:20:22:38:7a:d6:03:23:
                    d7:89:9f:1c:01:b7:51:df:98:66:2a:02:8b:06:ec:
                    e4:29:ef:5b:42:17:15:97:51:8d:7d:25:0a:af:25:
                    e8:de:dc:9b:67:16:0a:56:73:9d:b3:1d:85:83:0b:
                    7e:33:2b:62:33:ce:1c:20:81:4b:5e:d3:c6:49:b8:
                    f6:2e:d3:4e:b0:71:44:46:64:3e:de:43:66:04:b9:
                    cc:83:48:3a:c5:36:7a:04:48:0b:89:02:3d:63:a2:
                    01:76:29:97:75:e9:01:e6:00:97:09:92:f8:e2:27:
                    f0:29:67:43:77:c3:50:96:53:31:e1:b6:71:8b:ec:
                    77:c7:7c:31:48:d5:b8:25:22:8c:00:f7:28:38:7a:
                    bd:7c:c7:3f:cd:40:26:77:dd:00:00:11:9a:95:be:
                    1f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Subject Key Identifier: 
                90:8B:11:A5:70:ED:E0:F9:A9:C0:AC:08:C7:B5:F4:82:B1:3C:C5:4A
            X509v3 Key Usage: 
                Digital Signature, Non Repudiation, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4
                DirName:/DC=com/DC=microsoft/CN=Microsoft Root Certificate Authority
                serial:79:AD:16:A1:4A:A0:A5:AD:4C:73:58:F4:07:13:2E:65

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.311.21.47
                  User Notice:
                    Explicit Text: 

            X509v3 Extended Key Usage: 
                Code Signing, 1.3.6.1.4.1.311.10.3.6
    Signature Algorithm: sha1WithRSAEncryption
         25:31:a1:58:ea:52:e5:e1:17:0c:e6:f1:3f:78:a3:3f:72:af:
         a7:57:10:53:89:10:5e:32:9c:b6:70:c3:15:2b:4d:15:30:34:
         e8:c0:6a:e4:1c:d3:2e:20:65:48:d7:1b:98:62:21:ba:45:9f:
         4a:ec:db:2f:09:19:51:e5:ed:32:19:51:2f:e1:dd:fb:c6:52:
         fd:eb:c6:82:25:42:03:09:a6:38:b6:36:1f:cc:c9:80:bb:5a:
         69:18:31:c3:b3:a0:b3:67:47:be:9d:c7:e2:3f:96:b3:88:f8:
         19:be:39:b9:e9:95:ce:fc:7c:af:a8:cd:d0:41:90:e0:d5:b3:
         1c:2f:68:bb:db:0f:6c:6a:dd:f2:af:de:f2:b5:de:0d:b6:a6:
         5a:f0:86:0a:b9:6d:99:4b:3f:7b:2d:01:84:6c:8f:87:dc:7f:
         8f:ab:14:88:d0:06:91:34:be:1b:82:22:a4:bc:55:8a:ad:9b:
         fc:73:14:10:c4:c9:19:1e:07:7d:9b:0e:c0:95:26:5d:c6:1f:
         ac:b4:f2:7e:ba:25:70:4a:7b:d7:8e:d1:9d:a0:13:49:7a:b0:
         02:52:52:24:f4:af:dd:40:2d:e5:3e:32:58:b3:4a:6a:dd:11:
         59:aa:2d:bc:a4:a0:73:38:f9:40:77:6b:34:19:57:cd:38:68:
         27:82:f8:d1:6f:eb:23:c0:3f:52:f3:4e:d5:02:3e:6a:9a:2b:
         c1:f5:31:71:db:41:4d:3b:de:ef:ad:af:1f:88:65:43:1b:51:
         b7:9a:75:ca:8e:69:49:10:8f:78:8a:74:45:b9:09:8e:73:77:
         07:32:4a:4b:d7:68:2b:98:c5:ba:54:ea:3f:cb:a2:00:8c:bb:
         d8:10:58:f2:db:dc:9b:cd:d8:ea:48:43:e2:4a:7e:65:b2:dc:
         f5:2d:4e:25:67:a8:e0:b5:ba:a7:dd:7e:5e:c1:4c:02:74:c9:
         b3:6e:e3:f8:f0:0b:ed:fc:b9:29:c5:5b:c9:36:51:90:db:78:
         7d:b9:32:0f:5e:76:d2:15:5c:3b:37:21:c6:db:c9:19:6e:ed:
         74:2a:5c:2c:0b:51:49:45:53:b0:b2:b3:23:d4:a1:b0:5f:0d:
         19:cd:14:a7:e3:3c:9b:97:72:94:14:df:ff:c1:90:1b:a5:df:
         f5:a9:f3:1b:17:da:b5:fc:44:e0:e8:e2:3c:a2:7a:bb:bb:65:
         e6:4d:b1:b5:15:a1:d9:67:3b:b0:0c:7d:3b:e9:ee:51:2a:47:
         f5:15:0f:8c:ad:5d:2e:35:df:f4:a4:2e:f6:13:37:5a:2b:e8:
         55:9a:49:2c:97:ce:9d:01:9e:97:46:5c:d9:2d:bc:24:5a:95:
         59:6f:4d:ca:9d:d6:57:26

pkcs7-signedData

SHA256: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

a6 b5 86 d5 b4 a1 24 66 ae 05 a2 17 da 8e 60 d6 |......$f......`.|

1.3.6.1.4.1.311.2.3.2:

00 00 00 00 1e 7d 3c e4  60 6a dc 38 52 a2 35 ff  |.....}<.`j.8R.5.|
b3 52 b7 8a 73 cb 72 c6  c2 2e 80 62 0b 97 49 cb  |.R..s.r....b..I.|
6d 53 6d 79 00 04 00 00  73 e0 e5 4e 8c 83 46 f4  |mSmy....s..N..F.|
c6 ce 1a 95 38 f4 e8 e4  7d f4 9f ef 8d 89 25 d8  |....8...}.....%.|
47 29 4d 85 d1 23 4f a1  00 14 00 00 e5 d8 ec f0  |G)M..#O.........|
bc 1c 9f 02 b7 80 d5 ca  96 62 f8 ef 3b 54 84 73  |.........b..;T.s|
48 a3 63 09 6f 6a 65 76  2f 6e c4 4d 00 24 00 00  |H.c.ojev/n.M.$..|
10 b8 8d a5 11 89 39 d3  58 8a 3f 59 83 ee 96 bd  |......9.X.?Y....|
c9 25 d7 e7 bc c8 10 03  dd 4d 19 71 e0 b4 c1 45  |.%.......M.q...E|
00 34 00 00 7d 61 c9 0c  fb b1 e1 9f 03 f1 08 23  |.4..}a.........#|
3b 42 c0 68 35 19 05 b2  6a 75 57 11 07 51 f0 ac  |;B.h5...juW..Q..|
83 20 b5 76 00 44 00 00  c5 ac d1 9a 9a 69 39 3d  |. .v.D.......i9=|
d0 a7 9e d8 6d 77 ec 3d  25 dd 0f 8f 19 13 30 14  |....mw.=%.....0.|
6e ff 85 48 8b f0 2a 12  00 54 00 00 f0 11 6b 2e  |n..H..*..T....k.|
c6 59 11 bd 30 da 05 ee  cb 38 7d 71 a5 d9 2c d0  |.Y..0....8}q..,.|
4c ec 28 0a f7 38 b1 95  01 bf dc b6 00 64 00 00  |L.(..8.......d..|
5b 8f b6 7c 0b 80 e4 e6  71 b5 53 f2 e0 76 e4 81  |[..|....q.S..v..|
15 01 4e f3 ba af fb ab  c8 64 c1 db ff f7 a5 63  |..N......d.....c|
00 74 00 00 29 cd a7 b2  60 f2 99 61 79 cf 00 f2  |.t..)...`..ay...|
6c 47 a8 4c ba f9 f5 62  72 89 c2 cd b4 b0 f9 bd  |lG.L...br.......|
f3 32 19 5b 00 84 00 00  37 87 55 97 ea ac 06 bf  |.2.[....7.U.....|
e1 d5 91 64 e7 0a e7 cd  47 1a 00 b9 5b 51 32 58  |...d....G...[Q2X|
d6 1c 5e f7 2a e3 8c 06  00 94 00 00 a1 88 05 b3  |..^.*...........|
a1 ab 01 2e 7d e0 0a 87  37 ce d6 0c 10 a9 d9 b5  |....}...7.......|
0c 8b 2c 91 d2 4b 66 c1  48 6a 5d 71 00 a4 00 00  |..,..Kf.Hj]q....|
47 e4 e9 10 ac 7b 4e 0f  c3 28 3d 07 b2 d1 55 6e  |G....{N..(=...Un|
1c 56 b8 d9 42 49 cb 34  2d e5 c6 a0 2c b8 9f 04  |.V..BI.4-...,...|
00 b4 00 00 ef 18 e8 f7  09 5b 3d 07 a3 53 38 b9  |.........[=..S8.|
b5 a7 04 6d d0 26 2e 77  36 e3 59 7a 16 da 8d 15  |...m.&.w6.Yz....|
30 ca 56 97 00 c4 00 00  6d e2 63 71 42 a3 4d 6e  |0.V.....m.cqB.Mn|
f1 57 d2 18 dd 78 13 98  47 b6 5e 4f e4 a4 22 20  |.W...x..G.^O.." |
a2 f6 09 dc 45 86 d7 cf  00 d4 00 00 3a b3 b3 a4  |....E.......:...|
e1 1c 21 fe 79 14 ef 6a  51 69 d3 0b 78 bf c9 e5  |..!.y..jQi..x...|
28 51 d9 24 5c c9 cc a5  3c 25 40 a0 00 e4 00 00  |(Q.$\...<%@.....|
08 48 6b 2e fc bb eb 17  6c 10 2e ee 3a bc 49 4a  |.Hk.....l...:.IJ|
6e 13 f1 94 17 6c cf af  cb a6 64 9c ac ee 72 9f  |n....l....d...r.|
00 f4 00 00 e9 2e 00 32  64 f6 e5 de 92 61 b0 11  |.......2d....a..|
5c bd 87 d7 30 b1 73 3e  2c df a6 2a 1c 3e de 4a  |\...0.s>,..*.>.J|
e0 6d 11 19 00 04 01 00  ce 2c 6d 14 13 5d 44 79  |.m.......,m..]Dy|
08 95 c8 e2 07 62 1d 5a  c0 c5 ca 96 80 ee 11 91  |.....b.Z........|
8d d8 e9 6c f3 5b 24 81  00 14 01 00 44 5f fa cf  |...l.[$.....D_..|
28 1d c8 04 49 da ab 64  bb c8 5a 5a 05 5d 23 dd  |(...I..d..ZZ.]#.|
a0 3a 18 79 76 35 bc 23  19 c6 5d 20 00 24 01 00  |.:.yv5.#..] .$..|
6a 52 37 ab 0b ec 56 62  63 3e 76 ce 48 de 48 fe  |jR7...Vbc>v.H.H.|
71 bd 31 f8 32 9e 7b 0b  13 0b aa 93 e8 96 4b 9e  |q.1.2.{.......K.|
00 34 01 00 9c 4c cb 91  30 44 fd 9e ae e8 58 d9  |.4...L..0D....X.|
42 2b 62 c9 8c 0f 70 b4  50 25 ba 0b e7 65 a3 d0  |B+b...p.P%...e..|
98 2a a2 f9 00 44 01 00  7f fc 6e 0b b2 14 e8 f6  |.*...D....n.....|
11 08 e4 14 9c dc 31 85  51 07 3f ed a1 44 81 52  |......1.Q.?..D.R|
c4 5e 7b 36 5e 82 30 e1  00 54 01 00 bc 41 e2 8c  |.^{6^.0..T...A..|
5b 40 29 0d 39 cf 06 2f  d7 11 28 ea 3c d5 e9 72  |[@).9../..(.<..r|
48 24 e5 3f 75 c5 cf 2e  13 fb a3 7a 00 64 01 00  |H$.?u......z.d..|
fe 78 da a6 48 ef 25 39  c3 aa 9b 43 bd e9 0c c8  |.x..H.%9...C....|
7e cc 52 35 71 6a 13 43  f6 cf a2 cc 43 31 03 35  |~.R5qj.C....C1.5|
00 74 01 00 56 c9 c1 b1  f9 82 c7 68 d0 16 cb 8d  |.t..V......h....|
aa fb be 92 7b 28 7f de  af ae 52 5b 3e 46 88 b8  |....{(....R[>F..|
ff 29 0a c0 00 84 01 00  4c e7 ef fb 17 3c 9d 5d  |.)......L....<.]|
9d f4 73 08 85 a5 1d 10  4e b9 eb 84 2b e9 cd 6e  |..s.....N...+..n|
a6 9e 52 f4 21 c1 5d 05  00 94 01 00 7f 3c a7 49  |..R.!.]......<.I|
b9 40 4a d4 83 52 5f 11  e2 ed ee 5a 19 31 14 65  |.@J..R_....Z.1.e|
31 38 a1 eb ee 35 74 fe  3e 11 09 d4 00 a4 01 00  |18...5t.>.......|
c4 8f 8a b3 14 c4 f8 39  84 22 55 ea f0 4d 52 c9  |.......9."U..MR.|
1a 69 33 74 21 c5 a3 bc  88 75 eb 77 19 9e 63 56  |.i3t!....u.w..cV|
00 b4 01 00 da 5d c8 1d  ef 72 0a 34 be 4d db 82  |.....]...r.4.M..|
bd 42 3d d5 24 38 c7 66  4a 51 f5 7a bc a1 1c a1  |.B=.$8.fJQ.z....|
60 60 15 c1 00 c4 01 00  2d 0d 09 df e6 52 d4 9c  |``......-....R..|
30 62 c0 9d 90 6c 7b 9a  77 c0 6d df 98 af 5b a2  |0b...l{.w.m...[.|
58 b7 c3 1d 4e c9 34 19  00 d4 01 00 ce 38 93 51  |X...N.4......8.Q|
2a c2 5f ac 40 39 d3 c5  16 31 8c 4a 07 a6 a3 ff  |*._.@9...1.J....|
46 fd 63 dd 4d c0 c7 53  e0 dc c0 60 00 e4 01 00  |F.c.M..S...`....|
f6 ea 86 5c 7e e5 ea 27  bf 2d af ec 25 83 e0 57  |...\~..'.-..%..W|
2a 6d 60 1e 26 4b 97 59  61 88 7c 1a 53 34 21 1d  |*m`.&K.Ya.|.S4!.|
00 f4 01 00 62 58 78 94  e8 ae cf a4 86 a8 e8 1f  |....bXx.........|
9d 7f 49 af 54 c6 17 5b  14 7f 8d e7 89 d4 f0 cf  |..I.T..[........|
e2 b1 55 a9 00 04 02 00  0d 5a 2e f9 7d e7 45 62  |..U......Z..}.Eb|
fe cd 32 53 6e 2b 58 4b  33 25 fb ed 15 64 bf f7  |..2Sn+XK3%...d..|
6a e4 38 83 42 80 29 ff  00 14 02 00 42 7f 90 2c  |j.8.B.).....B..,|
38 ad 43 6b 9d 5a c2 ce  00 2c 05 61 0f e1 ee 23  |8.Ck.Z...,.a...#|
61 a8 3d c9 d9 a7 96 3e  df 78 f0 bf 00 24 02 00  |a.=....>.x...$..|
96 a9 31 fc f5 aa 66 5c  48 c1 42 f5 40 4d 27 d2  |..1...f\H.B.@M'.|
8c da 6e 30 bf 39 e7 eb  f6 68 5f 8b b5 be 4f ee  |..n0.9...h_...O.|
00 34 02 00 d1 48 58 8a  37 c1 e9 bd b7 44 c1 fe  |.4...HX.7....D..|
f9 a3 dc 5d 00 8f 58 b9  15 15 4b 1c ef 2f b5 e5  |...]..X...K../..|
8a 46 8a 70 00 44 02 00  97 8e 5f cd 6b 83 c3 ac  |.F.p.D...._.k...|
9a 40 94 c7 06 f8 15 fd  97 87 ae cc 3a 63 cd c1  |.@..........:c..|
59 fc f7 5a 70 6e af e3  00 54 02 00 08 0a c5 b3  |Y..Zpn...T......|
65 21 7d 1a 2b e9 70 d8  bc e0 4c af a5 3d bb 5e  |e!}.+.p...L..=.^|
82 d7 3b 5b dc ad 9b f5  8b 71 15 93 00 64 02 00  |..;[.....q...d..|
ce 0f 10 10 bd 16 9b 5c  a9 49 24 01 c2 8e fc 05  |.......\.I$.....|
f5 50 c1 48 a3 8f 91 5f  9e e6 9f 29 a4 59 bd fb  |.P.H..._...).Y..|
00 74 02 00 18 53 9c 1f  b8 ed 03 ef ff be e1 f3  |.t...S..........|
ab a4 0f 8b 71 01 74 e4  bd 8c 18 6f 8a 33 1a 30  |....q.t....o.3.0|
d6 22 e4 1d 00 84 02 00  21 1f e2 0e 42 d8 6c e0  |."......!...B.l.|
4e c1 1b a5 76 f7 48 8d  6f b3 f2 05 4d 5d 57 0d  |N...v.H.o...M]W.|
91 09 48 2b 32 8d c8 fe  00 94 02 00 e6 3b b0 58  |..H+2........;.X|
10 df 0b a9 cf 06 60 3c  ce ba 33 02 c0 8d dd 0d  |......`<..3.....|
9f e6 be 65 a1 49 aa 5c  8f f7 2f 56 00 a4 02 00  |...e.I.\../V....|
44 bc e7 fe 8b 7a 51 dc  84 47 73 e6 d5 d1 e5 a0  |D....zQ..Gs.....|
d4 30 d9 72 33 65 5e 78  12 f0 75 4c 63 fb 0f b9  |.0.r3e^x..uLc...|
00 b4 02 00 c6 d8 45 bc  fe c3 32 e7 bd 69 ea 4f  |......E...2..i.O|
e2 d6 af 47 b5 30 8c 5d  db c7 a5 2b 64 99 36 0c  |...G.0.]...+d.6.|
c5 6d 10 9d 00 c4 02 00  5d 74 be 9b b5 2d e0 d9  |.m......]t...-..|
91 87 4a 16 20 68 96 f1  16 53 bd fd d6 cb 01 22  |..J. h...S....."|
08 46 f1 37 c3 ba bf bd  00 d4 02 00 19 41 4f 57  |.F.7.........AOW|
cf 97 64 0c 28 25 c5 da  e1 08 6e 79 50 c1 a4 3e  |..d.(%....nyP..>|
49 f9 4f 81 84 77 cf 4e  5a 95 60 9d 00 e4 02 00  |I.O..w.NZ.`.....|
d8 54 85 eb a5 8a 88 43  27 af 46 ff f5 3e 03 c2  |.T.....C'.F..>..|
ed b0 14 72 c3 bd 0f cb  3c ef 3d bd 6d 16 3a c5  |...r....<.=.m.:.|
00 f4 02 00 3f 4b ce a2  88 e4 ea a5 8a 5f b9 24  |....?K......._.$|
e0 eb d9 a3 92 cb 34 c1  a3 f2 e8 0d 5a f3 4f d6  |......4.....Z.O.|
a5 a6 b6 7c 00 04 03 00  2d 16 02 e7 c9 12 5f d9  |...|....-....._.|
b1 f3 99 0f 8e 9e 5f 15  78 df 02 55 e7 75 dc df  |......_.x..U.u..|
fb c9 f4 f3 4b 2c 59 26  00 14 03 00 df 9d ea e9  |....K,Y&........|
6c cb 18 a2 b3 78 56 c6  27 76 cb 54 02 45 ab 67  |l....xV.'v.T.E.g|
bd d1 cc fe aa 93 f7 a8  b3 35 50 41 00 24 03 00  |.........5PA.$..|
da 2e 03 01 68 fe a3 cd  2a 39 88 8a c4 51 6b f4  |....h...*9...Qk.|
97 aa 17 04 a6 4d 3d 76  71 7d 5d dc b5 99 cc 53  |.....M=vq}]....S|
00 34 03 00 0b bb d8 60  f2 26 b2 8b d8 f3 46 40  |.4.....`.&....F@|
41 4e 6f ff 14 a9 fb c7  50 e7 78 27 91 53 27 6f  |ANo.....P.x'.S'o|
63 d4 f7 3a 00 44 03 00  13 9e 3b cb af b4 06 e4  |c..:.D....;.....|
e1 29 7b a2 b5 16 5c f7  28 d6 aa 38 5e 36 b1 59  |.){...\.(..8^6.Y|
95 9e 00 6e a0 7a 38 91  00 54 03 00 38 10 61 9e  |...n.z8..T..8.a.|
5f f5 a3 21 ea ec 3b 4a  d4 eb 02 e9 99 97 f6 8d  |_..!..;J........|
a4 42 78 cd 8f 90 9b f2  0d fa 94 e4 00 64 03 00  |.Bx..........d..|
b1 9e b1 6e 30 cb b5 c3  a8 71 b0 ea c5 e4 95 e3  |...n0....q......|
4f ac 66 79 cf 7e 0c 59  a3 12 9f 65 bd 31 c8 2e  |O.fy.~.Y...e.1..|
00 74 03 00 48 d7 f6 41  f2 1f 0a 0d e0 24 ca 37  |.t..H..A.....$.7|
fe bf a7 36 ed 76 af fa  1b 66 21 1c 2d 86 a5 d8  |...6.v...f!.-...|
1e ed c5 f8 00 84 03 00  2e 07 13 44 8d 9b 10 18  |...........D....|
80 86 72 2d 67 ac 63 2a  8e aa 05 b1 e2 ef 59 89  |..r-g.c*......Y.|
28 ad 84 a6 84 2f 4d 4d  00 94 03 00 1d 62 52 94  |(..../MM.....bR.|
db 66 02 2a f5 4e e1 d9  b6 0c 24 3d 47 b8 11 be  |.f.*.N....$=G...|
a7 27 71 33 20 0b 48 42  b6 40 91 a3 00 a4 03 00  |.'q3 .HB.@......|
6a 67 ab 2b 54 01 98 13  05 d1 d4 63 90 c1 cb 18  |jg.+T......c....|
2a df cb b1 c5 59 88 89  c0 ed 39 73 75 cc cc 28  |*....Y....9su..(|
00 b4 03 00 bd 3b de d7  2d 7b c5 2f 20 33 c9 86  |.....;..-{./ 3..|
72 1e 96 b7 ee 46 5e b1  19 33 dc bd 4d 6c 23 93  |r....F^..3..Ml#.|
47 88 80 ad 00 c4 03 00  89 06 fc af 8a c3 35 1a  |G.............5.|
ea c6 2e f0 7e 50 cf aa  00 77 df 9b 4d 84 b4 d2  |....~P...w..M...|
a0 87 9b 80 47 dc 51 4c  00 d4 03 00 9c f3 2c 82  |....G.QL......,.|
07 ca ce 2a a0 24 ab 54  af 3b 0a a2 e4 2d dd b2  |...*.$.T.;...-..|
5a 59 84 09 c0 49 0d e3  68 bb 6d 69 00 e4 03 00  |ZY...I..h.mi....|
ea ed b2 70 77 5a d8 63  4f 60 dd 9f 17 97 41 37  |...pwZ.cO`....A7|
6f 4d 20 91 e7 18 ba c2  f4 c7 5b 35 de 92 37 f3  |oM .......[5..7.|
00 f4 03 00 de 10 90 e7  5c e5 c2 99 97 15 6a 3f  |........\.....j?|
49 86 e2 37 14 b3 c0 24  cc 41 69 ec 29 a2 5e c0  |I..7...$.Ai.).^.|
e2 b7 79 65 00 04 04 00  82 7a 0b 74 08 bc 20 98  |..ye.....z.t.. .|
ba 04 db 6c ed 63 92 80  0c 6f ce ed bf 3f c7 e2  |...l.c...o...?..|
a8 ea 86 73 c4 ab 5f f6  00 14 04 00 58 1a 2c 01  |...s.._.....X.,.|
e4 a5 56 67 da e3 70 c9  6e 7b 38 18 cb 3d 55 d1  |..Vg..p.n{8..=U.|
6d af fc 64 9c 19 5c 50  49 50 a8 a0 00 24 04 00  |m..d..\PIP...$..|
61 66 44 42 10 19 d3 dd  fe 2b ac 73 a5 e4 e2 2d  |afDB.....+.s...-|
fe be 4c 32 aa 07 29 41  16 08 68 54 0b 07 dd 12  |..L2..)A..hT....|
00 34 04 00 1f 6e b3 79  3d 1b 1e a2 0d b3 dc e7  |.4...n.y=.......|
77 19 ef 10 ef cd ef 49  ed 52 05 fd c1 cf 80 73  |w......I.R.....s|
6a 62 ef dc 00 44 04 00  2d 48 d6 a8 79 75 7a 88  |jb...D..-H..yuz.|
d2 a3 5d bd f2 99 62 5a  70 57 8a df 2f 55 a7 23  |..]...bZpW../U.#|
ad 8f 1f f7 7f a4 ea e8  00 54 04 00 48 33 b0 76  |.........T..H3.v|
da 88 72 78 20 89 bb 6e  53 7e 80 f3 a4 d6 07 09  |..rx ..nS~......|
81 2d 00 4f 89 21 62 f1  c7 9b 00 78 00 64 04 00  |.-.O.!b....x.d..|
e7 f9 23 96 b6 54 f2 28  2e 25 c1 94 31 4c cf ad  |..#..T.(.%..1L..|
35 a6 ab a0 86 9e a1 c2  43 e7 00 5d ea 9f 82 fe  |5.......C..]....|
00 74 04 00 cd 78 96 89  ca e8 f9 ab 92 dc b2 6c  |.t...x.........l|
9b 3f b7 3f 3f 2d 89 0a  aa fb f8 35 37 64 8e 77  |.?.??-.....57d.w|
10 79 bc f9 00 84 04 00  95 23 85 9f 35 14 c0 db  |.y.......#..5...|
69 5a 7c 59 b9 f6 fe 14  f6 d6 03 27 41 43 49 09  |iZ|Y.......'ACI.|
69 88 32 e1 53 81 f5 53  00 94 04 00 6c 13 e1 22  |i.2.S..S....l.."|
72 16 8e 35 6b e5 6a f7  5e cf f0 83 3f 9f 5d a3  |r..5k.j.^...?.].|
c8 41 c8 6e ea bf 3e 9a  82 ee cc 1c 00 a4 04 00  |.A.n..>.........|
11 b1 47 47 cb 08 61 6b  a7 bb ac a3 f7 85 00 78  |..GG..ak.......x|
0e e1 7e 80 2a 33 ca d2  a2 30 6a d0 4d 85 df 11  |..~.*3...0j.M...|
00 b4 04 00 89 15 d3 64  a7 1c ad 4d 59 1e 17 00  |.......d...MY...|
36 cc 45 44 5a f0 2a 8f  9f fe b9 25 73 0b c8 05  |6.EDZ.*....%s...|
79 1b 80 be 00 c4 04 00  8e 2e 07 f0 c8 77 9a e2  |y............w..|
7a 87 b7 0f a8 89 8f 15  35 33 2b f6 19 66 17 47  |z.......53+..f.G|
2a 5d e7 c7 39 3b 77 a3  00 d4 04 00 03 78 cc 53  |*]..9;w......x.S|
0e 64 c2 c8 59 a4 2e f5  4a 0b f9 bf 66 9f f1 c6  |.d..Y...J...f...|
8b 71 70 05 0b c4 97 b4  0b 11 ec ca 00 e4 04 00  |.qp.............|
6c e0 5e e6 99 23 da 7e  29 db ff f5 a8 ff 4f d6  |l.^..#.~).....O.|
88 f7 6d b3 0e 64 c9 0a  d9 7b e5 23 21 08 c2 85  |..m..d...{.#!...|
00 f4 04 00 53 f3 02 f5  87 e5 ea 9c 8e f0 85 f4  |....S...........|
ba ec 5e ac a2 a1 01 2b  a9 67 7c 6d 65 17 82 46  |..^....+.g|me..F|
9a 53 31 84 00 04 05 00  bc 42 fc fd 5e 1f 54 08  |.S1......B..^.T.|
d1 a2 26 2a 3b ba 16 8a  bd 3c 32 c6 f7 77 05 84  |..&*;....<2..w..|
75 3c a3 ba 4b 32 d0 42  00 14 05 00 1c 6d 6f 91  |u<..K2.B.....mo.|
3e c1 28 e3 86 83 0d 46  c0 78 8c 8d a7 db 69 77  |>.(....F.x....iw|
cb 6b 0f 42 95 b4 59 ec  d0 ae 12 d7 00 24 05 00  |.k.B..Y......$..|
63 31 f6 7b f7 32 01 fd  d1 78 d5 2c 86 db 8a 36  |c1.{.2...x.,...6|
de e3 b4 81 71 58 c5 91  5b 4f c7 55 48 db 8a 59  |....qX..[O.UH..Y|
00 34 05 00 d9 b3 6d 0a  09 19 54 20 a3 d9 47 f9  |.4....m...T ..G.|
73 49 ac 2a ca 71 c1 c0  67 bd e7 f1 73 22 46 b6  |sI.*.q..g...s"F.|
31 ba 68 ed 00 44 05 00  2b 1c 7c 50 82 a6 f6 45  |1.h..D..+.|P...E|
38 29 95 2c 14 15 56 93  ea 24 85 ab af fe 24 cb  |8).,..V..$....$.|
65 18 6f 3e 8a 81 67 2a  00 54 05 00 58 c9 b9 fd  |e.o>..g*.T..X...|
bb 94 d5 c4 a5 b5 28 27  a2 86 36 a5 80 45 17 b9  |......('..6..E..|
bf 5b fd 8f 25 ae 4b 13  8c 0e d6 9f 00 64 05 00  |.[..%.K......d..|
ba d3 70 0f 0b 9c 4f 74  3c 6c 3b 6c 64 dd 9d 6c  |..p...OthV9......4./.|
9e c1 87 7d 80 bb 36 7b  e3 5a d0 5a a1 d2 b8 02  |...}..6{.Z.Z....|
1e 7d 4f a5 d5 ae 90 f6  08 dd b4 9f 00 20 06 00  |.}O.......... ..|
99 3d e9 63 32 3f 7f 13  ee 13 0d e1 4a 2e 60 73  |.=.c2?......J.`s|
fa 06 48 b8 e9 79 68 86  f1 ee f7 b9 59 12 68 e9  |..H..yh.....Y.h.|
00 30 06 00 19 3e ba 04  d7 19 5a 77 1e d0 c5 56  |.0...>....Zw...V|
51 e2 f8 43 ad d2 eb 78  69 2b a8 24 0a ee 74 64  |Q..C...xi+.$..td|
c8 fd ab 92 00 38 06 00  f7 9f 4b 5c 5e ca d6 69  |.....8....K\^..i|
ff 59 63 db 91 7d 56 c6  27 a0 aa f7 70 36 d8 1c  |.Yc..}V.'...p6..|
c6 67 bf 83 74 63 58 c4  00 48 06 00 3b 05 0a e6  |.g..tcX..H..;...|
c9 f4 17 27 2a 81 cd 15  71 77 b3 b9 1d 23 82 55  |...'*...qw...#.U|
6e ce 7d 0d 24 e9 94 e9  1c 75 c5 c4 00 58 06 00  |n.}.$....u...X..|
22 df a2 99 5f d7 27 1a  13 91 92 bb 68 77 b1 3d  |"..._.'.....hw.=|
09 ee bd 39 55 ea f5 da  ac 8f 92 aa e7 bf a1 da  |...9U...........|
00 68 06 00 f8 63 56 2c  56 3d 84 4f 3e 1d 96 d4  |.h...cV,V=.O>...|
ce 66 7e a2 4a 57 ed c6  dd cb 27 66 69 f2 55 58  |.f~.JW....'fi.UX|
d0 c5 51 0e 00 78 06 00  17 6a f9 0e 68 92 49 66  |..Q..x...j..h.If|
a2 55 ee 26 a0 d4 5f 44  84 b0 26 a6 14 21 4a 45  |.U.&.._D..&..!JE|
d5 d6 9e 38 dc 76 23 f3  00 88 06 00 59 e5 51 70  |...8.v#.....Y.Qp|
e0 68 f1 e1 67 48 57 af  6a b3 6c b0 eb 13 23 ed  |.h..gHW.j.l...#.|
16 7b b7 10 8f 79 23 a4  46 f0 7f 17 00 98 06 00  |.{...y#.F.......|
6f ce a8 76 6f 67 14 c4  af 4c 87 e9 57 67 1a aa  |o..vog...L..Wg..|
db d9 b0 76 53 45 59 19  a5 10 68 79 23 91 3f cb  |...vSEY...hy#.?.|
00 a8 06 00 fd d5 bc f1  ea 29 b7 34 7a fa 10 74  |.........).4z..t|
aa 40 3a f8 e7 75 db b0  bd 82 36 23 32 be 98 6d  |.@:..u....6#2..m|
8a ca 84 58 00 b8 06 00  ca e4 6d 33 bf 56 86 ca  |...X......m3.V..|
e3 29 ee 01 ec 7d e9 9a  49 e9 74 b8 1f 93 87 a4  |.)...}..I.t.....|
a0 50 c6 01 ec 83 e9 56  00 c8 06 00 b4 99 cd b0  |.P.....V........|
29 08 45 70 b5 67 25 4e  59 74 c1 b1 ec 1a ee 25  |).Ep.g%NYt.....%|
69 fd de 96 04 74 11 3d  34 c0 30 2d 00 d8 06 00  |i....t.=4.0-....|
55 88 ea 85 1a 05 15 8b  13 04 a0 1b ab 7a 0a ae  |U............z..|
e3 66 5c 36 d3 20 a8 38  ed 16 87 0b 3c ad e5 f0  |.f\6. .8....<...|
00 e8 06 00 d8 b0 0a 5f  41 63 28 3d 05 38 6a cf  |......._Ac(=.8j.|
71 0f 08 cf 1d 6d d4 d9  e4 58 dd e7 15 80 03 9c  |q....m...X......|
f8 07 81 13 00 f8 06 00  19 bb 97 c5 67 2d 37 2a  |............g-7*|
0f b9 56 26 f1 00 93 25  b7 90 c0 fe 28 af bf 3e  |..V&...%....(..>|
ee 2c 41 b2 aa c3 14 73  00 08 07 00 d7 1f dd 04  |.,A....s........|
40 94 a8 e4 25 26 dd 70  0f 93 ba 3e 5f 13 f2 28  |@...%&.p...>_..(|
66 ff f4 49 c3 ef 10 3d  4b 24 0c 24 00 18 07 00  |f..I...=K$.$....|
62 5e 04 c0 6d 4c 4d e8  de eb 33 ab cb e6 f8 85  |b^..mLM...3.....|
2b 1b 43 14 95 cc b9 dd  aa a9 54 33 48 af af a0  |+.C.......T3H...|
00 28 07 00 f0 60 6d 7b  6d 49 65 86 37 62 b8 99  |.(...`m{mIe.7b..|
e3 3f 0f 89 ab 66 cc 91  d1 34 78 6e 55 6c 9f c7  |.?...f...4xnUl..|
a6 1b 46 c3 00 38 07 00  df 0e 0c 9c f1 6d 66 ce  |..F..8.......mf.|
f1 95 44 85 30 cc 86 fb  8a 34 53 e5 a4 49 69 e5  |..D.0....4S..Ii.|
dc df 52 47 4b e5 04 04  00 48 07 00 e0 7e 5a 1a  |..RGK....H...~Z.|
e0 5f 61 5b 7f aa 89 b9  b3 f3 7b 3d 0a dc c3 41  |._a[......{=...A|
66 5c 86 6b dd ff a6 4c  12 b9 af 59 00 58 07 00  |f\.k...L...Y.X..|
7b c7 b8 ae 96 14 6a 95  49 e1 a1 fd 75 dc e4 62  |{.....j.I...u..b|
42 3c 0d 73 32 52 60 bf  85 fe 58 01 a7 2b 95 b8  |B<.s2R`...X..+..|
00 66 07 00 b3 bc 43 d0  5c 3e a0 39 8b b6 33 5f  |.f....C.\>.9..3_|
89 ae af 03 de 1b a4 5b  a1 e6 c7 22 91 b6 8b 10  |.......[..."....|
fe 42 4e 1f 00 6a 07 00  a3 c0 70 57 1c 04 4a e8  |.BN..j....pW..J.|
25 06 8d 65 b3 c6 d9 63  97 02 e3 f4 68 a3 16 b3  |%..e...c....h...|
83 e0 da a2 9c 1d c5 48  00 6c 07 00 ad 7f ac b2  |.......H.l......|
58 6f c6 e9 66 c0 04 d7  d1 d1 6b 02 4f 58 05 ff  |Xo..f.....k.OX..|
7c b4 7c 7a 85 da bd 8b  48 89 2c a7 00 6e 07 00  ||.|z....H.,..n..|
e4 58 1c 8e 79 6a 56 fa  71 69 ee 6d bd 49 8f 40  |.X..yjV.qi.m.I.@|
ab 96 21 db 62 ca a0 9c  d6 0d 0d d1 1f 48 31 8c  |..!.b........H1.|
00 7e 07 00 6a ee cd bc  d3 83 81 30 bc 6e 59 d4  |.~..j......0.nY.|
92 47 01 35 4b 4f 0a a1  56 a3 71 f5 cf 6d dc cb  |.G.5KO..V.q..m..|
50 7e 6b 69 00 8e 07 00  1b 30 48 e5 5a 17 17 09  |P~ki.....0H.Z...|
0d 5f 51 71 2e af be 9d  a8 73 c1 90 e9 06 25 dd  |._Qq.....s....%.|
ca 8d fc 4e 1a 31 33 d1  00 9e 07 00 4d 99 b4 b6  |...N.13.....M...|
44 86 98 e4 9e 46 0e 5f  73 41 8f 35 15 8e d7 cf  |D....F._sA.5....|
f8 39 ec de f9 54 70 f4  a6 93 31 f6 00 ae 07 00  |.9...Tp...1.....|
0c f8 bc 66 5c 48 d6 6e  52 37 37 44 90 42 8d 8f  |...f\H.nR77D.B..|
32 f0 32 0b 8d b0 94 a0  ff 3f ab a4 c3 b0 52 96  |2.2......?....R.|
00 be 07 00 44 bf 4f e2  96 48 4e e8 e6 5f 2b 77  |....D.O..HN.._+w|
56 24 99 5e d2 3d c9 10  6a 65 e2 9c 74 0c d2 86  |V$.^.=..je..t...|
d1 7b dc 7a 00 ce 07 00  83 2d 97 aa dd 67 62 6a  |.{.z.....-...gbj|
77 9d 74 69 e3 17 4d 53  cb bb 3f 42 c8 82 f7 00  |w.ti..MS..?B....|
ce 65 27 20 0c 95 7e 40  00 d2 07 00 4a 8a 9a 1d  |.e' ..~@....J...|
f2 dc 5c 29 ed e8 e2 49  4d 6a a7 9c 4c 4c 74 e8  |..\)...IMj..LLt.|
44 2b 0f f9 f1 43 22 26  7e 6c 53 79 00 e2 07 00  |D+...C"&~lSy....|
aa 2c fb e2 71 69 29 5e  cc 77 f3 1e 92 a0 22 f5  |.,..qi)^.w....".|
eb 68 73 e9 c2 b4 65 0d  13 d4 e6 53 8c d1 f1 e3  |.hs...e....S....|
00 f2 07 00 1b 86 e7 c8  34 4c ee 14 97 de f2 73  |........4L.....s|
75 5e 13 31 80 df 1e e1  c9 9d 92 24 71 1f 4b 43  |u^.1.......$q.KC|
6f b9 a9 1f 00 02 08 00  ad 7f ac b2 58 6f c6 e9  |o...........Xo..|
66 c0 04 d7 d1 d1 6b 02  4f 58 05 ff 7c b4 7c 7a  |f.....k.OX..|.|z|
85 da bd 8b 48 89 2c a7  00 0a 08 00 00 00 00 00  |....H.,.........|
00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00 00 00 00 00 00 00 00  00 00 00 00              |............    |

SHA256

32 28 18 16 ff 71 89 bf 81 ad 5e 90 2f 6a 54 fd |2(...q....^./jT.| b2 f5 04 0d 76 d9 24 e6 ee 6e 3b 4c a2 7a 1c a8 |....v.$..n;L.z..|

unnamed

Certificate #0
- 2
  - 61:04:B3:F5:00:00:00:00:00:0D
  - RSA-SHA1: nil
  - Issuer
    - C: US
    - ST: Washington
    - L: Redmond
    - O: Microsoft Corporation
    - CN: Microsoft Time-Stamp PCA
  - 2008-07-25 19:13:45 UTC: 2011-07-25 19:23:45 UTC
  - Subject
    - C: US
    - ST: Washington
    - L: Redmond
    - O: Microsoft Corporation
    - OU: MOPR
    - OU: nCipher DSE ESN:9E78-864B-039D
    - CN: Microsoft Time-Stamp Service
  - #5
    - rsaEncryption: nil
    - AB:46:2F:BC:A8:14:F2:F8:46:3F:0C:05:A1:A4:63:45:
      05:7F:9A:E9:33:72:CC:27:D3:32:EC:98:C3:E0:34:88:
      85:CE:A1:12:97:AE:48:50:4E:48:20:7F:70:E4:59:33:
      FC:99:5B:B9:07:80:48:28:BC:8D:B8:FA:66:02:66:B5:
      F1:7F:1C:50:96:28:93:55:8D:81:55:AA:70:5B:A5:C9:
      CE:EF:2E:E2:E7:25:C3:76:6F:29:0B:9F:2C:C8:53:80:
      9A:C1:0D:E3:BD:A7:45:BF:31:DF:E6:86:8B:7D:89:01:
      8B:1C:78:58:38:B2:DD:93:4A:5B:9E:1D:D7:9C:C6:F0:
      C4:4D:D0:BF:27:4A:07:94:04:71:02:88:0D:70:E6:F8:
      2A:E7:0E:61:E3:98:4B:D1:DD:AB:54:B6:37:FB:C6:46:
      FD:A4:1C:BC:FF:AF:EC:B2:97:80:DC:B8:93:FD:B8:22:
      A8:9D:25:59:70:3E:5C:7B:1C:41:29:FE:73:99:22:49:
      81:D7:55:26:C0:EC:F2:4E:28:54:62:3B:70:2D:61:93:
      1D:50:D5:9F:01:C2:05:C3:55:1A:4A:87:A4:00:86:54:
      A0:7B:62:B2:EA:0F:FA:5D:5C:C5:2A:11:82:97:BE:86:
      1B:1D:AB:B7:AB:0A:29:FC:CC:CD:34:89:BF:40:B6:4F: 0x010001
  - #6
    - subjectKeyIdentifier:
```
a0 85 31 5e 87 ae 0f aa  0a 04 eb e1 c0 d3 64 bd  |..1^..........d.|
3c bb 69 f5                                       |<.i.            |
```
    - authorityKeyIdentifier:
```
23 34 f8 d9 52 46 70 0a  ed 40 fb 76 fb b3 2b b0  |#4..RFp..@.v..+.|
c3 35 b3 0f                                       |.5..            |
```
    - crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl
    - authorityInfoAccess
      - caIssuers: http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt
    - extendedKeyUsage: timeStamping
    - keyUsage: true, 0xc0
- RSA-SHA1:
```
47 71 4f b6 48 45 c0 08  eb 9c 2f d3 25 5b db 67  |GqO.HE..../.%[.g|
51 11 92 a6 d9 d9 b2 14  9a 26 c2 fd 06 c1 cc d7  |Q........&......|
88 f5 a6 35 b5 cd 2b b6  6b 58 6a cd f9 9d f3 5a  |...5..+.kXj....Z|
eb 46 2f a1 fa a7 1f 7d  7a 42 b2 b0 d1 1a 09 28  |.F/....}zB.....(|
54 6c 6f 99 8b 38 fc 3a  e4 c1 24 aa 72 4c 12 04  |Tlo..8.:..$.rL..|
2f f1 d4 7a 76 3b c5 cf  71 27 0b 6d fc 38 67 a7  |/..zv;..q'.m.8g.|
c5 22 62 2b 7b 7f c1 76  ac a7 c5 26 4c a9 af 98  |."b+{..v...&L...|
dd 8a 38 5d cf 65 a4 81  2e a9 ef 56 02 4c b9 08  |..8].e.....V.L..|
be 65 c4 1e 8b 21 2d 6e  a7 f2 75 64 b4 dc 1a 6b  |.e...!-n..ud...k|
d0 f1 25 e5 c2 e7 80 44  39 d4 2f 0a 79 7e 01 2a  |..%....D9./.y~.*|
a7 78 5b a3 6b 5b ce 09  ef 39 3a 39 b7 c4 67 53  |.x[.k[...9:9..gS|
b9 aa f3 61 ff 9d 79 e3  cf 48 67 ff ab c8 c6 2b  |...a..y..Hg....+|
62 09 94 d0 1f a2 78 f7  73 49 3b 58 53 c1 09 ab  |b.....x.sI;XS...|
4c 06 0b d5 40 28 7e f6  b1 66 c5 bf 52 c4 be 3e  |L...@(~..f..R..>|
3b e0 f9 8e 74 8d e6 22  0c c1 c6 33 98 b5 79 e8  |;...t.."...3..y.|
0c f7 00 7c ea b2 4e cc  80 9a 16 2d c8 a4 10 05  |...|..N....-....|
```
Certificate #1
- 2
  - 61:15:34:64:00:00:00:00:00:0C
  - RSA-SHA1: nil
  - Issuer
    - C: US
    - ST: Washington
    - L: Redmond
    - O: Microsoft Corporation
    - CN: Microsoft Windows Verification PCA
  - 2009-12-07 21:57:44 UTC: 2011-03-07 21:57:44 UTC
  - Subject
    - C: US
    - ST: Washington
    - L: Redmond
    - O: Microsoft Corporation
    - OU: MOPR
    - CN: Microsoft Windows
  - #5
    - rsaEncryption: nil
    - C6:A6:B9:79:C4:D4:08:CC:D0:41:D3:F3:49:47:D0:0A:
      51:50:C3:E8:01:F7:0B:CE:E7:EB:5E:EB:6C:4D:C5:9D:
      03:56:27:AE:D1:DC:E9:4E:70:F1:40:DB:CA:43:76:5E:
      99:CB:BA:1E:2A:83:29:44:67:88:79:5D:33:C1:0C:2D:
      10:3F:B9:30:23:31:20:3F:7D:97:7F:4B:E2:E5:BB:5A:
      3D:3E:0A:13:FA:51:4C:B6:9B:94:A5:42:F9:18:6C:FE:
      28:51:75:EB:6A:56:EF:89:D2:B4:C0:9F:71:67:A3:09:
      F2:12:F2:4D:20:D2:7A:D3:CA:EA:6B:F4:61:26:D6:B3:
      73:F4:6C:00:B0:46:EA:EA:40:2C:64:9B:FE:87:94:0F:
      8A:E6:10:52:83:F7:5D:0A:60:92:0D:E2:C9:38:76:BA:
      0A:BD:E5:51:5C:2A:2C:C8:C4:11:9F:FC:64:EE:9B:31:
      92:B7:4B:C1:E0:8D:60:27:A8:71:A6:81:4C:5E:40:1E:
      32:C3:00:AA:38:D7:62:D1:28:DF:0F:39:4A:7F:D4:36:
      4C:33:8F:FE:B7:4B:12:CC:E6:31:D0:B2:92:23:81:24:
      41:BB:AB:14:D1:EF:7E:32:B2:86:6C:F0:CA:A1:03:4C:
      16:ED:D5:D2:FE:1C:25:61:13:45:C3:E1:3F:0E:55:2B: 0x010001
  - #6
    - extendedKeyUsage
      - codeSigning: 1.3.6.1.4.1.311.10.3.6
    - subjectKeyIdentifier:
```
a8 a1 14 56 9c b5 21 f1  25 a0 f3 e7 1a af 9e 78  |...V..!.%......x|
d1 6b 28 83                                       |.k(.            |
```
    - keyUsage: true, 0x80
    - authorityKeyIdentifier:
```
90 8b 11 a5 70 ed e0 f9  a9 c0 ac 08 c7 b5 f4 82  |....p...........|
b1 3c c5 4a                                       |.<.J            |
```
    - crlDistributionPoints
      - http://crl.microsoft.com/pki/crl/products/WinPCA.crl: http://www.microsoft.com/pki/crl/products/WinPCA.crl
    - authorityInfoAccess
      - caIssuers: http://www.microsoft.com/pki/certs/MicrosoftWinPCA.crt
- RSA-SHA1:
```
4f b0 a7 39 9c 22 5c d9  4f b7 28 59 df 7f c8 5d  |O..9."\.O.(Y...]|
b3 61 59 33 d9 09 ef 57  0b bb 40 69 a3 c6 27 60  |.aY3...W..@i..'`|
c5 65 48 f1 c8 d8 ec 81  4e de 1b c0 bc 42 27 33  |.eH.....N....B'3|
9e 57 b3 e6 f3 b9 64 89  5d 6c 1f 3e 5e 1a e3 5d  |.W....d.]l.>^..]|
3f c3 65 99 38 f2 76 36  41 75 76 b2 01 45 ba c3  |?.e.8.v6Auv..E..|
18 d5 4d 7d 58 19 64 df  1d f3 85 7f da d6 3e 7d  |..M}X.d.......>}|
ce 48 71 82 be d8 e3 43  a1 07 f2 60 f5 14 42 36  |.Hq....C...`..B6|
1e aa b3 ff 03 1e 53 c1  4d d7 52 d8 10 f2 fa d4  |......S.M.R.....|
35 4e 1a 7f 2c 07 21 09  81 ad 83 a2 2f b0 31 15  |5N..,.!...../.1.|
ee b6 64 0e 2f b3 c1 9a  ee 10 3e 6a 39 5c bb 79  |..d./.....>j9\.y|
a9 8c 41 e8 19 8a 32 27  af 06 f8 3a 72 08 3b 43  |..A...2'...:r.;C|
93 b2 98 49 22 e8 42 12  78 28 c1 48 ec ef ba b0  |...I".B.x(.H....|
78 03 19 e1 20 ce fa 16  1c 1c df 84 f2 cb 83 3d  |x... ..........=|
e4 2a 01 1a 2d 4d 6b f3  2e b1 bf 6c 95 ae e9 ef  |.*..-Mk....l....|
19 67 7c 94 0b 97 4c a8  99 aa 32 de 67 0b e2 f6  |.g|...L...2.g...|
18 a5 42 34 c6 eb 52 24  d2 4a f7 db e7 b9 bb 2b  |..B4..R$.J.....+|
```

2
- 61:16:68:34:00:00:00:00:00:1C
- RSA-SHA1: nil
- #2
  - DC: com
  - DC: microsoft
  - CN: Microsoft Root Certificate Authority
- 2007-04-03 12:53:09 UTC: 2021-04-03 13:03:09 UTC
- Subject
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Time-Stamp PCA
- #5
  - rsaEncryption: nil
  - 9F:A1:6C:B1:DF:DB:48:92:2A:7C:6B:2E:19:E1:BD:E2:
    E3:C5:99:51:23:50:AD:CE:DD:18:4E:24:0F:EE:D1:A7:
    D1:4C:AD:74:30:20:11:EB:07:D5:54:95:15:49:94:1B:
    42:92:AE:98:5C:30:26:DA:00:6B:E8:7B:BD:EC:89:07:
    0F:F7:0E:04:98:F0:89:CC:1F:CB:33:24:87:9D:F2:F4:
    67:1C:2C:FC:7B:E7:88:1D:EA:E7:4E:A3:A1:C1:23:53:
    CA:8D:FA:45:CF:09:D0:5E:AF:D0:B0:42:04:A2:F9:A6:
    6C:93:67:D7:28:DC:46:53:B0:86:D0:E5:28:46:2E:27:
    AC:86:4F:55:52:0C:E4:03:2C:FB:6A:90:90:30:6E:87:
    F3:59:30:9D:FA:7E:D6:97:B3:E8:21:97:7E:F8:D2:13:
    F3:08:B7:53:6D:52:B4:45:90:9F:48:00:4A:47:66:11:
    27:29:66:A8:97:E4:D3:06:81:4A:A2:F9:84:A7:11:47:
    14:09:82:9F:84:ED:55:78:FE:01:9A:1D:50:08:85:00:
    10:30:46:ED:B7:DE:23:46:BB:C4:2D:54:9F:AF:1E:78:
    41:31:77:CC:9B:DF:3B:83:93:A1:61:02:B5:1D:0D:B1:
    FC:F7:9B:B2:01:CE:22:4B:54:FF:F9:05:C3:C2:20:0B: 0x010001
- X509v3 extensions
  - basicConstraints: true, true
  - subjectKeyIdentifier:
```
23 34 f8 d9 52 46 70 0a  ed 40 fb 76 fb b3 2b b0  |#4..RFp..@.v..+.|
c3 35 b3 0f                                       |.5..            |
```
  - keyUsage: 0x86
  - 1.3.6.1.4.1.311.21.1: 0
  - authorityKeyIdentifier
    - 0e ac 82 60 40 56 27 97 e5 25 13 fc 2a e1 0a 53 |...`@V'..%..*..S| 95 59 e4 a4 |.Y.. |
      - #0
        DC: com
        DC: microsoft
        CN: Microsoft Root Certificate Authority
      - 79 ad 16 a1 4a a0 a5 ad 4c 73 58 f4 07 13 2e 65 |y...J...LsX....e|
  - crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl
  - authorityInfoAccess
    - caIssuers: http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt
  - extendedKeyUsage: timeStamping

RSA-SHA1:

10 97 8a c3 5c 03 44 36  dd e9 b4 ad 77 db ce 79  |....\.D6....w..y|
51 4d 01 b1 2e 74 71 5b  6d 0c 13 ab ce be 7b 8f  |QM...tq[m.....{.|
b8 2e d4 12 a2 8c 6d 62  b8 57 02 cb 4e 20 13 50  |......mb.W..N .P|
99 dd 7a 40 e2 57 bb af  58 9a 1c e1 1d 01 86 ac  |..z@.W..X.......|
bb 78 f2 8b d0 ec 3b 01  ee e2 be 8f 0a 05 c8 8d  |.x....;.........|
48 e2 f0 53 15 dd 4f ab  92 e4 e7 8d 6a d5 80 c1  |H..S..O.....j...|
e6 94 f2 06 2f 85 03 e9  91 2a 24 22 70 fb f6 fc  |..../....*$"p...|
e4 78 99 2e 0d f7 07 e2  70 bc 18 4e 9d 8e 6b 0a  |.x......p..N..k.|
72 95 b8 a1 39 9c 67 2d  c5 51 0e ea 62 5c 3f 16  |r...9.g-.Q..b\?.|
98 8b 20 3f e2 07 1a 32  f9 cc 31 4a 76 31 3d 2b  |.. ?...2..1Jv1=+|
72 0b c8 ea 70 3d ff 85  0a 13 df c2 0a 61 8e f0  |r...p=.......a..|
d7 b8 17 eb 4e 8b 7f c5  35 2b 5e a3 bf eb bc 7d  |....N...5+^....}|
0b 42 7b d4 53 72 21 ee  30 ca bb 78 65 5c 5b 01  |.B{.Sr!.0..xe\[.|
17 0a 14 0e d2 da 14 98  f5 3c b9 66 58 b3 2d 2f  |.........<.fX.-/|
e7 f9 85 86 cc 51 56 e8  9d 70 94 6c ac 39 4c d4  |.....QV..p.l.9L.|
f6 79 bf aa 18 7a 62 29  ef a2 9b 29 34 06 77 1a  |.y...zb)...)4.w.|
62 c9 3d 1e 6d 1f 82 f0  0b c7 2c bb cf 43 b3 e5  |b.=.m.....,..C..|
f9 ec 7d b5 e3 a4 a8 74  35 b8 4e c5 71 23 12 26  |..}....t5.N.q#.&|
76 0b 3c 52 8c 71 5a 46  43 14 bc b3 b3 b0 4d 67  |v.

2
- 61:07:02:DC:00:00:00:00:00:0B
- RSA-SHA1: nil
- #2
  - DC: com
  - DC: microsoft
  - CN: Microsoft Root Certificate Authority
- 2005-09-15 21:55:41 UTC: 2016-03-15 22:05:41 UTC
- Subject
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Windows Verification PCA
- #5
  - rsaEncryption: nil
  - C5:AC:93:4E:E6:4A:11:9E:37:D0:35:D2:B0:06:5C:83:
    14:A5:61:92:FC:FE:B3:89:C1:E6:CD:C8:1F:31:84:09:
    91:34:46:92:2C:B8:EE:2C:C5:20:73:C4:E8:1A:D8:8D:
    CE:7A:68:B5:66:78:8B:E5:60:15:A2:F6:29:5A:1D:5E:
    5D:FC:62:D3:C1:5C:29:89:FB:33:F8:16:95:36:DD:B1:
    46:74:69:72:53:D5:AA:E8:8A:99:1A:D8:F7:67:09:D9:
    09:20:22:38:7A:D6:03:23:D7:89:9F:1C:01:B7:51:DF:
    98:66:2A:02:8B:06:EC:E4:29:EF:5B:42:17:15:97:51:
    8D:7D:25:0A:AF:25:E8:DE:DC:9B:67:16:0A:56:73:9D:
    B3:1D:85:83:0B:7E:33:2B:62:33:CE:1C:20:81:4B:5E:
    D3:C6:49:B8:F6:2E:D3:4E:B0:71:44:46:64:3E:DE:43:
    66:04:B9:CC:83:48:3A:C5:36:7A:04:48:0B:89:02:3D:
    63:A2:01:76:29:97:75:E9:01:E6:00:97:09:92:F8:E2:
    27:F0:29:67:43:77:C3:50:96:53:31:E1:B6:71:8B:EC:
    77:C7:7C:31:48:D5:B8:25:22:8C:00:F7:28:38:7A:BD:
    7C:C7:3F:CD:40:26:77:DD:00:00:11:9A:95:BE:1F:DB: 0x010001
- #6
  - 1.3.6.1.4.1.311.21.1: 0
  - subjectKeyIdentifier:
```
90 8b 11 a5 70 ed e0 f9  a9 c0 ac 08 c7 b5 f4 82  |....p...........|
b1 3c c5 4a                                       |.<.J            |
```
  - keyUsage: 0xc6
  - basicConstraints: true, true
  - authorityKeyIdentifier
    - 0e ac 82 60 40 56 27 97 e5 25 13 fc 2a e1 0a 53 |...`@V'..%..*..S| 95 59 e4 a4 |.Y.. |
      - #0
        DC: com
        DC: microsoft
        CN: Microsoft Root Certificate Authority
      - 79 ad 16 a1 4a a0 a5 ad 4c 73 58 f4 07 13 2e 65 |y...J...LsX....e|
  - crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl
  - authorityInfoAccess
    - caIssuers: http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt
  - certificatePolicies
    - 1.3.6.1.4.1.311.21.47
      - id-qt-unotice:
        00 43 00 6f 00 70 00 79 00 72 00 69 00 67 00 68 |.C.o.p.y.r.i.g.h| 00 74 00 20 00 a9 00 20 00 31 00 39 00 39 00 39 |.t. ... .1.9.9.9| 00 2d 00 32 00 30 00 30 00 35 00 20 00 4d 00 69 |.-.2.0.0.5. .M.i| 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 20 |.c.r.o.s.o.f.t. | 00 43 00 6f 00 72 00 70 00 6f 00 72 00 61 00 74 |.C.o.r.p.o.r.a.t| 00 69 00 6f 00 6e 00 2e |.i.o.n.. |
  - extendedKeyUsage
    - codeSigning: 1.3.6.1.4.1.311.10.3.6

RSA-SHA1:

25 31 a1 58 ea 52 e5 e1  17 0c e6 f1 3f 78 a3 3f  |%1.X.R......?x.?|
72 af a7 57 10 53 89 10  5e 32 9c b6 70 c3 15 2b  |r..W.S..^2..p..+|
4d 15 30 34 e8 c0 6a e4  1c d3 2e 20 65 48 d7 1b  |M.04..j.... eH..|
98 62 21 ba 45 9f 4a ec  db 2f 09 19 51 e5 ed 32  |.b!.E.J../..Q..2|
19 51 2f e1 dd fb c6 52  fd eb c6 82 25 42 03 09  |.Q/....R....%B..|
a6 38 b6 36 1f cc c9 80  bb 5a 69 18 31 c3 b3 a0  |.8.6.....Zi.1...|
b3 67 47 be 9d c7 e2 3f  96 b3 88 f8 19 be 39 b9  |.gG....?......9.|
e9 95 ce fc 7c af a8 cd  d0 41 90 e0 d5 b3 1c 2f  |....|....A...../|
68 bb db 0f 6c 6a dd f2  af de f2 b5 de 0d b6 a6  |h...lj..........|
5a f0 86 0a b9 6d 99 4b  3f 7b 2d 01 84 6c 8f 87  |Z....m.K?{-..l..|
dc 7f 8f ab 14 88 d0 06  91 34 be 1b 82 22 a4 bc  |.........4..."..|
55 8a ad 9b fc 73 14 10  c4 c9 19 1e 07 7d 9b 0e  |U....s.......}..|
c0 95 26 5d c6 1f ac b4  f2 7e ba 25 70 4a 7b d7  |..&].....~.%pJ{.|
8e d1 9d a0 13 49 7a b0  02 52 52 24 f4 af dd 40  |.....Iz..RR$...@|
2d e5 3e 32 58 b3 4a 6a  dd 11 59 aa 2d bc a4 a0  |-.>2X.Jj..Y.-...|
73 38 f9 40 77 6b 34 19  57 cd 38 68 27 82 f8 d1  |s8.@wk4.W.8h'...|
6f eb 23 c0 3f 52 f3 4e  d5 02 3e 6a 9a 2b c1 f5  |o.#.?R.N..>j.+..|
31 71 db 41 4d 3b de ef  ad af 1f 88 65 43 1b 51  |1q.AM;......eC.Q|
b7 9a 75 ca 8e 69 49 10  8f 78 8a 74 45 b9 09 8e  |..u..iI..x.tE...|
73 77 07 32 4a 4b d7 68  2b 98 c5 ba 54 ea 3f cb  |sw.2JK.h+...T.?.|
a2 00 8c bb d8 10 58 f2  db dc 9b cd d8 ea 48 43  |......X.......HC|
e2 4a 7e 65 b2 dc f5 2d  4e 25 67 a8 e0 b5 ba a7  |.J~e...-N%g.....|
dd 7e 5e c1 4c 02 74 c9  b3 6e e3 f8 f0 0b ed fc  |.~^.L.t..n......|
b9 29 c5 5b c9 36 51 90  db 78 7d b9 32 0f 5e 76  |.).[.6Q..x}.2.^v|
d2 15 5c 3b 37 21 c6 db  c9 19 6e ed 74 2a 5c 2c  |..\;7!....n.t*\,|
0b 51 49 45 53 b0 b2 b3  23 d4 a1 b0 5f 0d 19 cd  |.QIES...#..._...|
14 a7 e3 3c 9b 97 72 94  14 df ff c1 90 1b a5 df  |...<..r.........|
f5 a9 f3 1b 17 da b5 fc  44 e0 e8 e2 3c a2 7a bb  |........D...<.z.|
bb 65 e6 4d b1 b5 15 a1  d9 67 3b b0 0c 7d 3b e9  |.e.M.....g;..};.|
ee 51 2a 47 f5 15 0f 8c  ad 5d 2e 35 df f4 a4 2e  |.Q*G.....].5....|
f6 13 37 5a 2b e8 55 9a  49 2c 97 ce 9d 01 9e 97  |..7Z+.U.I,......|
46 5c d9 2d bc 24 5a 95  59 6f 4d ca 9d d6 57 26  |F\.-.$Z.YoM...W&|

Signer

1
unnamed
- #0
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Windows Verification PCA
- 61:15:34:64:00:00:00:00:00:0C
SHA256: nil

contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

b4 70 03 a6 9e c2 03 c7  61 f2 cc ba b8 60 fe 0d  |.p......a....`..|
98 41 6f f0 42 e2 9c cf  28 80 ea c9 b2 99 03 5c  |.Ao.B...(......\|

1.3.6.1.4.1.311.2.1.12

00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 |.M.i.c.r.o.s.o.f| 00 74 00 20 00 57 00 69 00 6e 00 64 00 6f 00 77 |.t. .W.i.n.d.o.w| 00 73 |.s |
: http://www.microsoft.com

rsaEncryption:

4b a2 96 06 80 d2 6f a7  65 cb c4 13 48 f4 b8 62  |K.....o.e...H..b|
4d d7 b8 f1 85 ce c7 24  2d 3d 8a dc 4a c8 b7 a7  |M......$-=..J...|
01 d1 e2 0c 8a 2d a2 de  55 a7 13 c6 65 06 74 df  |.....-..U...e.t.|
ce 97 18 17 0d 16 e9 83  b6 bf 0b 76 e4 30 a3 25  |...........v.0.%|
c7 e0 a6 84 b8 ba e4 60  46 a4 a5 d8 45 a7 7f f9  |.......`F...E...|
2f 89 6e 6e 53 03 55 71  eb b4 95 07 16 c3 b7 a6  |/.nnS.Uq........|
57 88 90 cc 3b d7 d5 f0  4a c7 12 92 62 f9 d5 2c  |W...;...J...b..,|
c4 62 00 d0 06 f9 60 81  7f b5 e8 6c 11 eb 9b 19  |.b....`....l....|
ba fd 06 1e 3f 9b bc d9  84 14 ad 37 d8 a3 77 fd  |....?......7..w.|
ac 9f 39 29 87 ae 60 8f  37 34 54 48 b4 8b fa a7  |..9)..`.74TH....|
d9 fb 9b 50 1a 1f 6a 13  b6 a8 80 0f d6 73 2a 4a  |...P..j......s*J|
ff af 07 46 d2 a0 ff 9e  8f ea fc 29 06 78 f1 f4  |...F.......).x..|
4b 41 b0 a0 28 df ef d6  4e 8c 73 5a c8 88 a8 e8  |KA..(...N.sZ....|
5d 49 88 78 24 66 a2 f0  cf fc 98 20 e3 19 73 5c  |]I.x$f..... ..s\|
8d b4 c2 db f3 b0 ea 4f  c5 a0 0c a6 fc 82 4c a0  |.......O......L.|
a0 4a b4 1a 31 e5 e1 9b  bf 56 78 82 38 62 6b 82  |.J..1....Vx.8bk.|

countersignature

unnamed
- #0
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Time-Stamp PCA
- 61:04:B3:F5:00:00:00:00:00:0D
SHA1

contentType: pkcs7-data
signingTime: 2010-11-20 11:26:35 UTC

messageDigest:

a2 15 dd 66 f6 dc ba e7  93 4c bd f7 b2 87 bf 3c  |...f.....L.....<|
58 b3 29 4f                                       |X.)O            |

RSA-SHA1:

7b 74 36 03 57 fb 78 39  bc 5c 13 93 4c 9b 54 fa  |{t6.W.x9.\..L.T.|
82 81 43 c2 1c e2 0b 25  aa ba 71 4d 46 bd b7 2f  |..C....%..qMF../|
5e f5 ee 05 19 c6 05 dc  ea 78 52 0f 5f a9 ea 6d  |^........xR._..m|
2f 86 1a 36 34 bc ab 3b  1a 40 cf e1 71 7e 63 39  |/..64..;.@..q~c9|
98 a5 3b 8f 84 00 ba 6d  0f 8b b4 3c 3a 01 0e 34  |..;....m...<:..4|
08 56 bd cc ac 62 76 ea  1d 05 e4 3c 1a ce 9f 0e  |.V...bv....<....|
4c 77 4d dd 43 81 d6 3a  15 30 57 a6 5d f9 5d e9  |LwM.C..:.0W.].].|
36 04 d8 69 bb e4 38 65  a4 c2 8c ee 5f ce ec ef  |6..i..8e...._...|
64 7a 26 b6 03 59 5e 97  52 87 3e 4a cf 22 f6 62  |dz&..Y^.R.>J.".b|
32 71 1b 55 9a 1a 3d 2c  ac ad 8b f1 55 ed c4 20  |2q.U..=,....U.. |
ff f9 a4 8c 5f d5 0f 8f  d1 53 53 98 40 96 d7 e8  |...._....SS.@...|
03 51 d6 47 e0 15 08 65  18 96 5e e1 02 c0 cd 16  |.Q.G...e..^.....|
20 fb 7c 16 73 ec d4 63  46 11 38 70 3b 8d 9e 35  | .|.s..cF.8p;..5|
a9 f7 75 f2 9c f8 a3 3a  88 7a 07 a6 e2 47 c7 6b  |..u....:.z...G.k|
b4 21 f6 34 39 38 79 34  2c ec 45 a0 89 5e b5 89  |.!.498y4,.E..^..|
80 12 e6 5f ce a2 f5 63  ba b7 bf 61 4d 19 e7 f9  |..._...c...aM...|

show previews

offset	size	type	comment
0	526848	EXE	11/20/2010 09:05:11	#
15c1	15	HTM		#
80a00	11968	PKCS7	Authenticode Signature	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x0

winload.exe- osloader.exe - OS Loader

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

Signers (1)

Certificates (4)

winload.exe
- osloader.exe - OS Loader