MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 080904b0

VS_FIXEDFILEINFO

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Windows Third Party Component CA 2012
serial: 33000000B5213FCA1E4AA03DE40000000000B5

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:00:00:b5:21:3f:ca:1e:4a:a0:3d:e4:00:00:00:00:00:b5
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows Third Party Component CA 2012
        Validity
            Not Before: Dec 15 22:15:33 2020 GMT
            Not After : Dec  2 22:15:33 2021 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows Hardware Compatibility Publisher
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a8:c4:96:5a:3e:03:14:a6:4d:79:0e:1d:19:a0:
                    f8:14:90:c7:6a:ee:19:89:00:50:d1:37:d7:15:88:
                    15:26:fc:47:a5:2f:d4:b7:11:f6:e1:e4:b0:e7:9f:
                    04:98:35:01:c1:cb:e5:7c:7f:c3:67:1c:bf:82:39:
                    26:7e:37:36:7d:34:b9:10:03:c1:af:96:68:01:36:
                    2a:cd:6c:cb:93:2e:f9:49:ab:39:3f:8f:a6:ef:f3:
                    fe:c7:49:5f:4a:b4:4f:55:9c:e2:86:f0:47:b4:21:
                    43:9f:e0:e7:f0:8f:d5:d7:1b:4d:77:ea:7e:d1:11:
                    6e:51:cb:94:9c:15:a0:21:64:13:03:e3:87:5c:02:
                    7f:e7:7b:7d:66:8e:9b:bd:93:3b:6a:38:95:35:a4:
                    e3:55:1f:a8:7f:3c:9b:a2:2e:13:e1:9d:fa:d4:61:
                    e7:92:2a:09:6a:16:ce:93:cb:b0:1c:b4:e5:e3:de:
                    ca:aa:de:b5:f0:65:17:17:89:9a:95:1d:d6:53:19:
                    c1:1e:b8:70:99:07:f8:e3:57:75:ec:1d:79:15:7d:
                    14:dd:0a:62:7f:ea:76:e2:74:ca:ff:72:3e:d3:04:
                    19:8b:1c:64:1f:aa:30:ed:0f:88:5d:48:05:51:53:
                    c0:7e:b0:55:fa:6f:39:98:06:95:ca:e3:6e:54:6e:
                    a2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                1.3.6.1.4.1.311.10.3.39, 1.3.6.1.4.1.311.10.3.5, Code Signing
            X509v3 Subject Key Identifier: 
                00:07:4C:00:A8:53:9A:6A:9A:1D:0D:5C:9E:01:C7:A9:56:3F:30:73
            X509v3 Subject Alternative Name: 
                DirName:/OU=Microsoft Operations Puerto Rico/serialNumber=232825\+463191
            X509v3 Authority Key Identifier: 
                61:71:A7:87:AF:FF:69:D5:21:76:4F:52:93:28:00:BE:79:12:AB:84
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://www.microsoft.com/pkiops/crl/Microsoft%20Windows%20Third%20Party%20Component%20CA%202012.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pkiops/certs/Microsoft%20Windows%20Third%20Party%20Component%20CA%202012.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        0d:2d:53:cd:15:a8:fe:dd:cb:17:e2:df:1b:f7:dc:1a:ef:21:
        e9:8c:6c:d2:20:f5:8b:59:38:24:84:9c:13:4a:0f:1a:dd:59:
        ce:42:ef:80:dd:f4:78:60:27:30:13:60:4d:95:68:ec:58:94:
        a7:97:bd:4e:57:14:32:a9:aa:f1:0a:b0:4d:d1:c0:38:b2:6a:
        b7:c5:ca:3a:9c:88:d0:09:26:7f:ab:56:25:45:25:54:6a:0a:
        05:5f:b3:7b:9c:d8:02:9c:7d:50:18:09:fc:8b:11:48:2c:7a:
        43:47:b3:ad:29:f3:54:27:c9:57:0e:87:11:7d:b5:2c:c9:48:
        64:25:92:74:b9:e2:e7:58:f9:18:a3:af:1f:db:9f:9d:40:ff:
        a3:ae:2e:2a:e0:12:fb:97:a4:36:25:86:42:a2:a4:22:3d:c6:
        69:0d:b8:81:03:a6:e5:22:06:46:bd:8a:fb:3d:12:eb:89:4a:
        c2:8b:52:73:96:a1:96:54:08:48:7f:6a:b8:78:b3:c4:74:b8:
        c9:60:84:28:61:ae:8e:79:9a:3d:2a:8d:6f:91:8f:50:f8:e2:
        6b:b1:ed:6c:ed:47:be:36:e4:47:57:4e:85:68:58:29:64:ff:
        31:cd:28:8b:9c:7f:8d:7e:6a:46:d6:c3:d9:2f:5c:10:1f:e1:
        52:2a:72:0c

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0b:aa:c1:00:00:00:00:00:09
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
        Validity
            Not Before: Apr 18 23:48:38 2012 GMT
            Not After : Apr 18 23:58:38 2027 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows Third Party Component CA 2012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a3:9c:30:84:09:a7:63:2e:cf:0a:47:f0:ea:24:
                    f9:a3:30:20:0f:5e:57:31:26:81:9a:31:07:b2:50:
                    d4:ce:67:09:08:65:0a:5a:a5:4b:ae:d5:ed:10:2e:
                    e7:a5:99:b5:9f:68:2f:98:8b:58:02:ac:20:b4:29:
                    c4:71:bd:28:1c:a5:fd:3c:9b:64:e4:c5:eb:df:61:
                    25:bc:f0:ee:68:bf:d1:a7:cb:7e:2a:02:81:4e:64:
                    5c:0c:53:86:79:57:19:37:61:b7:98:f9:0c:a0:4e:
                    22:59:9b:f9:1b:2d:67:3c:27:3c:56:90:66:e3:fd:
                    7f:65:7d:0f:86:bd:35:47:e8:8a:cc:f4:da:8e:e9:
                    6a:4e:ab:a7:55:ec:a2:89:1e:d5:33:45:53:cb:f9:
                    9e:77:bd:cd:2c:f9:05:b8:7f:74:01:1d:e8:fb:18:
                    e1:43:d1:0d:e9:aa:dc:37:6f:bd:fe:b8:0f:ed:1d:
                    4d:01:46:4e:0a:ac:fc:82:e8:ec:56:83:13:8e:3a:
                    01:ed:14:64:74:ea:64:b2:66:10:b6:68:6d:c8:70:
                    00:7d:50:48:2e:3d:43:ee:e0:24:95:c6:cd:8e:c7:
                    fd:b8:e4:95:cf:dd:7e:fb:95:5e:a1:01:cd:43:b1:
                    07:d7:a4:30:ee:9b:86:1a:2a:6e:c1:0b:59:a2:74:
                    6f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Subject Key Identifier: 
                61:71:A7:87:AF:FF:69:D5:21:76:4F:52:93:28:00:BE:79:12:AB:84
            1.3.6.1.4.1.311.20.2: 
                .
.S.u.b.C.A
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                D5:F6:56:CB:8F:E8:A2:5C:62:68:D1:3D:94:90:5B:D7:CE:9A:18:C4
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        5a:8a:67:da:cc:d5:fd:0d:26:41:77:bf:0a:46:78:b4:b3:de:
        12:69:2b:77:23:c2:65:2f:01:5f:d2:03:f4:61:ba:50:9d:2e:
        8c:39:72:f3:6c:3e:6a:b1:1e:76:6d:ec:b7:f3:82:dc:cc:bb:
        c5:69:70:28:73:66:17:3f:54:eb:ee:01:16:48:c4:46:d9:1b:
        80:ae:81:3a:8d:0f:79:6d:68:b0:9e:ea:2d:3f:39:d3:ca:38:
        7e:bd:5e:7c:08:6e:19:dc:c6:c2:f4:38:33:68:61:e2:52:47:
        83:e1:00:01:56:d2:ba:cb:87:82:05:31:0a:41:8b:4e:e7:7f:
        5f:5f:ed:5f:d3:39:2d:45:eb:a2:13:bf:fd:1e:c2:98:41:71:
        61:16:5f:c8:0a:70:25:7c:59:69:31:24:e4:71:e7:0a:bb:04:
        17:f7:9f:72:1e:c9:d2:bb:1a:be:3d:02:fe:09:0c:b2:43:b4:
        59:1a:99:53:93:96:21:5f:e0:d6:b7:26:01:42:95:36:ac:27:
        fd:be:f4:85:77:68:3d:18:bd:f4:be:98:88:22:11:86:52:16:
        f3:45:ec:03:97:10:70:87:a3:70:43:71:3c:db:c9:86:03:17:
        0c:f5:73:5b:c6:7d:e1:5c:64:ed:d7:c5:48:d7:ed:32:e2:d1:
        aa:d3:cf:a7:f6:57:4e:61:f9:77:eb:67:f2:88:b3:de:00:da:
        03:8f:d0:8a:34:37:3e:1d:d8:62:b8:d2:b1:f3:e1:2f:8b:72:
        3b:81:96:7c:6f:fc:ec:66:76:72:60:1b:24:f2:a0:89:6d:5b:
        6d:00:2e:ef:28:dd:86:87:05:c2:b4:b9:e5:be:64:c2:2a:f2:
        4a:15:5c:98:e2:c4:27:85:ff:52:e3:62:7e:0f:b2:02:0b:d7:
        66:c7:0a:b2:d3:3d:20:04:14:50:32:59:83:0a:7d:9b:ed:5a:
        38:12:01:52:ba:2f:5e:20:72:8e:4a:f1:fd:e7:71:02:8c:3b:
        e1:07:be:c9:73:f4:dd:47:d8:b4:ef:b4:a4:b3:30:b9:89:3e:
        76:ca:b9:00:98:56:7e:ab:ea:8a:b8:a5:d0:38:ab:69:77:13:
        0b:14:2f:e9:aa:41:1f:f7:ba:bd:3a:2b:34:8a:ee:0a:ab:63:
        e6:63:f7:88:24:8e:20:0d:2b:3b:9d:e3:c2:49:52:ac:9f:1f:
        0e:39:3b:5d:d4:6e:50:6a:e6:7d:52:3a:aa:7c:33:15:29:0d:
        26:5e:01:58:a7:4e:a9:3d:7a:84:6f:74:3f:60:9f:e4:32:4f:
        36:00:af:6d:71:d3:3e:a6:46:65:5f:81:74:f1:fe:c1:71:da:
        4c:a0:41:5a:82:dd:f1:1f

undefined method `first' for #

offsetsizetypecomment
0383488DLL07/05/2021 12:39:28#
15c115HTM#
5da008640PKCS7Authenticode Signature#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

everything is OK