_install.exe - naib.exe - Adobe Bootstrapping Utility

info
MZ
PE
resources
strings
imports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	_install.exe
size	128384 (0x1f580)
md5	2a3d263cfdd64c4e0cc9108fb6c51356

type	PE32 executable (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf8

Rich Header

lib id	version	times used
150	20413	1
132	30729	46
149	30729	19
131	30729	106
123	50727	21
1	0	177
138	30729	5
148	21022	1
151	0	1
145	30729	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x4c005737
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0xdc00
SizeOfInitializedData	0x10000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x48e5
BaseOfCode	0x1000
BaseOfData	0xf000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0x23000
SizeOfHeaders	0x400
CheckSum	0x2259f
Subsystem	3
DllCharacteristics	0x8140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xdbcb	0xdc00	R-X CODE
.rdata	0xf000	0xc48a	0xc600	R-- IDATA
.data	0x1c000	0x3048	0x1400	RW- IDATA
.rsrc	0x20000	0x870	0xa00	R-- IDATA
.reloc	0x21000	0x1bc8	0x1c00	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x1a5dc	0xdc
RESOURCE	0x20000	0x870
EXCEPTION	0	0
SECURITY	0x1e000	0x1580
BASERELOC	0x21000	0xe70
DEBUG	0xf2c0	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x19d40	0x40
Bound_IAT	0	0
IAT	0xf000	0x27c
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
DIALOG	#101	244	1252
DIALOG	#104	192	1252
STRING	#7	256	1252
VERSION	#1	768	1252
MANIFEST	#1	346	1252

id	lang	string
102	1033	Adobe AIR Native Installer
103	1033	Connecting...
104	1033	%1!2d! %% complete (%2!d! of %3!d! K)
105	1033	Unable to download Adobe AIR Runtime

module_name	hint	ord	function_name
KERNEL32.dll	468		GetFileSize
KERNEL32.dll	487		GetLocalTime
KERNEL32.dll	1205		lstrlenA
KERNEL32.dll	630		GetVersionExW
KERNEL32.dll	692		InitializeCriticalSection
KERNEL32.dll	756		LoadLibraryW
KERNEL32.dll	794		MultiByteToWideChar
KERNEL32.dll	501		GetModuleFileNameW
KERNEL32.dll	872		ReadFile
KERNEL32.dll	462		GetFileAttributesW
KERNEL32.dll	505		GetModuleHandleW
KERNEL32.dll	163		CreateThread
KERNEL32.dll	765		LocalFree
KERNEL32.dll	195		DeleteFileW
KERNEL32.dll	67		CloseHandle
KERNEL32.dll	120		CreateFileA
KERNEL32.dll	1020		SetStdHandle
KERNEL32.dll	1164		WriteConsoleW
KERNEL32.dll	409		GetConsoleOutputCP
KERNEL32.dll	1154		WriteConsoleA
KERNEL32.dll	991		SetFilePointer
KERNEL32.dll	624		GetUserDefaultUILanguage
KERNEL32.dll	576		GetStringTypeW
KERNEL32.dll	573		GetStringTypeA
KERNEL32.dll	739		LCMapStringW
KERNEL32.dll	737		LCMapStringA
KERNEL32.dll	321		FlushFileBuffers
KERNEL32.dll	405		GetConsoleMode
KERNEL32.dll	387		GetConsoleCP
KERNEL32.dll	488		GetLocaleInfoA
KERNEL32.dll	753		LoadLibraryA
KERNEL32.dll	693		InitializeCriticalSectionAndSpinCount
KERNEL32.dll	678		HeapSize
KERNEL32.dll	914		RtlUnwind
KERNEL32.dll	731		IsValidCodePage
KERNEL32.dll	531		GetOEMCP
KERNEL32.dll	338		GetACP
KERNEL32.dll	347		GetCPInfo
KERNEL32.dll	591		GetSystemTimeAsFileTime
KERNEL32.dll	426		GetCurrentProcessId
KERNEL32.dll	614		GetTickCount
KERNEL32.dll	852		QueryPerformanceCounter
KERNEL32.dll	569		GetStartupInfoA
KERNEL32.dll	471		GetFileType
KERNEL32.dll	1000		SetHandleCount
KERNEL32.dll	368		GetCommandLineW
KERNEL32.dll	449		GetEnvironmentStringsW
KERNEL32.dll	331		FreeEnvironmentStringsW
KERNEL32.dll	700		InterlockedDecrement
KERNEL32.dll	429		GetCurrentThreadId
KERNEL32.dll	1004		SetLastError
KERNEL32.dll	1033		SetThreadLocale
KERNEL32.dll	603		GetTempPathW
KERNEL32.dll	1206		lstrlenW
KERNEL32.dll	1193		lstrcmpA
KERNEL32.dll	1194		lstrcmpW
KERNEL32.dll	127		CreateFileW
KERNEL32.dll	453		GetExitCodeProcess
KERNEL32.dll	1146		WideCharToMultiByte
KERNEL32.dll	1165		WriteFile
KERNEL32.dll	547		GetProcessHeap
KERNEL32.dll	1124		WaitForSingleObject
KERNEL32.dll	673		HeapFree
KERNEL32.dll	669		HeapAlloc
KERNEL32.dll	151		CreateProcessW
KERNEL32.dll	486		GetLastError
KERNEL32.dll	1069		TerminateProcess
KERNEL32.dll	425		GetCurrentProcess
KERNEL32.dll	1086		UnhandledExceptionFilter
KERNEL32.dll	1045		SetUnhandledExceptionFilter
KERNEL32.dll	721		IsDebuggerPresent
KERNEL32.dll	217		EnterCriticalSection
KERNEL32.dll	751		LeaveCriticalSection
KERNEL32.dll	858		RaiseException
KERNEL32.dll	671		HeapCreate
KERNEL32.dll	1111		VirtualFree
KERNEL32.dll	190		DeleteCriticalSection
KERNEL32.dll	1108		VirtualAlloc
KERNEL32.dll	676		HeapReAlloc
KERNEL32.dll	1057		Sleep
KERNEL32.dll	544		GetProcAddress
KERNEL32.dll	260		ExitProcess
KERNEL32.dll	571		GetStdHandle
KERNEL32.dll	500		GetModuleFileNameA
KERNEL32.dll	1076		TlsGetValue
KERNEL32.dll	1074		TlsAlloc
KERNEL32.dll	1077		TlsSetValue
KERNEL32.dll	1075		TlsFree
KERNEL32.dll	704		InterlockedIncrement
SHELL32.dll	192		SHGetFolderPathW
SHELL32.dll	280		ShellExecuteW
SHELL32.dll	138		SHCreateDirectoryExW
VERSION.dll	4		GetFileVersionInfoSizeW
VERSION.dll	5		GetFileVersionInfoW
VERSION.dll	13		VerQueryValueW
ADVAPI32.dll	554		RegCloseKey
ADVAPI32.dll	616		RegQueryValueExW
ADVAPI32.dll	603		RegOpenKeyExW
SHLWAPI.dll	73		PathFindFileNameW
SHLWAPI.dll	52		PathAppendW
SHLWAPI.dll	349		UrlGetPartA
SHLWAPI.dll	136		PathRemoveExtensionA
SHLWAPI.dll	51		PathAppendA
SHLWAPI.dll	139		PathRemoveFileSpecW
msi.dll		90
USER32.dll	469		LoadCursorW
USER32.dll	725		TranslateMessage
USER32.dll	441		IsDialogMessageW
USER32.dll	565		RegisterClassExW
USER32.dll	104		CreateWindowExW
USER32.dll	169		DispatchMessageW
USER32.dll	334		GetMessageW
USER32.dll	544		PostQuitMessage
USER32.dll	543		PostMessageW
USER32.dll	634		SetForegroundWindow
USER32.dll	386		GetWindowLongW
USER32.dll	287		GetDlgItem
USER32.dll	677		SetWindowLongW
USER32.dll	484		LoadStringW
USER32.dll	696		ShowWindow
USER32.dll	93		CreateDialogParamW
USER32.dll	511		MessageBoxW
USER32.dll	611		SendMessageW
USER32.dll	684		SetWindowTextW
USER32.dll	150		DefWindowProcW
USER32.dll	211		EndDialog
USER32.dll	633		SetFocus
USER32.dll	166		DialogBoxParamW
USER32.dll	160		DestroyWindow
WININET.dll	106		InternetCloseHandle
WININET.dll	112		InternetConnectA
WININET.dll	158		InternetReadFile
WININET.dll	89		HttpQueryInfoW
WININET.dll	150		InternetOpenA
WININET.dll	90		HttpSendRequestA
WININET.dll	86		HttpOpenRequestA
CRYPT32.dll	63		CertFreeCertificateContext
CRYPT32.dll	74		CertGetNameStringW
CRYPT32.dll	28		CertCreateCertificateContext
CRYPT32.dll	151		CryptGetMessageCertificates
CRYPT32.dll	53		CertFindCertificateInStore
CRYPT32.dll	18		CertCloseStore
CRYPT32.dll	116		CertVerifySubjectCertificateContext
CRYPT32.dll	37		CertDuplicateCertificateContext
CRYPT32.dll	224		CryptVerifyDetachedMessageSignature
CRYPT32.dll	111		CertVerifyCRLRevocation
CRYPT32.dll	129		CryptDecodeObjectEx
CRYPTNET.dll	8		CryptRetrieveObjectByUrlW
CRYPTNET.dll	4		CryptGetObjectUrl

StringTable 040904B0

CompanyName	Adobe Systems Inc.
FileDescription	Adobe Bootstrapping Utility
FileVersion	2.0.2.12610
InternalName	naib.exe
LegalCopyright	Copyright 2010, Adobe Systems Inc.
OriginalFilename	naib.exe
ProductName	Adobe AIR
ProductVersion	2.0.2

VS_FIXEDFILEINFO

FileVersion	2.0.2.12610
ProductVersion	2.0.2.12610
StrucVersion	0x10000
FileFlagsMask	3
FileFlags	2
FileOS	0x40004
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)09/CN=VeriSign Class 3 Code Signing 2009-2 CA

serial: 7E282B0749669B595F7949FF06134E92

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Validity
            Not Before: Jun 15 00:00:00 2007 GMT
            Not After : Jun 14 23:59:59 2012 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (1024 bit)
                Modulus:
                    00:c4:b5:f2:52:15:bc:88:86:60:29:16:4a:5b:2f:
                    4b:91:6b:87:91:f3:35:54:58:35:ea:d1:36:5e:62:
                    4d:52:51:34:71:c2:7b:66:1d:89:c8:dd:2a:c4:6a:
                    0a:f6:37:d9:98:74:91:f6:92:ae:b0:b5:76:96:f1:
                    a9:4a:63:45:47:2e:6b:0b:92:4e:4b:2b:8c:ee:58:
                    4a:8b:d4:07:e4:1a:2c:f8:82:aa:58:d9:cd:42:f3:
                    2d:c0:75:de:8d:ab:c7:8e:1d:9a:6c:4c:08:95:1e:
                    de:db:ef:67:e1:72:c2:49:c2:9e:60:3c:e1:e2:be:
                    16:a3:63:78:69:14:7b:ad:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/tss-ca.crl

            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA1-2
    Signature Algorithm: sha1WithRSAEncryption
         50:c5:4b:c8:24:80:df:e4:0d:24:c2:de:1a:b1:a1:02:a1:a6:
         82:2d:0c:83:15:81:37:0a:82:0e:2c:b0:5a:17:61:b5:d8:05:
         fe:88:db:f1:91:91:b3:56:1a:40:a6:eb:92:be:38:39:b0:75:
         36:74:3a:98:4f:e4:37:ba:99:89:ca:95:42:1d:b0:b9:c7:a0:
         8d:57:e0:fa:d5:64:04:42:35:4e:01:d1:33:a2:17:c8:4d:aa:
         27:c7:f2:e1:86:4c:02:38:4d:83:78:c6:fc:53:e0:eb:e0:06:
         87:dd:a4:96:9e:5e:0c:98:e2:a5:be:bf:82:85:c3:60:e1:df:
         ad:28:d8:c7:a5:4b:64:da:c7:1b:5b:bd:ac:39:08:d5:38:22:
         a1:33:8b:2f:8a:9a:eb:bc:07:21:3f:44:41:09:07:b5:65:1c:
         24:bc:48:d3:44:80:eb:a1:cf:c9:02:b4:14:cf:54:c7:16:a3:
         80:5c:f9:79:3e:5d:72:7d:88:17:9e:2c:43:a2:ca:53:ce:7d:
         3d:f6:2a:3a:b8:4f:94:00:a5:6d:0a:83:5d:f9:5e:53:f4:18:
         b3:57:0f:70:c3:fb:f5:ad:95:a0:0e:17:de:c4:16:80:60:c9:
         0f:2b:6e:86:04:f1:eb:f4:78:27:d1:05:c5:ee:34:5b:5e:b9:
         49:32:f2:33

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec  4 00:00:00 2003 GMT
            Not After : Dec  3 23:59:59 2013 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:b2:a4:cc:cd:20:af:0a:7d:89:ac:87:75:
                    f0:b4:4e:f1:df:c1:0f:bf:67:61:bd:a3:64:1c:da:
                    bb:f9:ca:33:ab:84:30:89:58:7e:8c:db:6b:dd:36:
                    9e:0f:bf:d1:ec:78:f2:77:a6:7e:6f:3c:bf:93:af:
                    0d:ba:68:f4:6c:94:ca:bd:52:2d:ab:48:3d:f5:b6:
                    d5:5d:5f:1b:02:9f:fa:2f:6b:1e:a4:f7:a3:9a:a6:
                    1a:c8:02:e1:7f:4c:52:e3:0e:60:ec:40:1c:7e:b9:
                    0d:de:3f:c7:b4:df:87:bd:5f:7a:6a:31:2e:03:99:
                    81:13:a8:47:20:ce:31:73:0d:57:2d:cd:78:34:33:
                    95:12:99:12:b9:de:68:2f:aa:e6:e3:c2:8a:8c:2a:
                    c3:8b:21:87:66:bd:83:58:57:6f:75:bf:3c:aa:26:
                    87:5d:ca:10:15:3c:9f:84:ea:54:c1:0a:6e:c4:fe:
                    c5:4a:dd:b9:07:11:97:22:7c:db:3e:27:d1:1e:78:
                    ec:9f:31:c9:f1:e6:22:19:db:c4:b3:47:43:9a:1a:
                    5f:a0:1e:90:e4:5e:f5:ee:7c:f1:7d:ab:62:01:8f:
                    f5:4d:0b:de:d0:22:56:a8:95:cd:ae:88:76:ae:ee:
                    ba:0d:f3:e4:4d:d9:a0:fb:68:a0:ae:14:3b:b3:87:
                    c1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/ThawteTimestampingCA.crl

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA2048-1-53
    Signature Algorithm: sha1WithRSAEncryption
         4a:6b:f9:ea:58:c2:44:1c:31:89:79:99:2b:96:bf:82:ac:01:
         d6:1c:4c:cd:b0:8a:58:6e:df:08:29:a3:5e:c8:ca:93:13:e7:
         04:52:0d:ef:47:27:2f:00:38:b0:e4:c9:93:4e:9a:d4:22:62:
         15:f7:3f:37:21:4f:70:31:80:f1:8b:38:87:b3:e8:e8:97:00:
         fe:cf:55:96:4e:24:d2:a9:27:4e:7a:ae:b7:61:41:f3:2a:ce:
         e7:c9:d9:5e:dd:bb:2b:85:3e:b5:9d:b5:d9:e1:57:ff:be:b4:
         c5:7e:f5:cf:0c:9e:f0:97:fe:2b:d3:3b:52:1b:1b:38:27:f7:
         3f:4a

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
        Validity
            Not Before: May 21 00:00:00 2009 GMT
            Not After : May 20 23:59:59 2019 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009-2 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:67:1d:b4:60:aa:10:49:6f:56:17:7c:66:c9:
                    5e:86:0d:d5:f1:ac:a7:71:83:8e:8b:89:f8:88:04:
                    89:15:06:ba:2d:84:21:95:e4:d1:9c:50:4c:fb:d2:
                    22:bd:da:f2:b2:35:3b:1e:8f:c3:09:fb:fc:13:2e:
                    5a:bf:89:7c:3d:3b:25:1e:f6:f3:58:7b:9c:f4:01:
                    b5:c6:0a:b8:80:ce:be:27:74:61:67:27:4d:6a:e5:
                    ec:81:61:58:79:a3:e0:17:10:12:15:27:b0:e1:4d:
                    34:7f:2b:47:20:44:b9:de:66:24:66:8a:cd:4f:ba:
                    1f:c5:38:c8:54:90:e1:72:f6:19:66:75:6a:b9:49:
                    68:cf:38:79:0d:aa:30:a8:db:2c:60:48:9e:d7:aa:
                    14:01:a9:83:d7:38:91:30:39:13:96:03:3a:7c:40:
                    54:b6:ad:e0:2f:1b:83:dc:a8:11:52:3e:02:b3:d7:
                    2b:fd:21:b6:a7:5c:a3:0f:0b:a9:a6:10:50:0e:34:
                    2e:4d:a7:ce:c9:5e:25:d4:8c:bc:f3:6e:7c:29:bc:
                    01:5d:fc:31:87:5a:d5:8c:85:67:58:88:19:a0:bf:
                    35:f0:ea:2b:a3:21:e7:90:f6:83:e5:a8:ed:60:78:
                    5e:7b:60:83:fd:57:0b:5d:41:0d:63:54:60:d6:43:
                    21:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/pca3.crl

            X509v3 Subject Alternative Name: 
                DirName:/CN=Class3CA2048-1-55
            X509v3 Subject Key Identifier: 
                97:D0:6B:A8:26:70:C8:A1:3F:94:1F:08:2D:C4:35:9B:A4:A1:1E:F2
    Signature Algorithm: sha1WithRSAEncryption
         8b:03:c0:dd:94:d8:41:a2:61:69:b0:15:a8:78:c7:30:c6:90:
         3c:7e:42:f7:24:b6:e4:83:73:17:04:7f:04:10:9c:a1:e2:fa:
         81:2f:eb:c0:ca:44:e7:72:e0:50:b6:55:10:20:83:6e:96:92:
         e4:9a:51:6a:b4:37:31:dc:a5:2d:eb:8c:00:c7:1d:4f:e7:4d:
         32:ba:85:f8:4e:be:fa:67:55:65:f0:6a:be:7a:ca:64:38:1a:
         10:10:78:45:76:31:f3:86:7a:03:0f:60:c2:b3:5d:9d:f6:8b:
         66:76:82:1b:59:e1:83:e5:bd:49:a5:38:56:e5:de:41:77:0e:
         58:0f

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:28:2b:07:49:66:9b:59:5f:79:49:ff:06:13:4e:92
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009-2 CA
        Validity
            Not Before: Sep  5 00:00:00 2009 GMT
            Not After : Oct  1 23:59:59 2012 GMT
        Subject: C=US, ST=California, O=Adobe Systems Incorporated, OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=Universal Client, CN=Adobe Systems Incorporated
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (1024 bit)
                Modulus:
                    00:da:35:59:20:61:dc:d2:69:9b:47:b8:af:75:51:
                    8a:6d:e9:17:c4:46:50:a1:ee:23:6b:92:25:4b:63:
                    c7:46:d3:18:c6:88:b0:98:ff:7c:30:1e:cd:ce:3e:
                    f0:f9:24:1d:4c:2a:d2:3f:21:3b:e8:ca:e5:b5:19:
                    0f:6e:58:a2:2f:55:01:dc:2d:80:12:f9:b4:b5:59:
                    f9:e6:9c:7a:8d:59:c7:37:47:99:ab:26:85:a4:94:
                    00:04:01:81:f4:84:a3:64:85:5d:b6:37:bc:24:00:
                    e4:12:89:42:68:8f:9b:75:8f:ef:29:3e:31:99:6c:
                    f1:c3:b8:93:65:de:7c:74:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://csc3-2009-2-crl.verisign.com/CSC3-2009-2.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa

            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
                CA Issuers - URI:http://csc3-2009-2-aia.verisign.com/CSC3-2009-2.cer

            X509v3 Authority Key Identifier: 
                keyid:97:D0:6B:A8:26:70:C8:A1:3F:94:1F:08:2D:C4:35:9B:A4:A1:1E:F2

            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
         b6:68:e7:1f:43:30:c9:1e:d0:b4:c9:12:ec:03:4b:e6:dd:cd:
         14:6f:5b:6e:85:63:11:5e:64:a8:7a:33:72:9a:94:5b:fb:cc:
         74:9b:fb:46:ef:4a:02:ef:92:8f:84:e2:ce:c4:37:0c:83:d5:
         86:f4:af:d7:c2:2f:94:e5:b0:1b:bc:53:1e:2e:c3:17:aa:f1:
         94:b1:94:48:79:6f:70:9e:13:06:f1:41:89:ce:8a:d6:9a:71:
         36:6f:7a:1a:93:56:e0:31:84:55:d8:fb:9d:d1:82:d2:77:de:
         a4:b6:20:85:10:14:f7:db:7e:43:30:8b:a3:6d:c3:da:b3:c8:
         56:9e:61:6a:fd:7b:bd:90:57:52:4c:5d:14:98:ce:54:fd:cb:
         14:2b:5b:2a:29:0f:6e:59:c1:8f:52:0b:86:89:d7:74:7d:91:
         0c:20:c2:f8:51:ea:6a:56:38:bf:3b:e3:41:b8:3d:56:54:49:
         ff:c1:66:7d:50:d8:94:33:59:27:a2:5e:09:9e:47:88:0f:d6:
         7a:b2:6a:71:9a:a5:ff:a3:07:75:8c:a8:20:bf:2b:86:19:67:
         66:e4:f2:51:7f:5f:09:96:9d:c9:da:0f:9a:1e:aa:86:8c:31:
         d1:ad:05:0f:de:04:05:3b:f4:e4:2e:01:5c:22:70:d4:ea:07:
         df:74:42:17

pkcs7-signedData

1
- SHA1: nil
- 1.3.6.1.4.1.311.2.1.4
  - #0
    - 1.3.6.1.4.1.311.2.1.15
      - :
        00 3c 00 3c 00 3c 00 4f 00 62 00 73 00 6f 00 6c |.<.<.<.O.b.s.o.l| 00 65 00 74 00 65 00 3e 00 3e 00 3e |.e.t.e.>.>.> |
    - SHA1
      - d3 21 2d c7 e7 39 5c e6 86 86 58 93 ea 78 cb 24 |.!-..9\...X..x.$| 03 0a 5a aa |..Z. |
- Certificates
  - Certificate #0
    - 2
      - 38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: VeriSign, Inc.
        CN: VeriSign Time Stamping Services CA
      - 2007-06-15 00:00:00 UTC: 2012-06-14 23:59:59 UTC
      - Subject
        C: US
        O: VeriSign, Inc.
        CN: VeriSign Time Stamping Services Signer - G2
      - #5
        rsaEncryption: nil
        C4:B5:F2:52:15:BC:88:86:60:29:16:4A:5B:2F:4B:91:
        6B:87:91:F3:35:54:58:35:EA:D1:36:5E:62:4D:52:51:
        34:71:C2:7B:66:1D:89:C8:DD:2A:C4:6A:0A:F6:37:D9:
        98:74:91:F6:92:AE:B0:B5:76:96:F1:A9:4A:63:45:47:
        2E:6B:0B:92:4E:4B:2B:8C:EE:58:4A:8B:D4:07:E4:1A:
        2C:F8:82:AA:58:D9:CD:42:F3:2D:C0:75:DE:8D:AB:C7:
        8E:1D:9A:6C:4C:08:95:1E:DE:DB:EF:67:E1:72:C2:49:
        C2:9E:60:3C:E1:E2:BE:16:A3:63:78:69:14:7B:AD:2D: 0x010001
      - X509v3 extensions
        authorityInfoAccess
        OCSP: http://ocsp.verisign.com
        basicConstraints
        true
        nil
        crlDistributionPoints: http://crl.verisign.com/tss-ca.crl
        extendedKeyUsage: true, timeStamping
        keyUsage: true, 0xc0
        subjectAltName
        CN: TSA1-2
    - RSA-SHA1:
```
50 c5 4b c8 24 80 df e4  0d 24 c2 de 1a b1 a1 02  |P.K.$....$......|
a1 a6 82 2d 0c 83 15 81  37 0a 82 0e 2c b0 5a 17  |...-....7...,.Z.|
61 b5 d8 05 fe 88 db f1  91 91 b3 56 1a 40 a6 eb  |a..........V.@..|
92 be 38 39 b0 75 36 74  3a 98 4f e4 37 ba 99 89  |..89.u6t:.O.7...|
ca 95 42 1d b0 b9 c7 a0  8d 57 e0 fa d5 64 04 42  |..B......W...d.B|
35 4e 01 d1 33 a2 17 c8  4d aa 27 c7 f2 e1 86 4c  |5N..3...M.'....L|
02 38 4d 83 78 c6 fc 53  e0 eb e0 06 87 dd a4 96  |.8M.x..S........|
9e 5e 0c 98 e2 a5 be bf  82 85 c3 60 e1 df ad 28  |.^.........`...(|
d8 c7 a5 4b 64 da c7 1b  5b bd ac 39 08 d5 38 22  |...Kd...[..9..8"|
a1 33 8b 2f 8a 9a eb bc  07 21 3f 44 41 09 07 b5  |.3./.....!?DA...|
65 1c 24 bc 48 d3 44 80  eb a1 cf c9 02 b4 14 cf  |e.$.H.D.........|
54 c7 16 a3 80 5c f9 79  3e 5d 72 7d 88 17 9e 2c  |T....\.y>]r}...,|
43 a2 ca 53 ce 7d 3d f6  2a 3a b8 4f 94 00 a5 6d  |C..S.}=.*:.O...m|
0a 83 5d f9 5e 53 f4 18  b3 57 0f 70 c3 fb f5 ad  |..].^S...W.p....|
95 a0 0e 17 de c4 16 80  60 c9 0f 2b 6e 86 04 f1  |........`..+n...|
eb f4 78 27 d1 05 c5 ee  34 5b 5e b9 49 32 f2 33  |..x'....4[^.I2.3|
```
  - Certificate #1
    - 2
      - 47:BF:19:95:DF:8D:52:46:43:F7:DB:6D:48:0D:31:A4
      - RSA-SHA1: nil
      - Issuer
        C: ZA
        ST: Western Cape
        L: Durbanville
        O: Thawte
        OU: Thawte Certification
        CN: Thawte Timestamping CA
      - 2003-12-04 00:00:00 UTC: 2013-12-03 23:59:59 UTC
      - Subject
        C: US
        O: VeriSign, Inc.
        CN: VeriSign Time Stamping Services CA
      - #5
        rsaEncryption: nil
        A9:CA:B2:A4:CC:CD:20:AF:0A:7D:89:AC:87:75:F0:B4:
        4E:F1:DF:C1:0F:BF:67:61:BD:A3:64:1C:DA:BB:F9:CA:
        33:AB:84:30:89:58:7E:8C:DB:6B:DD:36:9E:0F:BF:D1:
        EC:78:F2:77:A6:7E:6F:3C:BF:93:AF:0D:BA:68:F4:6C:
        94:CA:BD:52:2D:AB:48:3D:F5:B6:D5:5D:5F:1B:02:9F:
        FA:2F:6B:1E:A4:F7:A3:9A:A6:1A:C8:02:E1:7F:4C:52:
        E3:0E:60:EC:40:1C:7E:B9:0D:DE:3F:C7:B4:DF:87:BD:
        5F:7A:6A:31:2E:03:99:81:13:A8:47:20:CE:31:73:0D:
        57:2D:CD:78:34:33:95:12:99:12:B9:DE:68:2F:AA:E6:
        E3:C2:8A:8C:2A:C3:8B:21:87:66:BD:83:58:57:6F:75:
        BF:3C:AA:26:87:5D:CA:10:15:3C:9F:84:EA:54:C1:0A:
        6E:C4:FE:C5:4A:DD:B9:07:11:97:22:7C:DB:3E:27:D1:
        1E:78:EC:9F:31:C9:F1:E6:22:19:DB:C4:B3:47:43:9A:
        1A:5F:A0:1E:90:E4:5E:F5:EE:7C:F1:7D:AB:62:01:8F:
        F5:4D:0B:DE:D0:22:56:A8:95:CD:AE:88:76:AE:EE:BA:
        0D:F3:E4:4D:D9:A0:FB:68:A0:AE:14:3B:B3:87:C1:BB: 0x010001
      - X509v3 extensions
        authorityInfoAccess
        OCSP: http://ocsp.verisign.com
        basicConstraints
        true
        true: 0
        crlDistributionPoints: http://crl.verisign.com/ThawteTimestampingCA.crl
        extendedKeyUsage: timeStamping
        keyUsage: true, 6
        subjectAltName
        CN: TSA2048-1-53
    - RSA-SHA1:
```
4a 6b f9 ea 58 c2 44 1c  31 89 79 99 2b 96 bf 82  |Jk..X.D.1.y.+...|
ac 01 d6 1c 4c cd b0 8a  58 6e df 08 29 a3 5e c8  |....L...Xn..).^.|
ca 93 13 e7 04 52 0d ef  47 27 2f 00 38 b0 e4 c9  |.....R..G'/.8...|
93 4e 9a d4 22 62 15 f7  3f 37 21 4f 70 31 80 f1  |.N.."b..?7!Op1..|
8b 38 87 b3 e8 e8 97 00  fe cf 55 96 4e 24 d2 a9  |.8........U.N$..|
27 4e 7a ae b7 61 41 f3  2a ce e7 c9 d9 5e dd bb  |'Nz..aA.*....^..|
2b 85 3e b5 9d b5 d9 e1  57 ff be b4 c5 7e f5 cf  |+.>.....W....~..|
0c 9e f0 97 fe 2b d3 3b  52 1b 1b 38 27 f7 3f 4a  |.....+.;R..8'.?J|
```
  - Certificate #2
    - 2
      - 65:52:26:E1:B2:2E:18:E1:59:0F:29:85:AC:22:E7:5C
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: VeriSign, Inc.
        OU: Class 3 Public Primary Certification Authority
      - 2009-05-21 00:00:00 UTC: 2019-05-20 23:59:59 UTC
      - Subject
        C: US
        O: VeriSign, Inc.
        OU: VeriSign Trust Network
        OU: Terms of use at https://www.verisign.com/rpa (c)09
        CN: VeriSign Class 3 Code Signing 2009-2 CA
      - #5
        rsaEncryption: nil
        BE:67:1D:B4:60:AA:10:49:6F:56:17:7C:66:C9:5E:86:
        0D:D5:F1:AC:A7:71:83:8E:8B:89:F8:88:04:89:15:06:
        BA:2D:84:21:95:E4:D1:9C:50:4C:FB:D2:22:BD:DA:F2:
        B2:35:3B:1E:8F:C3:09:FB:FC:13:2E:5A:BF:89:7C:3D:
        3B:25:1E:F6:F3:58:7B:9C:F4:01:B5:C6:0A:B8:80:CE:
        BE:27:74:61:67:27:4D:6A:E5:EC:81:61:58:79:A3:E0:
        17:10:12:15:27:B0:E1:4D:34:7F:2B:47:20:44:B9:DE:
        66:24:66:8A:CD:4F:BA:1F:C5:38:C8:54:90:E1:72:F6:
        19:66:75:6A:B9:49:68:CF:38:79:0D:AA:30:A8:DB:2C:
        60:48:9E:D7:AA:14:01:A9:83:D7:38:91:30:39:13:96:
        03:3A:7C:40:54:B6:AD:E0:2F:1B:83:DC:A8:11:52:3E:
        02:B3:D7:2B:FD:21:B6:A7:5C:A3:0F:0B:A9:A6:10:50:
        0E:34:2E:4D:A7:CE:C9:5E:25:D4:8C:BC:F3:6E:7C:29:
        BC:01:5D:FC:31:87:5A:D5:8C:85:67:58:88:19:A0:BF:
        35:F0:EA:2B:A3:21:E7:90:F6:83:E5:A8:ED:60:78:5E:
        7B:60:83:FD:57:0B:5D:41:0D:63:54:60:D6:43:21:EF: 0x010001
      - X509v3 extensions
        basicConstraints
        true
        true: 0
        certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://www.verisign.com/cps
        id-qt-unotice: https://www.verisign.com/rpa
        keyUsage: true, 6
        1.3.6.1.5.5.7.1.12
        image/gif
        SHA1:
        8f e5 d3 1a 86 ac 8d 8e 6b c3 cf 80 6a d4 48 18 |........k...j.H.| 2c 7b 19 2e |,{.. |
        http://logo.verisign.com/vslogo.gif
        extendedKeyUsage
        clientAuth: codeSigning
        authorityInfoAccess
        OCSP: http://ocsp.verisign.com
        crlDistributionPoints: http://crl.verisign.com/pca3.crl
        subjectAltName
        CN: Class3CA2048-1-55
        subjectKeyIdentifier:
        97 d0 6b a8 26 70 c8 a1 3f 94 1f 08 2d c4 35 9b |..k.&p..?...-.5.| a4 a1 1e f2 |.... |
    - RSA-SHA1:
```
8b 03 c0 dd 94 d8 41 a2  61 69 b0 15 a8 78 c7 30  |......A.ai...x.0|
c6 90 3c 7e 42 f7 24 b6  e4 83 73 17 04 7f 04 10  |..<~B.$...s.....|
9c a1 e2 fa 81 2f eb c0  ca 44 e7 72 e0 50 b6 55  |...../...D.r.P.U|
10 20 83 6e 96 92 e4 9a  51 6a b4 37 31 dc a5 2d  |. .n....Qj.71..-|
eb 8c 00 c7 1d 4f e7 4d  32 ba 85 f8 4e be fa 67  |.....O.M2...N..g|
55 65 f0 6a be 7a ca 64  38 1a 10 10 78 45 76 31  |Ue.j.z.d8...xEv1|
f3 86 7a 03 0f 60 c2 b3  5d 9d f6 8b 66 76 82 1b  |..z..`..]...fv..|
59 e1 83 e5 bd 49 a5 38  56 e5 de 41 77 0e 58 0f  |Y....I.8V..Aw.X.|
```
  - Certificate #3
    - 2
      - 7E:28:2B:07:49:66:9B:59:5F:79:49:FF:06:13:4E:92
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: VeriSign, Inc.
        OU: VeriSign Trust Network
        OU: Terms of use at https://www.verisign.com/rpa (c)09
        CN: VeriSign Class 3 Code Signing 2009-2 CA
      - 2009-09-05 00:00:00 UTC: 2012-10-01 23:59:59 UTC
      - Subject
        C: US
        ST: California
        O: Adobe Systems Incorporated
        OU: Digital ID Class 3 - Microsoft Software Validation v2
        OU: Universal Client
        CN: Adobe Systems Incorporated
      - #5
        rsaEncryption: nil
        DA:35:59:20:61:DC:D2:69:9B:47:B8:AF:75:51:8A:6D:
        E9:17:C4:46:50:A1:EE:23:6B:92:25:4B:63:C7:46:D3:
        18:C6:88:B0:98:FF:7C:30:1E:CD:CE:3E:F0:F9:24:1D:
        4C:2A:D2:3F:21:3B:E8:CA:E5:B5:19:0F:6E:58:A2:2F:
        55:01:DC:2D:80:12:F9:B4:B5:59:F9:E6:9C:7A:8D:59:
        C7:37:47:99:AB:26:85:A4:94:00:04:01:81:F4:84:A3:
        64:85:5D:B6:37:BC:24:00:E4:12:89:42:68:8F:9B:75:
        8F:EF:29:3E:31:99:6C:F1:C3:B8:93:65:DE:7C:74:C1: 0x010001
      - X509v3 extensions
        basicConstraints
        nil
        keyUsage: true, 0x80
        crlDistributionPoints: http://csc3-2009-2-crl.verisign.com/CSC3-2009-2.crl
        certificatePolicies
        2.16.840.1.113733.1.7.23.3
        id-qt-cps: https://www.verisign.com/rpa
        extendedKeyUsage: codeSigning
        authorityInfoAccess
        #0
        OCSP: http://ocsp.verisign.com
        caIssuers: http://csc3-2009-2-aia.verisign.com/CSC3-2009-2.cer
        authorityKeyIdentifier:
        97 d0 6b a8 26 70 c8 a1 3f 94 1f 08 2d c4 35 9b |..k.&p..?...-.5.| a4 a1 1e f2 |.... |
        nsCertType: 0x10
        1.3.6.1.4.1.311.2.1.27
        false: true
    - RSA-SHA1:
```
b6 68 e7 1f 43 30 c9 1e  d0 b4 c9 12 ec 03 4b e6  |.h..C0........K.|
dd cd 14 6f 5b 6e 85 63  11 5e 64 a8 7a 33 72 9a  |...o[n.c.^d.z3r.|
94 5b fb cc 74 9b fb 46  ef 4a 02 ef 92 8f 84 e2  |.[..t..F.J......|
ce c4 37 0c 83 d5 86 f4  af d7 c2 2f 94 e5 b0 1b  |..7......../....|
bc 53 1e 2e c3 17 aa f1  94 b1 94 48 79 6f 70 9e  |.S.........Hyop.|
13 06 f1 41 89 ce 8a d6  9a 71 36 6f 7a 1a 93 56  |...A.....q6oz..V|
e0 31 84 55 d8 fb 9d d1  82 d2 77 de a4 b6 20 85  |.1.U......w... .|
10 14 f7 db 7e 43 30 8b  a3 6d c3 da b3 c8 56 9e  |....~C0..m....V.|
61 6a fd 7b bd 90 57 52  4c 5d 14 98 ce 54 fd cb  |aj.{..WRL]...T..|
14 2b 5b 2a 29 0f 6e 59  c1 8f 52 0b 86 89 d7 74  |.+[*).nY..R....t|
7d 91 0c 20 c2 f8 51 ea  6a 56 38 bf 3b e3 41 b8  |}.. ..Q.jV8.;.A.|
3d 56 54 49 ff c1 66 7d  50 d8 94 33 59 27 a2 5e  |=VTI..f}P..3Y'.^|
09 9e 47 88 0f d6 7a b2  6a 71 9a a5 ff a3 07 75  |..G...z.jq.....u|
8c a8 20 bf 2b 86 19 67  66 e4 f2 51 7f 5f 09 96  |.. .+..gf..Q._..|
9d c9 da 0f 9a 1e aa 86  8c 31 d1 ad 05 0f de 04  |.........1......|
05 3b f4 e4 2e 01 5c 22  70 d4 ea 07 df 74 42 17  |.;....\"p....tB.|
```
- Signer
  - 1
  - unnamed
    - #0
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)09
      - CN: VeriSign Class 3 Code Signing 2009-2 CA
    - 7E:28:2B:07:49:66:9B:59:5F:79:49:FF:06:13:4E:92
  - SHA1: nil
  - #3
    - contentType: 1.3.6.1.4.1.311.2.1.4
    - 1.3.6.1.4.1.311.2.1.11: msCodeInd
    - messageDigest:
```
2d f0 17 c5 e5 5b 8c f1  a5 db 63 6f c3 13 a0 4f  |-....[....co...O|
ba d3 7e b0                                       |..~.            |
```
    - 1.3.6.1.4.1.311.2.1.12:
```
00 41 00 64 00 6f 00 62  00 65 00 20 00 41 00 49  |.A.d.o.b.e. .A.I|
00 52 00 20 00 32 00 2e  00 30 00 2e 00 32        |.R. .2...0...2  |
```
  - rsaEncryption:
```
38 6f 47 6f e2 20 4a f0  a0 c3 97 5b cc b6 ba b5  |8oGo. J....[....|
75 bc 4a 34 8b e2 34 67  46 fd 3d 9b ad 8b d2 5d  |u.J4..4gF.=....]|
b2 f8 db fa 16 6d e3 92  6e f2 b3 18 b7 76 39 b4  |.....m..n....v9.|
c1 c6 4c fe 21 4d 8d 1f  a8 e6 82 98 bd 57 b5 14  |..L.!M.......W..|
21 ba ec 80 64 76 3d dc  10 aa fc 74 f0 0e a7 60  |!...dv=....t...`|
17 02 99 6d 26 ac 66 6f  55 1c d9 3d 98 70 6f c4  |...m&.foU..=.po.|
89 47 9a bf a2 ec 9c 81  6c c2 6b b6 6a 0c d7 9f  |.G......l.k.j...|
4c 5a c0 ad 4e 61 3e ec  0a 07 6d 95 86 c3 dc bc  |LZ..Na>...m.....|
```
  - countersignature
    - 1
      - unnamed
        #0
        C: US
        O: VeriSign, Inc.
        CN: VeriSign Time Stamping Services CA
        38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
      - SHA1: nil
      - #2
        contentType: pkcs7-data
        signingTime: 2010-05-28 23:53:43 UTC
        messageDigest:
        a5 c7 fb f1 8b 67 0a 78 ea 06 61 f3 d0 2a 2f c9 |.....g.x..a..*/.| 71 cd 6c 8c |q.l. |
      - rsaEncryption:
        83 36 22 c8 0f 2c 87 38 62 1e 9b aa 97 f8 42 6d |.6"..,.8b.....Bm| fe 55 13 1b 2f 8c e2 0f be 61 da 9c c5 83 35 25 |.U../....a....5%| 2e 79 07 06 ba f3 46 d5 8e 56 4f aa 62 4a 8f 11 |.y....F..VO.bJ..| 18 ee 03 70 03 1e 47 45 39 b5 16 e0 0b 39 df 75 |...p..GE9....9.u| 85 27 c0 a2 19 84 da 0b d0 1c 86 6c 5b ca f3 c8 |.'.........l[...| 73 90 8d 7e 4a fb 06 a1 60 f1 ec 8f 53 20 33 53 |s..~J...`...S 3S| fc 14 7c 89 bc e4 df 89 4f ff 8b 20 bc ca f0 8e |..|.....O.. ....| 94 0d 32 c7 1c 27 c8 8d ae 69 12 27 be 34 e2 ec |..2..'...i.'.4..|

show previews

offset	size	type	comment
0	122880	EXE	05/28/2010 23:52:23	#
15c1	15	HTM		#
1e000	5504	PKCS7	Authenticode Signature	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

_install.exe- naib.exe - Adobe Bootstrapping Utility

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

Signers (1)

Certificates (4)

_install.exe
- naib.exe - Adobe Bootstrapping Utility