filenametest_signed.exe
size3307700 (0x3278b4)
md5410603ff6e18e134737c2593fc243ed8
typePE32 executable (console) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x120

Rich Header

lib idversiontimes used
2592671517
26126715195
2602671522
2592752111
257275212
2602770297
2612752159
2602752129
2572671519
10175
2602421510
261277022
255277021
258277021

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections8
TimeDateStamp0x5d35b7a0
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x122
Magic0x10b
LinkerVersion14.21
SizeOfCode0x280400
SizeOfInitializedData0xa6c00
SizeOfUninitializedData0
AddressOfEntryPoint0xaff6
BaseOfCode0x1000
BaseOfData0x282000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0x32d000
SizeOfHeaders0x400
CheckSum0
Subsystem3
DllCharacteristics0x8140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x2803b30x280400R-X CODE
.rdata0x2820000x748fe0x74a00R-- IDATA
.data0x2f70000x171740x15600RW- IDATA
.idata0x30f0000x1b210x1c00R-- IDATA
.msvcjmc0x3110000x9600xa00RW- IDATA
.00cfg0x3120000x1040x200R-- IDATA
.rsrc0x3130000x43c0x600R-- IDATA
.reloc0x3140000x1805b0x18200R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x30f4f40xdc
RESOURCE0x3130000x43c
EXCEPTION00
SECURITY0x3258000x20b4
BASERELOC0x3140000x15634
DEBUG0x2c81400x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x2c81780x40
Bound_IAT00
IAT0x30f0000x4f4
Delay_IAT00
CLR_Header00
typenamesizecp
MANIFEST#13810
module_namehintordfunction_name
KERNEL32.dll449GetCPInfo
KERNEL32.dll373FindClose
KERNEL32.dll379FindFirstFileExW
KERNEL32.dll396FindNextFileW
KERNEL32.dll907IsValidCodePage
KERNEL32.dll434GetACP
KERNEL32.dll663GetOEMCP
KERNEL32.dll567GetEnvironmentStringsW
KERNEL32.dll426FreeEnvironmentStringsW
KERNEL32.dll1300SetEnvironmentVariableW
KERNEL32.dll727GetStringTypeW
KERNEL32.dll301EncodePointer
KERNEL32.dll265DecodePointer
KERNEL32.dll1296SetEndOfFile
KERNEL32.dll350ExitProcess
KERNEL32.dll134CloseHandle
KERNEL32.dll1554WriteFile
KERNEL32.dll1139ReadFile
KERNEL32.dll588GetFileSizeEx
KERNEL32.dll203CreateFileW
KERNEL32.dll1354SetStdHandle
KERNEL32.dll601GetFullPathNameW
KERNEL32.dll529GetCurrentDirectoryW
KERNEL32.dll1289SetCurrentDirectoryW
KERNEL32.dll1315SetFilePointerEx
KERNEL32.dll1136ReadConsoleW
KERNEL32.dll508GetConsoleMode
KERNEL32.dll490GetConsoleCP
KERNEL32.dll415FlushFileBuffers
KERNEL32.dll843HeapQueryInformation
KERNEL32.dll846HeapSize
KERNEL32.dll844HeapReAlloc
KERNEL32.dll340EnumSystemLocalesW
KERNEL32.dll786GetUserDefaultLCID
KERNEL32.dll305EnterCriticalSection
KERNEL32.dll957LeaveCriticalSection
KERNEL32.dll272DeleteCriticalSection
KERNEL32.dll1330SetLastError
KERNEL32.dll863InitializeCriticalSectionAndSpinCount
KERNEL32.dll191CreateEventW
KERNEL32.dll1415SwitchToThread
KERNEL32.dll1438TlsAlloc
KERNEL32.dll1440TlsGetValue
KERNEL32.dll1441TlsSetValue
KERNEL32.dll1439TlsFree
KERNEL32.dll745GetSystemTimeAsFileTime
KERNEL32.dll775GetTickCount
KERNEL32.dll632GetModuleHandleW
KERNEL32.dll686GetProcAddress
KERNEL32.dll274DeleteFileA
KERNEL32.dll277DeleteFileW
KERNEL32.dll756GetTempFileNameW
KERNEL32.dll758GetTempPathW
KERNEL32.dll262DebugBreak
KERNEL32.dll743GetSystemTime
KERNEL32.dll975LocalFree
KERNEL32.dll1416SystemTimeToFileTime
KERNEL32.dll1007MultiByteToWideChar
KERNEL32.dll1534WideCharToMultiByte
KERNEL32.dll540GetCurrentThreadId
KERNEL32.dll1453UnhandledExceptionFilter
KERNEL32.dll1389SetUnhandledExceptionFilter
KERNEL32.dll535GetCurrentProcess
KERNEL32.dll1420TerminateProcess
KERNEL32.dll902IsProcessorFeaturePresent
KERNEL32.dll895IsDebuggerPresent
KERNEL32.dll1122RaiseException
KERNEL32.dll1101QueryPerformanceCounter
KERNEL32.dll536GetCurrentProcessId
KERNEL32.dll867InitializeSListHead
KERNEL32.dll720GetStartupInfoW
KERNEL32.dll609GetLastError
KERNEL32.dll837HeapAlloc
KERNEL32.dll841HeapFree
KERNEL32.dll692GetProcessHeap
KERNEL32.dll1486VirtualQuery
KERNEL32.dll427FreeLibrary
KERNEL32.dll879InterlockedPushEntrySList
KERNEL32.dll876InterlockedFlushSList
KERNEL32.dll628GetModuleFileNameW
KERNEL32.dll963LoadLibraryExW
KERNEL32.dll631GetModuleHandleExW
KERNEL32.dll849HeapValidate
KERNEL32.dll739GetSystemInfo
KERNEL32.dll559GetDriveTypeW
KERNEL32.dll583GetFileInformationByHandle
KERNEL32.dll590GetFileType
KERNEL32.dll1058PeekNamedPipe
KERNEL32.dll1417SystemTimeToTzSpecificLocalTime
KERNEL32.dll362FileTimeToSystemTime
KERNEL32.dll722GetStdHandle
KERNEL32.dll1553WriteConsoleW
KERNEL32.dll782GetTimeZoneInformation
KERNEL32.dll470GetCommandLineA
KERNEL32.dll471GetCommandLineW
KERNEL32.dll539GetCurrentThread
KERNEL32.dll1049OutputDebugStringW
KERNEL32.dll1257SetConsoleCtrlHandler
KERNEL32.dll545GetDateFormatW
KERNEL32.dll780GetTimeFormatW
KERNEL32.dll155CompareStringW
KERNEL32.dll945LCMapStringW
KERNEL32.dll613GetLocaleInfoW
KERNEL32.dll909IsValidLocale
KERNEL32.dll423FormatMessageW
SHELL32.dll439ShellExecuteW
VCRUNTIME140.dll78wcschr
VCRUNTIME140.dll44__uncaught_exception
VCRUNTIME140.dll59_local_unwind4
VCRUNTIME140.dll79wcsrchr
VCRUNTIME140.dll53_except_handler4_common
VCRUNTIME140.dll75strrchr
VCRUNTIME140.dll70memcpy
VCRUNTIME140.dll71memmove
VCRUNTIME140.dll72memset
VCRUNTIME140.dll76strstr
VCRUNTIME140.dll74strchr
VCRUNTIME140.dll69memcmp
VCRUNTIME140.dll68memchr
VCRUNTIME140.dll61_purecall
VCRUNTIME140.dll34__std_exception_destroy
VCRUNTIME140.dll33__std_exception_copy
VCRUNTIME140.dll16__CxxFrameHandler3
VCRUNTIME140.dll1_CxxThrowException
CRYPT32.dll127CryptBinaryToStringW
CRYPT32.dll126CryptBinaryToStringA
CRYPT32.dll227CryptStringToBinaryA
CRYPT32.dll204CryptRetrieveTimeStamp
CRYPT32.dll244CryptVerifyTimeStampSignature
CRYPT32.dll34CertDuplicateCRLContext
CRYPT32.dll174CryptMemFree
CRYPT32.dll239CryptVerifyDetachedMessageSignature
CRYPT32.dll241CryptVerifyMessageSignature
CRYPT32.dll75CertGetNameStringW
CRYPT32.dll74CertGetNameStringA
CRYPT32.dll124CryptAcquireCertificatePrivateKey
CRYPT32.dll168CryptImportPublicKeyInfoEx2
CRYPT32.dll55CertFindExtension
CRYPT32.dll64CertFreeCertificateContext
CRYPT32.dll28CertCreateCertificateContext
CRYPT32.dll178CryptMsgControl
CRYPT32.dll184CryptMsgGetParam
CRYPT32.dll188CryptMsgUpdate
CRYPT32.dll177CryptMsgClose
CRYPT32.dll136CryptEncodeObject
CRYPT32.dll89CertOpenStore
CRYPT32.dll18CertCloseStore
CRYPT32.dll44CertEnumCertificatesInStore
CRYPT32.dll53CertFindCertificateInStore
CRYPT32.dll40CertEnumCRLsInStore
CRYPT32.dll176CryptMsgCalculateEncodedLength
CRYPT32.dll19CertCompareCertificate
CRYPT32.dll91CertOpenSystemStoreW
CRYPT32.dll69CertGetCertificateChain
CRYPT32.dll137CryptEncodeObjectEx
CRYPT32.dll133CryptDecodeObjectEx
CRYPT32.dll186CryptMsgOpenToEncode
CRYPT32.dll185CryptMsgOpenToDecode
bcrypt.dll14BCryptDestroyKey
bcrypt.dll57BCryptVerifySignature
bcrypt.dll39BCryptOpenAlgorithmProvider
bcrypt.dll35BCryptHashData
bcrypt.dll2BCryptCloseAlgorithmProvider
bcrypt.dll33BCryptGetProperty
bcrypt.dll29BCryptGenRandom
bcrypt.dll13BCryptDestroyHash
bcrypt.dll6BCryptCreateHash
bcrypt.dll27BCryptFinishHash
ncrypt.dll75NCryptFreeObject
ncrypt.dll80NCryptIsKeyHandle
USER32.dll639MessageBoxA
ADVAPI32.dll220CryptReleaseContext
ole32.dll458StringFromGUID2
ole32.dll39CoCreateGuid
WS2_32.dll14

No certificates in

undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass
No certificates in
undefined method `type' for nil:NilClass

Cannot call to_der on

undefined method `type' for nil:NilClass
offsetsizetypecomment
03299328EXE07/22/2019 13:18:24#
15c115HTM#
3258008372PKCS7Authenticode Signature#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[!] PEdump::WIN_CERTIFICATE: too big length 2954920496
[!] PEdump::WIN_CERTIFICATE: too big length 234325576
[!] PEdump::WIN_CERTIFICATE: too big length 815865986
[!] PEdump::WIN_CERTIFICATE: too big length 254869761
[!] PEdump::WIN_CERTIFICATE: too big length 21530208
[!] PEdump::WIN_CERTIFICATE: too big length 805307649
[!] PEdump::WIN_CERTIFICATE: too big length 4152772742
[!] PEdump::WIN_CERTIFICATE: too big length 2215281312
[!] PEdump::WIN_CERTIFICATE: too big length 637829680
[!] PEdump::WIN_CERTIFICATE: too big length 1114626
[!] PEdump::WIN_CERTIFICATE: too big length 2382729310
[!] PEdump::WIN_CERTIFICATE: too big length 3983117747
[!] PEdump::WIN_CERTIFICATE: too big length 2252899882
[!] PEdump::WIN_CERTIFICATE: too big length 805307659
[!] PEdump::WIN_CERTIFICATE: too big length 50727216
[!] PEdump::WIN_CERTIFICATE: too big length 826427138
[!] PEdump::WIN_CERTIFICATE: too big length 134501635
[!] PEdump::WIN_CERTIFICATE: too big length 1702125925
[!] PEdump::WIN_CERTIFICATE: too big length 1701340014
[!] PEdump::WIN_CERTIFICATE: too big length 238030897
[!] PEdump::WIN_CERTIFICATE: too big length 1392972551
[!] PEdump::WIN_CERTIFICATE: too big length 439444594
[!] PEdump::WIN_CERTIFICATE: too big length 319423573
[!] PEdump::WIN_CERTIFICATE: too big length 542065743
[!] PEdump::WIN_CERTIFICATE: too big length 1953066345
[!] PEdump::WIN_CERTIFICATE: too big length 50740016
[!] PEdump::WIN_CERTIFICATE: too big length 1297040180
[!] PEdump::WIN_CERTIFICATE: too big length 541152082
[!] PEdump::WIN_CERTIFICATE: too big length 1092645998
[!] PEdump::WIN_CERTIFICATE: too big length 1667855470
[!] PEdump::WIN_CERTIFICATE: too big length 1851859054
[!] PEdump::WIN_CERTIFICATE: too big length 1701999971
[!] PEdump::WIN_CERTIFICATE: too big length 1126198377
[!] PEdump::WIN_CERTIFICATE: too big length 808988941
[!] PEdump::WIN_CERTIFICATE: too big length 808464432
[!] PEdump::WIN_CERTIFICATE: too big length 959461681
[!] PEdump::WIN_CERTIFICATE: too big length 959789365
[!] PEdump::WIN_CERTIFICATE: too big length 103165992
[!] PEdump::WIN_CERTIFICATE: too big length 17692550
[!] PEdump::WIN_CERTIFICATE: too big length 1751330413
[!] PEdump::WIN_CERTIFICATE: too big length 1936288609
[!] PEdump::WIN_CERTIFICATE: too big length 1965974377
[!] PEdump::WIN_CERTIFICATE: too big length 25309298
[!] PEdump::WIN_CERTIFICATE: too big length 1216752137
[!] PEdump::WIN_CERTIFICATE: too big length 2954920496
[!] PEdump::WIN_CERTIFICATE: too big length 234325576
[!] PEdump::WIN_CERTIFICATE: too big length 815865986
[!] PEdump::WIN_CERTIFICATE: too big length 254869761
[!] PEdump::WIN_CERTIFICATE: too big length 21530208
[!] PEdump::WIN_CERTIFICATE: too big length 805307649
[!] PEdump::WIN_CERTIFICATE: too big length 4152772742
[!] PEdump::WIN_CERTIFICATE: too big length 2215281312
[!] PEdump::WIN_CERTIFICATE: too big length 637829680
[!] PEdump::WIN_CERTIFICATE: too big length 1114626
[!] PEdump::WIN_CERTIFICATE: too big length 2382729310
[!] PEdump::WIN_CERTIFICATE: too big length 3983117747
[!] PEdump::WIN_CERTIFICATE: too big length 2252899882
[!] PEdump::WIN_CERTIFICATE: too big length 805307659
[!] PEdump::WIN_CERTIFICATE: too big length 50727216
[!] PEdump::WIN_CERTIFICATE: too big length 826427138
[!] PEdump::WIN_CERTIFICATE: too big length 134501635
[!] PEdump::WIN_CERTIFICATE: too big length 1702125925
[!] PEdump::WIN_CERTIFICATE: too big length 1701340014
[!] PEdump::WIN_CERTIFICATE: too big length 238030897
[!] PEdump::WIN_CERTIFICATE: too big length 1392972551
[!] PEdump::WIN_CERTIFICATE: too big length 439444594
[!] PEdump::WIN_CERTIFICATE: too big length 319423573
[!] PEdump::WIN_CERTIFICATE: too big length 542065743
[!] PEdump::WIN_CERTIFICATE: too big length 1953066345
[!] PEdump::WIN_CERTIFICATE: too big length 50740016
[!] PEdump::WIN_CERTIFICATE: too big length 1297040180
[!] PEdump::WIN_CERTIFICATE: too big length 541152082
[!] PEdump::WIN_CERTIFICATE: too big length 1092645998
[!] PEdump::WIN_CERTIFICATE: too big length 1667855470
[!] PEdump::WIN_CERTIFICATE: too big length 1851859054
[!] PEdump::WIN_CERTIFICATE: too big length 1701999971
[!] PEdump::WIN_CERTIFICATE: too big length 1126198377
[!] PEdump::WIN_CERTIFICATE: too big length 808988941
[!] PEdump::WIN_CERTIFICATE: too big length 808464432
[!] PEdump::WIN_CERTIFICATE: too big length 959461681
[!] PEdump::WIN_CERTIFICATE: too big length 959789365
[!] PEdump::WIN_CERTIFICATE: too big length 103165992
[!] PEdump::WIN_CERTIFICATE: too big length 17692550
[!] PEdump::WIN_CERTIFICATE: too big length 1751330413
[!] PEdump::WIN_CERTIFICATE: too big length 1936288609
[!] PEdump::WIN_CERTIFICATE: too big length 1965974377
[!] PEdump::WIN_CERTIFICATE: too big length 25309298
[!] PEdump::WIN_CERTIFICATE: too big length 1216752137
[!] PEdump::WIN_CERTIFICATE: too big length 2954920496
[!] PEdump::WIN_CERTIFICATE: too big length 234325576
[!] PEdump::WIN_CERTIFICATE: too big length 815865986
[!] PEdump::WIN_CERTIFICATE: too big length 254869761
[!] PEdump::WIN_CERTIFICATE: too big length 21530208
[!] PEdump::WIN_CERTIFICATE: too big length 805307649
[!] PEdump::WIN_CERTIFICATE: too big length 4152772742
[!] PEdump::WIN_CERTIFICATE: too big length 2215281312
[!] PEdump::WIN_CERTIFICATE: too big length 637829680
[!] PEdump::WIN_CERTIFICATE: too big length 1114626
[!] PEdump::WIN_CERTIFICATE: too big length 2382729310
[!] PEdump::WIN_CERTIFICATE: too big length 3983117747
[!] PEdump::WIN_CERTIFICATE: too big length 2252899882
[!] PEdump::WIN_CERTIFICATE: too big length 805307659
[!] PEdump::WIN_CERTIFICATE: too big length 50727216
[!] PEdump::WIN_CERTIFICATE: too big length 826427138
[!] PEdump::WIN_CERTIFICATE: too big length 134501635
[!] PEdump::WIN_CERTIFICATE: too big length 1702125925
[!] PEdump::WIN_CERTIFICATE: too big length 1701340014
[!] PEdump::WIN_CERTIFICATE: too big length 238030897
[!] PEdump::WIN_CERTIFICATE: too big length 1392972551
[!] PEdump::WIN_CERTIFICATE: too big length 439444594
[!] PEdump::WIN_CERTIFICATE: too big length 319423573
[!] PEdump::WIN_CERTIFICATE: too big length 542065743
[!] PEdump::WIN_CERTIFICATE: too big length 1953066345
[!] PEdump::WIN_CERTIFICATE: too big length 50740016
[!] PEdump::WIN_CERTIFICATE: too big length 1297040180
[!] PEdump::WIN_CERTIFICATE: too big length 541152082
[!] PEdump::WIN_CERTIFICATE: too big length 1092645998
[!] PEdump::WIN_CERTIFICATE: too big length 1667855470
[!] PEdump::WIN_CERTIFICATE: too big length 1851859054
[!] PEdump::WIN_CERTIFICATE: too big length 1701999971
[!] PEdump::WIN_CERTIFICATE: too big length 1126198377
[!] PEdump::WIN_CERTIFICATE: too big length 808988941
[!] PEdump::WIN_CERTIFICATE: too big length 808464432
[!] PEdump::WIN_CERTIFICATE: too big length 959461681
[!] PEdump::WIN_CERTIFICATE: too big length 959789365
[!] PEdump::WIN_CERTIFICATE: too big length 103165992
[!] PEdump::WIN_CERTIFICATE: too big length 17692550
[!] PEdump::WIN_CERTIFICATE: too big length 1751330413
[!] PEdump::WIN_CERTIFICATE: too big length 1936288609
[!] PEdump::WIN_CERTIFICATE: too big length 1965974377
[!] PEdump::WIN_CERTIFICATE: too big length 25309298
[!] PEdump::WIN_CERTIFICATE: too big length 1216752137
[!] PEdump::WIN_CERTIFICATE: too big length 2954920496
[!] PEdump::WIN_CERTIFICATE: too big length 234325576
[!] PEdump::WIN_CERTIFICATE: too big length 815865986
[!] PEdump::WIN_CERTIFICATE: too big length 254869761
[!] PEdump::WIN_CERTIFICATE: too big length 21530208
[!] PEdump::WIN_CERTIFICATE: too big length 805307649
[!] PEdump::WIN_CERTIFICATE: too big length 4152772742
[!] PEdump::WIN_CERTIFICATE: too big length 2215281312
[!] PEdump::WIN_CERTIFICATE: too big length 637829680
[!] PEdump::WIN_CERTIFICATE: too big length 1114626
[!] PEdump::WIN_CERTIFICATE: too big length 2382729310
[!] PEdump::WIN_CERTIFICATE: too big length 3983117747
[!] PEdump::WIN_CERTIFICATE: too big length 2252899882
[!] PEdump::WIN_CERTIFICATE: too big length 805307659
[!] PEdump::WIN_CERTIFICATE: too big length 50727216
[!] PEdump::WIN_CERTIFICATE: too big length 826427138
[!] PEdump::WIN_CERTIFICATE: too big length 134501635
[!] PEdump::WIN_CERTIFICATE: too big length 1702125925
[!] PEdump::WIN_CERTIFICATE: too big length 1701340014
[!] PEdump::WIN_CERTIFICATE: too big length 238030897
[!] PEdump::WIN_CERTIFICATE: too big length 1392972551
[!] PEdump::WIN_CERTIFICATE: too big length 439444594
[!] PEdump::WIN_CERTIFICATE: too big length 319423573
[!] PEdump::WIN_CERTIFICATE: too big length 542065743
[!] PEdump::WIN_CERTIFICATE: too big length 1953066345
[!] PEdump::WIN_CERTIFICATE: too big length 50740016
[!] PEdump::WIN_CERTIFICATE: too big length 1297040180
[!] PEdump::WIN_CERTIFICATE: too big length 541152082
[!] PEdump::WIN_CERTIFICATE: too big length 1092645998
[!] PEdump::WIN_CERTIFICATE: too big length 1667855470
[!] PEdump::WIN_CERTIFICATE: too big length 1851859054
[!] PEdump::WIN_CERTIFICATE: too big length 1701999971
[!] PEdump::WIN_CERTIFICATE: too big length 1126198377
[!] PEdump::WIN_CERTIFICATE: too big length 808988941
[!] PEdump::WIN_CERTIFICATE: too big length 808464432
[!] PEdump::WIN_CERTIFICATE: too big length 959461681
[!] PEdump::WIN_CERTIFICATE: too big length 959789365
[!] PEdump::WIN_CERTIFICATE: too big length 103165992
[!] PEdump::WIN_CERTIFICATE: too big length 17692550
[!] PEdump::WIN_CERTIFICATE: too big length 1751330413
[!] PEdump::WIN_CERTIFICATE: too big length 1936288609
[!] PEdump::WIN_CERTIFICATE: too big length 1965974377
[!] PEdump::WIN_CERTIFICATE: too big length 25309298
[!] PEdump::WIN_CERTIFICATE: too big length 1216752137
[!] PEdump::WIN_CERTIFICATE: too big length 2954920496
[!] PEdump::WIN_CERTIFICATE: too big length 234325576
[!] PEdump::WIN_CERTIFICATE: too big length 815865986
[!] PEdump::WIN_CERTIFICATE: too big length 254869761
[!] PEdump::WIN_CERTIFICATE: too big length 21530208
[!] PEdump::WIN_CERTIFICATE: too big length 805307649
[!] PEdump::WIN_CERTIFICATE: too big length 4152772742
[!] PEdump::WIN_CERTIFICATE: too big length 2215281312
[!] PEdump::WIN_CERTIFICATE: too big length 637829680
[!] PEdump::WIN_CERTIFICATE: too big length 1114626
[!] PEdump::WIN_CERTIFICATE: too big length 2382729310
[!] PEdump::WIN_CERTIFICATE: too big length 3983117747
[!] PEdump::WIN_CERTIFICATE: too big length 2252899882
[!] PEdump::WIN_CERTIFICATE: too big length 805307659
[!] PEdump::WIN_CERTIFICATE: too big length 50727216
[!] PEdump::WIN_CERTIFICATE: too big length 826427138
[!] PEdump::WIN_CERTIFICATE: too big length 134501635
[!] PEdump::WIN_CERTIFICATE: too big length 1702125925
[!] PEdump::WIN_CERTIFICATE: too big length 1701340014
[!] PEdump::WIN_CERTIFICATE: too big length 238030897
[!] PEdump::WIN_CERTIFICATE: too big length 1392972551
[!] PEdump::WIN_CERTIFICATE: too big length 439444594
[!] PEdump::WIN_CERTIFICATE: too big length 319423573
[!] PEdump::WIN_CERTIFICATE: too big length 542065743
[!] PEdump::WIN_CERTIFICATE: too big length 1953066345
[!] PEdump::WIN_CERTIFICATE: too big length 50740016
[!] PEdump::WIN_CERTIFICATE: too big length 1297040180
[!] PEdump::WIN_CERTIFICATE: too big length 541152082
[!] PEdump::WIN_CERTIFICATE: too big length 1092645998
[!] PEdump::WIN_CERTIFICATE: too big length 1667855470
[!] PEdump::WIN_CERTIFICATE: too big length 1851859054
[!] PEdump::WIN_CERTIFICATE: too big length 1701999971
[!] PEdump::WIN_CERTIFICATE: too big length 1126198377
[!] PEdump::WIN_CERTIFICATE: too big length 808988941
[!] PEdump::WIN_CERTIFICATE: too big length 808464432
[!] PEdump::WIN_CERTIFICATE: too big length 959461681
[!] PEdump::WIN_CERTIFICATE: too big length 959789365
[!] PEdump::WIN_CERTIFICATE: too big length 103165992
[!] PEdump::WIN_CERTIFICATE: too big length 17692550
[!] PEdump::WIN_CERTIFICATE: too big length 1751330413
[!] PEdump::WIN_CERTIFICATE: too big length 1936288609
[!] PEdump::WIN_CERTIFICATE: too big length 1965974377
[!] PEdump::WIN_CERTIFICATE: too big length 25309298
[!] PEdump::WIN_CERTIFICATE: too big length 1216752137
[!] PEdump::WIN_CERTIFICATE: too big length 2954920496
[!] PEdump::WIN_CERTIFICATE: too big length 234325576
[!] PEdump::WIN_CERTIFICATE: too big length 815865986
[!] PEdump::WIN_CERTIFICATE: too big length 254869761
[!] PEdump::WIN_CERTIFICATE: too big length 21530208
[!] PEdump::WIN_CERTIFICATE: too big length 805307649
[!] PEdump::WIN_CERTIFICATE: too big length 4152772742
[!] PEdump::WIN_CERTIFICATE: too big length 2215281312
[!] PEdump::WIN_CERTIFICATE: too big length 637829680
[!] PEdump::WIN_CERTIFICATE: too big length 1114626
[!] PEdump::WIN_CERTIFICATE: too big length 2382729310
[!] PEdump::WIN_CERTIFICATE: too big length 3983117747
[!] PEdump::WIN_CERTIFICATE: too big length 2252899882
[!] PEdump::WIN_CERTIFICATE: too big length 805307659
[!] PEdump::WIN_CERTIFICATE: too big length 50727216
[!] PEdump::WIN_CERTIFICATE: too big length 826427138
[!] PEdump::WIN_CERTIFICATE: too big length 134501635
[!] PEdump::WIN_CERTIFICATE: too big length 1702125925
[!] PEdump::WIN_CERTIFICATE: too big length 1701340014
[!] PEdump::WIN_CERTIFICATE: too big length 238030897
[!] PEdump::WIN_CERTIFICATE: too big length 1392972551
[!] PEdump::WIN_CERTIFICATE: too big length 439444594
[!] PEdump::WIN_CERTIFICATE: too big length 319423573
[!] PEdump::WIN_CERTIFICATE: too big length 542065743
[!] PEdump::WIN_CERTIFICATE: too big length 1953066345
[!] PEdump::WIN_CERTIFICATE: too big length 50740016
[!] PEdump::WIN_CERTIFICATE: too big length 1297040180
[!] PEdump::WIN_CERTIFICATE: too big length 541152082
[!] PEdump::WIN_CERTIFICATE: too big length 1092645998
[!] PEdump::WIN_CERTIFICATE: too big length 1667855470
[!] PEdump::WIN_CERTIFICATE: too big length 1851859054
[!] PEdump::WIN_CERTIFICATE: too big length 1701999971
[!] PEdump::WIN_CERTIFICATE: too big length 1126198377
[!] PEdump::WIN_CERTIFICATE: too big length 808988941
[!] PEdump::WIN_CERTIFICATE: too big length 808464432
[!] PEdump::WIN_CERTIFICATE: too big length 959461681
[!] PEdump::WIN_CERTIFICATE: too big length 959789365
[!] PEdump::WIN_CERTIFICATE: too big length 103165992
[!] PEdump::WIN_CERTIFICATE: too big length 17692550
[!] PEdump::WIN_CERTIFICATE: too big length 1751330413
[!] PEdump::WIN_CERTIFICATE: too big length 1936288609
[!] PEdump::WIN_CERTIFICATE: too big length 1965974377
[!] PEdump::WIN_CERTIFICATE: too big length 25309298
[!] PEdump::WIN_CERTIFICATE: too big length 1216752137