filenamewic_x64_enu.exe
size1911592 (0x1d2b28)
md52eb787be1deb373efc259d1f42146419
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xc8

Rich Header

lib idversiontimes used
93217915
10107
95219020
9421791
9021791

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections3
TimeDateStamp0x421e2ea6
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0xd0f
Magic0x10b
LinkerVersion7.10
SizeOfCode0x7a00
SizeOfInitializedData0x11c00
SizeOfUninitializedData0
AddressOfEntryPoint0x5972
BaseOfCode0x2000
BaseOfData0xa000
ImageBase0x1000000
SectionAlignment0x2000
FileAlignment0x200
OperatingSystemVersion5.2
ImageVersion5.2
SubsystemVersion4.0
Reserved10
SizeOfImage0x1e000
SizeOfHeaders0x400
CheckSum0x1d907c
Subsystem2
DllCharacteristics0x8400
SizeOfStackReserve0x40000
SizeOfStackCommit0x2000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS SFX CAB Archive file

Sections

namevavsizeraw sizeflags
.text0x20000x78a00x7a00R-X CODE
.data0xa0000x110d40x200RW- IDATA
.rsrc0x1c0000x9880x1c9000R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x8e400xa0
RESOURCE0x1c0000x988
EXCEPTION00
SECURITY0x1d10000x1b28
BASERELOC00
DEBUG0x21d00x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x20000x1c8
Delay_IAT00
CLR_Header00
typenamesizecp
DIALOG#1002820
DIALOG#1072240
STRING#17300
VERSION#19040
idlangstring
11033File is corrupt
21033Extraction Complete
31033Extraction Failed
41033Extracting File:
51033Choose Directory For Extracted Files
61033To Directory:
71033Setup was unable to shutdown system. Please shutdown your system manually.
81033Unable to find a volume for file extraction. Please verify that you have proper permissions.
91033Unable to find a volume with enough disk space for file extraction.
module_namehintordfunction_name
KERNEL32.dll331GetDriveTypeA
KERNEL32.dll524HeapFree
KERNEL32.dll234FormatMessageA
KERNEL32.dll583LeaveCriticalSection
KERNEL32.dll124DeleteFileA
KERNEL32.dll143EnterCriticalSection
KERNEL32.dll849TerminateProcess
KERNEL32.dll899WaitForMultipleObjects
KERNEL32.dll74CreateEventW
KERNEL32.dll779SetEvent
KERNEL32.dll841Sleep
KERNEL32.dll776SetEnvironmentVariableA
KERNEL32.dll336GetEnvironmentVariableA
KERNEL32.dll905WideCharToMultiByte
KERNEL32.dll518HeapAlloc
KERNEL32.dll797SetLastError
KERNEL32.dll919WriteFile
KERNEL32.dll612MoveFileA
KERNEL32.dll175ExitProcess
KERNEL32.dll122DeleteCriticalSection
KERNEL32.dll229FlushFileBuffers
KERNEL32.dll479GetVersionExA
KERNEL32.dll901WaitForSingleObject
KERNEL32.dll627OpenEventA
KERNEL32.dll314GetCurrentProcess
KERNEL32.dll342GetFileAttributesA
KERNEL32.dll264GetCommandLineA
KERNEL32.dll373GetModuleFileNameA
KERNEL32.dll77CreateFileA
KERNEL32.dll211FindNextFileA
KERNEL32.dll201FindFirstFileA
KERNEL32.dll61CopyFileA
KERNEL32.dll782SetFileAttributesA
KERNEL32.dll846SystemTimeToFileTime
KERNEL32.dll446GetSystemTime
KERNEL32.dll325GetDiskFreeSpaceA
KERNEL32.dll661QueryDosDeviceA
KERNEL32.dll312GetCurrentDirectoryA
KERNEL32.dll773SetEndOfFile
KERNEL32.dll788SetFileTime
KERNEL32.dll592LocalFileTimeToFileTime
KERNEL32.dll136DosDateTimeToFileTime
KERNEL32.dll338GetExitCodeProcess
KERNEL32.dll96CreateProcessA
KERNEL32.dll178ExpandEnvironmentStringsA
KERNEL32.dll347GetFileSize
KERNEL32.dll105CreateThread
KERNEL32.dll73CreateEventA
KERNEL32.dll411GetProcessHeap
KERNEL32.dll538InitializeCriticalSectionAndSpinCount
KERNEL32.dll375GetModuleHandleA
KERNEL32.dll665QueryPerformanceCounter
KERNEL32.dll318GetCurrentThreadId
KERNEL32.dll315GetCurrentProcessId
KERNEL32.dll448GetSystemTimeAsFileTime
KERNEL32.dll829SetUnhandledExceptionFilter
KERNEL32.dll46CloseHandle
KERNEL32.dll131DeviceIoControl
KERNEL32.dll441GetSystemDirectoryA
KERNEL32.dll584LoadLibraryA
KERNEL32.dll408GetProcAddress
KERNEL32.dll239FreeLibrary
KERNEL32.dll778SetErrorMode
KERNEL32.dll469GetTickCount
KERNEL32.dll69CreateDirectoryA
KERNEL32.dll361GetLastError
KERNEL32.dll698RemoveDirectoryA
KERNEL32.dll613MoveFileExA
KERNEL32.dll784SetFilePointer
KERNEL32.dll197FindClose
KERNEL32.dll683ReadFile
msvcrt.dll776strchr
msvcrt.dll517_strnicmp
msvcrt.dll513_stricmp
msvcrt.dll788strrchr
msvcrt.dll515_strlwr
msvcrt.dll786strncpy
msvcrt.dll790strstr
msvcrt.dll491_snprintf
msvcrt.dll771sprintf
ADVAPI32.dll29AllocateAndInitializeSid
ADVAPI32.dll281GetTokenInformation
ADVAPI32.dll246GetLengthSid
ADVAPI32.dll308InitiateSystemShutdownA
ADVAPI32.dll160CryptReleaseContext
ADVAPI32.dll150CryptGenRandom
ADVAPI32.dll133CryptAcquireContextA
ADVAPI32.dll559SetSecurityDescriptorDacl
ADVAPI32.dll16AddAccessAllowedAce
ADVAPI32.dll305InitializeAcl
ADVAPI32.dll306InitializeSecurityDescriptor
ADVAPI32.dll426OpenProcessToken
USER32.dll657ShowWindow
USER32.dll565SendDlgItemMessageA
USER32.dll570SendMessageA
USER32.dll158DialogBoxParamA
USER32.dll458LoadStringA
USER32.dll198EndDialog
USER32.dll613SetParent
USER32.dll478MessageBoxA
ntdll.dll374NtShutdownSystem
ntdll.dll121NtAdjustPrivilegesToken
ntdll.dll136NtClose
ntdll.dll243NtOpenProcessToken
COMCTL32.dll17
SHELL32.dll121SHBrowseForFolderA
SHELL32.dll188SHGetPathFromIDListA

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionSelf-Extracting Cabinet
FileVersion6.1.0022.4 (SRV03_QFE.031113-0918)
InternalNameSFXCAB.EXE
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenameSFXCAB.EXE
ProductNameMicrosoft® Windows® Operating System
ProductVersion6.1.0022.4

VS_FIXEDFILEINFO

FileVersion6.1.22.4
ProductVersion6.1.22.4
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/OU=Copyright (c) 2000 Microsoft Corp./CN=Microsoft Code Signing PCA
serial: 61469ECB000400000065

Certificates (5)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec  4 00:00:00 2003 GMT
            Not After : Dec  3 23:59:59 2013 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:b2:a4:cc:cd:20:af:0a:7d:89:ac:87:75:
                    f0:b4:4e:f1:df:c1:0f:bf:67:61:bd:a3:64:1c:da:
                    bb:f9:ca:33:ab:84:30:89:58:7e:8c:db:6b:dd:36:
                    9e:0f:bf:d1:ec:78:f2:77:a6:7e:6f:3c:bf:93:af:
                    0d:ba:68:f4:6c:94:ca:bd:52:2d:ab:48:3d:f5:b6:
                    d5:5d:5f:1b:02:9f:fa:2f:6b:1e:a4:f7:a3:9a:a6:
                    1a:c8:02:e1:7f:4c:52:e3:0e:60:ec:40:1c:7e:b9:
                    0d:de:3f:c7:b4:df:87:bd:5f:7a:6a:31:2e:03:99:
                    81:13:a8:47:20:ce:31:73:0d:57:2d:cd:78:34:33:
                    95:12:99:12:b9:de:68:2f:aa:e6:e3:c2:8a:8c:2a:
                    c3:8b:21:87:66:bd:83:58:57:6f:75:bf:3c:aa:26:
                    87:5d:ca:10:15:3c:9f:84:ea:54:c1:0a:6e:c4:fe:
                    c5:4a:dd:b9:07:11:97:22:7c:db:3e:27:d1:1e:78:
                    ec:9f:31:c9:f1:e6:22:19:db:c4:b3:47:43:9a:1a:
                    5f:a0:1e:90:e4:5e:f5:ee:7c:f1:7d:ab:62:01:8f:
                    f5:4d:0b:de:d0:22:56:a8:95:cd:ae:88:76:ae:ee:
                    ba:0d:f3:e4:4d:d9:a0:fb:68:a0:ae:14:3b:b3:87:
                    c1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/ThawteTimestampingCA.crl

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA2048-1-53
    Signature Algorithm: sha1WithRSAEncryption
         4a:6b:f9:ea:58:c2:44:1c:31:89:79:99:2b:96:bf:82:ac:01:
         d6:1c:4c:cd:b0:8a:58:6e:df:08:29:a3:5e:c8:ca:93:13:e7:
         04:52:0d:ef:47:27:2f:00:38:b0:e4:c9:93:4e:9a:d4:22:62:
         15:f7:3f:37:21:4f:70:31:80:f1:8b:38:87:b3:e8:e8:97:00:
         fe:cf:55:96:4e:24:d2:a9:27:4e:7a:ae:b7:61:41:f3:2a:ce:
         e7:c9:d9:5e:dd:bb:2b:85:3e:b5:9d:b5:d9:e1:57:ff:be:b4:
         c5:7e:f5:cf:0c:9e:f0:97:fe:2b:d3:3b:52:1b:1b:38:27:f7:
         3f:4a
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Validity
            Not Before: Dec  4 00:00:00 2003 GMT
            Not After : Dec  3 23:59:59 2008 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:50:28:48:dd:d3:68:7a:84:18:44:66:75:5d:
                    7e:c4:b8:9f:63:26:ff:3d:43:9c:7c:11:38:10:25:
                    55:73:d9:75:27:69:fd:4e:b9:20:5c:d3:0a:f9:a0:
                    1b:2a:ed:55:56:21:61:d8:1e:db:e4:bc:33:6b:c7:
                    ef:dd:a3:37:65:8e:1b:93:0c:b6:53:1e:5c:7c:66:
                    35:5f:05:8a:45:fe:76:4e:df:53:80:a2:81:20:9d:
                    ae:88:5c:a2:08:f7:e5:30:f9:ee:22:37:4c:42:0a:
                    ce:df:c6:1f:c4:d6:55:e9:81:3f:b5:52:a3:2c:aa:
                    01:7a:f2:a2:aa:8d:35:fe:9f:e6:5d:6a:05:9f:3d:
                    6b:e3:bf:96:c0:fe:cc:60:f9:40:e7:07:a0:44:eb:
                    81:51:6e:a5:2a:f2:b6:8a:10:28:ed:8f:dc:06:a0:
                    86:50:9a:7b:4a:08:0d:30:1d:ca:10:9e:6b:f7:e9:
                    58:ae:04:a9:40:99:b2:28:e8:8f:16:ac:3c:e3:53:
                    6f:4b:d3:35:9d:b5:6f:64:1d:b3:96:2c:bb:3d:e7:
                    79:eb:6d:7a:f9:16:e6:26:ad:af:ef:99:53:b7:40:
                    2c:95:b8:79:aa:fe:d4:52:ab:29:74:7e:42:ec:39:
                    1e:a2:6a:16:e6:59:bb:24:68:d8:00:80:43:10:87:
                    80:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/tss-ca.crl

            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA2048-1-54
    Signature Algorithm: sha1WithRSAEncryption
         87:78:70:da:4e:52:01:20:5b:e0:79:c9:82:30:c4:fd:b9:19:
         96:bd:91:00:c3:bd:cd:cd:c6:f4:0e:d8:ff:f9:4d:c0:33:62:
         30:11:c5:f5:74:1b:d4:92:de:5f:9c:20:13:b1:7c:45:be:50:
         cd:83:e7:80:17:83:a7:27:93:67:13:46:fb:ca:b8:98:41:03:
         cc:9b:51:5b:05:8b:7f:a8:6f:f3:1b:50:1b:24:2e:f2:69:8d:
         6c:22:f7:bb:ca:16:95:ed:0c:74:c0:68:77:d9:eb:99:62:87:
         c1:73:90:f8:89:74:7a:23:ab:a3:98:7b:97:b1:f7:8f:29:71:
         4d:2e:75:1b:48:41:da:f0:b5:0d:20:54:d6:77:a0:97:82:63:
         69:fd:09:cf:8a:f0:75:bb:09:9b:d9:f9:11:55:26:9a:61:32:
         be:7a:02:b0:7b:86:be:a2:c3:8b:22:2c:78:d1:35:76:bc:92:
         73:5c:f9:b9:e6:4c:15:0a:23:cc:e4:d2:d4:34:2e:49:40:15:
         3c:0f:60:7a:24:c6:a5:66:ef:96:cf:70:eb:3e:e7:f4:0d:7e:
         dc:d1:7c:a3:76:71:69:c1:9c:4f:47:30:35:21:b1:a2:af:1a:
         62:3c:2b:d9:8e:aa:2a:07:7b:d8:18:b3:5c:7b:e2:9d:a5:6f:
         fe:3c:89:ad
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
        Signature Algorithm: md5WithRSAEncryption
        Issuer: OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
        Validity
            Not Before: Jan 10 07:00:00 1997 GMT
            Not After : Dec 31 07:00:00 2020 GMT
        Subject: OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:02:bd:c1:70:e6:3b:f2:4e:1b:28:9f:97:78:
                    5e:30:ea:a2:a9:8d:25:5f:f8:fe:95:4c:a3:b7:fe:
                    9d:a2:20:3e:7c:51:a2:9b:a2:8f:60:32:6b:d1:42:
                    64:79:ee:ac:76:c9:54:da:f2:eb:9c:86:1c:8f:9f:
                    84:66:b3:c5:6b:7a:62:23:d6:1d:3c:de:0f:01:92:
                    e8:96:c4:bf:2d:66:9a:9a:68:26:99:d0:3a:2c:bf:
                    0c:b5:58:26:c1:46:e7:0a:3e:38:96:2c:a9:28:39:
                    a8:ec:49:83:42:e3:84:0f:bb:9a:6c:55:61:ac:82:
                    7c:a1:60:2d:77:4c:e9:99:b4:64:3b:9a:50:1c:31:
                    08:24:14:9f:a9:e7:91:2b:18:e6:3d:98:63:14:60:
                    58:05:65:9f:1d:37:52:87:f7:a7:ef:94:02:c6:1b:
                    d3:bf:55:45:b3:89:80:bf:3a:ec:54:94:4e:ae:fd:
                    a7:7a:6d:74:4e:af:18:cc:96:09:28:21:00:57:90:
                    60:69:37:bb:4b:12:07:3c:56:ff:5b:fb:a4:66:0a:
                    08:a6:d2:81:56:57:ef:b6:3b:5e:16:81:77:04:da:
                    f6:be:ae:80:95:fe:b0:cd:7f:d6:a7:1a:72:5c:3c:
                    ca:bc:f0:08:a3:22:30:b3:06:85:c9:b3:20:77:13:
                    85:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            2.5.29.1: 
                0....[.p.ir.#Q~..M....r0p1+0)..U..."Copyright (c) 1997 Microsoft Corp.1.0...U....Microsoft Corporation1!0...U....Microsoft Root Authority......<<...>.c..@
    Signature Algorithm: md5WithRSAEncryption
         95:e8:0b:c0:8d:f3:97:18:35:ed:b8:01:24:d8:77:11:f3:5c:
         60:32:9f:9e:0b:cb:3e:05:91:88:8f:c9:3a:e6:21:f2:f0:57:
         93:2c:b5:a0:47:c8:62:ef:fc:d7:cc:3b:3b:5a:a9:36:54:69:
         fe:24:6d:3f:c9:cc:aa:de:05:7c:dd:31:8d:3d:9f:10:70:6a:
         bb:fe:12:4f:18:69:c0:fc:d0:43:e3:11:5a:20:4f:ea:62:7b:
         af:aa:19:c8:2b:37:25:2d:be:65:a1:12:8a:25:0f:63:a3:f7:
         54:1c:f9:21:c9:d6:15:f3:52:ac:6e:43:32:07:fd:82:17:f8:
         e5:67:6c:0d:51:f6:bd:f1:52:c7:bd:e7:c4:30:fc:20:31:09:
         88:1d:95:29:1a:4d:d5:1d:02:a5:f1:80:e0:03:b4:5b:f4:b1:
         dd:c8:57:ee:65:49:c7:52:54:b6:b4:03:28:12:ff:90:d6:f0:
         08:8f:7e:b8:97:c5:ab:37:2c:e4:7a:e4:a8:77:e3:76:a0:00:
         d0:6a:3f:c1:d2:36:8a:e0:41:12:a8:35:6a:1b:6a:db:35:e1:
         d4:1c:04:e4:a8:45:04:c8:5a:33:38:6e:4d:1c:0d:62:b7:0a:
         a2:8c:d3:d5:54:3f:46:cd:1c:55:a6:70:db:12:3a:87:93:75:
         9f:a7:d2:a0
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
        Signature Algorithm: sha1WithRSA
        Issuer: OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
        Validity
            Not Before: Apr  4 17:44:14 2006 GMT
            Not After : Apr 26 07:00:00 2012 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Copyright (c) 2000 Microsoft Corp., CN=Microsoft Code Signing PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cc:20:8d:bc:df:ff:3e:50:ee:7a:c2:d4:24:
                    25:f6:76:ce:21:ff:cd:2a:56:4e:ca:9c:b7:82:b2:
                    35:79:2d:00:c4:a8:08:d5:63:c9:b7:a5:f6:e9:c1:
                    c1:d6:b1:8c:96:a2:07:fa:0f:b6:82:52:9a:eb:82:
                    c6:bd:10:c5:a8:c0:ee:6b:84:8e:53:1b:bb:50:fa:
                    64:01:89:c1:16:d4:82:68:00:40:78:44:f5:12:38:
                    4e:fb:63:51:e0:fa:3d:b9:e5:37:b1:df:63:07:23:
                    3b:71:40:34:47:f4:6b:ae:46:f5:27:73:1e:22:cb:
                    42:19:1e:51:b6:52:9a:d3:a3:d0:13:c6:19:3f:71:
                    06:6d:f2:95:21:44:5f:42:ed:c0:c9:99:64:20:b8:
                    c1:34:fc:a2:44:e6:7b:b2:1d:2f:b8:a6:de:f4:a1:
                    df:9b:21:0f:fe:58:31:41:55:38:7e:af:58:e7:e4:
                    ec:59:79:25:ab:f7:2a:2f:11:3f:38:78:3e:42:7f:
                    a7:68:e4:7e:22:68:17:e6:4a:92:c4:78:44:52:47:
                    a1:4f:84:89:93:9b:c0:67:7b:ea:09:fb:86:03:7d:
                    f6:99:71:3c:2b:a7:66:98:cc:df:2d:e2:2b:02:1a:
                    0f:34:48:65:f5:3c:12:af:f1:87:1c:1d:26:52:6f:
                    cc:03
                Exponent: 3 (0x3)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Code Signing
            2.5.29.1: 
                0....[.p.ir.#Q~..M....r0p1+0)..U..."Copyright (c) 1997 Microsoft Corp.1.0...U....Microsoft Corporation1!0...U....Microsoft Root Authority......<<...>.c..@
            1.3.6.1.4.1.311.21.1: 
                .....
            X509v3 Subject Key Identifier: 
                25:F8:2B:4B:5D:C8:72:54:AD:E5:F6:A0:2A:17:16:FB:C1:F9:53:81
            1.3.6.1.4.1.311.20.2: 
                .
.S.u.b.C.A
            X509v3 Key Usage: 
                Non Repudiation, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha1WithRSA
         63:e3:e0:f3:05:b8:b0:ea:0b:0b:34:d1:82:31:3e:89:62:45:
         d5:08:a7:f9:61:65:c8:2e:03:fa:38:48:41:cf:b5:f2:27:83:
         d3:e3:c5:56:53:a8:b5:19:ce:cc:e6:f1:a0:f9:56:b6:48:94:
         47:24:e5:a9:1f:dc:7a:d4:f6:16:7a:12:db:f3:90:1b:ec:08:
         5d:b3:85:90:b9:8c:58:bb:1c:cc:95:d3:95:94:33:f4:91:de:
         ff:88:9b:5e:4b:49:50:39:26:3a:20:1b:54:37:fc:7d:5c:15:
         93:c3:dc:1c:8e:f0:61:52:3c:e5:07:ed:66:ef:79:ec:8f:ce:
         57:63:65:95:18:49:a0:7a:df:65:b7:df:26:ae:fe:c8:12:b6:
         c6:a2:cc:c6:5f:8b:70:f3:ca:db:ab:82:6e:07:dc:65:19:b9:
         a8:f6:86:c2:09:42:98:f1:26:ac:69:7a:b1:c1:2b:a7:b0:66:
         1f:a5:af:87:08:6b:97:13:b8:b0:36:99:1e:05:a3:13:38:a3:
         c0:ac:30:3e:ba:21:d7:30:a6:ca:62:12:1c:af:57:8d:e5:f1:
         7a:11:ba:5e:3c:0c:37:f1:93:c1:92:88:4e:04:5a:05:5c:c7:
         cf:d6:a9:d9:e1:7d:91:78:27:fb:b4:6e:a5:8f:06:33:58:b1:
         5e:2a:11:0f
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:46:9e:cb:00:04:00:00:00:65
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Copyright (c) 2000 Microsoft Corp., CN=Microsoft Code Signing PCA
        Validity
            Not Before: Apr  4 19:43:46 2006 GMT
            Not After : Oct  4 19:53:46 2007 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Corporation
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:81:96:38:ae:5c:a2:f2:c1:df:de:d0:ab:95:
                    8d:d6:3c:9d:1f:8b:c3:5d:86:2e:5d:f0:b1:72:f5:
                    ab:ac:88:6a:b5:da:b1:22:7b:0b:c8:c8:a5:4b:91:
                    5e:22:13:e9:f9:f5:23:9d:b5:f4:6e:76:ae:ef:ee:
                    a4:3c:c7:c4:c0:59:5c:3f:ab:b3:73:33:26:a6:62:
                    81:61:79:a1:62:f4:6e:88:95:d0:6e:dd:c7:9f:d2:
                    a4:51:11:76:61:ba:70:8a:65:a1:96:16:89:a7:5d:
                    81:d0:44:66:e5:db:56:9e:40:ca:fc:dc:76:24:2e:
                    44:30:00:e5:d6:7d:7b:95:11:d5:58:1d:a3:e8:4f:
                    0b:c9:88:dc:a2:d6:53:99:6c:ca:63:ca:99:6a:9a:
                    92:5e:4c:4d:11:e8:2f:d3:5b:5b:5e:5f:52:a3:73:
                    2d:a5:bb:84:45:0d:8c:19:15:76:cb:08:da:9a:a6:
                    70:15:e8:4d:ec:69:fd:5d:b2:6b:8f:ed:29:51:37:
                    38:8b:c6:46:49:15:94:50:98:b0:f4:68:a4:d7:de:
                    09:71:67:74:9e:77:8c:1d:85:6b:97:ea:e7:5f:45:
                    cc:e0:e6:71:0d:d1:63:00:93:7b:31:98:8e:0b:b4:
                    13:bd:b3:d0:ee:f1:df:21:ee:a9:60:61:ee:37:43:
                    3d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Subject Key Identifier: 
                EE:D9:6B:A9:75:53:CD:4F:EE:1B:4E:19:06:1E:A3:9C:AB:CF:94:FD
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Authority Key Identifier: 
                keyid:25:F8:2B:4B:5D:C8:72:54:AD:E5:F6:A0:2A:17:16:FB:C1:F9:53:81
                DirName:/OU=Copyright (c) 1997 Microsoft Corp./OU=Microsoft Corporation/CN=Microsoft Root Authority
                serial:6A:0B:99:4F:C0:00:1D:AB:11:DA:C4:02:A1:66:27:BA

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/CodeSignPCA2.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/CodeSignPCA2.crt

    Signature Algorithm: sha1WithRSAEncryption
         38:d9:ef:95:38:9b:5c:98:14:5d:54:6e:69:df:02:c8:e7:b3:
         fb:d3:c2:4d:ad:2f:ab:7f:54:0d:da:32:b6:f8:6a:e6:0d:fb:
         21:1a:77:3e:a5:68:7a:b4:95:7e:8a:5c:f2:43:c4:83:9b:65:
         7d:88:50:51:7c:82:14:f5:83:73:d7:a2:be:5c:ca:02:70:ce:
         26:6c:17:bc:52:14:a5:89:c0:b7:e4:a1:cc:a1:75:9d:91:71:
         3d:1b:c0:56:00:56:b5:f8:84:26:da:5e:33:fb:d6:25:7a:5e:
         9a:da:a6:fb:f4:f2:41:1a:ac:55:46:ad:48:dc:91:38:13:58:
         09:49:f1:f3:31:87:1f:bc:04:8e:5b:12:65:03:e9:0b:51:d0:
         a1:0c:8a:99:bd:d9:c1:a8:d0:08:15:25:21:b5:b6:57:89:1c:
         d1:5b:86:35:a5:ca:fd:aa:87:ec:a9:37:3f:b7:43:6b:e3:20:
         f1:45:bc:7e:ae:e9:f1:55:b2:a1:48:bc:65:be:53:34:d9:c9:
         e8:06:63:04:06:78:6e:50:ff:48:bb:9b:ea:43:5a:87:db:ad:
         0a:80:f5:59:c5:2c:e4:e5:7f:5b:4a:e5:32:79:ee:22:85:92:
         0c:2d:b3:50:5b:c6:c2:40:58:58:ab:d2:cd:e3:2f:c1:cd:ec:
         6d:9f:37:79
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • : 
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • SHA1
          • 3c f3 7d da 40 af 1e 43  c3 e0 41 2a c5 aa 78 95  |<.}.@..C..A*..x.|
6e 5e e9 fc                                       |n^..            |
    • unnamed
      • Certificate #0
        • 2
          • 47:BF:19:95:DF:8D:52:46:43:F7:DB:6D:48:0D:31:A4
          • RSA-SHA1: nil
          • Issuer
            • C: ZA
            • ST: Western Cape
            • L: Durbanville
            • O: Thawte
            • OU: Thawte Certification
            • CN: Thawte Timestamping CA
          • 2003-12-04 00:00:00 UTC: 2013-12-03 23:59:59 UTC
          • Subject
            • C: US
            • O: VeriSign, Inc.
            • CN: VeriSign Time Stamping Services CA
          • #5
            • rsaEncryption: nil
            • A9:CA:B2:A4:CC:CD:20:AF:0A:7D:89:AC:87:75:F0:B4:
              4E:F1:DF:C1:0F:BF:67:61:BD:A3:64:1C:DA:BB:F9:CA:
              33:AB:84:30:89:58:7E:8C:DB:6B:DD:36:9E:0F:BF:D1:
              EC:78:F2:77:A6:7E:6F:3C:BF:93:AF:0D:BA:68:F4:6C:
              94:CA:BD:52:2D:AB:48:3D:F5:B6:D5:5D:5F:1B:02:9F:
              FA:2F:6B:1E:A4:F7:A3:9A:A6:1A:C8:02:E1:7F:4C:52:
              E3:0E:60:EC:40:1C:7E:B9:0D:DE:3F:C7:B4:DF:87:BD:
              5F:7A:6A:31:2E:03:99:81:13:A8:47:20:CE:31:73:0D:
              57:2D:CD:78:34:33:95:12:99:12:B9:DE:68:2F:AA:E6:
              E3:C2:8A:8C:2A:C3:8B:21:87:66:BD:83:58:57:6F:75:
              BF:3C:AA:26:87:5D:CA:10:15:3C:9F:84:EA:54:C1:0A:
              6E:C4:FE:C5:4A:DD:B9:07:11:97:22:7C:DB:3E:27:D1:
              1E:78:EC:9F:31:C9:F1:E6:22:19:DB:C4:B3:47:43:9A:
              1A:5F:A0:1E:90:E4:5E:F5:EE:7C:F1:7D:AB:62:01:8F:
              F5:4D:0B:DE:D0:22:56:A8:95:CD:AE:88:76:AE:EE:BA:
              0D:F3:E4:4D:D9:A0:FB:68:A0:AE:14:3B:B3:87:C1:BB              : 0x010001
          • X509v3 extensions
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://crl.verisign.com/ThawteTimestampingCA.crl
            • extendedKeyUsage: timeStamping
            • keyUsage: true, 6
            • subjectAltName
              • CN: TSA2048-1-53
        • RSA-SHA1: 
          4a 6b f9 ea 58 c2 44 1c  31 89 79 99 2b 96 bf 82  |Jk..X.D.1.y.+...|
ac 01 d6 1c 4c cd b0 8a  58 6e df 08 29 a3 5e c8  |....L...Xn..).^.|
ca 93 13 e7 04 52 0d ef  47 27 2f 00 38 b0 e4 c9  |.....R..G'/.8...|
93 4e 9a d4 22 62 15 f7  3f 37 21 4f 70 31 80 f1  |.N.."b..?7!Op1..|
8b 38 87 b3 e8 e8 97 00  fe cf 55 96 4e 24 d2 a9  |.8........U.N$..|
27 4e 7a ae b7 61 41 f3  2a ce e7 c9 d9 5e dd bb  |'Nz..aA.*....^..|
2b 85 3e b5 9d b5 d9 e1  57 ff be b4 c5 7e f5 cf  |+.>.....W....~..|
0c 9e f0 97 fe 2b d3 3b  52 1b 1b 38 27 f7 3f 4a  |.....+.;R..8'.?J|
      • Certificate #1
        • 2
          • 0D:E9:2B:F0:D4:D8:29:88:18:32:05:09:5E:9A:76:88
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • CN: VeriSign Time Stamping Services CA
          • 2003-12-04 00:00:00 UTC: 2008-12-03 23:59:59 UTC
          • Subject
            • C: US
            • O: VeriSign, Inc.
            • CN: VeriSign Time Stamping Services Signer
          • #5
            • rsaEncryption: nil
            • B2:50:28:48:DD:D3:68:7A:84:18:44:66:75:5D:7E:C4:
              B8:9F:63:26:FF:3D:43:9C:7C:11:38:10:25:55:73:D9:
              75:27:69:FD:4E:B9:20:5C:D3:0A:F9:A0:1B:2A:ED:55:
              56:21:61:D8:1E:DB:E4:BC:33:6B:C7:EF:DD:A3:37:65:
              8E:1B:93:0C:B6:53:1E:5C:7C:66:35:5F:05:8A:45:FE:
              76:4E:DF:53:80:A2:81:20:9D:AE:88:5C:A2:08:F7:E5:
              30:F9:EE:22:37:4C:42:0A:CE:DF:C6:1F:C4:D6:55:E9:
              81:3F:B5:52:A3:2C:AA:01:7A:F2:A2:AA:8D:35:FE:9F:
              E6:5D:6A:05:9F:3D:6B:E3:BF:96:C0:FE:CC:60:F9:40:
              E7:07:A0:44:EB:81:51:6E:A5:2A:F2:B6:8A:10:28:ED:
              8F:DC:06:A0:86:50:9A:7B:4A:08:0D:30:1D:CA:10:9E:
              6B:F7:E9:58:AE:04:A9:40:99:B2:28:E8:8F:16:AC:3C:
              E3:53:6F:4B:D3:35:9D:B5:6F:64:1D:B3:96:2C:BB:3D:
              E7:79:EB:6D:7A:F9:16:E6:26:AD:AF:EF:99:53:B7:40:
              2C:95:B8:79:AA:FE:D4:52:AB:29:74:7E:42:EC:39:1E:
              A2:6A:16:E6:59:BB:24:68:D8:00:80:43:10:87:80:6B              : 0x010001
          • X509v3 extensions
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com
            • basicConstraints
              • true
              • nil
            • crlDistributionPoints: http://crl.verisign.com/tss-ca.crl
            • extendedKeyUsage: true, timeStamping
            • keyUsage: true, 0xc0
            • subjectAltName
              • CN: TSA2048-1-54
        • RSA-SHA1: 
          87 78 70 da 4e 52 01 20  5b e0 79 c9 82 30 c4 fd  |.xp.NR. [.y..0..|
b9 19 96 bd 91 00 c3 bd  cd cd c6 f4 0e d8 ff f9  |................|
4d c0 33 62 30 11 c5 f5  74 1b d4 92 de 5f 9c 20  |M.3b0...t...._. |
13 b1 7c 45 be 50 cd 83  e7 80 17 83 a7 27 93 67  |..|E.P.......'.g|
13 46 fb ca b8 98 41 03  cc 9b 51 5b 05 8b 7f a8  |.F....A...Q[....|
6f f3 1b 50 1b 24 2e f2  69 8d 6c 22 f7 bb ca 16  |o..P.$..i.l"....|
95 ed 0c 74 c0 68 77 d9  eb 99 62 87 c1 73 90 f8  |...t.hw...b..s..|
89 74 7a 23 ab a3 98 7b  97 b1 f7 8f 29 71 4d 2e  |.tz#...{....)qM.|
75 1b 48 41 da f0 b5 0d  20 54 d6 77 a0 97 82 63  |u.HA.... T.w...c|
69 fd 09 cf 8a f0 75 bb  09 9b d9 f9 11 55 26 9a  |i.....u......U&.|
61 32 be 7a 02 b0 7b 86  be a2 c3 8b 22 2c 78 d1  |a2.z..{.....",x.|
35 76 bc 92 73 5c f9 b9  e6 4c 15 0a 23 cc e4 d2  |5v..s\...L..#...|
d4 34 2e 49 40 15 3c 0f  60 7a 24 c6 a5 66 ef 96  |.4.I@.<.`z$..f..|
cf 70 eb 3e e7 f4 0d 7e  dc d1 7c a3 76 71 69 c1  |.p.>...~..|.vqi.|
9c 4f 47 30 35 21 b1 a2  af 1a 62 3c 2b d9 8e aa  |.OG05!....b<+...|
2a 07 7b d8 18 b3 5c 7b  e2 9d a5 6f fe 3c 89 ad  |*.{...\{...o.<..|
      • #2
        • 2
          • C1:00:8B:3C:3C:88:11:D1:3E:F6:63:EC:DF:40
          • RSA-MD5: nil
          • #2
            • OU: Copyright (c) 1997 Microsoft Corp.
            • OU: Microsoft Corporation
            • CN: Microsoft Root Authority
          • 1997-01-10 07:00:00 UTC: 2020-12-31 07:00:00 UTC
          • #4
            • OU: Copyright (c) 1997 Microsoft Corp.
            • OU: Microsoft Corporation
            • CN: Microsoft Root Authority
          • #5
            • rsaEncryption: nil
            • A9:02:BD:C1:70:E6:3B:F2:4E:1B:28:9F:97:78:5E:30:
              EA:A2:A9:8D:25:5F:F8:FE:95:4C:A3:B7:FE:9D:A2:20:
              3E:7C:51:A2:9B:A2:8F:60:32:6B:D1:42:64:79:EE:AC:
              76:C9:54:DA:F2:EB:9C:86:1C:8F:9F:84:66:B3:C5:6B:
              7A:62:23:D6:1D:3C:DE:0F:01:92:E8:96:C4:BF:2D:66:
              9A:9A:68:26:99:D0:3A:2C:BF:0C:B5:58:26:C1:46:E7:
              0A:3E:38:96:2C:A9:28:39:A8:EC:49:83:42:E3:84:0F:
              BB:9A:6C:55:61:AC:82:7C:A1:60:2D:77:4C:E9:99:B4:
              64:3B:9A:50:1C:31:08:24:14:9F:A9:E7:91:2B:18:E6:
              3D:98:63:14:60:58:05:65:9F:1D:37:52:87:F7:A7:EF:
              94:02:C6:1B:D3:BF:55:45:B3:89:80:BF:3A:EC:54:94:
              4E:AE:FD:A7:7A:6D:74:4E:AF:18:CC:96:09:28:21:00:
              57:90:60:69:37:BB:4B:12:07:3C:56:FF:5B:FB:A4:66:
              0A:08:A6:D2:81:56:57:EF:B6:3B:5E:16:81:77:04:DA:
              F6:BE:AE:80:95:FE:B0:CD:7F:D6:A7:1A:72:5C:3C:CA:
              BC:F0:08:A3:22:30:B3:06:85:C9:B3:20:77:13:85:DF              : 0x010001
          • 2.5.29.1
            • 5b d0 70 ef 69 72 9e 23  51 7e 14 b2 4d 8e ff cb  |[.p.ir.#Q~..M...|
              • #0
                • OU: Copyright (c) 1997 Microsoft Corp.
                • OU: Microsoft Corporation
                • CN: Microsoft Root Authority
              • 00 c1 00 8b 3c 3c 88 11  d1 3e f6 63 ec df 40     |....<<...>.c..@ |
        • RSA-MD5: 
          95 e8 0b c0 8d f3 97 18  35 ed b8 01 24 d8 77 11  |........5...$.w.|
f3 5c 60 32 9f 9e 0b cb  3e 05 91 88 8f c9 3a e6  |.\`2....>.....:.|
21 f2 f0 57 93 2c b5 a0  47 c8 62 ef fc d7 cc 3b  |!..W.,..G.b....;|
3b 5a a9 36 54 69 fe 24  6d 3f c9 cc aa de 05 7c  |;Z.6Ti.$m?.....||
dd 31 8d 3d 9f 10 70 6a  bb fe 12 4f 18 69 c0 fc  |.1.=..pj...O.i..|
d0 43 e3 11 5a 20 4f ea  62 7b af aa 19 c8 2b 37  |.C..Z O.b{....+7|
25 2d be 65 a1 12 8a 25  0f 63 a3 f7 54 1c f9 21  |%-.e...%.c..T..!|
c9 d6 15 f3 52 ac 6e 43  32 07 fd 82 17 f8 e5 67  |....R.nC2......g|
6c 0d 51 f6 bd f1 52 c7  bd e7 c4 30 fc 20 31 09  |l.Q...R....0. 1.|
88 1d 95 29 1a 4d d5 1d  02 a5 f1 80 e0 03 b4 5b  |...).M.........[|
f4 b1 dd c8 57 ee 65 49  c7 52 54 b6 b4 03 28 12  |....W.eI.RT...(.|
ff 90 d6 f0 08 8f 7e b8  97 c5 ab 37 2c e4 7a e4  |......~....7,.z.|
a8 77 e3 76 a0 00 d0 6a  3f c1 d2 36 8a e0 41 12  |.w.v...j?..6..A.|
a8 35 6a 1b 6a db 35 e1  d4 1c 04 e4 a8 45 04 c8  |.5j.j.5......E..|
5a 33 38 6e 4d 1c 0d 62  b7 0a a2 8c d3 d5 54 3f  |Z38nM..b......T?|
46 cd 1c 55 a6 70 db 12  3a 87 93 75 9f a7 d2 a0  |F..U.p..:..u....|
      • #3
        • 2
          • 6A:0B:99:4F:C0:00:1D:AB:11:DA:C4:02:A1:66:27:BA
          • RSA-SHA1-2: nil
          • #2
            • OU: Copyright (c) 1997 Microsoft Corp.
            • OU: Microsoft Corporation
            • CN: Microsoft Root Authority
          • 2006-04-04 17:44:14 UTC: 2012-04-26 07:00:00 UTC
          • Subject
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • OU: Copyright (c) 2000 Microsoft Corp.
            • CN: Microsoft Code Signing PCA
          • #5
            • rsaEncryption: nil
            • C3:CC:20:8D:BC:DF:FF:3E:50:EE:7A:C2:D4:24:25:F6:
              76:CE:21:FF:CD:2A:56:4E:CA:9C:B7:82:B2:35:79:2D:
              00:C4:A8:08:D5:63:C9:B7:A5:F6:E9:C1:C1:D6:B1:8C:
              96:A2:07:FA:0F:B6:82:52:9A:EB:82:C6:BD:10:C5:A8:
              C0:EE:6B:84:8E:53:1B:BB:50:FA:64:01:89:C1:16:D4:
              82:68:00:40:78:44:F5:12:38:4E:FB:63:51:E0:FA:3D:
              B9:E5:37:B1:DF:63:07:23:3B:71:40:34:47:F4:6B:AE:
              46:F5:27:73:1E:22:CB:42:19:1E:51:B6:52:9A:D3:A3:
              D0:13:C6:19:3F:71:06:6D:F2:95:21:44:5F:42:ED:C0:
              C9:99:64:20:B8:C1:34:FC:A2:44:E6:7B:B2:1D:2F:B8:
              A6:DE:F4:A1:DF:9B:21:0F:FE:58:31:41:55:38:7E:AF:
              58:E7:E4:EC:59:79:25:AB:F7:2A:2F:11:3F:38:78:3E:
              42:7F:A7:68:E4:7E:22:68:17:E6:4A:92:C4:78:44:52:
              47:A1:4F:84:89:93:9B:C0:67:7B:EA:09:FB:86:03:7D:
              F6:99:71:3C:2B:A7:66:98:CC:DF:2D:E2:2B:02:1A:0F:
              34:48:65:F5:3C:12:AF:F1:87:1C:1D:26:52:6F:CC:03              : 3
          • #6
            • extendedKeyUsage: codeSigning
            • 2.5.29.1
              • 5b d0 70 ef 69 72 9e 23  51 7e 14 b2 4d 8e ff cb  |[.p.ir.#Q~..M...|
                • #0
                  • OU: Copyright (c) 1997 Microsoft Corp.
                  • OU: Microsoft Corporation
                  • CN: Microsoft Root Authority
                • 00 c1 00 8b 3c 3c 88 11  d1 3e f6 63 ec df 40     |....<<...>.c..@ |
            • 1.3.6.1.4.1.311.21.1: 0x030004
            • subjectKeyIdentifier: 
              25 f8 2b 4b 5d c8 72 54  ad e5 f6 a0 2a 17 16 fb  |%.+K].rT....*...|
c1 f9 53 81                                       |..S.            |
            • 1.3.6.1.4.1.311.20.2: 
              00 53 00 75 00 62 00 43  00 41                    |.S.u.b.C.A      |
            • keyUsage: F
            • basicConstraints: true, true
        • RSA-SHA1-2: 
          63 e3 e0 f3 05 b8 b0 ea  0b 0b 34 d1 82 31 3e 89  |c.........4..1>.|
62 45 d5 08 a7 f9 61 65  c8 2e 03 fa 38 48 41 cf  |bE....ae....8HA.|
b5 f2 27 83 d3 e3 c5 56  53 a8 b5 19 ce cc e6 f1  |..'....VS.......|
a0 f9 56 b6 48 94 47 24  e5 a9 1f dc 7a d4 f6 16  |..V.H.G$....z...|
7a 12 db f3 90 1b ec 08  5d b3 85 90 b9 8c 58 bb  |z.......].....X.|
1c cc 95 d3 95 94 33 f4  91 de ff 88 9b 5e 4b 49  |......3......^KI|
50 39 26 3a 20 1b 54 37  fc 7d 5c 15 93 c3 dc 1c  |P9&: .T7.}\.....|
8e f0 61 52 3c e5 07 ed  66 ef 79 ec 8f ce 57 63  |..aR<...f.y...Wc|
65 95 18 49 a0 7a df 65  b7 df 26 ae fe c8 12 b6  |e..I.z.e..&.....|
c6 a2 cc c6 5f 8b 70 f3  ca db ab 82 6e 07 dc 65  |...._.p.....n..e|
19 b9 a8 f6 86 c2 09 42  98 f1 26 ac 69 7a b1 c1  |.......B..&.iz..|
2b a7 b0 66 1f a5 af 87  08 6b 97 13 b8 b0 36 99  |+..f.....k....6.|
1e 05 a3 13 38 a3 c0 ac  30 3e ba 21 d7 30 a6 ca  |....8...0>.!.0..|
62 12 1c af 57 8d e5 f1  7a 11 ba 5e 3c 0c 37 f1  |b...W...z..^<.7.|
93 c1 92 88 4e 04 5a 05  5c c7 cf d6 a9 d9 e1 7d  |....N.Z.\......}|
91 78 27 fb b4 6e a5 8f  06 33 58 b1 5e 2a 11 0f  |.x'..n...3X.^*..|
      • Certificate #4
        • 2
          • 61:46:9E:CB:00:04:00:00:00:65
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • OU: Copyright (c) 2000 Microsoft Corp.
            • CN: Microsoft Code Signing PCA
          • 2006-04-04 19:43:46 UTC: 2007-10-04 19:53:46 UTC
          • Subject
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • CN: Microsoft Corporation
          • #5
            • rsaEncryption: nil
            • CD:81:96:38:AE:5C:A2:F2:C1:DF:DE:D0:AB:95:8D:D6:
              3C:9D:1F:8B:C3:5D:86:2E:5D:F0:B1:72:F5:AB:AC:88:
              6A:B5:DA:B1:22:7B:0B:C8:C8:A5:4B:91:5E:22:13:E9:
              F9:F5:23:9D:B5:F4:6E:76:AE:EF:EE:A4:3C:C7:C4:C0:
              59:5C:3F:AB:B3:73:33:26:A6:62:81:61:79:A1:62:F4:
              6E:88:95:D0:6E:DD:C7:9F:D2:A4:51:11:76:61:BA:70:
              8A:65:A1:96:16:89:A7:5D:81:D0:44:66:E5:DB:56:9E:
              40:CA:FC:DC:76:24:2E:44:30:00:E5:D6:7D:7B:95:11:
              D5:58:1D:A3:E8:4F:0B:C9:88:DC:A2:D6:53:99:6C:CA:
              63:CA:99:6A:9A:92:5E:4C:4D:11:E8:2F:D3:5B:5B:5E:
              5F:52:A3:73:2D:A5:BB:84:45:0D:8C:19:15:76:CB:08:
              DA:9A:A6:70:15:E8:4D:EC:69:FD:5D:B2:6B:8F:ED:29:
              51:37:38:8B:C6:46:49:15:94:50:98:B0:F4:68:A4:D7:
              DE:09:71:67:74:9E:77:8C:1D:85:6B:97:EA:E7:5F:45:
              CC:E0:E6:71:0D:D1:63:00:93:7B:31:98:8E:0B:B4:13:
              BD:B3:D0:EE:F1:DF:21:EE:A9:60:61:EE:37:43:3D:C3              : 0x010001
          • #6
            • keyUsage: true, 0xc0
            • subjectKeyIdentifier: 
              ee d9 6b a9 75 53 cd 4f  ee 1b 4e 19 06 1e a3 9c  |..k.uS.O..N.....|
ab cf 94 fd                                       |....            |
            • extendedKeyUsage: codeSigning
            • authorityKeyIdentifier
              • 25 f8 2b 4b 5d c8 72 54  ad e5 f6 a0 2a 17 16 fb  |%.+K].rT....*...|
c1 f9 53 81                                       |..S.            |
                • #0
                  • OU: Copyright (c) 1997 Microsoft Corp.
                  • OU: Microsoft Corporation
                  • CN: Microsoft Root Authority
                • 6a 0b 99 4f c0 00 1d ab  11 da c4 02 a1 66 27 ba  |j..O.........f'.|
            • crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/CodeSignPCA2.crl
            • authorityInfoAccess
              • caIssuers: http://www.microsoft.com/pki/certs/CodeSignPCA2.crt
        • RSA-SHA1: 
          38 d9 ef 95 38 9b 5c 98  14 5d 54 6e 69 df 02 c8  |8...8.\..]Tni...|
e7 b3 fb d3 c2 4d ad 2f  ab 7f 54 0d da 32 b6 f8  |.....M./..T..2..|
6a e6 0d fb 21 1a 77 3e  a5 68 7a b4 95 7e 8a 5c  |j...!.w>.hz..~.\|
f2 43 c4 83 9b 65 7d 88  50 51 7c 82 14 f5 83 73  |.C...e}.PQ|....s|
d7 a2 be 5c ca 02 70 ce  26 6c 17 bc 52 14 a5 89  |...\..p.&l..R...|
c0 b7 e4 a1 cc a1 75 9d  91 71 3d 1b c0 56 00 56  |......u..q=..V.V|
b5 f8 84 26 da 5e 33 fb  d6 25 7a 5e 9a da a6 fb  |...&.^3..%z^....|
f4 f2 41 1a ac 55 46 ad  48 dc 91 38 13 58 09 49  |..A..UF.H..8.X.I|
f1 f3 31 87 1f bc 04 8e  5b 12 65 03 e9 0b 51 d0  |..1.....[.e...Q.|
a1 0c 8a 99 bd d9 c1 a8  d0 08 15 25 21 b5 b6 57  |...........%!..W|
89 1c d1 5b 86 35 a5 ca  fd aa 87 ec a9 37 3f b7  |...[.5.......7?.|
43 6b e3 20 f1 45 bc 7e  ae e9 f1 55 b2 a1 48 bc  |Ck. .E.~...U..H.|
65 be 53 34 d9 c9 e8 06  63 04 06 78 6e 50 ff 48  |e.S4....c..xnP.H|
bb 9b ea 43 5a 87 db ad  0a 80 f5 59 c5 2c e4 e5  |...CZ......Y.,..|
7f 5b 4a e5 32 79 ee 22  85 92 0c 2d b3 50 5b c6  |.[J.2y."...-.P[.|
c2 40 58 58 ab d2 cd e3  2f c1 cd ec 6d 9f 37 79  |.@XX..../...m.7y|
    • Signer
      • 1
      • unnamed
        • #0
          • C: US
          • ST: Washington
          • L: Redmond
          • O: Microsoft Corporation
          • OU: Copyright (c) 2000 Microsoft Corp.
          • CN: Microsoft Code Signing PCA
        • 61:46:9E:CB:00:04:00:00:00:65
      • SHA1: nil
      • #3
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest: 
          63 d0 32 15 4f 30 8b 11  25 21 0e b4 eb db 65 dc  |c.2.O0..%!....e.|
a4 84 42 64                                       |..Bd            |
        • 1.3.6.1.4.1.311.2.1.12
          • 00 57 00 69 00 6e 00 64  00 6f 00 77 00 73 00 20  |.W.i.n.d.o.w.s. |
00 49 00 6d 00 61 00 67  00 69 00 6e 00 67 00 20  |.I.m.a.g.i.n.g. |
00 43 00 6f 00 6d 00 70  00 6f 00 6e 00 65 00 6e  |.C.o.m.p.o.n.e.n|
00 74                                             |.t              |
            : http://www.microsoft.com
      • rsaEncryption: 
        5d 17 29 a8 dd 5d d2 01  cd 33 72 cd c5 77 cb b5  |].)..]...3r..w..|
2b 81 83 4f b0 10 ff dd  d1 fb 21 a5 f8 16 bc 31  |+..O......!....1|
e6 3f 89 c4 6d 49 a8 f2  9b d4 f1 47 ef be ec 0b  |.?..mI.....G....|
f5 f6 20 e6 57 cf ab e6  df 05 6a 21 9c 5c 42 f7  |.. .W.....j!.\B.|
1a 1d e2 a1 07 f2 b0 fa  06 c0 b2 75 05 f0 ba 02  |...........u....|
d1 8d 93 32 9a e1 cd be  16 36 97 d1 45 ac d5 f9  |...2.....6..E...|
07 65 09 b6 35 d0 b5 ff  de 00 04 65 bc 93 12 af  |.e..5......e....|
65 ff c3 66 be 2c 10 dd  be 0a 54 d6 3a c1 a0 0c  |e..f.,....T.:...|
3d 02 ba 51 dd ea d7 72  3e c4 2d 31 0c 99 8d 53  |=..Q...r>.-1...S|
60 74 2e de 81 a0 c1 be  ba a6 d0 27 0c ee f2 77  |`t.........'...w|
c3 98 d8 a2 18 61 ec b0  01 70 88 94 5c 94 0e 6a  |.....a...p..\..j|
0b fc a4 dd 9d 8c f1 30  5d d2 51 c0 e8 00 e0 48  |.......0].Q....H|
8d bd c4 8f 25 80 9f 7a  0c 49 a8 b4 97 bb 1f 64  |....%..z.I.....d|
cf 4a 3e 63 99 07 31 90  18 fd 15 8a 63 7b 54 bb  |.J>c..1.....c{T.|
55 91 96 11 ef e0 95 ed  51 82 4d 65 f0 4e 4b a9  |U.......Q.Me.NK.|
de 2f 1a 07 ed bd 44 04  56 16 a9 a8 11 d1 e8 83  |./....D.V.......|
      • countersignature
        • 1
          • unnamed
            • #0
              • C: US
              • O: VeriSign, Inc.
              • CN: VeriSign Time Stamping Services CA
            • 0D:E9:2B:F0:D4:D8:29:88:18:32:05:09:5E:9A:76:88
          • MD5: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2006-10-24 19:57:45 UTC
            • messageDigest: 
              4f 34 0c 58 de 3d 9d 9e  4c 1d 14 ac 27 aa 5e c2  |O4.X.=..L...'.^.|
          • rsaEncryption: 
            8e 36 ed 02 d0 74 0c 3a  e5 8e 30 83 b7 e7 8b f2  |.6...t.:..0.....|
9a 46 8d 74 6c f5 0a c7  d8 09 97 27 17 12 e8 69  |.F.tl......'...i|
93 51 31 f6 b7 ab 19 a6  c9 fb 6a af fb 76 37 f8  |.Q1.......j..v7.|
c0 45 0a e8 08 6a 54 e6  7c 66 d7 2f ab 82 15 1e  |.E...jT.|f./....|
7c e9 81 1b 20 f0 ee f6  21 fc 67 dc 76 46 d6 5e  ||... ...!.g.vF.^|
f7 de 21 77 46 5c 7f b7  e5 08 ac b8 97 c3 99 58  |..!wF\.........X|
1e 4f 45 21 1e 2c c4 7c  6b dc a9 91 00 c6 68 2c  |.OE!.,.|k.....h,|
c3 8c ec df 18 fc 07 9b  ff fd 32 18 a0 2f a1 71  |..........2../.q|
6f 97 bd 4a 99 39 50 c5  60 f9 fd 3a e4 82 8d 8d  |o..J.9P.`..:....|
d2 45 b8 75 e2 f9 de 64  74 54 c9 3b 02 df 48 2b  |.E.u...dtT.;..H+|
db cc 36 0f 53 9b ea 44  42 14 46 0d 2a 6d a7 25  |..6.S..DB.F.*m.%|
44 3d 8b e3 9d ed 52 77  f4 62 de b2 89 35 d7 98  |D=....Rw.b...5..|
a7 f6 a5 d6 12 70 95 25  09 61 23 6d 6b 04 cf 6f  |.....p.%.a#mk..o|
65 a8 bc a4 34 47 07 fe  32 dd dd a0 4c 29 f2 9a  |e...4G..2...L)..|
fc 7b 4e 09 fe 4b 7d a9  bc 1e 0d 0e 6a 6e 5e 2c  |.{N..K}.....jn^,|
92 7b 60 26 e6 d2 40 67  d1 9d f4 ef 89 2e c7 0c  |.{`&..@g........|
offsetsizetypecomment
01904640EXE02/24/2005 19:44:38#
15c115HTM#
1d10006952PKCS7Authenticode Signature#
Scanning the drive for archives:
1 file, 1911592 bytes (1867 KiB)


--
Type = PE
Physical Size = 1911592
CPU = x86
Characteristics = Executable 32-bit NoRelocs NoLineNums NoLocalSyms RemovableRun NetRun
Created = 2005-02-24 19:44:38
Headers Size = 1024
Checksum = 1937532
Name = SFXCAB.EXE
Image Size = 122880
Section Alignment = 8192
File Alignment = 512
Code Size = 31232
Initialized Data Size = 72704
Uninitialized Data Size = 0
Linker Version = 7.10
OS Version = 5.2
Image Version = 5.2
Subsystem Version = 4.0
Subsystem = Windows GUI
DLL Characteristics = NoSEH TerminalServerAware
Stack Reserve = 262144
Stack Commit = 8192
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 16777216
Comment = FileVersion: 6.1.22.4
FileVersion: 6.1.0022.4 (SRV03_QFE.031113-0918)
ProductVersion: 6.1.22.4
ProductVersion: 6.1.0022.4
CompanyName: Microsoft Corporation
FileDescription: Self-Extracting Cabinet
InternalName: SFXCAB.EXE
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: SFXCAB.EXE
ProductName: Microsoft® Windows® Operating System
----
Path = .rsrc_1
Size = 1869312
Packed Size = 1869312
Virtual Size = 1869312
Offset = 35328
--
Path = .rsrc_1
Type = Cab
WARNINGS:
There are data after the end of archive
Physical Size = 1868900
Tail Size = 412
Method = LZX:21
Blocks = 1
Volumes = 1
Volume Index = 0
ID = 36087

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2006-10-24 12:32:46 ....A       455680               photometadatahandler.dll
2006-10-06 19:25:10 ....A        15152               spmsg.dll
2006-10-24 12:32:32 ....A       866816               windowscodecs.dll
2006-10-24 12:32:16 ....A       386048               windowscodecsext.dll
2006-10-24 12:32:32 ....A       337920               wmphoto.dll
2006-10-24 12:30:20 ....A       412160               wphotometadatahandler.dll
2006-10-24 12:30:06 ....A       716288               wwindowscodecs.dll
2006-10-24 12:29:50 ....A       352256               wwindowscodecsext.dll
2006-10-24 12:30:00 ....A       276992               wwmphoto.dll
2006-10-06 19:25:10 ....A       293168               spuninst.exe
2006-10-06 19:25:10 ....A        25904               spupdsvc.exe
2006-10-24 12:39:24 ....A        10793               update/wic.cat
2006-10-06 19:25:10 ....A        30000               update/spcustom.dll
2006-10-06 19:25:12 ....A       462128               update/updspapi.dll
2006-10-06 19:25:12 ....A       977200               update/update.exe
2006-10-24 12:26:44 ....A       543140               update/update_srv2k3.inf
2006-10-24 12:26:34 ....A       259802               update/update_winxp.inf
2006-09-27 12:48:32 ....A          226               update/updatebr.inf
2006-10-18 19:06:52 ....A          577               update/eula.txt
2006-10-24 12:56:38 ....A          718               update/update.ver
------------------- ----- ------------ ------------  ------------------------
2006-10-24 12:56:38            6422968      1911592  20 files

Warnings: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK