filenameapi-ms-win-core-file-l1-1-0.dll
size20768 (0x5120)
md532cef44c2fe2eb826b9a92be1d9ae571
typePE32+ executable (DLL) (console) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xc8

Rich Header

lib idversiontimes used
256282001
260282002
255282001
258282001

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections2
TimeDateStamp0xa0410aca
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x2022
Magic0x20b
LinkerVersion14.23
SizeOfCode0
SizeOfInitializedData0x3000
SizeOfUninitializedData0
AddressOfEntryPoint0
BaseOfCode0x1000
ImageBase0x180000000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion10.0
ImageVersion10.0
SubsystemVersion10.0
Reserved10
SizeOfImage0x4000
SizeOfHeaders0x1000
CheckSum0x11b9d
Subsystem3
DllCharacteristics0x4160
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.rdata0x10000x113c0x2000R-- IDATA
.rsrc0x30000x3f00x1000R-- IDATA

Data Directory

typevasize
EXPORT0x10700x1008
IMPORT00
RESOURCE0x30000x3f0
EXCEPTION00
SECURITY0x40000x1120
BASERELOC00
DEBUG0x10000x70
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
VERSION#19080
ordentry_vafunction_name
10x13b6CompareFileTime
20x13e0CreateDirectoryA
30x140bCreateDirectoryW
40x1431CreateFileA
50x1452CreateFileW
60x1478DefineDosDeviceW
70x149eDeleteFileA
80x14bfDeleteFileW
90x14ecDeleteVolumeMountPointW
100x1525FileTimeToLocalFileTime
110x1550FindClose
120x157fFindCloseChangeNotification
130x15c1FindFirstChangeNotificationA
140x1604FindFirstChangeNotificationW
150x1639FindFirstFileA
160x1662FindFirstFileExA
170x168dFindFirstFileExW
180x16b6FindFirstFileW
190x16dfFindFirstVolumeW
200x1714FindNextChangeNotification
210x1746FindNextFileA
220x176bFindNextFileW
230x1792FindNextVolumeW
240x17bbFindVolumeClose
250x17e5FlushFileBuffers
260x1811GetDiskFreeSpaceA
270x1840GetDiskFreeSpaceExA
280x1871GetDiskFreeSpaceExW
290x18a0GetDiskFreeSpaceW
300x18c9GetDriveTypeA
310x18eeGetDriveTypeW
320x1918GetFileAttributesA
330x1949GetFileAttributesExA
340x197cGetFileAttributesExW
350x19adGetFileAttributesW
360x19e4GetFileInformationByHandle
370x1a14GetFileSize
380x1a37GetFileSizeEx
390x1a5aGetFileTime
400x1a7bGetFileType
410x1aaaGetFinalPathNameByHandleA
420x1ae7GetFinalPathNameByHandleW
430x1b1bGetFullPathNameA
440x1b46GetFullPathNameW
450x1b78GetLogicalDriveStringsW
460x1baaGetLogicalDrives
470x1bd5GetLongPathNameA
480x1c00GetLongPathNameW
490x1c2cGetShortPathNameW
500x1c58GetTempFileNameW
510x1c90GetVolumeInformationByHandleW
520x1ccdGetVolumeInformationW
530x1cffGetVolumePathNameW
540x1d33LocalFileTimeToFileTime
550x1d5dLockFile
560x1d7aLockFileEx
570x1d9eQueryDosDeviceW
580x1dc0ReadFile
590x1dddReadFileEx
600x1e01ReadFileScatter
610x1e2bRemoveDirectoryA
620x1e56RemoveDirectoryW
630x1e7dSetEndOfFile
640x1ea6SetFileAttributesA
650x1ed5SetFileAttributesW
660x1f0cSetFileInformationByHandle
670x1f3fSetFilePointer
680x1f68SetFilePointerEx
690x1f8eSetFileTime
700x1fb4SetFileValidData
710x1fd9UnlockFile
720x1ffaUnlockFileEx
730x201aWriteFile
740x2039WriteFileEx
750x205eWriteFileGather
module_nameapi-ms-win-core-file-l1-1-0.dll
flags0
