flash_player_ax.exe - Adobe® Flash® Player ActiveX Installer

info
MZ
PE
resources
imports
foremost
7zip
version info
signature
hexdump
disasm
log
discuss
donate

filename	flash_player_ax.exe
size	1956656 (0x1ddb30)
md5	5f6c243a10337a4269f994cd8b3a6137

type	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xd0

Rich Header

lib id	version	times used
95	2190	2
1	0	155
93	2179	17
48	9044	9
6	1735	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x45a924be
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0x6200
SizeOfInitializedData	0x1f000
SizeOfUninitializedData	0x400
AddressOfEntryPoint	0x36f2
BaseOfCode	0x1000
BaseOfData	0x8000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x3b000
SizeOfHeaders	0x400
CheckSum	0x1e40eb
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

Nullsoft install system v2.x

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x613a	0x6200	R-X CODE
.rdata	0x8000	0x1142	0x1200	R-- IDATA
.data	0xa000	0x1cbd4	0xc00	RW- IDATA
.ndata	0x27000	0x9000	0	RW- UDATA
.rsrc	0x30000	0xade8	0xae00	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x8350	0xb4
RESOURCE	0x30000	0xade8
EXCEPTION	0	0
SECURITY	0x1dc560	0x15d0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x8000	0x28c
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
ICON	#1	3752
ICON	#2	2216
ICON	#3	1384
ICON	#4	16144
ICON	#5	9640
ICON	#6	4264
ICON	#7	1128
DIALOG	#105	224
DIALOG	#106	284
DIALOG	#111	96
DIALOG	#205	204
DIALOG	#206	264
DIALOG	#211	76
DIALOG	#305	208
DIALOG	#306	268
DIALOG	#311	80
DIALOG	#405	216
DIALOG	#406	276
DIALOG	#411	88
DIALOG	#505	204
DIALOG	#506	264
DIALOG	#511	76
GROUP_ICON	#103	104
VERSION	#1	956
MANIFEST	#1	733

module_name	hint	ord	function_name
KERNEL32.dll	46		CloseHandle
KERNEL32.dll	788		SetFileTime
KERNEL32.dll	51		CompareFileTime
KERNEL32.dll	720		SearchPathA
KERNEL32.dll	429		GetShortPathNameA
KERNEL32.dll	353		GetFullPathNameA
KERNEL32.dll	612		MoveFileA
KERNEL32.dll	767		SetCurrentDirectoryA
KERNEL32.dll	342		GetFileAttributesA
KERNEL32.dll	361		GetLastError
KERNEL32.dll	69		CreateDirectoryA
KERNEL32.dll	782		SetFileAttributesA
KERNEL32.dll	841		Sleep
KERNEL32.dll	77		CreateFileA
KERNEL32.dll	347		GetFileSize
KERNEL32.dll	373		GetModuleFileNameA
KERNEL32.dll	469		GetTickCount
KERNEL32.dll	950		lstrcmpiA
KERNEL32.dll	61		CopyFileA
KERNEL32.dll	175		ExitProcess
KERNEL32.dll	264		GetCommandLineA
KERNEL32.dll	489		GetWindowsDirectoryA
KERNEL32.dll	459		GetTempPathA
KERNEL32.dll	956		lstrcpynA
KERNEL32.dll	325		GetDiskFreeSpaceA
KERNEL32.dll	512		GlobalUnlock
KERNEL32.dll	505		GlobalLock
KERNEL32.dll	105		CreateThread
KERNEL32.dll	96		CreateProcessA
KERNEL32.dll	698		RemoveDirectoryA
KERNEL32.dll	457		GetTempFileNameA
KERNEL32.dll	959		lstrlenA
KERNEL32.dll	944		lstrcatA
KERNEL32.dll	441		GetSystemDirectoryA
KERNEL32.dll	947		lstrcmpA
KERNEL32.dll	336		GetEnvironmentVariableA
KERNEL32.dll	178		ExpandEnvironmentStringsA
KERNEL32.dll	501		GlobalFree
KERNEL32.dll	494		GlobalAlloc
KERNEL32.dll	901		WaitForSingleObject
KERNEL32.dll	338		GetExitCodeProcess
KERNEL32.dll	778		SetErrorMode
KERNEL32.dll	375		GetModuleHandleA
KERNEL32.dll	584		LoadLibraryA
KERNEL32.dll	408		GetProcAddress
KERNEL32.dll	239		FreeLibrary
KERNEL32.dll	619		MultiByteToWideChar
KERNEL32.dll	924		WritePrivateProfileStringA
KERNEL32.dll	404		GetPrivateProfileStringA
KERNEL32.dll	919		WriteFile
KERNEL32.dll	683		ReadFile
KERNEL32.dll	784		SetFilePointer
KERNEL32.dll	618		MulDiv
KERNEL32.dll	197		FindClose
KERNEL32.dll	211		FindNextFileA
KERNEL32.dll	201		FindFirstFileA
KERNEL32.dll	124		DeleteFileA
KERNEL32.dll	314		GetCurrentProcess
USER32.dll	560		ScreenToClient
USER32.dll	372		GetWindowRect
USER32.dll	582		SetClassLongA
USER32.dll	430		IsWindowEnabled
USER32.dll	642		SetWindowPos
USER32.dll	346		GetSysColor
USER32.dll	366		GetWindowLongA
USER32.dll	588		SetCursor
USER32.dll	441		LoadCursorA
USER32.dll	56		CheckDlgButton
USER32.dll	242		GetAsyncKeyState
USER32.dll	419		IsDlgButtonChecked
USER32.dll	316		GetMessagePos
USER32.dll	439		LoadBitmapA
USER32.dll	27		CallWindowProcA
USER32.dll	433		IsWindowVisible
USER32.dll	66		CloseClipboard
USER32.dll	585		SetClipboardData
USER32.dll	193		EmptyClipboard
USER32.dll	501		OpenClipboard
USER32.dll	198		EndDialog
USER32.dll	8		AppendMenuA
USER32.dll	94		CreatePopupMenu
USER32.dll	349		GetSystemMetrics
USER32.dll	594		SetDlgItemTextA
USER32.dll	275		GetDlgItemTextA
USER32.dll	478		MessageBoxA
USER32.dll	45		CharPrevA
USER32.dll	727		wvsprintfA
USER32.dll	161		DispatchMessageA
USER32.dll	511		PeekMessageA
USER32.dll	85		CreateDialogParamA
USER32.dll	153		DestroyWindow
USER32.dll	633		SetTimer
USER32.dll	645		SetWindowTextA
USER32.dll	515		PostQuitMessage
USER32.dll	657		ShowWindow
USER32.dll	725		wsprintfA
USER32.dll	573		SendMessageTimeoutA
USER32.dll	228		FindWindowExA
USER32.dll	533		RegisterClassA
USER32.dll	664		SystemParametersInfoA
USER32.dll	96		CreateWindowExA
USER32.dll	246		GetClassInfoA
USER32.dll	158		DialogBoxParamA
USER32.dll	42		CharNextA
USER32.dll	675		TrackPopupMenu
USER32.dll	225		ExitWindowsEx
USER32.dll	429		IsWindow
USER32.dll	273		GetDlgItem
USER32.dll	639		SetWindowLongA
USER32.dll	447		LoadImageA
USER32.dll	268		GetDC
USER32.dll	196		EnableWindow
USER32.dll	403		InvalidateRect
USER32.dll	570		SendMessageA
USER32.dll	142		DefWindowProcA
USER32.dll	13		BeginPaint
USER32.dll	255		GetClientRect
USER32.dll	226		FillRect
USER32.dll	188		DrawTextA
USER32.dll	200		EndPaint
USER32.dll	598		SetForegroundWindow
GDI32.dll	533		SetBkColor
GDI32.dll	363		GetDeviceCaps
GDI32.dll	143		DeleteObject
GDI32.dll	41		CreateBrushIndirect
GDI32.dll	58		CreateFontIndirectA
GDI32.dll	534		SetBkMode
GDI32.dll	572		SetTextColor
GDI32.dll	526		SelectObject
SHELL32.dll	183		SHGetMalloc
SHELL32.dll	188		SHGetPathFromIDListA
SHELL32.dll	121		SHBrowseForFolderA
SHELL32.dll	172		SHGetFileInfoA
SHELL32.dll	263		ShellExecuteA
SHELL32.dll	154		SHFileOperationA
SHELL32.dll	195		SHGetSpecialFolderLocation
ADVAPI32.dll	492		RegQueryValueExA
ADVAPI32.dll	505		RegSetValueExA
ADVAPI32.dll	469		RegEnumKeyA
ADVAPI32.dll	473		RegEnumValueA
ADVAPI32.dll	482		RegOpenKeyExA
ADVAPI32.dll	464		RegDeleteKeyA
ADVAPI32.dll	466		RegDeleteValueA
ADVAPI32.dll	457		RegCloseKey
ADVAPI32.dll	461		RegCreateKeyExA
COMCTL32.dll	52		ImageList_AddMasked
COMCTL32.dll	56		ImageList_Destroy
COMCTL32.dll		17
COMCTL32.dll	55		ImageList_Create
ole32.dll	237		OleInitialize
ole32.dll	260		OleUninitialize
ole32.dll	16		CoCreateInstance
VERSION.dll	1		GetFileVersionInfoSizeA
VERSION.dll			GetFileVersionInfoA
VERSION.dll	10		VerQueryValueA

StringTable 04090000

CompanyName	Adobe Systems Incorporated
CompanyWebsite	http://www.adobe.com/go/getflashplayer
FileDescription	Adobe® Flash® Player ActiveX Installer
FileVersion	1.0.20
LegalCopyright	Copyright © 1996-2009 Adobe Systems Incorporated and its licensors. All Rights Reserved.
ProductName	Adobe® Flash® Player ActiveX
ProductVersion	10.0.45.2

VS_FIXEDFILEINFO

FileVersion	10.0.45.2
ProductVersion	10.0.45.2
StrucVersion	0
FileFlagsMask	0
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)09/CN=VeriSign Class 3 Code Signing 2009-2 CA

serial: 4D4EDD7706EF6B3131D00B1C6791D0C1

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Validity
            Not Before: Jun 15 00:00:00 2007 GMT
            Not After : Jun 14 23:59:59 2012 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (1024 bit)
                Modulus:
                    00:c4:b5:f2:52:15:bc:88:86:60:29:16:4a:5b:2f:
                    4b:91:6b:87:91:f3:35:54:58:35:ea:d1:36:5e:62:
                    4d:52:51:34:71:c2:7b:66:1d:89:c8:dd:2a:c4:6a:
                    0a:f6:37:d9:98:74:91:f6:92:ae:b0:b5:76:96:f1:
                    a9:4a:63:45:47:2e:6b:0b:92:4e:4b:2b:8c:ee:58:
                    4a:8b:d4:07:e4:1a:2c:f8:82:aa:58:d9:cd:42:f3:
                    2d:c0:75:de:8d:ab:c7:8e:1d:9a:6c:4c:08:95:1e:
                    de:db:ef:67:e1:72:c2:49:c2:9e:60:3c:e1:e2:be:
                    16:a3:63:78:69:14:7b:ad:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/tss-ca.crl

            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA1-2
    Signature Algorithm: sha1WithRSAEncryption
         50:c5:4b:c8:24:80:df:e4:0d:24:c2:de:1a:b1:a1:02:a1:a6:
         82:2d:0c:83:15:81:37:0a:82:0e:2c:b0:5a:17:61:b5:d8:05:
         fe:88:db:f1:91:91:b3:56:1a:40:a6:eb:92:be:38:39:b0:75:
         36:74:3a:98:4f:e4:37:ba:99:89:ca:95:42:1d:b0:b9:c7:a0:
         8d:57:e0:fa:d5:64:04:42:35:4e:01:d1:33:a2:17:c8:4d:aa:
         27:c7:f2:e1:86:4c:02:38:4d:83:78:c6:fc:53:e0:eb:e0:06:
         87:dd:a4:96:9e:5e:0c:98:e2:a5:be:bf:82:85:c3:60:e1:df:
         ad:28:d8:c7:a5:4b:64:da:c7:1b:5b:bd:ac:39:08:d5:38:22:
         a1:33:8b:2f:8a:9a:eb:bc:07:21:3f:44:41:09:07:b5:65:1c:
         24:bc:48:d3:44:80:eb:a1:cf:c9:02:b4:14:cf:54:c7:16:a3:
         80:5c:f9:79:3e:5d:72:7d:88:17:9e:2c:43:a2:ca:53:ce:7d:
         3d:f6:2a:3a:b8:4f:94:00:a5:6d:0a:83:5d:f9:5e:53:f4:18:
         b3:57:0f:70:c3:fb:f5:ad:95:a0:0e:17:de:c4:16:80:60:c9:
         0f:2b:6e:86:04:f1:eb:f4:78:27:d1:05:c5:ee:34:5b:5e:b9:
         49:32:f2:33

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec  4 00:00:00 2003 GMT
            Not After : Dec  3 23:59:59 2013 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:b2:a4:cc:cd:20:af:0a:7d:89:ac:87:75:
                    f0:b4:4e:f1:df:c1:0f:bf:67:61:bd:a3:64:1c:da:
                    bb:f9:ca:33:ab:84:30:89:58:7e:8c:db:6b:dd:36:
                    9e:0f:bf:d1:ec:78:f2:77:a6:7e:6f:3c:bf:93:af:
                    0d:ba:68:f4:6c:94:ca:bd:52:2d:ab:48:3d:f5:b6:
                    d5:5d:5f:1b:02:9f:fa:2f:6b:1e:a4:f7:a3:9a:a6:
                    1a:c8:02:e1:7f:4c:52:e3:0e:60:ec:40:1c:7e:b9:
                    0d:de:3f:c7:b4:df:87:bd:5f:7a:6a:31:2e:03:99:
                    81:13:a8:47:20:ce:31:73:0d:57:2d:cd:78:34:33:
                    95:12:99:12:b9:de:68:2f:aa:e6:e3:c2:8a:8c:2a:
                    c3:8b:21:87:66:bd:83:58:57:6f:75:bf:3c:aa:26:
                    87:5d:ca:10:15:3c:9f:84:ea:54:c1:0a:6e:c4:fe:
                    c5:4a:dd:b9:07:11:97:22:7c:db:3e:27:d1:1e:78:
                    ec:9f:31:c9:f1:e6:22:19:db:c4:b3:47:43:9a:1a:
                    5f:a0:1e:90:e4:5e:f5:ee:7c:f1:7d:ab:62:01:8f:
                    f5:4d:0b:de:d0:22:56:a8:95:cd:ae:88:76:ae:ee:
                    ba:0d:f3:e4:4d:d9:a0:fb:68:a0:ae:14:3b:b3:87:
                    c1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/ThawteTimestampingCA.crl

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA2048-1-53
    Signature Algorithm: sha1WithRSAEncryption
         4a:6b:f9:ea:58:c2:44:1c:31:89:79:99:2b:96:bf:82:ac:01:
         d6:1c:4c:cd:b0:8a:58:6e:df:08:29:a3:5e:c8:ca:93:13:e7:
         04:52:0d:ef:47:27:2f:00:38:b0:e4:c9:93:4e:9a:d4:22:62:
         15:f7:3f:37:21:4f:70:31:80:f1:8b:38:87:b3:e8:e8:97:00:
         fe:cf:55:96:4e:24:d2:a9:27:4e:7a:ae:b7:61:41:f3:2a:ce:
         e7:c9:d9:5e:dd:bb:2b:85:3e:b5:9d:b5:d9:e1:57:ff:be:b4:
         c5:7e:f5:cf:0c:9e:f0:97:fe:2b:d3:3b:52:1b:1b:38:27:f7:
         3f:4a

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
        Validity
            Not Before: May 21 00:00:00 2009 GMT
            Not After : May 20 23:59:59 2019 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009-2 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:67:1d:b4:60:aa:10:49:6f:56:17:7c:66:c9:
                    5e:86:0d:d5:f1:ac:a7:71:83:8e:8b:89:f8:88:04:
                    89:15:06:ba:2d:84:21:95:e4:d1:9c:50:4c:fb:d2:
                    22:bd:da:f2:b2:35:3b:1e:8f:c3:09:fb:fc:13:2e:
                    5a:bf:89:7c:3d:3b:25:1e:f6:f3:58:7b:9c:f4:01:
                    b5:c6:0a:b8:80:ce:be:27:74:61:67:27:4d:6a:e5:
                    ec:81:61:58:79:a3:e0:17:10:12:15:27:b0:e1:4d:
                    34:7f:2b:47:20:44:b9:de:66:24:66:8a:cd:4f:ba:
                    1f:c5:38:c8:54:90:e1:72:f6:19:66:75:6a:b9:49:
                    68:cf:38:79:0d:aa:30:a8:db:2c:60:48:9e:d7:aa:
                    14:01:a9:83:d7:38:91:30:39:13:96:03:3a:7c:40:
                    54:b6:ad:e0:2f:1b:83:dc:a8:11:52:3e:02:b3:d7:
                    2b:fd:21:b6:a7:5c:a3:0f:0b:a9:a6:10:50:0e:34:
                    2e:4d:a7:ce:c9:5e:25:d4:8c:bc:f3:6e:7c:29:bc:
                    01:5d:fc:31:87:5a:d5:8c:85:67:58:88:19:a0:bf:
                    35:f0:ea:2b:a3:21:e7:90:f6:83:e5:a8:ed:60:78:
                    5e:7b:60:83:fd:57:0b:5d:41:0d:63:54:60:d6:43:
                    21:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/pca3.crl

            X509v3 Subject Alternative Name: 
                DirName:/CN=Class3CA2048-1-55
            X509v3 Subject Key Identifier: 
                97:D0:6B:A8:26:70:C8:A1:3F:94:1F:08:2D:C4:35:9B:A4:A1:1E:F2
    Signature Algorithm: sha1WithRSAEncryption
         8b:03:c0:dd:94:d8:41:a2:61:69:b0:15:a8:78:c7:30:c6:90:
         3c:7e:42:f7:24:b6:e4:83:73:17:04:7f:04:10:9c:a1:e2:fa:
         81:2f:eb:c0:ca:44:e7:72:e0:50:b6:55:10:20:83:6e:96:92:
         e4:9a:51:6a:b4:37:31:dc:a5:2d:eb:8c:00:c7:1d:4f:e7:4d:
         32:ba:85:f8:4e:be:fa:67:55:65:f0:6a:be:7a:ca:64:38:1a:
         10:10:78:45:76:31:f3:86:7a:03:0f:60:c2:b3:5d:9d:f6:8b:
         66:76:82:1b:59:e1:83:e5:bd:49:a5:38:56:e5:de:41:77:0e:
         58:0f

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)09, CN=VeriSign Class 3 Code Signing 2009-2 CA
        Validity
            Not Before: Nov  5 00:00:00 2009 GMT
            Not After : Dec 10 23:59:59 2010 GMT
        Subject: C=US, ST=California, L=San Jose, O=Adobe Systems Incorporated, OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=Information Systems, CN=Adobe Systems Incorporated
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (1024 bit)
                Modulus:
                    00:92:cb:a4:73:da:8a:be:95:d4:2b:07:70:f6:4f:
                    a2:63:18:cc:f1:ec:32:c0:c5:b7:00:fa:47:83:f6:
                    3e:12:f5:2b:ae:08:7a:6a:a5:c6:b4:34:d9:b0:77:
                    30:82:3e:dc:48:87:3c:87:b4:5b:1b:9d:a4:10:67:
                    fc:9a:02:00:3e:6f:de:30:12:03:55:e0:18:78:a2:
                    75:a1:1f:fc:e8:4a:0a:c5:29:d2:4c:bb:a2:3b:b7:
                    72:a9:51:ce:07:0f:4a:6f:33:15:c6:5e:0d:6b:6d:
                    48:0e:9d:ac:aa:a2:7f:45:1c:5d:76:58:67:64:dc:
                    06:08:51:08:b7:65:ad:4b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://csc3-2009-2-crl.verisign.com/CSC3-2009-2.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa

            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
                CA Issuers - URI:http://csc3-2009-2-aia.verisign.com/CSC3-2009-2.cer

            X509v3 Authority Key Identifier: 
                keyid:97:D0:6B:A8:26:70:C8:A1:3F:94:1F:08:2D:C4:35:9B:A4:A1:1E:F2

            Netscape Cert Type: 
                Object Signing
            2.16.840.1.113733.1.6.7: 
                . 57996172c7f532741091a94124a92d0e
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
         08:d4:70:37:0d:27:c0:93:ef:85:25:7b:9d:9b:4e:ac:b2:69:
         1b:ac:09:91:28:ff:c5:0e:d4:2d:ca:e2:4e:e9:cf:59:56:74:
         a0:c9:53:c8:3b:51:96:9b:3f:fd:4c:47:67:56:19:ac:2a:bd:
         49:fa:da:ba:60:53:10:3b:ae:50:64:22:69:18:5d:87:4a:c0:
         58:95:13:07:45:c5:f2:e1:07:6d:e2:69:2e:f1:39:26:2f:a9:
         36:ee:85:2b:18:79:83:52:76:10:41:d8:49:dd:01:ed:9c:01:
         04:66:2c:2f:2d:d8:c5:2a:d5:89:3b:69:b1:52:c0:3b:1e:4f:
         d7:cd:91:14:49:81:62:46:dd:0c:ff:9e:c4:c6:46:04:d8:de:
         d6:cb:95:f8:78:52:e4:91:f8:a4:78:0e:6b:f7:a5:74:4a:49:
         10:15:dc:d9:14:dc:3a:0c:73:73:d8:d4:a1:e3:7a:62:16:4f:
         99:63:8c:2d:9f:9a:c9:fa:96:73:a2:11:77:6f:e4:cf:56:58:
         27:e5:e2:b5:40:95:7c:8f:55:61:d8:b8:36:b7:8f:ca:0c:09:
         bc:0e:fb:5d:93:aa:0f:db:89:b3:de:6d:47:64:ab:00:f1:b9:
         13:24:90:ce:6b:f0:b9:39:4c:bd:84:1a:5b:f5:51:cc:37:f4:
         b8:e5:ba:c6

pkcs7-signedData

1
- SHA1: nil
- 1.3.6.1.4.1.311.2.1.4
  - #0
    - 1.3.6.1.4.1.311.2.1.15
      - :
        00 3c 00 3c 00 3c 00 4f 00 62 00 73 00 6f 00 6c |.<.<.<.O.b.s.o.l| 00 65 00 74 00 65 00 3e 00 3e 00 3e |.e.t.e.>.>.> |
    - SHA1
      - cd 7e c7 35 bf 80 e2 f8 5b 3e c2 39 78 02 05 1b |.~.5....[>.9x...| 2a 59 41 79 |*YAy |
- Certificates
  - Certificate #0
    - 2
      - 38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: VeriSign, Inc.
        CN: VeriSign Time Stamping Services CA
      - 2007-06-15 00:00:00 UTC: 2012-06-14 23:59:59 UTC
      - Subject
        C: US
        O: VeriSign, Inc.
        CN: VeriSign Time Stamping Services Signer - G2
      - #5
        rsaEncryption: nil
        C4:B5:F2:52:15:BC:88:86:60:29:16:4A:5B:2F:4B:91:
        6B:87:91:F3:35:54:58:35:EA:D1:36:5E:62:4D:52:51:
        34:71:C2:7B:66:1D:89:C8:DD:2A:C4:6A:0A:F6:37:D9:
        98:74:91:F6:92:AE:B0:B5:76:96:F1:A9:4A:63:45:47:
        2E:6B:0B:92:4E:4B:2B:8C:EE:58:4A:8B:D4:07:E4:1A:
        2C:F8:82:AA:58:D9:CD:42:F3:2D:C0:75:DE:8D:AB:C7:
        8E:1D:9A:6C:4C:08:95:1E:DE:DB:EF:67:E1:72:C2:49:
        C2:9E:60:3C:E1:E2:BE:16:A3:63:78:69:14:7B:AD:2D: 0x010001
      - X509v3 extensions
        authorityInfoAccess
        OCSP: http://ocsp.verisign.com
        basicConstraints
        true
        nil
        crlDistributionPoints: http://crl.verisign.com/tss-ca.crl
        extendedKeyUsage: true, timeStamping
        keyUsage: true, 0xc0
        subjectAltName
        CN: TSA1-2
    - RSA-SHA1:
```
50 c5 4b c8 24 80 df e4  0d 24 c2 de 1a b1 a1 02  |P.K.$....$......|
a1 a6 82 2d 0c 83 15 81  37 0a 82 0e 2c b0 5a 17  |...-....7...,.Z.|
61 b5 d8 05 fe 88 db f1  91 91 b3 56 1a 40 a6 eb  |a..........V.@..|
92 be 38 39 b0 75 36 74  3a 98 4f e4 37 ba 99 89  |..89.u6t:.O.7...|
ca 95 42 1d b0 b9 c7 a0  8d 57 e0 fa d5 64 04 42  |..B......W...d.B|
35 4e 01 d1 33 a2 17 c8  4d aa 27 c7 f2 e1 86 4c  |5N..3...M.'....L|
02 38 4d 83 78 c6 fc 53  e0 eb e0 06 87 dd a4 96  |.8M.x..S........|
9e 5e 0c 98 e2 a5 be bf  82 85 c3 60 e1 df ad 28  |.^.........`...(|
d8 c7 a5 4b 64 da c7 1b  5b bd ac 39 08 d5 38 22  |...Kd...[..9..8"|
a1 33 8b 2f 8a 9a eb bc  07 21 3f 44 41 09 07 b5  |.3./.....!?DA...|
65 1c 24 bc 48 d3 44 80  eb a1 cf c9 02 b4 14 cf  |e.$.H.D.........|
54 c7 16 a3 80 5c f9 79  3e 5d 72 7d 88 17 9e 2c  |T....\.y>]r}...,|
43 a2 ca 53 ce 7d 3d f6  2a 3a b8 4f 94 00 a5 6d  |C..S.}=.*:.O...m|
0a 83 5d f9 5e 53 f4 18  b3 57 0f 70 c3 fb f5 ad  |..].^S...W.p....|
95 a0 0e 17 de c4 16 80  60 c9 0f 2b 6e 86 04 f1  |........`..+n...|
eb f4 78 27 d1 05 c5 ee  34 5b 5e b9 49 32 f2 33  |..x'....4[^.I2.3|
```
  - Certificate #1
    - 2
      - 47:BF:19:95:DF:8D:52:46:43:F7:DB:6D:48:0D:31:A4
      - RSA-SHA1: nil
      - Issuer
        C: ZA
        ST: Western Cape
        L: Durbanville
        O: Thawte
        OU: Thawte Certification
        CN: Thawte Timestamping CA
      - 2003-12-04 00:00:00 UTC: 2013-12-03 23:59:59 UTC
      - Subject
        C: US
        O: VeriSign, Inc.
        CN: VeriSign Time Stamping Services CA
      - #5
        rsaEncryption: nil
        A9:CA:B2:A4:CC:CD:20:AF:0A:7D:89:AC:87:75:F0:B4:
        4E:F1:DF:C1:0F:BF:67:61:BD:A3:64:1C:DA:BB:F9:CA:
        33:AB:84:30:89:58:7E:8C:DB:6B:DD:36:9E:0F:BF:D1:
        EC:78:F2:77:A6:7E:6F:3C:BF:93:AF:0D:BA:68:F4:6C:
        94:CA:BD:52:2D:AB:48:3D:F5:B6:D5:5D:5F:1B:02:9F:
        FA:2F:6B:1E:A4:F7:A3:9A:A6:1A:C8:02:E1:7F:4C:52:
        E3:0E:60:EC:40:1C:7E:B9:0D:DE:3F:C7:B4:DF:87:BD:
        5F:7A:6A:31:2E:03:99:81:13:A8:47:20:CE:31:73:0D:
        57:2D:CD:78:34:33:95:12:99:12:B9:DE:68:2F:AA:E6:
        E3:C2:8A:8C:2A:C3:8B:21:87:66:BD:83:58:57:6F:75:
        BF:3C:AA:26:87:5D:CA:10:15:3C:9F:84:EA:54:C1:0A:
        6E:C4:FE:C5:4A:DD:B9:07:11:97:22:7C:DB:3E:27:D1:
        1E:78:EC:9F:31:C9:F1:E6:22:19:DB:C4:B3:47:43:9A:
        1A:5F:A0:1E:90:E4:5E:F5:EE:7C:F1:7D:AB:62:01:8F:
        F5:4D:0B:DE:D0:22:56:A8:95:CD:AE:88:76:AE:EE:BA:
        0D:F3:E4:4D:D9:A0:FB:68:A0:AE:14:3B:B3:87:C1:BB: 0x010001
      - X509v3 extensions
        authorityInfoAccess
        OCSP: http://ocsp.verisign.com
        basicConstraints
        true
        true: 0
        crlDistributionPoints: http://crl.verisign.com/ThawteTimestampingCA.crl
        extendedKeyUsage: timeStamping
        keyUsage: true, 6
        subjectAltName
        CN: TSA2048-1-53
    - RSA-SHA1:
```
4a 6b f9 ea 58 c2 44 1c  31 89 79 99 2b 96 bf 82  |Jk..X.D.1.y.+...|
ac 01 d6 1c 4c cd b0 8a  58 6e df 08 29 a3 5e c8  |....L...Xn..).^.|
ca 93 13 e7 04 52 0d ef  47 27 2f 00 38 b0 e4 c9  |.....R..G'/.8...|
93 4e 9a d4 22 62 15 f7  3f 37 21 4f 70 31 80 f1  |.N.."b..?7!Op1..|
8b 38 87 b3 e8 e8 97 00  fe cf 55 96 4e 24 d2 a9  |.8........U.N$..|
27 4e 7a ae b7 61 41 f3  2a ce e7 c9 d9 5e dd bb  |'Nz..aA.*....^..|
2b 85 3e b5 9d b5 d9 e1  57 ff be b4 c5 7e f5 cf  |+.>.....W....~..|
0c 9e f0 97 fe 2b d3 3b  52 1b 1b 38 27 f7 3f 4a  |.....+.;R..8'.?J|
```
  - Certificate #2
    - 2
      - 65:52:26:E1:B2:2E:18:E1:59:0F:29:85:AC:22:E7:5C
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: VeriSign, Inc.
        OU: Class 3 Public Primary Certification Authority
      - 2009-05-21 00:00:00 UTC: 2019-05-20 23:59:59 UTC
      - Subject
        C: US
        O: VeriSign, Inc.
        OU: VeriSign Trust Network
        OU: Terms of use at https://www.verisign.com/rpa (c)09
        CN: VeriSign Class 3 Code Signing 2009-2 CA
      - #5
        rsaEncryption: nil
        BE:67:1D:B4:60:AA:10:49:6F:56:17:7C:66:C9:5E:86:
        0D:D5:F1:AC:A7:71:83:8E:8B:89:F8:88:04:89:15:06:
        BA:2D:84:21:95:E4:D1:9C:50:4C:FB:D2:22:BD:DA:F2:
        B2:35:3B:1E:8F:C3:09:FB:FC:13:2E:5A:BF:89:7C:3D:
        3B:25:1E:F6:F3:58:7B:9C:F4:01:B5:C6:0A:B8:80:CE:
        BE:27:74:61:67:27:4D:6A:E5:EC:81:61:58:79:A3:E0:
        17:10:12:15:27:B0:E1:4D:34:7F:2B:47:20:44:B9:DE:
        66:24:66:8A:CD:4F:BA:1F:C5:38:C8:54:90:E1:72:F6:
        19:66:75:6A:B9:49:68:CF:38:79:0D:AA:30:A8:DB:2C:
        60:48:9E:D7:AA:14:01:A9:83:D7:38:91:30:39:13:96:
        03:3A:7C:40:54:B6:AD:E0:2F:1B:83:DC:A8:11:52:3E:
        02:B3:D7:2B:FD:21:B6:A7:5C:A3:0F:0B:A9:A6:10:50:
        0E:34:2E:4D:A7:CE:C9:5E:25:D4:8C:BC:F3:6E:7C:29:
        BC:01:5D:FC:31:87:5A:D5:8C:85:67:58:88:19:A0:BF:
        35:F0:EA:2B:A3:21:E7:90:F6:83:E5:A8:ED:60:78:5E:
        7B:60:83:FD:57:0B:5D:41:0D:63:54:60:D6:43:21:EF: 0x010001
      - X509v3 extensions
        basicConstraints
        true
        true: 0
        certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://www.verisign.com/cps
        id-qt-unotice: https://www.verisign.com/rpa
        keyUsage: true, 6
        1.3.6.1.5.5.7.1.12
        image/gif
        SHA1:
        8f e5 d3 1a 86 ac 8d 8e 6b c3 cf 80 6a d4 48 18 |........k...j.H.| 2c 7b 19 2e |,{.. |
        http://logo.verisign.com/vslogo.gif
        extendedKeyUsage
        clientAuth: codeSigning
        authorityInfoAccess
        OCSP: http://ocsp.verisign.com
        crlDistributionPoints: http://crl.verisign.com/pca3.crl
        subjectAltName
        CN: Class3CA2048-1-55
        subjectKeyIdentifier:
        97 d0 6b a8 26 70 c8 a1 3f 94 1f 08 2d c4 35 9b |..k.&p..?...-.5.| a4 a1 1e f2 |.... |
    - RSA-SHA1:
```
8b 03 c0 dd 94 d8 41 a2  61 69 b0 15 a8 78 c7 30  |......A.ai...x.0|
c6 90 3c 7e 42 f7 24 b6  e4 83 73 17 04 7f 04 10  |..<~B.$...s.....|
9c a1 e2 fa 81 2f eb c0  ca 44 e7 72 e0 50 b6 55  |...../...D.r.P.U|
10 20 83 6e 96 92 e4 9a  51 6a b4 37 31 dc a5 2d  |. .n....Qj.71..-|
eb 8c 00 c7 1d 4f e7 4d  32 ba 85 f8 4e be fa 67  |.....O.M2...N..g|
55 65 f0 6a be 7a ca 64  38 1a 10 10 78 45 76 31  |Ue.j.z.d8...xEv1|
f3 86 7a 03 0f 60 c2 b3  5d 9d f6 8b 66 76 82 1b  |..z..`..]...fv..|
59 e1 83 e5 bd 49 a5 38  56 e5 de 41 77 0e 58 0f  |Y....I.8V..Aw.X.|
```
  - Certificate #3
    - 2
      - 4D:4E:DD:77:06:EF:6B:31:31:D0:0B:1C:67:91:D0:C1
      - RSA-SHA1: nil
      - Issuer
        C: US
        O: VeriSign, Inc.
        OU: VeriSign Trust Network
        OU: Terms of use at https://www.verisign.com/rpa (c)09
        CN: VeriSign Class 3 Code Signing 2009-2 CA
      - 2009-11-05 00:00:00 UTC: 2010-12-10 23:59:59 UTC
      - Subject
        C: US
        ST: California
        L: San Jose
        O: Adobe Systems Incorporated
        OU: Digital ID Class 3 - Microsoft Software Validation v2
        OU: Information Systems
        CN: Adobe Systems Incorporated
      - #5
        rsaEncryption: nil
        92:CB:A4:73:DA:8A:BE:95:D4:2B:07:70:F6:4F:A2:63:
        18:CC:F1:EC:32:C0:C5:B7:00:FA:47:83:F6:3E:12:F5:
        2B:AE:08:7A:6A:A5:C6:B4:34:D9:B0:77:30:82:3E:DC:
        48:87:3C:87:B4:5B:1B:9D:A4:10:67:FC:9A:02:00:3E:
        6F:DE:30:12:03:55:E0:18:78:A2:75:A1:1F:FC:E8:4A:
        0A:C5:29:D2:4C:BB:A2:3B:B7:72:A9:51:CE:07:0F:4A:
        6F:33:15:C6:5E:0D:6B:6D:48:0E:9D:AC:AA:A2:7F:45:
        1C:5D:76:58:67:64:DC:06:08:51:08:B7:65:AD:4B:97: 0x010001
      - X509v3 extensions
        basicConstraints
        nil
        keyUsage: true, 0x80
        crlDistributionPoints: http://csc3-2009-2-crl.verisign.com/CSC3-2009-2.crl
        certificatePolicies
        2.16.840.1.113733.1.7.23.3
        id-qt-cps: https://www.verisign.com/rpa
        extendedKeyUsage: codeSigning
        authorityInfoAccess
        #0
        OCSP: http://ocsp.verisign.com
        caIssuers: http://csc3-2009-2-aia.verisign.com/CSC3-2009-2.cer
        authorityKeyIdentifier:
        97 d0 6b a8 26 70 c8 a1 3f 94 1f 08 2d c4 35 9b |..k.&p..?...-.5.| a4 a1 1e f2 |.... |
        nsCertType: 0x10
        2.16.840.1.113733.1.6.7: 57996172c7f532741091a94124a92d0e
        1.3.6.1.4.1.311.2.1.27
        false: true
    - RSA-SHA1:
```
08 d4 70 37 0d 27 c0 93  ef 85 25 7b 9d 9b 4e ac  |..p7.'....%{..N.|
b2 69 1b ac 09 91 28 ff  c5 0e d4 2d ca e2 4e e9  |.i....(....-..N.|
cf 59 56 74 a0 c9 53 c8  3b 51 96 9b 3f fd 4c 47  |.YVt..S.;Q..?.LG|
67 56 19 ac 2a bd 49 fa  da ba 60 53 10 3b ae 50  |gV..*.I...`S.;.P|
64 22 69 18 5d 87 4a c0  58 95 13 07 45 c5 f2 e1  |d"i.].J.X...E...|
07 6d e2 69 2e f1 39 26  2f a9 36 ee 85 2b 18 79  |.m.i..9&/.6..+.y|
83 52 76 10 41 d8 49 dd  01 ed 9c 01 04 66 2c 2f  |.Rv.A.I......f,/|
2d d8 c5 2a d5 89 3b 69  b1 52 c0 3b 1e 4f d7 cd  |-..*..;i.R.;.O..|
91 14 49 81 62 46 dd 0c  ff 9e c4 c6 46 04 d8 de  |..I.bF......F...|
d6 cb 95 f8 78 52 e4 91  f8 a4 78 0e 6b f7 a5 74  |....xR....x.k..t|
4a 49 10 15 dc d9 14 dc  3a 0c 73 73 d8 d4 a1 e3  |JI......:.ss....|
7a 62 16 4f 99 63 8c 2d  9f 9a c9 fa 96 73 a2 11  |zb.O.c.-.....s..|
77 6f e4 cf 56 58 27 e5  e2 b5 40 95 7c 8f 55 61  |wo..VX'...@.|.Ua|
d8 b8 36 b7 8f ca 0c 09  bc 0e fb 5d 93 aa 0f db  |..6........]....|
89 b3 de 6d 47 64 ab 00  f1 b9 13 24 90 ce 6b f0  |...mGd.....$..k.|
b9 39 4c bd 84 1a 5b f5  51 cc 37 f4 b8 e5 ba c6  |.9L...[.Q.7.....|
```
- Signer
  - 1
  - unnamed
    - #0
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)09
      - CN: VeriSign Class 3 Code Signing 2009-2 CA
    - 4D:4E:DD:77:06:EF:6B:31:31:D0:0B:1C:67:91:D0:C1
  - SHA1: nil
  - #3
    - contentType: 1.3.6.1.4.1.311.2.1.4
    - 1.3.6.1.4.1.311.2.1.11: msCodeInd
    - messageDigest:
```
07 09 5e 38 6b 44 57 f2  34 9d 66 60 f8 38 75 8e  |..^8kDW.4.f`.8u.|
a8 74 c5 75                                       |.t.u            |
```
    - 1.3.6.1.4.1.311.2.1.12:
```
00 41 00 64 00 6f 00 62  00 65 00 20 00 46 00 6c  |.A.d.o.b.e. .F.l|
00 61 00 73 00 68 00 20  00 50 00 6c 00 61 00 79  |.a.s.h. .P.l.a.y|
00 65 00 72                                       |.e.r            |
```
  - rsaEncryption:
```
6d 59 9c a5 93 d1 05 55  31 00 cd fd af 3a d9 b0  |mY.....U1....:..|
65 d1 fe aa 9b 0f 7e 4f  73 4b 9d 52 08 ca 19 97  |e.....~OsK.R....|
7b 5a 8d 19 c2 05 86 22  61 63 2c 92 5b d7 51 3c  |{Z....."ac,.[.Q<|
69 4a d8 08 b2 a3 b7 64  d6 51 37 0c 03 2a d7 ba  |iJ.....d.Q7..*..|
2e 74 61 2d dd 3b 08 79  20 05 73 04 e5 38 fc 2f  |.ta-.;.y .s..8./|
ab 2a 59 6b 0d e4 17 b6  38 65 1b 1e bd b8 7f 87  |.*Yk....8e......|
66 8a 0b 58 2a f8 56 3e  5b 2b 4f 98 18 fa dd 20  |f..X*.V>[+O.... |
c9 2f 65 39 d9 8a b8 61  19 76 64 7d 20 4c b9 81  |./e9...a.vd} L..|
```
  - countersignature
    - 1
      - unnamed
        #0
        C: US
        O: VeriSign, Inc.
        CN: VeriSign Time Stamping Services CA
        38:25:D7:FA:F8:61:AF:9E:F4:90:E7:26:B5:D6:5A:D5
      - SHA1: nil
      - #2
        contentType: pkcs7-data
        signingTime: 2010-02-26 00:14:35 UTC
        messageDigest:
        12 18 29 df 98 d5 3a 26 f8 2f b4 97 52 42 e5 d5 |..)...:&./..RB..| d6 3d 39 bc |.=9. |
      - rsaEncryption:
        5b 0e e6 e7 74 aa 9b 4a df 58 04 92 2b f6 51 cd |[...t..J.X..+.Q.| be de 35 80 2e f4 84 f9 f6 fe 9f 5a bd 90 76 20 |..5........Z..v | bd 5c 96 aa e6 89 43 5c 4e ef b4 df 82 e9 10 ce |.\....C\N.......| a9 06 14 dd 06 f0 6b 94 d1 64 76 0c d3 8d f8 56 |......k..dv....V| 3a b2 f9 06 33 01 90 ba c4 f9 1b 48 5a 5a a7 97 |:...3......HZZ..| ae 48 4d 63 b6 97 49 b1 31 8e 82 51 d2 42 a5 6d |.HMc..I.1..Q.B.m| 18 db f3 be 74 05 fb 2b 0b 58 93 40 45 85 9e b8 |....t..+.X.@E...| fe b8 11 85 ff 47 e3 71 2d cb cd bf c7 5d 9f 55 |.....G.q-....].U|

show previews

offset	size	type	comment
0	78336	EXE	01/13/2007 18:28:14	#
15c1	15	HTM		#
a5f0	16144	PNG	(256 x 256)	#
13200	1878320	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 1956656 bytes (1911 KiB)


--
Type = PE
Physical Size = 1956656
CPU = x86
Characteristics = Executable 32-bit NoRelocs NoLineNums NoLocalSyms
Created = 2007-01-13 18:28:14
Headers Size = 1024
Checksum = 1982699
Image Size = 241664
Section Alignment = 4096
File Alignment = 512
Code Size = 25088
Initialized Data Size = 126976
Uninitialized Data Size = 1024
Linker Version = 6.0
OS Version = 4.0
Image Version = 0.0
Subsystem Version = 4.0
Subsystem = Windows GUI
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
Comment = FileVersion: 10.0.45.2
FileVersion: 1.0.20
ProductVersion: 10.0.45.2
CompanyName: Adobe Systems Incorporated
CompanyWebsite: http://www.adobe.com/go/getflashplayer
FileDescription: Adobe® Flash® Player ActiveX Installer
LegalCopyright: Copyright © 1996-2009 Adobe Systems Incorporated and its licensors. All Rights Reserved.
ProductName: Adobe® Flash® Player ActiveX
----
Path = [0]
Size = 1872736
Packed Size = 1872736
Virtual Size = 1872736
Offset = 78336
--
Path = [0]
Type = Nsis
Physical Size = 1872736
Method = LZMA:23
Solid = +
Headers Size = 84257
Embedded Stub Size = 0
SubType = NSIS-2.25

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
                    .....        10240      1872732  $PLUGINSDIR/System.dll
                    .....         4096               $PLUGINSDIR/UserInfo.dll
2010-01-27 00:58:36 .....      3981080               Flash10e.ocx
2010-01-27 00:58:38 .....       256288               FlashUtil10e.exe
2010-01-27 00:58:38 .....       256288               $TEMP/FlashUtil10e.exe
                    .....         8704               $PLUGINSDIR/fpinstall.dll
                    .....        17920               $PLUGINSDIR/NSISArray.dll
                    .....                            uninstall_activeX.exe.nsis
------------------- ----- ------------ ------------  ------------------------
2010-01-27 00:58:38            4534616      1872732  8 files

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] ignoring invalid PEdump::BITMAPINFOHEADER

flash_player_ax.exe- Adobe® Flash® Player ActiveX Installer

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 04090000

VS_FIXEDFILEINFO

Signers (1)

Certificates (4)

flash_player_ax.exe
- Adobe® Flash® Player ActiveX Installer