MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

TLS

StringTable 040904E4

VS_FIXEDFILEINFO

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Code Signing PCA 2011
serial: 33000001529B409F5056997588000000000152

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:00:01:30:30:3e:28:0c:ec:3c:4d:01:00:00:00:00:01:30
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA
        Validity
            Not Before: Sep  6 20:40:06 2019 GMT
            Not After : Dec  4 20:40:06 2020 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft Operations Puerto Rico, OU=Thales TSS ESN:5847-F761-4F70, CN=Microsoft Time-Stamp Service
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ef:05:21:da:0a:32:97:9b:12:8d:f8:1e:ab:8e:
                    d2:f1:3e:18:bb:3e:fd:63:5f:ec:66:95:69:61:e7:
                    b5:aa:97:76:30:1c:1c:73:5f:38:0c:f9:39:e8:f1:
                    1c:f4:16:be:85:c5:e5:3b:8f:7c:d6:e1:90:97:a5:
                    c6:17:8b:15:50:b0:f5:6f:68:9e:9c:ca:8e:19:34:
                    5c:cd:a7:61:bf:6c:ee:81:8c:ce:5b:9f:ee:47:c6:
                    9e:1a:96:c0:fc:fc:43:48:fa:c3:9c:93:46:69:6c:
                    b6:71:3d:cc:da:9d:d4:8d:d3:54:e5:ca:84:76:90:
                    1a:67:0f:6c:db:8f:1a:cf:9b:10:a9:a5:c4:65:13:
                    c0:ce:3f:2d:1e:67:7a:03:0e:fa:a0:08:ce:98:31:
                    20:4b:5a:06:ff:42:c9:cf:97:dc:0f:4b:d8:99:3d:
                    26:79:37:32:7d:ae:c5:6b:a5:e2:dc:d6:bf:a6:21:
                    93:ad:be:ad:a2:da:4f:18:c4:0d:45:73:e3:a9:d0:
                    c3:17:a4:11:0c:f0:0f:48:a6:c8:2a:a2:23:12:f5:
                    87:43:d4:dc:f4:c4:86:8b:ea:5a:71:53:d6:c4:8c:
                    51:e8:ae:b3:35:1c:66:a5:57:78:b1:b9:93:80:72:
                    8e:51:a5:23:0e:40:27:fd:d7:05:c4:51:d0:68:0c:
                    85:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                CB:E7:8A:C1:78:9F:64:DA:63:2C:66:58:DA:59:09:E1:8B:E4:2E:45
            X509v3 Authority Key Identifier: 
                23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt
            X509v3 Extended Key Usage: 
                Time Stamping
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        60:be:9e:ab:ee:83:be:2e:46:44:e0:84:87:fb:2c:52:6e:c5:
        eb:67:f7:16:58:b2:f7:8f:45:93:02:99:58:33:a9:1c:f6:d3:
        dd:94:13:7d:74:29:49:c2:18:9e:9e:d7:65:dd:73:07:10:9b:
        3b:70:ea:74:44:8d:25:ac:88:7a:34:d6:45:67:69:a7:0e:fd:
        af:0f:71:bb:6f:11:26:2b:8f:f0:a0:f5:fe:60:7d:1d:7c:0a:
        f2:ab:f5:41:a8:7a:36:27:c9:05:d3:2a:39:bb:16:4e:d9:f7:
        dd:e0:8c:bb:96:a6:1d:f2:76:8a:a9:27:a3:57:2e:37:24:05:
        43:34:c3:73:a3:bc:74:67:76:00:b4:f8:49:f4:83:03:22:fa:
        b9:be:4d:3f:dc:0d:b6:7d:b1:c4:28:11:c3:2e:c2:c9:37:49:
        b6:c6:a6:c7:47:b5:c1:4f:f3:ee:22:fc:82:0d:a6:c0:4c:e8:
        1b:51:f0:71:0d:26:2b:fe:8e:39:81:99:b2:aa:7c:29:f1:d1:
        ff:ce:ed:0b:5d:5f:7c:d4:9e:f6:a0:de:52:0e:02:b8:f8:ab:
        77:e8:db:bd:06:36:c5:00:9f:8b:f1:2a:b4:ab:3a:86:1d:09:
        ae:46:6a:75:86:6f:f6:3a:15:b9:4a:9c:82:cd:c4:6e:f4:5d:
        6d:fa:c5:fd

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA 2011
        Validity
            Not Before: May  2 21:37:46 2019 GMT
            Not After : May  2 21:37:46 2020 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Corporation
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b1:a7:89:d3:f6:a7:ee:f4:ed:74:88:9c:9e:c1:
                    85:c7:94:df:96:12:1e:fd:36:8a:2b:f6:78:4c:e9:
                    e9:d4:35:b0:9b:85:7f:6f:4b:ef:1c:ff:77:88:55:
                    ac:d2:62:75:41:4e:a2:f3:5b:bc:56:37:56:c2:70:
                    8b:43:6e:c1:33:28:41:36:06:cc:12:ba:7e:c9:f7:
                    10:9a:2f:07:06:1c:a1:6b:fa:a5:94:97:3e:e1:87:
                    d4:5c:9a:36:12:90:e1:8d:c9:b3:9f:ae:08:f7:b2:
                    6d:03:4a:da:0a:f2:58:f0:13:25:15:79:17:cc:1f:
                    1f:44:ff:b0:9a:fc:e1:2a:d9:c5:c1:4f:72:f4:7d:
                    59:e5:12:47:da:97:7d:74:10:50:8b:0e:8d:81:ac:
                    4d:f9:34:64:63:1b:ef:e7:9d:98:aa:2a:a1:21:e6:
                    55:8d:93:7d:c9:57:cf:c8:d1:f2:1c:50:aa:cb:12:
                    65:06:ae:fd:02:80:2e:f0:d9:c8:e6:6c:18:41:20:
                    9f:b4:2b:34:a7:49:68:a7:81:7a:25:ff:78:94:74:
                    10:72:e1:04:0d:1f:be:bb:91:81:ae:9c:97:98:d3:
                    c4:63:1c:c2:20:8c:90:9d:02:81:0c:fb:69:97:bf:
                    5a:61:69:5e:e3:f8:cd:dd:37:36:7f:71:db:33:de:
                    80:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                1.3.6.1.4.1.311.76.8.1, Code Signing
            X509v3 Subject Key Identifier: 
                DD:FF:00:C3:5B:16:EF:65:9C:27:66:E8:FD:04:98:1B:35:6B:45:87
            X509v3 Subject Alternative Name: 
                DirName:/OU=Microsoft Ireland Operations Limited/serialNumber=230012\+454136
            X509v3 Authority Key Identifier: 
                48:6E:64:E5:50:05:D3:82:AA:17:37:37:22:B5:6D:A8:CA:75:02:95
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        94:f0:44:e6:87:be:88:17:82:2c:56:8f:28:ef:2d:f8:91:82:
        a2:36:40:af:06:a0:6d:b7:7a:a0:20:36:35:fb:57:f5:9d:51:
        60:5b:b3:46:88:0b:79:38:f5:c7:74:cd:da:be:24:92:26:8b:
        17:17:e9:43:93:a7:3d:8b:64:f1:52:87:6d:e5:d3:f3:28:df:
        9c:06:ec:95:d4:c6:03:b4:53:ee:5d:ad:b4:21:b7:9c:68:32:
        5d:67:ef:f4:d0:e2:22:9c:98:06:12:00:fc:53:ab:99:45:9e:
        85:76:f9:f0:1e:96:35:40:ec:ee:37:b3:38:ec:ec:b4:74:f4:
        3d:30:14:7c:33:65:ca:3f:88:4f:07:95:a9:25:db:76:53:ec:
        59:c1:e4:07:d4:da:1c:1f:bf:ce:f2:de:ad:da:e6:a1:62:ba:
        04:b2:90:82:e9:2b:4f:ef:aa:79:44:54:1d:0a:01:d4:15:cd:
        85:0b:43:f5:38:78:51:23:9e:2b:37:26:cf:54:ac:0b:ed:22:
        12:2c:db:ae:38:e5:18:f7:50:fe:94:e0:68:0e:8e:04:28:9e:
        54:40:fa:60:e5:b2:1e:fc:c0:54:86:6c:04:88:bc:af:9f:90:
        e3:54:86:f8:fc:07:c6:47:36:7e:13:15:f9:dc:b7:e6:b4:66:
        e7:98:e1:fe:9a:44:fc:6b:f1:b7:8d:49:42:a7:ed:05:bf:15:
        09:a7:e3:6d:9b:13:b2:9f:9e:a5:a7:72:c1:fb:bd:b3:61:1b:
        dd:bd:a6:b5:47:3e:c6:9a:ec:9d:b6:8b:dc:32:1e:3e:e6:d2:
        80:13:5c:9f:98:8d:fc:a8:10:0b:5d:e7:f3:72:21:86:84:e1:
        4b:b4:8f:51:21:b9:85:28:e5:56:89:26:73:1a:4c:44:74:a9:
        7f:3e:fd:86:51:5a:b1:4d:fe:17:a9:b3:8d:57:35:58:e2:01:
        ac:29:6c:06:b4:7d:46:b7:47:d4:4d:06:33:e2:06:73:34:82:
        f3:4f:a2:b3:38:76:c5:76:54:9f:06:96:e2:10:3a:b2:65:3a:
        fb:82:ac:e6:03:1a:2a:c6:9d:a7:4e:99:0d:b5:c0:f0:68:18:
        50:96:a4:ae:7a:3f:1c:e5:88:ab:32:e4:d3:66:01:77:04:c7:
        b4:1b:f6:f5:23:63:55:a5:62:da:dd:c0:e5:d3:a7:13:78:b2:
        5c:c8:86:de:bd:05:a6:65:2c:88:cb:55:6c:2a:21:fb:8d:ae:
        11:ca:34:33:3d:2b:eb:fb:be:0a:c8:6d:fe:e5:e7:fe:ba:e6:
        0d:20:8d:00:83:08:de:90:e6:cc:6e:b6:d4:c0:10:ab:49:79:
        2f:e9:92:92:3e:0d:b6:7f

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:16:68:34:00:00:00:00:00:1c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
        Validity
            Not Before: Apr  3 12:53:09 2007 GMT
            Not After : Apr  3 13:03:09 2021 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:9f:a1:6c:b1:df:db:48:92:2a:7c:6b:2e:19:e1:
                    bd:e2:e3:c5:99:51:23:50:ad:ce:dd:18:4e:24:0f:
                    ee:d1:a7:d1:4c:ad:74:30:20:11:eb:07:d5:54:95:
                    15:49:94:1b:42:92:ae:98:5c:30:26:da:00:6b:e8:
                    7b:bd:ec:89:07:0f:f7:0e:04:98:f0:89:cc:1f:cb:
                    33:24:87:9d:f2:f4:67:1c:2c:fc:7b:e7:88:1d:ea:
                    e7:4e:a3:a1:c1:23:53:ca:8d:fa:45:cf:09:d0:5e:
                    af:d0:b0:42:04:a2:f9:a6:6c:93:67:d7:28:dc:46:
                    53:b0:86:d0:e5:28:46:2e:27:ac:86:4f:55:52:0c:
                    e4:03:2c:fb:6a:90:90:30:6e:87:f3:59:30:9d:fa:
                    7e:d6:97:b3:e8:21:97:7e:f8:d2:13:f3:08:b7:53:
                    6d:52:b4:45:90:9f:48:00:4a:47:66:11:27:29:66:
                    a8:97:e4:d3:06:81:4a:a2:f9:84:a7:11:47:14:09:
                    82:9f:84:ed:55:78:fe:01:9a:1d:50:08:85:00:10:
                    30:46:ed:b7:de:23:46:bb:c4:2d:54:9f:af:1e:78:
                    41:31:77:cc:9b:df:3b:83:93:a1:61:02:b5:1d:0d:
                    b1:fc:f7:9b:b2:01:ce:22:4b:54:ff:f9:05:c3:c2:
                    20:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Authority Key Identifier: 
                keyid:0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4
                DirName:/DC=com/DC=microsoft/CN=Microsoft Root Certificate Authority
                serial:79:AD:16:A1:4A:A0:A5:AD:4C:73:58:F4:07:13:2E:65
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt
            X509v3 Extended Key Usage: 
                Time Stamping
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        10:97:8a:c3:5c:03:44:36:dd:e9:b4:ad:77:db:ce:79:51:4d:
        01:b1:2e:74:71:5b:6d:0c:13:ab:ce:be:7b:8f:b8:2e:d4:12:
        a2:8c:6d:62:b8:57:02:cb:4e:20:13:50:99:dd:7a:40:e2:57:
        bb:af:58:9a:1c:e1:1d:01:86:ac:bb:78:f2:8b:d0:ec:3b:01:
        ee:e2:be:8f:0a:05:c8:8d:48:e2:f0:53:15:dd:4f:ab:92:e4:
        e7:8d:6a:d5:80:c1:e6:94:f2:06:2f:85:03:e9:91:2a:24:22:
        70:fb:f6:fc:e4:78:99:2e:0d:f7:07:e2:70:bc:18:4e:9d:8e:
        6b:0a:72:95:b8:a1:39:9c:67:2d:c5:51:0e:ea:62:5c:3f:16:
        98:8b:20:3f:e2:07:1a:32:f9:cc:31:4a:76:31:3d:2b:72:0b:
        c8:ea:70:3d:ff:85:0a:13:df:c2:0a:61:8e:f0:d7:b8:17:eb:
        4e:8b:7f:c5:35:2b:5e:a3:bf:eb:bc:7d:0b:42:7b:d4:53:72:
        21:ee:30:ca:bb:78:65:5c:5b:01:17:0a:14:0e:d2:da:14:98:
        f5:3c:b9:66:58:b3:2d:2f:e7:f9:85:86:cc:51:56:e8:9d:70:
        94:6c:ac:39:4c:d4:f6:79:bf:aa:18:7a:62:29:ef:a2:9b:29:
        34:06:77:1a:62:c9:3d:1e:6d:1f:82:f0:0b:c7:2c:bb:cf:43:
        b3:e5:f9:ec:7d:b5:e3:a4:a8:74:35:b8:4e:c5:71:23:12:26:
        76:0b:3c:52:8c:71:5a:46:43:14:bc:b3:b3:b0:4d:67:c8:9f:
        42:ff:80:79:21:80:9e:15:30:66:e8:42:12:5e:1a:c8:9e:22:
        21:d0:43:e9:2b:e9:bb:f4:48:cc:2c:d4:d8:32:80:4c:26:2a:
        48:24:5f:5a:ea:56:ef:a6:de:99:9d:ca:3a:6f:bd:81:27:74:
        06:11:ee:76:21:bf:9b:82:c1:27:54:b6:b1:6a:3d:89:a1:76:
        61:b4:6e:a1:13:a6:bf:aa:47:f0:12:6f:fd:8a:32:6c:b2:fe:
        df:51:c8:8c:23:c9:66:bd:9d:1d:87:12:64:02:3d:2d:af:59:
        8f:b8:e4:21:e5:b5:b0:ca:63:b4:78:54:05:d4:41:2e:50:ac:
        94:b0:a5:78:ab:b3:a0:96:75:1a:d9:92:87:13:75:22:2f:32:
        a8:08:6e:a0:5b:8c:25:bf:a0:ef:84:ca:21:d6:eb:1e:4f:c9:
        9a:ee:49:e0:f7:01:65:6f:89:0b:7d:c8:69:c8:e6:6e:ea:a7:
        97:ce:31:29:ff:0e:c5:5b:5c:d8:4d:1b:a1:d8:fa:2f:9e:3f:
        2e:55:16:6b:c9:13:a3:fd

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0e:90:d2:00:00:00:00:00:03
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
        Validity
            Not Before: Jul  8 20:59:09 2011 GMT
            Not After : Jul  8 21:09:09 2026 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA 2011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:ab:f0:fa:72:10:1c:2e:ad:d8:6e:aa:82:10:4d:
                    34:ba:f2:b6:58:21:9f:42:1b:2a:6b:e9:5a:50:aa:
                    b8:06:38:1a:04:49:ba:7f:c3:0c:1e:dd:37:6b:c6:
                    12:d8:0b:f0:38:c2:99:06:b0:c8:39:d5:01:14:31:
                    42:d3:89:0d:79:64:87:7e:94:60:24:6c:af:9e:49:
                    9c:e9:68:5e:d2:df:9b:53:b2:0a:2c:c3:af:d9:a9:
                    2b:ae:7a:09:af:d7:96:59:ca:60:1a:05:e9:66:76:
                    e8:32:52:26:12:2f:e7:ab:08:50:cf:b3:44:b7:5d:
                    d8:c4:2e:03:75:ab:68:f3:cb:6d:f3:3a:5c:a1:16:
                    f4:46:ba:e0:38:64:ac:6e:64:35:78:a6:a0:63:0f:
                    2d:d3:40:93:f8:e3:de:07:0d:d5:5c:79:a5:49:29:
                    e7:0d:be:a0:13:77:be:94:3d:ef:fb:e3:2b:5a:10:
                    1f:4d:56:28:a2:7a:72:e0:12:3a:b7:49:5e:d8:ed:
                    ed:43:91:83:d9:7b:b2:7b:86:1b:d9:3e:b1:8c:5d:
                    e8:89:4f:84:1a:f2:a1:2f:59:e4:90:3b:2d:ae:33:
                    58:c5:b7:3e:fe:32:d3:b3:03:3d:b1:b2:af:92:38:
                    7e:d2:9d:80:2c:f5:4e:56:91:21:35:25:c3:39:6e:
                    64:7f:53:ba:9c:0f:ad:19:23:84:cb:f4:ba:03:86:
                    8d:f7:5f:f0:d0:52:bf:8c:94:87:bc:c0:21:74:25:
                    5f:18:28:b6:cc:27:28:38:25:98:39:4a:36:cf:7c:
                    b1:92:ae:1c:23:a7:a9:66:ec:61:1f:6a:e1:28:49:
                    9d:5f:88:e2:25:5d:d3:21:4b:3e:52:c4:b5:57:3f:
                    24:03:f0:d1:7a:5b:2f:d5:23:e3:70:5d:0f:51:46:
                    77:b3:f8:00:e1:bc:ac:02:82:5f:db:c0:15:b3:bd:
                    1b:d4:55:4b:e7:39:a1:0f:e9:23:49:bc:18:b8:44:
                    7c:45:e4:c1:c3:72:7a:e0:72:e7:24:df:bf:46:99:
                    c5:ef:c2:1c:57:db:83:8d:ec:4d:49:30:a7:ab:8e:
                    df:ec:5b:9f:af:fc:dd:b0:66:e2:c1:97:81:7b:ed:
                    d6:ed:4b:e7:49:29:a7:13:28:a6:a7:7d:67:80:e6:
                    8a:62:78:5f:b2:2f:84:d7:57:9c:5c:bf:77:28:28:
                    f1:ed:6d:c3:28:8f:2c:8f:40:37:4f:c1:e1:85:44:
                    89:c4:09:4c:c5:d4:a5:43:2f:74:95:f7:6e:f8:78:
                    20:58:2c:13:5d:60:95:9a:3e:4f:33:84:da:b0:88:
                    17:de:9e:4e:f4:96:b0:bc:46:a0:6c:98:d2:e0:d6:
                    88:8c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Subject Key Identifier: 
                48:6E:64:E5:50:05:D3:82:AA:17:37:37:22:B5:6D:A8:CA:75:02:95
            1.3.6.1.4.1.311.20.2: 
                .
.S.u.b.C.A
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                72:2D:3A:02:31:90:43:B9:14:05:4E:E1:EA:A7:C7:31:D1:23:89:34
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.311.46.3
                  CPS: http://www.microsoft.com/pkiops/docs/primarycps.htm
                  User Notice:
                    Explicit Text:  
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        67:f2:86:a5:98:e0:54:79:1a:2e:d3:d8:74:67:22:9b:0b:96:
        11:e1:63:92:99:42:96:7d:d2:79:0c:90:c1:65:5f:2e:2c:3e:
        f8:c3:72:d1:6d:83:fe:be:3f:e8:0a:ca:3b:bf:47:a9:a3:f3:
        69:db:63:bf:22:35:a5:97:5d:65:84:90:7d:8b:46:50:55:d8:
        0c:92:7c:d2:1a:4b:1c:f3:3c:42:8b:52:d0:b0:fd:6b:e3:3e:
        07:2e:29:9b:e6:3d:1b:a5:d4:b5:1d:77:94:39:e2:e9:64:c9:
        44:3d:78:7a:23:f3:13:7d:a6:90:74:83:8d:f4:cb:26:02:46:
        2a:c2:8a:10:bb:a4:a9:05:0c:9b:ed:68:fa:68:2e:95:a0:2a:
        3f:2a:6b:58:49:63:1f:09:69:6e:5a:98:96:e4:83:f4:c0:8f:
        f3:46:2b:de:fc:3b:d0:bd:35:ef:6e:25:ae:e5:af:27:ed:d0:
        dd:f3:0e:af:99:28:97:98:4d:0e:3d:0b:f2:08:89:d6:1f:c3:
        32:18:e2:f0:c5:2d:ce:5b:9e:b4:49:39:0a:c6:0a:c2:c6:ad:
        ae:e5:b2:d9:db:15:88:51:45:58:38:32:71:27:1a:7f:b1:f4:
        27:f8:de:2c:3a:20:69:98:b2:59:89:68:6e:6f:a7:b7:74:c3:
        40:05:06:a6:01:2a:28:3e:82:3f:13:4d:66:0b:c0:b3:4d:f5:
        e1:8f:7f:1c:6f:15:7d:45:a7:76:e5:40:2a:65:a3:c3:5d:52:
        62:86:c3:1d:63:36:97:86:df:da:f3:f8:f2:16:a1:9a:27:e1:
        cd:a5:97:d0:ee:5d:63:41:e3:5b:07:9c:87:3e:06:77:06:d1:
        06:b1:75:1f:14:be:61:61:b5:f0:dc:c6:1b:04:be:df:41:c7:
        0e:28:ee:de:65:2f:ec:97:f6:a1:5c:96:d8:00:d6:a1:46:bd:
        59:f3:97:a5:09:4b:48:10:99:80:1f:d0:00:29:c5:b1:9b:a5:
        3f:45:77:1e:35:c6:d2:a2:a2:9f:7a:7a:22:fa:48:95:1f:ab:
        fb:47:23:80:f5:9e:f8:bf:6b:b7:4b:97:e2:eb:75:78:1a:ec:
        ea:37:99:79:18:4b:ff:d6:b3:23:68:75:e6:af:fa:fc:8b:eb:
        0b:80:ea:69:3b:af:fc:30:ed:04:4c:8e:df:df:75:6d:63:91:
        3d:d1:9d:56:4e:4f:bf:80:57:22:a1:78:11:32:21:7a:ef:41:
        0a:b1:3f:fb:a8:cc:a4:5d:c1:a1:88:9b:57:71:56:4e:48:45:
        c0:42:c9:9b:76:5b:0a:80:48:6b:fd:79:9f:c1:bd:6d:6d:6a:
        c9:52:73:13:0d:7a:50:cd

undefined method `first' for #

offsetsizetypecomment
0463360EXE11/18/2017 21:37:28#
15c115HTM#
7120014511256BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 14974616 bytes (15 MiB)


--
Type = PE
Physical Size = 14974616
CPU = x86
Characteristics = Executable 32-bit RemovableRun NetRun
Created = 2017-11-18 21:37:28
Headers Size = 1024
Checksum = 14995493
Image Size = 487424
Section Alignment = 4096
File Alignment = 512
Code Size = 301056
Initialized Data Size = 161280
Uninitialized Data Size = 0
Linker Version = 14.0
OS Version = 5.1
Image Version = 0.0
Subsystem Version = 5.1
Subsystem = Windows GUI
DLL Characteristics = Relocated NX-Compatible TerminalServerAware
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
Comment = FileVersion: 14.26.28720.3
ProductVersion: 14.26.28720.3
InternalName: setup
----
Path = [0]
Size = 14494344
Packed Size = 14494344
Virtual Size = 14494344
Offset = 463360
--
Path = [0]
Type = Cab
WARNINGS:
There are data after the end of archive
Physical Size = 175123
Tail Size = 14319221
Method = MSZip
Blocks = 1
Volumes = 1
Volume Index = 0
ID = 0

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2020-03-20 06:36:02 ....A        14946               0
2019-02-13 16:56:32 ....A       195600               u0
2017-07-11 06:39:16 ....A         8332               u1
2020-03-10 09:37:48 ....A         2952               u2
2020-03-10 09:37:48 ....A         1861               u3
2020-03-17 02:46:24 ....A         9046               u4
2020-03-10 09:37:48 ....A         2980               u5
2020-03-17 02:46:24 ....A        18127               u6
2020-03-10 09:37:48 ....A         3333               u7
2020-03-17 02:46:24 ....A        13053               u8
2020-03-10 09:37:48 ....A         3379               u9
2020-03-17 02:46:24 ....A        11936               u10
2020-03-10 09:37:48 ....A         3366               u11
2020-03-17 02:46:24 ....A        11593               u12
2020-03-10 09:37:48 ....A         3319               u13
2020-03-17 02:46:24 ....A        11281               u14
2020-03-10 09:37:48 ....A         3959               u15
2020-03-17 02:46:24 ....A        28232               u16
2020-03-10 09:37:48 ....A         3249               u17
2020-03-17 02:46:24 ....A        27936               u18
2020-03-10 09:37:48 ....A         3212               u19
2020-03-17 02:46:24 ....A        13265               u20
2020-03-10 09:37:48 ....A         3095               u21
2020-03-17 02:46:24 ....A        10656               u22
2020-03-10 09:37:48 ....A         4150               u23
2020-03-17 02:46:24 ....A        31915               u24
2020-03-10 09:37:48 ....A         3221               u25
2020-03-17 02:46:24 ....A        13379               u26
2020-03-10 09:37:48 ....A         2978               u27
2020-03-17 02:46:24 ....A        17863               u28
2020-03-10 09:37:48 ....A         3265               u29
2020-03-17 02:46:24 ....A        10714               u30
2020-03-20 06:36:02 ....A        13188               u31
------------------- ----- ------------ ------------  ------------------------
2020-03-20 06:36:02             509381     14974616  33 files

Warnings: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] can't find file_offset of VA 0x6aac0