timestamp2055-03-14 06:06:02
version0.0
ordinal_base1
nFunctions75
nNames75
Names(75)0x11c4
Functions(75)0x1098
NameOrdinals(75)0x12f0

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionApiSet Stub DLL
FileVersion10.0.20161.1000 (WinBuild.160101.0800)
InternalNameapisetstub
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenameapisetstub
ProductNameMicrosoft® Windows® Operating System
ProductVersion10.0.20161.1000

VS_FIXEDFILEINFO

FileVersion10.0.20161.1000
ProductVersion10.0.20161.1000
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType2
FileSubtype0

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Development PCA 2014
serial: 330000042034D8B83051CACF76000000000420

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:00:04:20:34:d8:b8:30:51:ca:cf:76:00:00:00:00:04:20
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Development PCA 2014
        Validity
            Not Before: Feb 20 22:39:30 2019 GMT
            Not After : Jul 31 22:39:30 2020 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Corporation
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:be:64:c0:d7:69:dd:67:30:a5:e4:3c:85:f4:dc:
                    f2:71:fa:b5:f4:f2:0e:d6:d7:1d:c3:62:18:56:6d:
                    80:7e:65:9b:ca:37:2b:15:4b:99:8d:95:e2:bb:08:
                    88:08:f8:6f:07:5a:0e:31:f5:87:c1:90:23:17:89:
                    e9:61:2c:b8:cb:a7:6a:80:49:4f:b5:2b:ba:82:b4:
                    ac:a4:49:b0:8e:ae:9a:21:6a:2a:c8:12:3d:7e:15:
                    73:01:71:43:3d:1c:49:1b:03:d0:1e:cc:40:15:35:
                    d9:6f:77:a0:9b:59:51:1b:8d:07:0b:71:03:82:81:
                    fe:69:41:7a:35:d7:cb:c9:67:f4:8c:b6:b5:0b:72:
                    c5:8f:8f:98:cd:37:f9:21:de:6b:da:5f:b9:3b:60:
                    98:c5:73:41:2c:a8:61:ca:b3:4f:41:24:05:4a:c4:
                    66:7e:35:e4:54:89:3e:39:82:02:9b:12:ba:7d:c3:
                    12:de:5b:42:80:1e:90:44:8d:fc:b5:9d:f5:0c:cf:
                    d7:c6:ac:49:b6:ef:3a:8d:49:fa:07:20:c7:ff:5c:
                    8c:f3:57:04:9a:c9:7c:27:ef:2e:95:d2:d9:8d:6f:
                    cf:ac:50:67:c9:f1:43:32:3d:ab:6d:45:34:90:ce:
                    b7:05:81:0c:a5:4d:9f:fe:68:16:b1:38:5d:70:6c:
                    3a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                1.3.6.1.4.1.311.10.3.13, 1.3.6.1.4.1.311.10.3.27, 1.3.6.1.4.1.311.61.6.1, Code Signing
            X509v3 Subject Key Identifier: 
                D7:F6:1E:5D:B8:FB:48:D8:96:08:B7:81:A0:C0:66:AD:1C:95:86:B9
            X509v3 Subject Alternative Name: 
                DirName:/OU=Microsoft Corporation/serialNumber=231105\+452026
            X509v3 Authority Key Identifier: 
                84:DD:10:36:7B:0B:D2:08:A3:26:56:9F:22:95:25:41:85:2C:09:C0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://www.microsoft.com/pkiops/crl/Microsoft%20Development%20PCA%202014.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pkiops/certs/Microsoft%20Development%20PCA%202014.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        b2:61:b6:a6:45:cf:bf:c9:09:3e:20:b1:3f:1d:82:4a:8e:76:
        67:fe:96:cf:9d:ed:f2:83:d6:07:c0:06:78:f3:62:e1:ac:16:
        2f:e1:cd:23:35:d5:4f:18:0d:13:ce:d8:84:9b:6d:91:c3:65:
        35:2a:84:fe:10:8f:bc:b6:45:33:f8:82:c3:16:a4:6b:0d:5a:
        f1:64:2a:66:22:a3:c2:9a:44:a7:da:74:89:ed:1c:cb:77:e5:
        c2:b0:da:9b:20:6a:7f:8f:b0:02:ba:9a:a1:a9:c6:ab:dc:60:
        fa:fa:52:f7:cf:8e:ef:a7:82:6d:a9:5c:22:6f:e0:62:19:12:
        9a:10:d8:bd:77:c4:4b:03:ff:df:81:58:a3:2f:2c:19:aa:84:
        58:d8:ea:f8:bb:44:63:f4:61:16:29:c8:ea:4f:bd:66:e4:00:
        60:6c:5a:99:d0:f6:78:dc:e0:a9:c1:d7:dc:4e:98:8d:c8:98:
        f7:04:40:ad:6c:c7:b4:ff:d8:95:bf:a1:2c:91:21:fc:66:f4:
        86:a8:d1:03:59:79:cb:20:26:9c:c6:09:aa:e5:85:3e:0e:24:
        17:e9:b8:8a:1b:e9:e7:a8:10:a7:26:69:1b:5a:fb:8f:bf:d8:
        25:ba:b3:52:73:8b:dd:85:91:4f:de:52:cb:fa:33:df:c4:8d:
        74:d1:06:4c:c1:36:4d:dd:bd:a8:02:85:a4:d5:9e:63:ae:18:
        df:ef:a9:ef:02:4f:62:45:ed:19:e5:26:b3:16:31:93:12:25:
        13:53:18:da:e8:0c:47:6a:2c:8d:97:d4:26:fe:4f:f9:74:8e:
        ff:86:e1:16:af:3e:5e:5a:f5:e1:6c:07:e0:36:32:cc:48:84:
        05:2b:1c:8f:a2:34:55:91:54:6d:6f:37:4a:27:5b:5b:77:b3:
        59:f8:bc:c4:76:c7:ff:b2:91:b5:31:f9:75:73:cf:d5:f6:7b:
        8d:4a:21:00:97:e3:a8:f3:80:cb:01:a6:a1:70:99:27:04:e6:
        e1:85:b6:02:2c:55:ac:8b:9e:2c:d0:0f:4c:89:bc:57:2c:5f:
        a9:15:11:4e:87:3f:f1:9f:0f:c1:5b:51:e6:37:98:b3:94:79:
        b3:69:1f:ba:35:ad:ee:c6:77:26:d6:90:e8:c6:a5:71:b7:65:
        a6:18:f0:59:70:e2:9e:3f:80:d7:51:39:11:e2:42:f8:e0:37:
        2c:65:e2:c7:6f:8c:1b:37:ae:48:e1:29:20:d5:50:7d:58:ef:
        86:66:11:84:b2:dd:fa:6d:8c:95:81:43:0a:4a:5c:2a:e5:8f:
        75:38:b8:da:0a:1d:e2:9d:82:45:77:9d:cc:09:e8:42:12:df:
        f0:22:fe:c1:1d:c2:93:47

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:00:00:03:c6:f9:b4:c3:ae:be:59:4b:00:00:00:00:00:03
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Development Root Certificate Authority 2014
        Validity
            Not Before: May 28 17:33:33 2014 GMT
            Not After : May 28 17:43:33 2029 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Development PCA 2014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:cb:53:0c:41:f9:4d:44:24:c8:da:65:4e:66:6c:
                    c5:82:95:70:72:33:f3:b7:2e:86:ae:16:41:bc:dc:
                    d4:b8:69:fb:12:c0:94:be:af:94:c2:7f:76:9c:3c:
                    d3:54:d4:b5:88:ed:8f:b1:0c:1b:51:4a:8f:ea:90:
                    e3:ac:4e:f7:df:d2:12:7b:8e:7f:72:d0:35:3c:ac:
                    e8:e9:67:cc:e9:32:32:31:e8:43:5f:df:14:9a:40:
                    8f:18:0b:99:07:13:3b:71:92:9b:1d:19:f9:9b:95:
                    f7:4f:35:61:38:56:32:b2:ed:64:84:18:fa:5a:85:
                    b1:92:bf:01:b8:c6:96:93:04:3a:a8:ea:ec:82:ea:
                    cd:1e:82:c2:e6:00:e4:99:3d:89:a5:dd:71:20:9e:
                    88:dd:5e:4d:ad:6d:cf:09:f3:a8:a6:13:6f:0c:03:
                    e1:0c:2e:98:b4:c2:a3:07:9c:1a:6f:5f:d3:76:2f:
                    be:99:ee:95:c6:b0:94:5f:b1:b8:a6:4b:93:2f:02:
                    f1:cc:23:c2:43:96:38:a5:bf:9b:7c:2d:6c:1c:35:
                    47:b8:80:3c:e7:fa:9f:0c:9c:ef:df:5e:8c:cf:74:
                    0b:0c:33:97:7f:ea:04:d5:c5:33:d3:0f:9e:b0:90:
                    25:da:ba:fd:68:9e:c9:b4:01:6e:a9:ef:63:33:30:
                    e9:08:c8:eb:93:cf:5b:99:bf:a1:ca:54:3a:c0:8a:
                    1d:93:6c:8a:d0:bc:2f:c7:22:fe:40:e3:44:76:9a:
                    d2:94:df:17:65:4b:7b:26:80:ce:d9:47:33:4d:f5:
                    66:e4:fc:c6:cd:72:ac:7e:f1:70:92:83:3e:72:21:
                    90:c0:ec:8d:ff:59:b1:5b:b3:32:50:94:c5:c1:6c:
                    7b:6a:56:c8:f9:10:7c:4b:1a:9e:61:2c:a2:21:ee:
                    5f:9c:a4:64:ec:32:d2:b4:7b:9a:88:42:a9:2c:56:
                    2e:17:96:fe:93:2b:44:0c:5e:9f:23:ce:02:f6:3b:
                    89:98:c0:41:fc:41:d7:fa:28:7d:44:01:f2:91:b2:
                    d1:ba:62:9e:d8:05:63:06:56:a6:c2:18:01:66:fd:
                    bd:44:2b:4d:59:c2:f0:9b:2c:10:74:34:6f:20:a1:
                    2a:3d:58:ce:5c:f0:51:e1:25:a1:e9:bf:b3:35:71:
                    c9:0d:65:c5:6c:75:01:b7:c3:fc:b3:96:93:c2:d8:
                    af:4d:59:2a:fd:cc:cf:a6:f3:c3:b5:96:92:7a:ab:
                    b4:4a:ae:38:a2:02:3d:e6:91:90:dd:a3:ec:a9:25:
                    c9:08:c1:51:b1:a9:20:5c:8c:6a:3a:91:e7:09:12:
                    7f:ce:ca:78:cf:28:43:aa:74:0b:5c:9e:11:70:ff:
                    c4:59:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Subject Key Identifier: 
                84:DD:10:36:7B:0B:D2:08:A3:26:56:9F:22:95:25:41:85:2C:09:C0
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
                Policy: 1.3.6.1.4.1.311.76.509.1.1
                  CPS: http://www.microsoft.com/pkiops/Docs/Repository.htm
            1.3.6.1.4.1.311.20.2: 
                .
.S.u.b.C.A
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                85:70:00:9F:77:59:1E:8C:AC:3C:9F:77:26:28:19:CC:9A:C1:8F:32
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://www.microsoft.com/pkiops/crl/Microsoft%20Development%20Root%20Certificate%20Authority%202014.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pkiops/certs/Microsoft%20Development%20Root%20Certificate%20Authority%202014.crt
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        4e:ea:1d:0c:fe:d3:82:d1:75:5f:f0:30:df:77:8d:ac:83:56:
        b0:34:cd:be:a7:07:f3:74:ac:ee:3c:4a:5d:1f:da:bd:2a:f6:
        68:fb:2a:37:43:97:09:79:2c:01:bd:a1:d4:9a:75:38:94:97:
        62:c8:eb:73:bc:89:94:43:cb:28:b4:4b:55:b9:f1:56:d5:24:
        e2:cb:a7:f0:46:40:d6:fe:30:fe:29:32:53:ed:39:21:03:73:
        30:95:2d:6a:b1:87:03:df:51:7c:f1:46:13:f9:f5:05:44:dd:
        0f:92:63:3a:71:cc:cf:a0:55:f1:6d:2d:95:21:e0:76:54:64:
        95:d9:66:8f:7f:6b:25:c5:8a:86:19:71:34:c5:53:22:f6:dc:
        55:9b:da:ba:e6:a5:f2:f7:f6:2c:76:46:d2:61:de:48:da:e3:
        70:1e:55:e0:31:8c:5b:f4:b3:c2:1d:fa:ff:7e:b1:8d:b5:de:
        fe:94:fd:01:4a:cb:fa:1f:4c:0d:b4:5a:72:22:82:b6:2b:23:
        53:0a:9d:2e:df:55:3d:fc:18:b3:32:5b:4e:b1:af:00:bf:9a:
        f8:91:56:2e:71:4e:44:52:c7:35:79:d3:75:4a:b8:44:a5:a5:
        f9:67:44:cf:27:30:dc:78:4f:7e:09:d5:a1:51:c0:6b:3f:8a:
        e3:59:0b:71:ef:ca:92:35:9d:d1:2a:b7:8c:75:20:43:92:74:
        2e:12:df:4e:7a:7b:59:a6:0c:65:87:ca:9b:69:53:75:22:ac:
        d9:f6:d9:0f:39:be:c6:93:49:e1:6d:d8:63:72:e5:86:5c:29:
        c7:d5:db:a5:f9:5e:93:39:b0:c5:84:c9:71:e2:15:54:a6:cc:
        8a:a9:1e:46:24:4d:e4:3c:9f:c1:05:df:8c:34:33:6e:05:c1:
        a1:40:d9:a8:0b:95:49:73:0c:03:4f:cc:c3:7c:52:23:de:a4:
        36:c5:cd:82:3d:cb:f8:f0:12:7c:d8:1c:2d:5d:b7:ba:05:7e:
        c0:0e:19:9f:52:7b:53:3f:06:9a:bd:94:27:62:4f:55:03:96:
        e2:89:af:f3:cc:67:95:30:2d:1a:b4:00:bb:55:c7:6f:8b:90:
        7d:4d:4f:2c:42:50:84:63:3e:2b:76:c3:04:f7:56:e0:e0:31:
        76:50:e5:02:0c:00:aa:0e:4f:f4:a4:29:1f:12:96:62:a8:64:
        dc:f1:c3:0e:26:d7:62:e3:c6:ad:a4:68:00:67:30:41:01:17:
        1f:df:61:64:8b:83:1d:37:ba:82:f1:68:9d:b4:69:9f:ad:82:
        dc:db:13:52:d6:4c:55:0b:0c:cd:f3:d5:b9:59:c6:f7:71:8b:
        7d:ff:71:5e:3d:d9:de:00
pkcs7-signedData
  • 1
    • SHA256: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
        • SHA256
          • 13 52 c6 fd b7 c2 3b 6a  bf 7d 5e 5a 27 8a bc 67  |.R....;j.}^Z'..g|
7d ce 5d eb 99 a7 bb 6f  60 e3 09 20 e3 b3 9d 84  |}.]....o`.. ....|
    • Certificates
      • Certificate #0
        • 2
          • 33:00:00:04:20:34:D8:B8:30:51:CA:CF:76:00:00:00:
            00:04:20
          • RSA-SHA256: nil
          • Issuer
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • CN: Microsoft Development PCA 2014
          • 2019-02-20 22:39:30 UTC: 2020-07-31 22:39:30 UTC
          • Subject
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • CN: Microsoft Corporation
          • #5
            • rsaEncryption: nil
            • BE:64:C0:D7:69:DD:67:30:A5:E4:3C:85:F4:DC:F2:71:
              FA:B5:F4:F2:0E:D6:D7:1D:C3:62:18:56:6D:80:7E:65:
              9B:CA:37:2B:15:4B:99:8D:95:E2:BB:08:88:08:F8:6F:
              07:5A:0E:31:F5:87:C1:90:23:17:89:E9:61:2C:B8:CB:
              A7:6A:80:49:4F:B5:2B:BA:82:B4:AC:A4:49:B0:8E:AE:
              9A:21:6A:2A:C8:12:3D:7E:15:73:01:71:43:3D:1C:49:
              1B:03:D0:1E:CC:40:15:35:D9:6F:77:A0:9B:59:51:1B:
              8D:07:0B:71:03:82:81:FE:69:41:7A:35:D7:CB:C9:67:
              F4:8C:B6:B5:0B:72:C5:8F:8F:98:CD:37:F9:21:DE:6B:
              DA:5F:B9:3B:60:98:C5:73:41:2C:A8:61:CA:B3:4F:41:
              24:05:4A:C4:66:7E:35:E4:54:89:3E:39:82:02:9B:12:
              BA:7D:C3:12:DE:5B:42:80:1E:90:44:8D:FC:B5:9D:F5:
              0C:CF:D7:C6:AC:49:B6:EF:3A:8D:49:FA:07:20:C7:FF:
              5C:8C:F3:57:04:9A:C9:7C:27:EF:2E:95:D2:D9:8D:6F:
              CF:AC:50:67:C9:F1:43:32:3D:AB:6D:45:34:90:CE:B7:
              05:81:0C:A5:4D:9F:FE:68:16:B1:38:5D:70:6C:3A:01              : 0x010001
          • #6
            • extendedKeyUsage
              • 1.3.6.1.4.1.311.10.3.13: 1.3.6.1.4.1.311.10.3.27, 1.3.6.1.4.1.311.61.6.1, codeSigning
            • subjectKeyIdentifier: 
              d7 f6 1e 5d b8 fb 48 d8  96 08 b7 81 a0 c0 66 ad  |...]..H.......f.|
1c 95 86 b9                                       |....            |
            • subjectAltName
              • #0
                • OU: Microsoft Corporation
                • serialNumber: 231105+452026
            • authorityKeyIdentifier: 
              84 dd 10 36 7b 0b d2 08  a3 26 56 9f 22 95 25 41  |...6{....&V.".%A|
85 2c 09 c0                                       |.,..            |
            • crlDistributionPoints: http://www.microsoft.com/pkiops/crl/Microsoft%20Development%20PCA%202014.crl
            • authorityInfoAccess
              • caIssuers: http://www.microsoft.com/pkiops/certs/Microsoft%20Development%20PCA%202014.crt
            • basicConstraints
              • true
              • nil
        • RSA-SHA256: 
          b2 61 b6 a6 45 cf bf c9  09 3e 20 b1 3f 1d 82 4a  |.a..E....> .?..J|
8e 76 67 fe 96 cf 9d ed  f2 83 d6 07 c0 06 78 f3  |.vg...........x.|
62 e1 ac 16 2f e1 cd 23  35 d5 4f 18 0d 13 ce d8  |b.../..#5.O.....|
84 9b 6d 91 c3 65 35 2a  84 fe 10 8f bc b6 45 33  |..m..e5*......E3|
f8 82 c3 16 a4 6b 0d 5a  f1 64 2a 66 22 a3 c2 9a  |.....k.Z.d*f"...|
44 a7 da 74 89 ed 1c cb  77 e5 c2 b0 da 9b 20 6a  |D..t....w..... j|
7f 8f b0 02 ba 9a a1 a9  c6 ab dc 60 fa fa 52 f7  |...........`..R.|
cf 8e ef a7 82 6d a9 5c  22 6f e0 62 19 12 9a 10  |.....m.\"o.b....|
d8 bd 77 c4 4b 03 ff df  81 58 a3 2f 2c 19 aa 84  |..w.K....X./,...|
58 d8 ea f8 bb 44 63 f4  61 16 29 c8 ea 4f bd 66  |X....Dc.a.)..O.f|
e4 00 60 6c 5a 99 d0 f6  78 dc e0 a9 c1 d7 dc 4e  |..`lZ...x......N|
98 8d c8 98 f7 04 40 ad  6c c7 b4 ff d8 95 bf a1  |......@.l.......|
2c 91 21 fc 66 f4 86 a8  d1 03 59 79 cb 20 26 9c  |,.!.f.....Yy. &.|
c6 09 aa e5 85 3e 0e 24  17 e9 b8 8a 1b e9 e7 a8  |.....>.$........|
10 a7 26 69 1b 5a fb 8f  bf d8 25 ba b3 52 73 8b  |..&i.Z....%..Rs.|
dd 85 91 4f de 52 cb fa  33 df c4 8d 74 d1 06 4c  |...O.R..3...t..L|
c1 36 4d dd bd a8 02 85  a4 d5 9e 63 ae 18 df ef  |.6M........c....|
a9 ef 02 4f 62 45 ed 19  e5 26 b3 16 31 93 12 25  |...ObE...&..1..%|
13 53 18 da e8 0c 47 6a  2c 8d 97 d4 26 fe 4f f9  |.S....Gj,...&.O.|
74 8e ff 86 e1 16 af 3e  5e 5a f5 e1 6c 07 e0 36  |t......>^Z..l..6|
32 cc 48 84 05 2b 1c 8f  a2 34 55 91 54 6d 6f 37  |2.H..+...4U.Tmo7|
4a 27 5b 5b 77 b3 59 f8  bc c4 76 c7 ff b2 91 b5  |J'[[w.Y...v.....|
31 f9 75 73 cf d5 f6 7b  8d 4a 21 00 97 e3 a8 f3  |1.us...{.J!.....|
80 cb 01 a6 a1 70 99 27  04 e6 e1 85 b6 02 2c 55  |.....p.'......,U|
ac 8b 9e 2c d0 0f 4c 89  bc 57 2c 5f a9 15 11 4e  |...,..L..W,_...N|
87 3f f1 9f 0f c1 5b 51  e6 37 98 b3 94 79 b3 69  |.?....[Q.7...y.i|
1f ba 35 ad ee c6 77 26  d6 90 e8 c6 a5 71 b7 65  |..5...w&.....q.e|
a6 18 f0 59 70 e2 9e 3f  80 d7 51 39 11 e2 42 f8  |...Yp..?..Q9..B.|
e0 37 2c 65 e2 c7 6f 8c  1b 37 ae 48 e1 29 20 d5  |.7,e..o..7.H.) .|
50 7d 58 ef 86 66 11 84  b2 dd fa 6d 8c 95 81 43  |P}X..f.....m...C|
0a 4a 5c 2a e5 8f 75 38  b8 da 0a 1d e2 9d 82 45  |.J\*..u8.......E|
77 9d cc 09 e8 42 12 df  f0 22 fe c1 1d c2 93 47  |w....B...".....G|
      • Certificate #1
        • 2
          • 33:00:00:00:03:C6:F9:B4:C3:AE:BE:59:4B:00:00:00:
            00:00:03
          • RSA-SHA256: nil
          • Issuer
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • CN: Microsoft Development Root Certificate Authority 2014
          • 2014-05-28 17:33:33 UTC: 2029-05-28 17:43:33 UTC
          • Subject
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • CN: Microsoft Development PCA 2014
          • #5
            • rsaEncryption: nil
            • CB:53:0C:41:F9:4D:44:24:C8:DA:65:4E:66:6C:C5:82:
              95:70:72:33:F3:B7:2E:86:AE:16:41:BC:DC:D4:B8:69:
              FB:12:C0:94:BE:AF:94:C2:7F:76:9C:3C:D3:54:D4:B5:
              88:ED:8F:B1:0C:1B:51:4A:8F:EA:90:E3:AC:4E:F7:DF:
              D2:12:7B:8E:7F:72:D0:35:3C:AC:E8:E9:67:CC:E9:32:
              32:31:E8:43:5F:DF:14:9A:40:8F:18:0B:99:07:13:3B:
              71:92:9B:1D:19:F9:9B:95:F7:4F:35:61:38:56:32:B2:
              ED:64:84:18:FA:5A:85:B1:92:BF:01:B8:C6:96:93:04:
              3A:A8:EA:EC:82:EA:CD:1E:82:C2:E6:00:E4:99:3D:89:
              A5:DD:71:20:9E:88:DD:5E:4D:AD:6D:CF:09:F3:A8:A6:
              13:6F:0C:03:E1:0C:2E:98:B4:C2:A3:07:9C:1A:6F:5F:
              D3:76:2F:BE:99:EE:95:C6:B0:94:5F:B1:B8:A6:4B:93:
              2F:02:F1:CC:23:C2:43:96:38:A5:BF:9B:7C:2D:6C:1C:
              35:47:B8:80:3C:E7:FA:9F:0C:9C:EF:DF:5E:8C:CF:74:
              0B:0C:33:97:7F:EA:04:D5:C5:33:D3:0F:9E:B0:90:25:
              DA:BA:FD:68:9E:C9:B4:01:6E:A9:EF:63:33:30:E9:08:
              C8:EB:93:CF:5B:99:BF:A1:CA:54:3A:C0:8A:1D:93:6C:
              8A:D0:BC:2F:C7:22:FE:40:E3:44:76:9A:D2:94:DF:17:
              65:4B:7B:26:80:CE:D9:47:33:4D:F5:66:E4:FC:C6:CD:
              72:AC:7E:F1:70:92:83:3E:72:21:90:C0:EC:8D:FF:59:
              B1:5B:B3:32:50:94:C5:C1:6C:7B:6A:56:C8:F9:10:7C:
              4B:1A:9E:61:2C:A2:21:EE:5F:9C:A4:64:EC:32:D2:B4:
              7B:9A:88:42:A9:2C:56:2E:17:96:FE:93:2B:44:0C:5E:
              9F:23:CE:02:F6:3B:89:98:C0:41:FC:41:D7:FA:28:7D:
              44:01:F2:91:B2:D1:BA:62:9E:D8:05:63:06:56:A6:C2:
              18:01:66:FD:BD:44:2B:4D:59:C2:F0:9B:2C:10:74:34:
              6F:20:A1:2A:3D:58:CE:5C:F0:51:E1:25:A1:E9:BF:B3:
              35:71:C9:0D:65:C5:6C:75:01:B7:C3:FC:B3:96:93:C2:
              D8:AF:4D:59:2A:FD:CC:CF:A6:F3:C3:B5:96:92:7A:AB:
              B4:4A:AE:38:A2:02:3D:E6:91:90:DD:A3:EC:A9:25:C9:
              08:C1:51:B1:A9:20:5C:8C:6A:3A:91:E7:09:12:7F:CE:
              CA:78:CF:28:43:AA:74:0B:5C:9E:11:70:FF:C4:59:35              : 0x010001
          • #6
            • 1.3.6.1.4.1.311.21.1: 0
            • subjectKeyIdentifier: 
              84 dd 10 36 7b 0b d2 08  a3 26 56 9f 22 95 25 41  |...6{....&V.".%A|
85 2c 09 c0                                       |.,..            |
            • certificatePolicies
              • anyPolicy
                • 1.3.6.1.4.1.311.76.509.1.1
                  • id-qt-cps: http://www.microsoft.com/pkiops/Docs/Repository.htm
            • 1.3.6.1.4.1.311.20.2: 
              00 53 00 75 00 62 00 43  00 41                    |.S.u.b.C.A      |
            • keyUsage: 0x86
            • basicConstraints: true, true
            • authorityKeyIdentifier: 
              85 70 00 9f 77 59 1e 8c  ac 3c 9f 77 26 28 19 cc  |.p..wY...<.w&(..|
9a c1 8f 32                                       |...2            |
            • crlDistributionPoints: http://www.microsoft.com/pkiops/crl/Microsoft%20Development%20Root%20Certificate%20Authority%202014.crl
            • authorityInfoAccess
              • caIssuers: http://www.microsoft.com/pkiops/certs/Microsoft%20Development%20Root%20Certificate%20Authority%202014.crt
        • RSA-SHA256: 
          4e ea 1d 0c fe d3 82 d1  75 5f f0 30 df 77 8d ac  |N.......u_.0.w..|
83 56 b0 34 cd be a7 07  f3 74 ac ee 3c 4a 5d 1f  |.V.4.....t..+v...V..1|
76 50 e5 02 0c 00 aa 0e  4f f4 a4 29 1f 12 96 62  |vP......O..)...b|
a8 64 dc f1 c3 0e 26 d7  62 e3 c6 ad a4 68 00 67  |.d....&.b....h.g|
30 41 01 17 1f df 61 64  8b 83 1d 37 ba 82 f1 68  |0A....ad...7...h|
9d b4 69 9f ad 82 dc db  13 52 d6 4c 55 0b 0c cd  |..i......R.LU...|
f3 d5 b9 59 c6 f7 71 8b  7d ff 71 5e 3d d9 de 00  |...Y..q.}.q^=...|
    • Signer
      • 1
      • unnamed
        • #0
          • C: US
          • ST: Washington
          • L: Redmond
          • O: Microsoft Corporation
          • CN: Microsoft Development PCA 2014
        • 33:00:00:04:20:34:D8:B8:30:51:CA:CF:76:00:00:00:
          00:04:20
      • SHA256: nil
      • #3
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest: 
          4a d5 14 06 9e 3e 92 80  55 74 3b b1 5b 03 83 00  |J....>..Ut;.[...|
7e 5f be 95 39 c6 64 79  75 d6 eb 4a ef c0 29 18  |~_..9.dyu..J..).|
        • 1.3.6.1.4.1.311.10.3.28: sPY7xPB7hT5g5HHrYt8rDLSM9VuZRuWZaef2e22Rs54=
        • 1.3.6.1.4.1.311.2.1.12
          • 00 4d 00 69 00 63 00 72  00 6f 00 73 00 6f 00 66  |.M.i.c.r.o.s.o.f|
00 74 00 20 00 57 00 69  00 6e 00 64 00 6f 00 77  |.t. .W.i.n.d.o.w|
00 73                                             |.s              |
            : http://www.microsoft.com/windows
      • rsaEncryption: 
        58 2b e9 bb d5 31 ce 33  e1 8c b1 4b d5 e5 53 1f  |X+...1.3...K..S.|
87 5f ae 36 70 64 4a c3  10 bf 9f c2 95 d0 81 de  |._.6pdJ.........|
5e f9 46 7e 8e d7 42 53  9b 24 64 34 d0 85 d3 e7  |^.F~..BS.$d4....|
14 f9 ef 93 04 91 85 42  63 66 aa 4d 17 e5 dd 5a  |.......Bcf.M...Z|
f3 10 75 cb 27 83 1b 1a  21 34 14 5b 06 99 a7 4f  |..u.'...!4.[...O|
b6 d7 c9 e5 28 28 ea 4c  a6 1e a5 b6 bd 14 7c 10  |....((.L......|.|
49 87 63 57 1b 71 f8 bc  11 87 6c 54 55 ab 37 89  |I.cW.q....lTU.7.|
12 88 a4 04 8c 13 06 2d  88 f3 18 c7 10 2a a6 c7  |.......-.....*..|
96 79 87 2e 75 f9 df 0f  71 8c 9e 63 85 19 3e 39  |.y..u...q..c..>9|
3d ad 8f 20 d9 82 d1 c0  62 71 c0 8b 6b 10 02 08  |=.. ....bq..k...|
62 87 45 75 86 33 55 ea  31 1f eb 84 02 a6 f9 48  |b.Eu.3U.1......H|
6d 9b 63 09 5f a2 79 41  5e 10 30 b0 ca f9 1e a0  |m.c._.yA^.0.....|
b6 3d c0 f9 21 0c 48 00  21 f3 78 a2 a8 73 16 82  |.=..!.H.!.x..s..|
b0 e4 74 77 ab 88 b7 8b  50 85 d3 c1 b0 c3 e8 c0  |..tw....P.......|
76 0e 1e ef bc 00 02 58  bb bb 99 bc 60 25 23 33  |v......X....`%#3|
f6 53 a1 b3 0d 0d e7 6d  08 4a ed e9 1a e2 3b 66  |.S.....m.J....;f|
offsetsizetypecomment
15c115HTM#
15d015184BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK