WEFTIII2b1.exe

info
MZ
PE
resources
imports
foremost
7zip
signature
hexdump
disasm
log
discuss
donate

filename	WEFTIII2b1.exe
size	9718336 (0x944a40)
md5	56dbf6e52138ecc775d3a20d96cb5668

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	scan pending
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe8

Rich Header

lib id	version	times used
11	8797	1
14	7299	12
10	8797	26
19	8034	9
1	0	74
11	8799	1
6	1735	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x3a8c178a
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0x4000
SizeOfInitializedData	0x93e000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1ca9
BaseOfCode	0x1000
BaseOfData	0x5000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x943000
SizeOfHeaders	0x1000
CheckSum	0x950fb4
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

Armadillo v4.x

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x3f4e	0x4000	R-X CODE
.rdata	0x5000	0xb7a	0x1000	R-- IDATA
.data	0x6000	0x2a80	0x3000	RW- IDATA
.rsrc	0x9000	0x93a000	0x93a000	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x54cc	0x64
RESOURCE	0x9000	0x9390c4
EXCEPTION	0	0
SECURITY	0x943000	0x1a40
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x5000	0x134
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
EXE	EXPAND	63998	1252
EXE	#1	9605394	1252
EXE	#2	11	1252
EXE	#3	14	1252
ICON	#1	744	1252
DIALOG	#101	192	1252
GROUP_ICON	#101	20	1252

module_name	hint	function_name
KERNEL32.dll	484	MultiByteToWideChar
KERNEL32.dll	718	WaitForSingleObject
KERNEL32.dll	182	FreeResource
KERNEL32.dll	27	CloseHandle
KERNEL32.dll	688	UnmapViewOfFile
KERNEL32.dll	470	MapViewOfFile
KERNEL32.dll	53	CreateFileMappingA
KERNEL32.dll	661	SizeofResource
KERNEL32.dll	469	LockResource
KERNEL32.dll	455	LoadResource
KERNEL32.dll	52	CreateFileA
KERNEL32.dll	163	FindResourceA
KERNEL32.dll	294	GetModuleHandleA
KERNEL32.dll	144	FindClose
KERNEL32.dll	148	FindFirstFileA
KERNEL32.dll	741	WritePrivateProfileStringA
KERNEL32.dll	776	lstrlenA
KERNEL32.dll	735	WriteFile
KERNEL32.dll	618	SetFilePointer
KERNEL32.dll	770	lstrcpyA
KERNEL32.dll	761	lstrcatA
KERNEL32.dll	381	GetWindowsDirectoryA
KERNEL32.dll	478	MoveFileExA
KERNEL32.dll	551	RemoveDirectoryA
KERNEL32.dll	157	FindNextFileA
KERNEL32.dll	87	DeleteFileA
KERNEL32.dll	605	SetCurrentDirectoryA
KERNEL32.dll	45	CreateDirectoryA
KERNEL32.dll	357	GetTempPathA
KERNEL32.dll	245	GetCurrentDirectoryA
KERNEL32.dll	342	GetStringTypeW
KERNEL32.dll	339	GetStringTypeA
KERNEL32.dll	448	LCMapStringW
KERNEL32.dll	447	LCMapStringA
KERNEL32.dll	318	GetProcAddress
KERNEL32.dll	450	LoadLibraryA
KERNEL32.dll	418	HeapReAlloc
KERNEL32.dll	699	VirtualAlloc
KERNEL32.dll	662	Sleep
KERNEL32.dll	305	GetOEMCP
KERNEL32.dll	415	HeapFree
KERNEL32.dll	409	HeapAlloc
KERNEL32.dll	336	GetStartupInfoA
KERNEL32.dll	202	GetCommandLineA
KERNEL32.dll	372	GetVersion
KERNEL32.dll	125	ExitProcess
KERNEL32.dll	292	GetModuleFileNameA
KERNEL32.dll	265	GetEnvironmentVariableA
KERNEL32.dll	373	GetVersionExA
KERNEL32.dll	413	HeapDestroy
KERNEL32.dll	411	HeapCreate
KERNEL32.dll	703	VirtualFree
KERNEL32.dll	185	GetACP
KERNEL32.dll	722	WideCharToMultiByte
KERNEL32.dll	670	TerminateProcess
KERNEL32.dll	247	GetCurrentProcess
KERNEL32.dll	685	UnhandledExceptionFilter
KERNEL32.dll	178	FreeEnvironmentStringsA
KERNEL32.dll	179	FreeEnvironmentStringsW
KERNEL32.dll	262	GetEnvironmentStrings
KERNEL32.dll	264	GetEnvironmentStringsW
KERNEL32.dll	621	SetHandleCount
KERNEL32.dll	338	GetStdHandle
KERNEL32.dll	277	GetFileType
KERNEL32.dll	559	RtlUnwind
KERNEL32.dll	191	GetCPInfo
USER32.dll	79	CreateDialogParamA
USER32.dll	185	EndDialog
SHELL32.dll	116	ShellExecuteExA
LZ32.dll	7	LZOpenFileA
LZ32.dll	9	LZRead
LZ32.dll	3	LZClose
LZ32.dll	1	GetExpandedNameA

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/OU=Copyright (c) 2000 Microsoft Corp./CN=Microsoft Code Signing PCA

serial: 61071143000000000034

Certificates (5)

Certificate:
    Data:
        Version: 1 (0x0)
        Serial Number:
            4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
        Signature Algorithm: md5WithRSAEncryption
        Issuer: O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
        Validity
            Not Before: May 12 00:00:00 1997 GMT
            Not After : Jan  7 23:59:59 2004 GMT
        Subject: O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:d3:2e:20:f0:68:7c:2c:2d:2e:81:1c:b1:06:b2:
                    a7:0b:b7:11:0d:57:da:53:d8:75:e3:c9:33:2a:b2:
                    d4:f6:09:5b:34:f3:e9:90:fe:09:0c:d0:db:1b:5a:
                    b9:cd:e7:f6:88:b1:9d:c0:87:25:eb:7d:58:10:73:
                    6a:78:cb:71:15:fd:c6:58:f6:29:ab:58:5e:96:04:
                    fd:2d:62:11:58:81:1c:ca:71:94:d5:22:58:2f:d5:
                    cc:14:05:84:36:ba:94:aa:b4:4d:4a:e9:ee:3b:22:
                    ad:56:99:7e:21:9c:6c:86:c0:4a:47:97:6a:b4:a6:
                    36:d5:fc:09:2d:d3:b4:39:9b
                Exponent: 65537 (0x10001)
    Signature Algorithm: md5WithRSAEncryption
    Signature Value:
        61:55:0e:3e:7b:c7:92:12:7e:11:10:8e:22:cc:d4:b3:13:2b:
        5b:e8:44:e4:0b:78:9e:a4:7e:f3:a7:07:72:1e:e2:59:ef:cc:
        84:e3:89:94:4c:db:4e:61:ef:b3:a4:fb:46:3d:50:34:0b:9f:
        70:56:f6:8e:2a:7f:17:ce:e5:63:bf:79:69:07:73:2e:b0:95:
        28:8a:f5:ed:aa:a9:d2:5d:cd:0a:ca:10:09:8f:ce:b3:af:28:
        96:c4:79:29:84:92:dc:ff:ba:67:42:48:a6:90:10:e4:bf:61:
        f8:9c:53:e5:93:d1:73:3f:f8:fd:9d:4f:84:ac:55:d1:fd:11:
        63:63

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
        Signature Algorithm: md5WithRSAEncryption
        Issuer: O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
        Validity
            Not Before: Feb 28 00:00:00 2001 GMT
            Not After : Jan  6 23:59:59 2004 GMT
        Subject: O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)01, CN=VeriSign Time Stamping Service
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c0:7a:61:87:eb:b2:a7:03:63:1b:2b:1a:61:de:
                    80:b7:15:1d:a0:8b:90:3d:bb:27:92:84:14:39:eb:
                    85:ce:29:92:06:66:48:a4:03:4f:8d:e8:4f:a7:f0:
                    af:5e:d1:2f:19:c7:91:f1:b5:9e:7b:91:21:ce:e9:
                    ff:e3:4e:f0:fc:af:95:58:b8:63:2d:e6:8e:f6:29:
                    18:cd:70:8e:50:c3:ed:96:bb:40:db:be:25:e8:42:
                    55:d6:f6:85:f2:06:e7:8b:99:1c:31:f3:03:0f:d4:
                    4c:9c:24:2a:dc:1b:1b:8f:82:f3:b0:ef:a7:4d:e3:
                    14:a7:e0:8f:d6:c7:68:c2:61:58:a9:72:d4:f8:30:
                    48:4f:d9:2f:6f:63:20:d9:89:ca:82:7b:c2:4b:bc:
                    28:c5:81:68:e7:e6:82:40:ac:46:3a:a0:f9:3f:36:
                    cd:4c:bb:54:42:5a:7a:65:7b:fe:84:e4:c7:47:54:
                    ac:b9:3d:ec:80:c7:1a:f7:c4:33:81:81:c9:2a:95:
                    fb:7f:5e:3a:87:90:14:db:cc:2e:75:f2:ef:6b:e6:
                    3d:a9:60:be:42:01:aa:4f:aa:5b:a8:3f:22:31:9f:
                    12:15:f9:73:a1:1e:82:8b:04:2b:ea:46:02:4c:6d:
                    8f:1f:50:2e:95:4b:2a:78:06:84:74:3d:91:8f:2c:
                    47:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com/ocsp/status
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.1.1
                  CPS: https://www.verisign.com/rpa
            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: 
                Digital Signature, Non Repudiation
    Signature Algorithm: md5WithRSAEncryption
    Signature Value:
        2d:f3:4f:63:60:2c:18:da:f5:24:0f:52:b3:0c:eb:b3:bc:67:
        85:c2:23:ed:8f:46:0d:cf:1a:4d:be:f3:7c:7a:20:30:32:18:
        68:8b:92:bb:32:99:f0:93:b8:3b:15:06:27:7b:3e:02:06:00:
        a4:21:92:84:13:0a:c5:98:e5:40:57:c5:05:25:e8:af:af:11:
        6a:a9:e5:3b:cb:e9:23:f6:94:29:5d:40:55:f3:a5:53:9d:c8:
        36:3a:39:65:08:73:73:a4:32:d2:af:ac:bf:c7:05:3c:ff:45:
        ec:c3:e8:da:24:d1:ce:63:ae:09:a7:fb:e2:1b:e3:fd:41:0a:
        6a:96

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
        Signature Algorithm: md5WithRSAEncryption
        Issuer: OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
        Validity
            Not Before: Jan 10 07:00:00 1997 GMT
            Not After : Dec 31 07:00:00 2020 GMT
        Subject: OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a9:02:bd:c1:70:e6:3b:f2:4e:1b:28:9f:97:78:
                    5e:30:ea:a2:a9:8d:25:5f:f8:fe:95:4c:a3:b7:fe:
                    9d:a2:20:3e:7c:51:a2:9b:a2:8f:60:32:6b:d1:42:
                    64:79:ee:ac:76:c9:54:da:f2:eb:9c:86:1c:8f:9f:
                    84:66:b3:c5:6b:7a:62:23:d6:1d:3c:de:0f:01:92:
                    e8:96:c4:bf:2d:66:9a:9a:68:26:99:d0:3a:2c:bf:
                    0c:b5:58:26:c1:46:e7:0a:3e:38:96:2c:a9:28:39:
                    a8:ec:49:83:42:e3:84:0f:bb:9a:6c:55:61:ac:82:
                    7c:a1:60:2d:77:4c:e9:99:b4:64:3b:9a:50:1c:31:
                    08:24:14:9f:a9:e7:91:2b:18:e6:3d:98:63:14:60:
                    58:05:65:9f:1d:37:52:87:f7:a7:ef:94:02:c6:1b:
                    d3:bf:55:45:b3:89:80:bf:3a:ec:54:94:4e:ae:fd:
                    a7:7a:6d:74:4e:af:18:cc:96:09:28:21:00:57:90:
                    60:69:37:bb:4b:12:07:3c:56:ff:5b:fb:a4:66:0a:
                    08:a6:d2:81:56:57:ef:b6:3b:5e:16:81:77:04:da:
                    f6:be:ae:80:95:fe:b0:cd:7f:d6:a7:1a:72:5c:3c:
                    ca:bc:f0:08:a3:22:30:b3:06:85:c9:b3:20:77:13:
                    85:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            2.5.29.1: 
                0....[.p.ir.#Q~..M....r0p1+0)..U..."Copyright (c) 1997 Microsoft Corp.1.0...U....Microsoft Corporation1!0...U....Microsoft Root Authority......<<...>.c..@
    Signature Algorithm: md5WithRSAEncryption
    Signature Value:
        95:e8:0b:c0:8d:f3:97:18:35:ed:b8:01:24:d8:77:11:f3:5c:
        60:32:9f:9e:0b:cb:3e:05:91:88:8f:c9:3a:e6:21:f2:f0:57:
        93:2c:b5:a0:47:c8:62:ef:fc:d7:cc:3b:3b:5a:a9:36:54:69:
        fe:24:6d:3f:c9:cc:aa:de:05:7c:dd:31:8d:3d:9f:10:70:6a:
        bb:fe:12:4f:18:69:c0:fc:d0:43:e3:11:5a:20:4f:ea:62:7b:
        af:aa:19:c8:2b:37:25:2d:be:65:a1:12:8a:25:0f:63:a3:f7:
        54:1c:f9:21:c9:d6:15:f3:52:ac:6e:43:32:07:fd:82:17:f8:
        e5:67:6c:0d:51:f6:bd:f1:52:c7:bd:e7:c4:30:fc:20:31:09:
        88:1d:95:29:1a:4d:d5:1d:02:a5:f1:80:e0:03:b4:5b:f4:b1:
        dd:c8:57:ee:65:49:c7:52:54:b6:b4:03:28:12:ff:90:d6:f0:
        08:8f:7e:b8:97:c5:ab:37:2c:e4:7a:e4:a8:77:e3:76:a0:00:
        d0:6a:3f:c1:d2:36:8a:e0:41:12:a8:35:6a:1b:6a:db:35:e1:
        d4:1c:04:e4:a8:45:04:c8:5a:33:38:6e:4d:1c:0d:62:b7:0a:
        a2:8c:d3:d5:54:3f:46:cd:1c:55:a6:70:db:12:3a:87:93:75:
        9f:a7:d2:a0

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
        Signature Algorithm: md5WithRSAEncryption
        Issuer: OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
        Validity
            Not Before: Dec 10 08:00:00 2000 GMT
            Not After : Nov 12 08:00:00 2005 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Copyright (c) 2000 Microsoft Corp., CN=Microsoft Code Signing PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a2:84:15:53:d8:0b:30:0e:34:95:ff:3a:1b:c2:
                    f3:2f:7b:6d:37:23:4d:f3:d2:8c:e5:fd:af:fd:c5:
                    02:34:1f:24:c7:e5:a1:dc:54:ec:7e:02:74:47:ab:
                    db:32:58:16:14:51:29:38:f1:7e:b2:b4:8c:3a:47:
                    b5:39:4e:6e:54:c2:31:0c:3a:6d:fb:cd:cd:cb:50:
                    9c:1b:ae:a7:d8:d9:4a:26:3f:b5:c5:cb:8f:96:e2:
                    49:f2:6d:d8:e9:96:3e:de:05:cf:f0:a6:55:37:ad:
                    2f:60:cd:80:61:42:a1:49:54:4a:0f:18:b7:4b:d9:
                    93:99:30:5a:47:75:64:b4:d3:bb:dd:b6:ab:0c:9d:
                    4f:b8:73:3b:18:3a:aa:b4:87:8c:b0:88:b0:4d:4f:
                    1f:4e:11:b5:33:80:df:0d:3a:64:6f:44:c7:34:bd:
                    4a:93:9b:bc:a6:1d:f9:05:23:4e:60:29:8f:cc:2a:
                    f2:84:9a:99:ad:a8:db:0a:70:7b:d6:34:41:90:a5:
                    b7:66:c7:5c:1b:1d:a3:33:0e:9b:54:03:1a:3f:98:
                    90:b8:cc:e7:3d:04:74:43:1c:8f:f7:39:e6:b3:ac:
                    48:7a:6b:2a:0e:62:01:61:39:76:6e:fd:3e:98:07:
                    4b:14:f1:01:46:fd:15:00:e0:47:da:4f:e4:05:e4:
                    80:25
                Exponent: 3 (0x3)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Code Signing
            2.5.29.1: 
                0....[.p.ir.#Q~..M....r0p1+0)..U..."Copyright (c) 1997 Microsoft Corp.1.0...U....Microsoft Corporation1!0...U....Microsoft Root Authority......<<...>.c..@
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Subject Key Identifier: 
                29:5C:B9:1B:B6:CD:33:EE:BB:9E:59:7D:F7:E5:CA:2E:C4:0D:34:28
            1.3.6.1.4.1.311.20.2: 
                .
.S.u.b.C.A
            X509v3 Key Usage: 
                Non Repudiation, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: md5WithRSAEncryption
    Signature Value:
        45:58:e2:9a:41:7f:fc:9d:bf:48:77:77:ae:8c:d9:e6:19:c5:
        57:b4:1a:bd:b4:b9:5f:02:a1:45:6a:39:59:f9:b9:27:9c:2d:
        4d:9e:fc:a2:e4:38:8a:38:64:22:42:df:b9:2f:2a:cf:b7:d6:
        06:ca:eb:2a:bf:e0:1a:85:7c:db:51:08:3d:f4:22:d3:d4:c0:
        6d:88:81:15:44:5f:64:83:64:c4:a9:94:2c:8a:db:90:37:4a:
        0f:b7:e8:d4:61:8f:76:76:e1:d9:25:ff:24:84:95:8d:04:56:
        54:94:a1:1c:3a:3e:82:bc:ee:a5:87:8c:1c:8c:4b:79:5f:b5:
        49:fa:5e:32:69:3a:1f:54:ad:75:4d:df:64:e7:30:3c:db:64:
        49:44:fb:fb:c4:1c:42:71:e6:a0:3d:45:ee:6b:00:9f:ac:42:
        bd:ba:11:b3:56:e4:fb:d5:a2:2a:81:d8:1f:4e:a2:55:be:27:
        8f:70:a6:a2:6c:1b:ff:54:8a:82:bc:81:4b:a6:a1:b1:66:7a:
        a9:17:a7:cb:06:c0:47:eb:a6:b3:e9:31:15:53:3d:2a:04:bf:
        ff:73:48:dc:8b:27:43:fc:63:e8:ee:24:87:5b:be:36:d1:e8:
        31:f5:32:d9:5e:df:79:7a:ba:30:ac:69:86:4a:fb:8c:11:bf:
        1b:8d:54:59

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:07:11:43:00:00:00:00:00:34
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Copyright (c) 2000 Microsoft Corp., CN=Microsoft Code Signing PCA
        Validity
            Not Before: May 25 00:55:48 2002 GMT
            Not After : Nov 25 01:05:48 2003 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Copyright (c) 2002 Microsoft Corp., CN=Microsoft Corporation
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:aa:99:bd:39:a8:18:27:f4:2b:3d:0b:4c:3f:7c:
                    77:2e:a7:cb:b5:d1:8c:0d:c2:3a:74:d7:93:b5:e0:
                    a0:4b:3f:59:5e:ce:45:4f:9a:79:29:f1:49:cc:1a:
                    47:ee:55:c2:08:3e:12:20:f8:55:f2:ee:5f:d3:e0:
                    ca:96:bc:30:de:fe:58:c8:27:32:d0:85:54:e8:f0:
                    91:10:bb:f3:2b:be:19:e5:03:9b:0b:86:1d:f3:b0:
                    39:8c:b8:fd:0b:1d:3c:73:26:ac:57:2b:ca:29:a2:
                    15:90:82:15:e2:77:a3:40:52:03:8b:9d:c2:70:ba:
                    1f:e9:34:f6:f3:35:92:4e:55:83:f8:da:30:b6:20:
                    de:57:06:b5:5a:42:06:de:59:cb:f2:df:a6:bd:15:
                    47:71:19:25:23:d2:cb:6f:9b:19:79:df:6a:5b:f1:
                    76:05:79:29:fc:c3:56:ca:8f:44:08:85:55:8a:cb:
                    c8:0f:46:4b:55:cb:8c:96:77:4a:87:e8:a9:41:06:
                    c7:ff:0d:e9:68:57:63:72:c3:69:57:b4:43:cf:32:
                    3a:30:dc:1b:e9:d5:43:26:2a:79:fe:95:db:22:67:
                    24:c9:2f:d0:34:e3:e6:fb:51:49:86:b8:3c:d0:25:
                    5f:d6:ec:9e:03:61:87:a9:68:40:c7:f8:e2:03:e6:
                    cf:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Subject Key Identifier: 
                6B:C8:C6:51:20:F0:B4:2F:D3:A0:B6:AE:7F:5E:26:B2:B8:87:52:29
            X509v3 Authority Key Identifier: 
                keyid:29:5C:B9:1B:B6:CD:33:EE:BB:9E:59:7D:F7:E5:CA:2E:C4:0D:34:28
                DirName:/OU=Copyright (c) 1997 Microsoft Corp./OU=Microsoft Corporation/CN=Microsoft Root Authority
                serial:6A:0B:99:4F:C0:00:DE:AA:11:D4:D8:40:9A:A8:BE:E6
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/CodeSignPCA.crl
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        35:23:fd:13:54:fc:e9:dc:f0:dd:0c:14:7a:fa:a7:b3:ce:fd:
        a7:3a:c8:ba:e5:e7:f6:03:fb:53:db:a7:99:a9:a0:9b:36:9c:
        03:eb:82:47:1c:21:bd:14:cb:e7:67:40:09:c7:16:91:02:55:
        ce:43:42:b4:cd:1b:5d:b0:f3:32:04:3d:12:e5:1d:a7:07:a7:
        8f:a3:7e:45:55:76:1b:96:95:91:69:f0:dd:38:f3:48:89:ef:
        70:40:b7:db:b5:55:80:c0:03:c4:2e:b6:28:dc:0a:82:0e:c7:
        43:e3:7a:48:5d:b8:06:89:92:40:6c:6e:c5:dc:f8:9a:ef:0b:
        be:21:0a:8c:2f:3a:b5:ed:a7:ce:71:87:68:23:e1:b3:e4:18:
        7d:b8:47:01:a5:2b:c4:58:cb:b2:89:6c:5f:fd:d3:2c:c4:6f:
        b8:23:b2:0d:ff:3c:f2:11:45:74:f2:09:06:99:18:dd:6f:c0:
        86:01:18:12:1d:2b:16:af:56:ef:65:33:a1:ea:67:4e:f4:4b:
        82:ab:e9:0f:dc:01:fa:df:60:7f:66:47:5d:cb:2c:70:cc:7b:
        4e:d9:06:b8:6e:8c:0c:fe:62:1e:42:f9:93:7c:a2:ab:0a:9e:
        d0:23:10:ae:4d:7b:27:91:6f:26:be:68:fa:a6:3f:9f:23:eb:
        c8:9d:bb:87

pkcs7-signedData

MD5: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

MD5

a1 2d cd ba 24 53 1b 40 08 f4 f0 46 89 db d9 13 |.-..$S.@...F....|

unnamed
- #0
  - 4A:19:D2:38:8C:82:59:1C:A5:5D:73:5F:15:5D:DC:A3
    - RSA-MD5: nil
    - #1
      - O: VeriSign Trust Network
      - OU: VeriSign, Inc.
      - OU: VeriSign Time Stamping Service Root
      - OU: NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
    - 1997-05-12 00:00:00 UTC: 2004-01-07 23:59:59 UTC
    - #3
      - O: VeriSign Trust Network
      - OU: VeriSign, Inc.
      - OU: VeriSign Time Stamping Service Root
      - OU: NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
    - #4
      - rsaEncryption: nil
      - D3:2E:20:F0:68:7C:2C:2D:2E:81:1C:B1:06:B2:A7:0B:
        B7:11:0D:57:DA:53:D8:75:E3:C9:33:2A:B2:D4:F6:09:
        5B:34:F3:E9:90:FE:09:0C:D0:DB:1B:5A:B9:CD:E7:F6:
        88:B1:9D:C0:87:25:EB:7D:58:10:73:6A:78:CB:71:15:
        FD:C6:58:F6:29:AB:58:5E:96:04:FD:2D:62:11:58:81:
        1C:CA:71:94:D5:22:58:2F:D5:CC:14:05:84:36:BA:94:
        AA:B4:4D:4A:E9:EE:3B:22:AD:56:99:7E:21:9C:6C:86:
        C0:4A:47:97:6A:B4:A6:36:D5:FC:09:2D:D3:B4:39:9B: 0x010001
  - RSA-MD5:
```
61 55 0e 3e 7b c7 92 12  7e 11 10 8e 22 cc d4 b3  |aU.>{...~..."...|
13 2b 5b e8 44 e4 0b 78  9e a4 7e f3 a7 07 72 1e  |.+[.D..x..~...r.|
e2 59 ef cc 84 e3 89 94  4c db 4e 61 ef b3 a4 fb  |.Y......L.Na....|
46 3d 50 34 0b 9f 70 56  f6 8e 2a 7f 17 ce e5 63  |F=P4..pV..*....c|
bf 79 69 07 73 2e b0 95  28 8a f5 ed aa a9 d2 5d  |.yi.s...(......]|
cd 0a ca 10 09 8f ce b3  af 28 96 c4 79 29 84 92  |.........(..y)..|
dc ff ba 67 42 48 a6 90  10 e4 bf 61 f8 9c 53 e5  |...gBH.....a..S.|
93 d1 73 3f f8 fd 9d 4f  84 ac 55 d1 fd 11 63 63  |..s?...O..U...cc|
```
- #1
  - 2
    - 08:7A:6D:5C:6F:62:93:4F:BA:C4:FD:43:E1:14:18:9D
    - RSA-MD5: nil
    - #2
      - O: VeriSign Trust Network
      - OU: VeriSign, Inc.
      - OU: VeriSign Time Stamping Service Root
      - OU: NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
    - 2001-02-28 00:00:00 UTC: 2004-01-06 23:59:59 UTC
    - #4
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)01
      - CN: VeriSign Time Stamping Service
    - #5
      - rsaEncryption: nil
      - C0:7A:61:87:EB:B2:A7:03:63:1B:2B:1A:61:DE:80:B7:
        15:1D:A0:8B:90:3D:BB:27:92:84:14:39:EB:85:CE:29:
        92:06:66:48:A4:03:4F:8D:E8:4F:A7:F0:AF:5E:D1:2F:
        19:C7:91:F1:B5:9E:7B:91:21:CE:E9:FF:E3:4E:F0:FC:
        AF:95:58:B8:63:2D:E6:8E:F6:29:18:CD:70:8E:50:C3:
        ED:96:BB:40:DB:BE:25:E8:42:55:D6:F6:85:F2:06:E7:
        8B:99:1C:31:F3:03:0F:D4:4C:9C:24:2A:DC:1B:1B:8F:
        82:F3:B0:EF:A7:4D:E3:14:A7:E0:8F:D6:C7:68:C2:61:
        58:A9:72:D4:F8:30:48:4F:D9:2F:6F:63:20:D9:89:CA:
        82:7B:C2:4B:BC:28:C5:81:68:E7:E6:82:40:AC:46:3A:
        A0:F9:3F:36:CD:4C:BB:54:42:5A:7A:65:7B:FE:84:E4:
        C7:47:54:AC:B9:3D:EC:80:C7:1A:F7:C4:33:81:81:C9:
        2A:95:FB:7F:5E:3A:87:90:14:DB:CC:2E:75:F2:EF:6B:
        E6:3D:A9:60:BE:42:01:AA:4F:AA:5B:A8:3F:22:31:9F:
        12:15:F9:73:A1:1E:82:8B:04:2B:EA:46:02:4C:6D:8F:
        1F:50:2E:95:4B:2A:78:06:84:74:3D:91:8F:2C:47:31: 0x010001
    - X509v3 extensions
      - authorityInfoAccess
        OCSP: http://ocsp.verisign.com/ocsp/status
      - basicConstraints
        nil
      - certificatePolicies
        2.16.840.1.113733.1.7.1.1
        id-qt-cps: https://www.verisign.com/rpa
      - extendedKeyUsage: timeStamping
      - keyUsage: 0xc0
  - RSA-MD5:
```
2d f3 4f 63 60 2c 18 da  f5 24 0f 52 b3 0c eb b3  |-.Oc`,...$.R....|
bc 67 85 c2 23 ed 8f 46  0d cf 1a 4d be f3 7c 7a  |.g..#..F...M..|z|
20 30 32 18 68 8b 92 bb  32 99 f0 93 b8 3b 15 06  | 02.h...2....;..|
27 7b 3e 02 06 00 a4 21  92 84 13 0a c5 98 e5 40  |'{>....!.......@|
57 c5 05 25 e8 af af 11  6a a9 e5 3b cb e9 23 f6  |W..%....j..;..#.|
94 29 5d 40 55 f3 a5 53  9d c8 36 3a 39 65 08 73  |.)]@U..S..6:9e.s|
73 a4 32 d2 af ac bf c7  05 3c ff 45 ec c3 e8 da  |s.2......<.E....|
24 d1 ce 63 ae 09 a7 fb  e2 1b e3 fd 41 0a 6a 96  |$..c........A.j.|
```
- #2
  - 2
    - C1:00:8B:3C:3C:88:11:D1:3E:F6:63:EC:DF:40
    - RSA-MD5: nil
    - #2
      - OU: Copyright (c) 1997 Microsoft Corp.
      - OU: Microsoft Corporation
      - CN: Microsoft Root Authority
    - 1997-01-10 07:00:00 UTC: 2020-12-31 07:00:00 UTC
    - #4
      - OU: Copyright (c) 1997 Microsoft Corp.
      - OU: Microsoft Corporation
      - CN: Microsoft Root Authority
    - #5
      - rsaEncryption: nil
      - A9:02:BD:C1:70:E6:3B:F2:4E:1B:28:9F:97:78:5E:30:
        EA:A2:A9:8D:25:5F:F8:FE:95:4C:A3:B7:FE:9D:A2:20:
        3E:7C:51:A2:9B:A2:8F:60:32:6B:D1:42:64:79:EE:AC:
        76:C9:54:DA:F2:EB:9C:86:1C:8F:9F:84:66:B3:C5:6B:
        7A:62:23:D6:1D:3C:DE:0F:01:92:E8:96:C4:BF:2D:66:
        9A:9A:68:26:99:D0:3A:2C:BF:0C:B5:58:26:C1:46:E7:
        0A:3E:38:96:2C:A9:28:39:A8:EC:49:83:42:E3:84:0F:
        BB:9A:6C:55:61:AC:82:7C:A1:60:2D:77:4C:E9:99:B4:
        64:3B:9A:50:1C:31:08:24:14:9F:A9:E7:91:2B:18:E6:
        3D:98:63:14:60:58:05:65:9F:1D:37:52:87:F7:A7:EF:
        94:02:C6:1B:D3:BF:55:45:B3:89:80:BF:3A:EC:54:94:
        4E:AE:FD:A7:7A:6D:74:4E:AF:18:CC:96:09:28:21:00:
        57:90:60:69:37:BB:4B:12:07:3C:56:FF:5B:FB:A4:66:
        0A:08:A6:D2:81:56:57:EF:B6:3B:5E:16:81:77:04:DA:
        F6:BE:AE:80:95:FE:B0:CD:7F:D6:A7:1A:72:5C:3C:CA:
        BC:F0:08:A3:22:30:B3:06:85:C9:B3:20:77:13:85:DF: 0x010001
    - 2.5.29.1
      - 5b d0 70 ef 69 72 9e 23 51 7e 14 b2 4d 8e ff cb |[.p.ir.#Q~..M...|
        #0
        OU: Copyright (c) 1997 Microsoft Corp.
        OU: Microsoft Corporation
        CN: Microsoft Root Authority
        00 c1 00 8b 3c 3c 88 11 d1 3e f6 63 ec df 40 |....<<...>.c..@ |
  - RSA-MD5:
```
95 e8 0b c0 8d f3 97 18  35 ed b8 01 24 d8 77 11  |........5...$.w.|
f3 5c 60 32 9f 9e 0b cb  3e 05 91 88 8f c9 3a e6  |.\`2....>.....:.|
21 f2 f0 57 93 2c b5 a0  47 c8 62 ef fc d7 cc 3b  |!..W.,..G.b....;|
3b 5a a9 36 54 69 fe 24  6d 3f c9 cc aa de 05 7c  |;Z.6Ti.$m?.....||
dd 31 8d 3d 9f 10 70 6a  bb fe 12 4f 18 69 c0 fc  |.1.=..pj...O.i..|
d0 43 e3 11 5a 20 4f ea  62 7b af aa 19 c8 2b 37  |.C..Z O.b{....+7|
25 2d be 65 a1 12 8a 25  0f 63 a3 f7 54 1c f9 21  |%-.e...%.c..T..!|
c9 d6 15 f3 52 ac 6e 43  32 07 fd 82 17 f8 e5 67  |....R.nC2......g|
6c 0d 51 f6 bd f1 52 c7  bd e7 c4 30 fc 20 31 09  |l.Q...R....0. 1.|
88 1d 95 29 1a 4d d5 1d  02 a5 f1 80 e0 03 b4 5b  |...).M.........[|
f4 b1 dd c8 57 ee 65 49  c7 52 54 b6 b4 03 28 12  |....W.eI.RT...(.|
ff 90 d6 f0 08 8f 7e b8  97 c5 ab 37 2c e4 7a e4  |......~....7,.z.|
a8 77 e3 76 a0 00 d0 6a  3f c1 d2 36 8a e0 41 12  |.w.v...j?..6..A.|
a8 35 6a 1b 6a db 35 e1  d4 1c 04 e4 a8 45 04 c8  |.5j.j.5......E..|
5a 33 38 6e 4d 1c 0d 62  b7 0a a2 8c d3 d5 54 3f  |Z38nM..b......T?|
46 cd 1c 55 a6 70 db 12  3a 87 93 75 9f a7 d2 a0  |F..U.p..:..u....|
```
- #3
  - 2
    - 6A:0B:99:4F:C0:00:DE:AA:11:D4:D8:40:9A:A8:BE:E6
    - RSA-MD5: nil
    - #2
      - OU: Copyright (c) 1997 Microsoft Corp.
      - OU: Microsoft Corporation
      - CN: Microsoft Root Authority
    - 2000-12-10 08:00:00 UTC: 2005-11-12 08:00:00 UTC
    - Subject
      - C: US
      - ST: Washington
      - L: Redmond
      - O: Microsoft Corporation
      - OU: Copyright (c) 2000 Microsoft Corp.
      - CN: Microsoft Code Signing PCA
    - #5
      - rsaEncryption: nil
      - A2:84:15:53:D8:0B:30:0E:34:95:FF:3A:1B:C2:F3:2F:
        7B:6D:37:23:4D:F3:D2:8C:E5:FD:AF:FD:C5:02:34:1F:
        24:C7:E5:A1:DC:54:EC:7E:02:74:47:AB:DB:32:58:16:
        14:51:29:38:F1:7E:B2:B4:8C:3A:47:B5:39:4E:6E:54:
        C2:31:0C:3A:6D:FB:CD:CD:CB:50:9C:1B:AE:A7:D8:D9:
        4A:26:3F:B5:C5:CB:8F:96:E2:49:F2:6D:D8:E9:96:3E:
        DE:05:CF:F0:A6:55:37:AD:2F:60:CD:80:61:42:A1:49:
        54:4A:0F:18:B7:4B:D9:93:99:30:5A:47:75:64:B4:D3:
        BB:DD:B6:AB:0C:9D:4F:B8:73:3B:18:3A:AA:B4:87:8C:
        B0:88:B0:4D:4F:1F:4E:11:B5:33:80:DF:0D:3A:64:6F:
        44:C7:34:BD:4A:93:9B:BC:A6:1D:F9:05:23:4E:60:29:
        8F:CC:2A:F2:84:9A:99:AD:A8:DB:0A:70:7B:D6:34:41:
        90:A5:B7:66:C7:5C:1B:1D:A3:33:0E:9B:54:03:1A:3F:
        98:90:B8:CC:E7:3D:04:74:43:1C:8F:F7:39:E6:B3:AC:
        48:7A:6B:2A:0E:62:01:61:39:76:6E:FD:3E:98:07:4B:
        14:F1:01:46:FD:15:00:E0:47:DA:4F:E4:05:E4:80:25: 3
    - #6
      - extendedKeyUsage: codeSigning
      - 2.5.29.1
        5b d0 70 ef 69 72 9e 23 51 7e 14 b2 4d 8e ff cb |[.p.ir.#Q~..M...|
        #0
        OU: Copyright (c) 1997 Microsoft Corp.
        OU: Microsoft Corporation
        CN: Microsoft Root Authority
        00 c1 00 8b 3c 3c 88 11 d1 3e f6 63 ec df 40 |....<<...>.c..@ |
      - 1.3.6.1.4.1.311.21.1: 0
      - subjectKeyIdentifier:
        29 5c b9 1b b6 cd 33 ee bb 9e 59 7d f7 e5 ca 2e |)\....3...Y}....| c4 0d 34 28 |..4( |
      - 1.3.6.1.4.1.311.20.2:
        00 53 00 75 00 62 00 43 00 41 |.S.u.b.C.A |
      - keyUsage: F
      - basicConstraints: true, true
  - RSA-MD5:
```
45 58 e2 9a 41 7f fc 9d  bf 48 77 77 ae 8c d9 e6  |EX..A....Hww....|
19 c5 57 b4 1a bd b4 b9  5f 02 a1 45 6a 39 59 f9  |..W....._..Ej9Y.|
b9 27 9c 2d 4d 9e fc a2  e4 38 8a 38 64 22 42 df  |.'.-M....8.8d"B.|
b9 2f 2a cf b7 d6 06 ca  eb 2a bf e0 1a 85 7c db  |./*......*....|.|
51 08 3d f4 22 d3 d4 c0  6d 88 81 15 44 5f 64 83  |Q.=."...m...D_d.|
64 c4 a9 94 2c 8a db 90  37 4a 0f b7 e8 d4 61 8f  |d...,...7J....a.|
76 76 e1 d9 25 ff 24 84  95 8d 04 56 54 94 a1 1c  |vv..%.$....VT...|
3a 3e 82 bc ee a5 87 8c  1c 8c 4b 79 5f b5 49 fa  |:>........Ky_.I.|
5e 32 69 3a 1f 54 ad 75  4d df 64 e7 30 3c db 64  |^2i:.T.uM.d.0<.d|
49 44 fb fb c4 1c 42 71  e6 a0 3d 45 ee 6b 00 9f  |ID....Bq..=E.k..|
ac 42 bd ba 11 b3 56 e4  fb d5 a2 2a 81 d8 1f 4e  |.B....V....*...N|
a2 55 be 27 8f 70 a6 a2  6c 1b ff 54 8a 82 bc 81  |.U.'.p..l..T....|
4b a6 a1 b1 66 7a a9 17  a7 cb 06 c0 47 eb a6 b3  |K...fz......G...|
e9 31 15 53 3d 2a 04 bf  ff 73 48 dc 8b 27 43 fc  |.1.S=*...sH..'C.|
63 e8 ee 24 87 5b be 36  d1 e8 31 f5 32 d9 5e df  |c..$.[.6..1.2.^.|
79 7a ba 30 ac 69 86 4a  fb 8c 11 bf 1b 8d 54 59  |yz.0.i.J......TY|
```
- Certificate #4
  - 2
    - 61:07:11:43:00:00:00:00:00:34
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - ST: Washington
      - L: Redmond
      - O: Microsoft Corporation
      - OU: Copyright (c) 2000 Microsoft Corp.
      - CN: Microsoft Code Signing PCA
    - 2002-05-25 00:55:48 UTC: 2003-11-25 01:05:48 UTC
    - Subject
      - C: US
      - ST: Washington
      - L: Redmond
      - O: Microsoft Corporation
      - OU: Copyright (c) 2002 Microsoft Corp.
      - CN: Microsoft Corporation
    - #5
      - rsaEncryption: nil
      - AA:99:BD:39:A8:18:27:F4:2B:3D:0B:4C:3F:7C:77:2E:
        A7:CB:B5:D1:8C:0D:C2:3A:74:D7:93:B5:E0:A0:4B:3F:
        59:5E:CE:45:4F:9A:79:29:F1:49:CC:1A:47:EE:55:C2:
        08:3E:12:20:F8:55:F2:EE:5F:D3:E0:CA:96:BC:30:DE:
        FE:58:C8:27:32:D0:85:54:E8:F0:91:10:BB:F3:2B:BE:
        19:E5:03:9B:0B:86:1D:F3:B0:39:8C:B8:FD:0B:1D:3C:
        73:26:AC:57:2B:CA:29:A2:15:90:82:15:E2:77:A3:40:
        52:03:8B:9D:C2:70:BA:1F:E9:34:F6:F3:35:92:4E:55:
        83:F8:DA:30:B6:20:DE:57:06:B5:5A:42:06:DE:59:CB:
        F2:DF:A6:BD:15:47:71:19:25:23:D2:CB:6F:9B:19:79:
        DF:6A:5B:F1:76:05:79:29:FC:C3:56:CA:8F:44:08:85:
        55:8A:CB:C8:0F:46:4B:55:CB:8C:96:77:4A:87:E8:A9:
        41:06:C7:FF:0D:E9:68:57:63:72:C3:69:57:B4:43:CF:
        32:3A:30:DC:1B:E9:D5:43:26:2A:79:FE:95:DB:22:67:
        24:C9:2F:D0:34:E3:E6:FB:51:49:86:B8:3C:D0:25:5F:
        D6:EC:9E:03:61:87:A9:68:40:C7:F8:E2:03:E6:CF:05: 0x010001
    - #6
      - keyUsage: true, 0xc0
      - extendedKeyUsage: codeSigning
      - subjectKeyIdentifier:
        6b c8 c6 51 20 f0 b4 2f d3 a0 b6 ae 7f 5e 26 b2 |k..Q ../.....^&.| b8 87 52 29 |..R) |
      - authorityKeyIdentifier
        29 5c b9 1b b6 cd 33 ee bb 9e 59 7d f7 e5 ca 2e |)\....3...Y}....| c4 0d 34 28 |..4( |
        #0
        OU: Copyright (c) 1997 Microsoft Corp.
        OU: Microsoft Corporation
        CN: Microsoft Root Authority
        6a 0b 99 4f c0 00 de aa 11 d4 d8 40 9a a8 be e6 |j..O.......@....|
      - crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/CodeSignPCA.crl
  - RSA-SHA1:
```
35 23 fd 13 54 fc e9 dc  f0 dd 0c 14 7a fa a7 b3  |5#..T.......z...|
ce fd a7 3a c8 ba e5 e7  f6 03 fb 53 db a7 99 a9  |...:.......S....|
a0 9b 36 9c 03 eb 82 47  1c 21 bd 14 cb e7 67 40  |..6....G.!....g@|
09 c7 16 91 02 55 ce 43  42 b4 cd 1b 5d b0 f3 32  |.....U.CB...]..2|
04 3d 12 e5 1d a7 07 a7  8f a3 7e 45 55 76 1b 96  |.=........~EUv..|
95 91 69 f0 dd 38 f3 48  89 ef 70 40 b7 db b5 55  |..i..8.H..p@...U|
80 c0 03 c4 2e b6 28 dc  0a 82 0e c7 43 e3 7a 48  |......(.....C.zH|
5d b8 06 89 92 40 6c 6e  c5 dc f8 9a ef 0b be 21  |]....@ln.......!|
0a 8c 2f 3a b5 ed a7 ce  71 87 68 23 e1 b3 e4 18  |../:....q.h#....|
7d b8 47 01 a5 2b c4 58  cb b2 89 6c 5f fd d3 2c  |}.G..+.X...l_..,|
c4 6f b8 23 b2 0d ff 3c  f2 11 45 74 f2 09 06 99  |.o.#...<..Et....|
18 dd 6f c0 86 01 18 12  1d 2b 16 af 56 ef 65 33  |..o......+..V.e3|
a1 ea 67 4e f4 4b 82 ab  e9 0f dc 01 fa df 60 7f  |..gN.K........`.|
66 47 5d cb 2c 70 cc 7b  4e d9 06 b8 6e 8c 0c fe  |fG].,p.{N...n...|
62 1e 42 f9 93 7c a2 ab  0a 9e d0 23 10 ae 4d 7b  |b.B..|.....#..M{|
27 91 6f 26 be 68 fa a6  3f 9f 23 eb c8 9d bb 87  |'.o&.h..?.#.....|
```

Signer

1
unnamed
- #0
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - OU: Copyright (c) 2000 Microsoft Corp.
  - CN: Microsoft Code Signing PCA
- 61:07:11:43:00:00:00:00:00:34
MD5: nil

contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

86 22 66 02 eb f7 db 07  11 e3 66 15 d6 64 9f d3  |."f.......f..d..|

1.3.6.1.4.1.311.2.1.12

00 57 00 65 00 66 00 74 00 20 00 49 00 49 00 49 |.W.e.f.t. .I.I.I| 00 62 00 31 |.b.1 |
: http://www.microsoft.com/typography/

rsaEncryption:

06 a8 96 c3 06 20 2a 6a  41 5a 45 79 77 35 60 78  |..... *jAZEyw5`x|
2c 12 2e 9e db 3b a2 27  57 28 bf 19 44 1a e9 7f  |,....;.'W(..D...|
f1 76 fa c2 f6 19 e7 e5  39 77 b9 10 3b 41 81 e1  |.v......9w..;A..|
e7 49 ee 1b 40 e3 c2 ad  d1 50 d9 e0 f5 59 1e f6  |.I..@....P...Y..|
0f cd 94 d6 d2 3a 23 6e  20 60 56 f9 8f 39 b5 10  |.....:#n `V..9..|
d1 50 5f 37 37 7d ba 2e  0f b3 69 88 3c 31 e1 f8  |.P_77}....i.<1..|
88 f4 dc a6 a1 7d b9 4a  b9 e7 b1 55 4f 21 45 3e  |.....}.J...UO!E>|
09 59 7a ea 7e 77 d9 24  7c 49 00 90 0b 0c 2f 1d  |.Yz.~w.$|I..../.|
dd b0 25 f3 37 d1 8a 4e  b2 84 98 c8 7f 7c 94 b6  |..%.7..N.....|..|
09 56 ed e2 47 15 de a8  ed fa f6 c9 1e 0c af 12  |.V..G...........|
f6 ca 8f e5 47 63 31 b8  12 5f 2e 30 f4 8d 11 47  |....Gc1.._.0...G|
76 4a 5d f8 00 a4 1c 8a  84 0b af 79 07 99 ac 17  |vJ]........y....|
3a b5 5b 9a 25 de 44 13  78 71 cd e9 7d 7a 4c aa  |:.[.%.D.xq..}zL.|
4f 0b 4e d3 be 62 d9 31  bb ca c9 f2 1b 4d cf 92  |O.N..b.1.....M..|
3c 52 bc 4b 33 b3 0e 3c  18 18 25 4a 2c b6 35 92  |countersignature1unnamed#0O: VeriSign Trust Network
OU: VeriSign, Inc.
OU: VeriSign Time Stamping Service Root
OU: NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
08:7A:6D:5C:6F:62:93:4F:BA:C4:FD:43:E1:14:18:9D
MD5: nil
#2contentType: pkcs7-data
signingTime: 2003-02-24 16:24:20 UTC
messageDigest: 9f 29 95 66 f0 95 e2 6b  58 7d 9c bf 01 ee 6b 65  |.).f...kX}....ke|
rsaEncryption: 8f 90 db 39 ee 8b 4c 8a  34 8a 2d 57 82 c2 f9 96  |...9..L.4.-W....|
78 51 95 c3 e9 36 6c dc  43 20 b0 59 1a b6 cf b8  |xQ...6l.C .Y....|
ff c7 ca 91 ef 00 3b 7b  f9 02 b4 e9 36 83 95 40  |......;{....6..@|
02 37 7c 4d 1a 58 70 23  f1 a4 9a f3 d5 95 2e dc  |.7|M.Xp#........|
e4 c3 cb bd e1 c8 5b 81  63 8b ea c2 4a 57 08 85  |......[.c...JW..|
9b 40 29 b7 4f dd b1 7f  8d c9 c5 b7 a6 09 2e 5e  |.@).O..........^|
e1 8c 35 07 ba 1a ec 11  76 cc cd d7 02 f2 ce 8a  |..5.....v.......|
ab 8a 59 82 35 bd 02 25  c3 cd 1e 9b 10 2b e8 5a  |..Y.5..%.....+.Z|
ae 38 d9 11 33 6f 9c 8a  c0 3e 7b ae 3f 2a 11 f6  |.8..3o...>{.?*..|
a6 6b 70 e9 85 df aa 97  5e 33 1b b6 27 1a 16 cf  |.kp.....^3..'...|
be da 7a 86 23 35 8c c4  67 55 74 46 a2 c9 5a d7  |..z.#5..gUtF..Z.|
d0 6d 93 56 ce 1d 5b c1  76 73 8c 3a e4 80 22 e1  |.m.V..[.vs.:..".|
1f 7c 2d 58 9a 62 00 73  90 f3 2b fe 03 61 5f e4  |.|-X.b.s..+..a_.|
8e 33 1f 92 cd ea 2e d8  90 d6 90 21 14 c2 bc 91  |.3.........!....|
16 91 99 9b 52 61 72 5b  c6 78 52 87 94 5c af 62  |....Rar[.xR..\.b|
aa ed c5 00 65 7a 67 54  6f 68 93 e7 5c 5f 1e 57  |....ezgToh..\_.W|

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	9712752	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 9718336 bytes (9491 KiB)


--
Type = PE
Physical Size = 9718336
CPU = x86
Characteristics = Executable 32-bit NoRelocs NoLineNums NoLocalSyms
Created = 2001-02-15 17:53:14
Headers Size = 4096
Checksum = 9768884
Image Size = 9711616
Section Alignment = 4096
File Alignment = 4096
Code Size = 16384
Initialized Data Size = 9691136
Uninitialized Data Size = 0
Linker Version = 6.0
OS Version = 4.0
Image Version = 0.0
Subsystem Version = 4.0
Subsystem = Windows GUI
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
----
Path = .rsrc/EXE/1
Size = 9605394
Packed Size = 9605394
--
Path = .rsrc/EXE/1
Type = Cab
Physical Size = 9605394
Method = MSZip
Blocks = 1
Volumes = 1
Volume Index = 0
ID = 0

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2002-02-21 10:13:30 ....A        63998               diamond.ex_
2002-02-21 10:13:30 ....A         7977               eula.txt
2003-02-24 11:55:56 ....A       306916               fonts.cab
2003-02-24 11:55:52 ....A       102400               isetup.exe
2002-02-21 10:13:36 ....A      7856352               mdac_typ.exe
2003-02-14 11:58:06 ....A          768               package.ini
2003-02-14 12:11:48 ....A         2103               setup_help.html
2003-02-24 11:55:58 ....A      1382441               weft.cab
------------------- ----- ------------ ------------  ------------------------
2003-02-24 11:55:58            9722955      9718336  8 files

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK