filenamebad_cert_01_FlashUtil.exe
size679656 (0xa5ee8)
md5935cd46ad428fb9ab1dfa2af3d3dfb24
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x110

Rich Header

lib idversiontimes used
2075041334
2055032315
20650413102
190307161
188307162
10190
1853071617
2075050313
206505035
201505031
15101
204505031

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x4fb58ae6
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion11.0
SizeOfCode0x18800
SizeOfInitializedData0x8b200
SizeOfUninitializedData0
AddressOfEntryPoint0x10964
BaseOfCode0x1000
BaseOfData0x1a000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0xa9000
SizeOfHeaders0x400
CheckSum0xaa766
Subsystem2
DllCharacteristics0x8140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ 6.0 - 8.0

Sections

namevavsizeraw sizeflags
.text0x10000x1875e0x18800R-X CODE
.rdata0x1a0000x58b60x5a00R-- IDATA
.data0x200000x31780x1400RW- IDATA
.rsrc0x240000x824100x82600R-- IDATA
.reloc0xa70000x1e000x1e00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x1e8bc0xb4
RESOURCE0x240000x82410
EXCEPTION00
SECURITY0xa3e000x20e8
BASERELOC0xa70000x1154
DEBUG0x1a3300x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x1dcb00x40
Bound_IAT00
IAT0x1a0000x2e8
Delay_IAT00
CLR_Header00
typenamesizecp
LZMG#15994891252
TYPELIB#190161252
ICON#137521252
ICON#222161252
ICON#313841252
ICON#4162491252
ICON#596401252
ICON#642641252
ICON#711281252
STRING#1381252
STRING#1381252
STRING#1381252
STRING#1381252
STRING#1381252
STRING#1381252
STRING#1381252
STRING#1381252
STRING#1381252
STRING#1381252
STRING#1381252
STRING#1381252
STRING#1381252
STRING#1381252
STRING#1381252
STRING#1381252
STRING#21281252
STRING#2881252
STRING#21381252
STRING#21301252
STRING#2981252
STRING#21321252
STRING#21381252
STRING#2901252
STRING#2921252
STRING#21281252
STRING#21181252
STRING#21061252
STRING#21181252
STRING#21021252
STRING#2841252
STRING#21301252
STRING#310321252
STRING#33641252
STRING#310061252
STRING#312121252
STRING#39021252
STRING#311941252
STRING#311741252
STRING#35561252
STRING#35661252
STRING#310681252
STRING#39401252
STRING#39041252
STRING#39941252
STRING#38281252
STRING#33681252
STRING#310321252
STRING#7561252
STRING#7561252
STRING#7561252
STRING#7561252
STRING#7561252
STRING#7561252
STRING#7561252
STRING#7561252
STRING#7561252
STRING#7561252
STRING#7561252
STRING#7561252
STRING#7561252
STRING#7581252
STRING#7561252
STRING#7561252
RCDATA#2011579491252
RCDATA#2062895021252
RCDATA#20765551252
GROUP_ICON#41051041252
VERSION#111041252
MANIFEST#110351252
idlangstring
1529^%
151028^%
151029^%
151031^%
151033^%
151036^%
151040^%
151041^%
151042^%
151043^%
151045^%
151046^%
151049^%
151055%^
152052^%
153082^%
2929Installationsprogram för Adobe® Flash® Player ^
291028Adobe® Flash® Player ^ 安裝程式
291029Instalační program přehrávače Adobe® Flash® Player ^
291031Installationsprogramm für Adobe® Flash® Player ^
291033Adobe® Flash® Player ^ Installer
291036Programme d’installation d’Adobe® Flash® Player ^
291040Programma di installazione di Adobe® Flash® Player ^
291041Adobe Flash Player ^ インストーラー
291042Adobe® Flash® Player ^ 설치 관리자
291043Installatieprogramma van Adobe® Flash® Player ^
291045Instalator programu Adobe® Flash® Player ^
291046Instalador do Adobe® Flash® Player ^
291049Программа установки Adobe® Flash® Player ^
291055Adobe® Flash® Player ^ Yükleyicisi
292052Adobe Flash Player ^ 安装程序
293082Archivo de instalación de Adobe® Flash® Player ^
3729Installationsprogram för Adobe® Flash® Player 
4029Skadat installationsprogram. Hämta det igen.
4129Det här installationsprogrammet är inte kompatibelt med operativsystemet.
4229Det inträffade ett fel när installationsprogrammet skulle hämtas. Kontrollera att datorn är ansluten till Internet och försök igen.
4329Ett okänt fel har inträffat.
4429Ansluter...
4529Kontrollerar...
4629Försök igen
4729Med den här tjänsten hålls Adobe Flash Player-installationen uppdaterad med de senaste förbättringarna och säkerhetskorrigeringarna.
371028Adobe® Flash® Player 安裝程式
401028安裝程式損毀。請重新下載。
411028這個安裝程式與您的作業系統不相容。
421028下載安裝程式時發生錯誤。請確認您已連線至網際網路，然後再試一次。
431028發生未知的錯誤。
441028連線中...
451028驗證中...
461028重試
471028這個服務會讓您的 Adobe Flash Player 安裝與最新增強功能和安全性修正保持同步。
371029Instalační program aplikace Adobe® Flash® Player
401029Instalační program je poškozený. Stáhněte jej znovu.
411029Tento instalační program není kompatibilní s vaším operačním systémem.
421029Během stahování instalačního programu došlo k chybě. Ověřte, zda jste připojeni k internetu, a zkuste to znovu.
431029Došlo k neznámé chybě.
441029Připojování...
451029Ověřování...
461029Zkusit znovu
471029Tato služba udržuje instalaci přehrávače Adobe Flash Player v aktualizovaném stavu s použitím nejnovějších rozšíření a oprav zabezpečení.
371031Installationsprogramm für Adobe® Flash® Player
401031Fehlerhaftes Installationsprogramm. Laden Sie das Programm erneut herunter.
411031Dieses Installationsprogramm ist mit Ihrem Betriebssystem nicht kompatibel.
421031Beim Herunterladen des Installationsprogramms ist ein Fehler aufgetreten. Stellen Sie sicher, dass eine Internetverbindung besteht, und versuchen Sie es erneut.
431031Ein unbekannter Fehler ist aufgetreten.
441031Verbindung wird hergestellt...
451031Überprüfen...
461031Wiederholen
471031Mit diesem Dienst ist Ihre Flash Player-Installation immer aktuell und verwendet die neuesten Verbesserungen und Sicherheits-Fixes.
371033Adobe® Flash® Player Installer
401033Corrupt installer. Please download again.
411033This installer is not compatible with your operating system.
421033An error has occurred while downloading the installer. Please make sure you are connected to the internet and try again.
431033An unknown error has occurred.
441033Connecting...
451033Verifying...
461033Retry
471033This service keeps your Adobe Flash Player installation up to date with the latest enhancements and security fixes.
371036Programme d’installation d’Adobe® Flash® Player
401036Programme d’installation endommagé. Téléchargez-le à nouveau.
411036Ce programme d’installation n’est pas compatible avec votre système d’exploitation.
421036Une erreur est survenue lors du téléchargement du programme d’installation. Vérifiez que vous êtes connecté à Internet, puis réessayez.
431036Une erreur inconnue est survenue.
441036Connexion en cours...
451036Vérification en cours...
461036Réessayer
471036Ce service permet de tenir à jour votre installation d’Adobe Flash Player afin de profiter des dernières améliorations et des derniers correctifs de sécurité.
371040Programma di installazione di Adobe® Flash® Player
401040Programma di installazione danneggiato. Scaricatelo di nuovo.
411040Questo programma di installazione non è compatibile con il sistema operativo.
421040Si è verificato un errore durante lo scaricamento del programma di installazione. Assicuratevi che la connessione a Internet sia attiva e riprovate.
431040Si è verificato un errore sconosciuto.
441040Connessione...
451040Verifica...
461040Riprova
471040Questo servizio mantiene aggiornata l'installazione di Adobe Flash Player con gli ultimi miglioramenti e le più recenti correzioni relative alla sicurezza.
371041Adobe® Flash® Playerインストーラー
401041インストーラーが破損しています。もう一度ダウンロードしてください。
411041このインストーラーはお使いのオペレーティングシステムと互換性がありません。
421041インストーラーをダウンロード中にエラーが発生しました。インターネットの接続を確認してからもう一度やり直してください。
431041不明なエラーが発生しました。
441041接続中...
451041検証中...
461041再試行
471041このサービスにより、Adobe Flash Player は最新の機能強化とセキュリティの修正がインストールされた最新の状態で保たれます。
371042Adobe® Flash® Player 설치 프로그램
401042설치 프로그램이 손상되었습니다. 다시 다운로드하십시오.
411042이 설치 프로그램은 사용자의 운영 체제와 호환되지 않습니다.
421042설치 프로그램을 다운로드하는 동안 오류가 발생했습니다. 인터넷에 연결되어 있는지 확인한 후 다시 시도하십시오.
431042알 수 없는 오류가 발생했습니다.
441042연결 중...
451042확인 중…
461042재시도
471042이 서비스를 이용하면 설치된 Adobe Flash Player가 최신 기능 향상과 보안 수정 사항이 포함된 최신 상태로 유지됩니다.
371043Installatieprogramma van Adobe® Flash® Player
401043Installer is beschadigd. Download deze opnieuw.
411043De Installer is niet compatibel met het besturingssysteem.
421043Er is een fout opgetreden tijdens het downloaden van de installer. Controleer of u een internetverbinding hebt en probeer het opnieuw.
431043Er heeft zich een onbekende fout voorgedaan.
441043Verbinding maken...
451043Controleren…
461043Opnieuw
471043Deze service zorgt ervoor dat uw installatie van Adobe Flash Player up-to-date blijft met de nieuwste correcties en beveiligingsverbeteringen.
371045Instalator programu Adobe® Flash® Player
401045Instalator jest uszkodzony. Pobierz go ponownie.
411045Ten instalator nie jest zgodny z tym systemem operacyjnym.
421045Podczas pobierania instalatora wystąpił błąd. Sprawdź połączenie z Internetem i spróbuj ponownie.
431045Wystąpił nieznany błąd.
441045Łączenie...
451045Sprawdzanie poprawności...
461045Ponów próbę
471045Ta usługa zapewnia aktualność instalacji programu Adobe Flash Player przez stosowanie najnowszych ulepszeń i poprawek zabezpieczeń.
371046Instalador do Adobe® Flash® Player
401046Instalador corrompido. Baixe-o novamente.
411046Este instalador não é compatível com o sistema operacional.
421046Ocorreu um erro ao baixar o instalador. Verifique se está conectado à Internet e tente novamente.
431046Ocorreu um erro desconhecido.
441046Conectando...
451046Verificando...
461046Repetir
471046Este serviço mantém sua instalação do Adobe Flash Player atualizada com os aprimoramentos e as correções de segurança mais recentes.
371049Программа установки Adobe® Flash® Player
401049Программа установки повреждена. Загрузите ее снова.
411049Программа установки несовместима с текущей версией операционной системы.
421049При загрузке программы установки произошла ошибка. Убедитесь в наличии подключения к Интернету и повторите попытку.
431049Произошла неизвестная ошибка.
441049Подключение...
451049Проверка...
461049Повторить
471049Эта служба поддерживает актуальность установки Adobe Flash Player с помощью последних улучшений и исправлений системы безопасности.
371055Adobe® Flash® Player Yükleyicisi
401055Yükleyici bozuk. Lütfen yeniden indirin.
411055Bu yükleyici, işletim sisteminizle uyumlu değil.
421055Yükleyici indirilirken bir hata oluştu. Lütfen internet bağlantınızı kontrol edip yeniden deneyin.
431055Bilinmeyen bir hata oluştu.
441055Bağlanıyor...
451055Doğrulanıyor…
461055Yeniden Dene
471055Bu hizmet, Adobe Flash Player yüklemenizi en yeni geliştirmeler ve güvenlik düzeltmeleri ile güncel tutar.
372052Adobe® Flash® Player 安装程序
402052安装程序已损坏。请重新下载。
412052此安装程序与您的操作系统不兼容。
422052下载安装程序时出错。请确保您已连接到 Internet，然后重试。
432052出现未知错误。
442052正在连接...
452052正在验证...
462052重试
472052此服务可使您安装的 Adobe Flash Player 能及时获得最新增强功能和安全修补程序。
373082Archivo de instalación de Adobe® Flash® Player
403082El programa de instalación está dañado. Vuelva a descargarlo.
413082Este programa de instalación no se admite en su sistema operativo.
423082Se ha producido un error al descargar el programa de instalación. Compruebe la conexión a Internet y vuelva a intentarlo.
433082Se ha producido un error desconocido.
443082Conectando...
453082Verificando...
463082Reintentar
473082Este servicio mantiene actualizada la instalación de Adobe Flash Player con las últimas mejoras y soluciones de seguridad.
10129FlashBroker
1011028FlashBroker
1011029FlashBroker
1011031FlashBroker
1011033FlashBroker
1011036FlashBroker
1011040FlashBroker
1011041FlashBroker
1011042FlashBroker
1011043FlashBroker
1011045FlashBroker
1011046FlashBroker
1011049FlashBroker
1011055FlashBroker
1012052FlashBroker
1013082FlashBroker
module_namehintordfunction_name
OLEACC.dll24LresultFromObject
KERNEL32.dll197CreateDirectoryW
KERNEL32.dll290DeleteFileW
KERNEL32.dll595GetFileSize
KERNEL32.dll764GetTempFileNameW
KERNEL32.dll1109ReadFile
KERNEL32.dll1285SetFilePointer
KERNEL32.dll1510WriteFile
KERNEL32.dll766GetTempPathW
KERNEL32.dll442FreeResource
KERNEL32.dll963LoadResource
KERNEL32.dll981LockResource
KERNEL32.dll1369SizeofResource
KERNEL32.dll419FindResourceW
KERNEL32.dll690GetProcAddress
KERNEL32.dll238CreateProcessW
KERNEL32.dll751GetSystemTime
KERNEL32.dll744GetSystemDirectoryW
KERNEL32.dll1042OutputDebugStringW
KERNEL32.dll957LoadLibraryA
KERNEL32.dll416FindResourceA
KERNEL32.dll878InterlockedIncrement
KERNEL32.dll874InterlockedDecrement
KERNEL32.dll817GlobalAddAtomW
KERNEL32.dll774GetThreadLocale
KERNEL32.dll1322SetStdHandle
KERNEL32.dll519GetConsoleMode
KERNEL32.dll501GetConsoleCP
KERNEL32.dll428FlushFileBuffers
KERNEL32.dll851HeapSize
KERNEL32.dll735GetStringTypeW
KERNEL32.dll269CreateWaitableTimerW
KERNEL32.dll849HeapReAlloc
KERNEL32.dll575GetEnvironmentStringsW
KERNEL32.dll460GetCPInfo
KERNEL32.dll669GetOEMCP
KERNEL32.dll445GetACP
KERNEL32.dll906IsValidCodePage
KERNEL32.dll1370Sleep
KERNEL32.dll1490WideCharToMultiByte
KERNEL32.dll959LoadLibraryExW
KERNEL32.dll1207RtlUnwind
KERNEL32.dll954LeaveCriticalSection
KERNEL32.dll319EnterCriticalSection
KERNEL32.dll1385TerminateProcess
KERNEL32.dll1355SetUnhandledExceptionFilter
KERNEL32.dll1417UnhandledExceptionFilter
KERNEL32.dll782GetTickCount64
KERNEL32.dll753GetSystemTimeAsFileTime
KERNEL32.dll1081QueryPerformanceCounter
KERNEL32.dll633GetModuleFileNameA
KERNEL32.dll724GetStartupInfoW
KERNEL32.dll862InitOnceExecuteOnce
KERNEL32.dll285DeleteCriticalSection
KERNEL32.dll867InitializeCriticalSectionAndSpinCount
KERNEL32.dll598GetFileType
KERNEL32.dll695GetProcessHeap
KERNEL32.dll1001MultiByteToWideChar
KERNEL32.dll637GetModuleHandleExW
KERNEL32.dll438FreeEnvironmentStringsW
KERNEL32.dll551GetCurrentThreadId
KERNEL32.dll365ExitThread
KERNEL32.dll1509WriteConsoleW
KERNEL32.dll256CreateThread
KERNEL32.dll1091QueueUserAPC
KERNEL32.dll1363SetWaitableTimer
KERNEL32.dll1172ReleaseMutex
KERNEL32.dll1339SetThreadLocale
KERNEL32.dll994MoveFileExW
KERNEL32.dll1265SetDllDirectoryW
KERNEL32.dll960LoadLibraryW
KERNEL32.dll970LocalFree
KERNEL32.dll966LocalAlloc
KERNEL32.dll638GetModuleHandleW
KERNEL32.dll439FreeLibrary
KERNEL32.dll799GetVersionExA
KERNEL32.dll580GetExitCodeProcess
KERNEL32.dll364ExitProcess
KERNEL32.dll546GetCurrentProcess
KERNEL32.dll228CreateMutexW
KERNEL32.dll1460WaitForSingleObject
KERNEL32.dll615GetLastError
KERNEL32.dll141CloseHandle
KERNEL32.dll1182RemoveDirectoryW
KERNEL32.dll213CreateFileW
KERNEL32.dll577GetEnvironmentVariableW
KERNEL32.dll482GetCommandLineW
KERNEL32.dll1286SetFilePointerEx
KERNEL32.dll941LCMapStringEx
KERNEL32.dll424FlsFree
KERNEL32.dll426FlsSetValue
KERNEL32.dll425FlsGetValue
KERNEL32.dll423FlsAlloc
KERNEL32.dll1298SetLastError
KERNEL32.dll634GetModuleFileNameW
KERNEL32.dll730GetStdHandle
KERNEL32.dll901IsProcessorFeaturePresent
KERNEL32.dll896IsDebuggerPresent
KERNEL32.dll315EncodePointer
KERNEL32.dll278DecodePointer
KERNEL32.dll481GetCommandLineA
KERNEL32.dll842HeapAlloc
KERNEL32.dll1093RaiseException
KERNEL32.dll846HeapFree
USER32.dll14BeginPaint
USER32.dll215DrawTextW
USER32.dll749SetRect
USER32.dll73ClientToScreen
USER32.dll542LoadCursorW
USER32.dll440GetWindow
USER32.dll376GetParent
USER32.dll774SetWindowLongW
USER32.dll450GetWindowLongW
USER32.dll262FillRect
USER32.dll573MapWindowPoints
USER32.dll708SetCursor
USER32.dll456GetWindowRect
USER32.dll293GetClientRect
USER32.dll781SetWindowTextW
USER32.dll403GetPropW
USER32.dll748SetPropW
USER32.dll557LoadStringW
USER32.dll234EndPaint
USER32.dll492InvalidateRect
USER32.dll672ReleaseDC
USER32.dll307GetDC
USER32.dll720SetForegroundWindow
USER32.dll762SetTimer
USER32.dll671ReleaseCapture
USER32.dll699SetCapture
USER32.dll337GetKeyState
USER32.dll591MoveWindow
USER32.dll793ShowWindow
USER32.dll173DestroyWindow
USER32.dll113CreateWindowExW
USER32.dll644RegisterClassExW
USER32.dll30CallWindowProcW
USER32.dll620PostQuitMessage
USER32.dll161DefWindowProcW
USER32.dll619PostMessageW
USER32.dll182DispatchMessageW
USER32.dll824TranslateMessage
USER32.dll369GetMessageW
USER32.dll776SetWindowPos
USER32.dll321GetForegroundWindow
GDI32.dll760SetTextColor
GDI32.dll721SetBkMode
GDI32.dll571GetTextExtentExPointW
GDI32.dll61CreateFontA
GDI32.dll54CreateDIBSection
GDI32.dll773StretchBlt
GDI32.dll713SelectObject
GDI32.dll261DeleteObject
GDI32.dll258DeleteDC
GDI32.dll86CreateSolidBrush
GDI32.dll49CreateCompatibleDC
GDI32.dll19BitBlt
GDI32.dll48CreateCompatibleBitmap
ADVAPI32.dll678RegSetValueExW
ADVAPI32.dll662RegQueryValueExW
ADVAPI32.dll649RegOpenKeyExW
ADVAPI32.dll624RegDeleteValueW
ADVAPI32.dll609RegCreateKeyExW
ADVAPI32.dll600RegCloseKey
ADVAPI32.dll534OpenServiceW
ADVAPI32.dll532OpenSCManagerW
ADVAPI32.dll106ControlService
ADVAPI32.dll101CloseServiceHandle
ADVAPI32.dll307FreeSid
ADVAPI32.dll95CheckTokenMembership
ADVAPI32.dll32AllocateAndInitializeSid
SHELL32.dll680
SHELL32.dll205SHGetFolderPathW
SHELL32.dll305ShellExecuteExW
SHELL32.dll306ShellExecuteW
ole32.dll437StringFromGUID2
ole32.dll24CoCreateGuid
OLEAUT32.dll2

StringTable 040904b0

CompanyNameAdobe Systems Incorporated
FileDescriptionAdobe® Flash® Player Installer/Uninstaller 11.3 d370
FileVersion11,3,370,178
InternalNameAdobe® Flash® Player Installer/Uninstaller 11.3
LegalCopyrightCopyright © 1996 Adobe Systems Incorporated
LegalTrademarksAdobe® Flash® Player
OriginalFilenameFlashUtil.exe
ProductNameAdobe® Flash® Player Installer/Uninstaller
ProductVersion11,3,370,178

VS_FIXEDFILEINFO

FileVersion11.3.370.178
ProductVersion11.3.370.178
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType2
FileSubtype0

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Windows Third Party Component CA 2012
serial: 6103186B000000000005

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:03:18:6b:00:00:00:00:00:05
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows Third Party Component CA 2012
        Validity
            Not Before: May 14 21:48:47 2012 GMT
            Not After : Aug 14 21:58:47 2013 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=AOC, CN=Microsoft Windows 3rd party Component
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:37:d2:a6:87:50:f0:2d:67:60:1c:a6:50:49:
                    69:86:33:10:8e:f2:33:8e:cd:b8:d6:bc:ca:5e:9f:
                    a0:c8:1f:b4:2a:c9:15:c8:b5:b3:29:2b:98:93:8f:
                    0d:7a:7d:40:0c:50:5a:83:c6:53:a0:ac:98:51:89:
                    03:51:5d:a2:52:cc:7a:6b:1c:06:ba:1e:dc:5f:c2:
                    8c:5e:59:74:82:3e:f0:2d:94:75:2c:a1:ae:5f:41:
                    2f:91:ee:bb:e6:17:ac:0b:55:6d:44:17:a3:ea:5e:
                    37:9c:84:e2:00:cf:ca:64:46:01:12:5e:71:4a:18:
                    ce:b1:d6:76:88:51:31:dd:72:51:3d:4b:5d:2b:8a:
                    8e:4a:70:39:5f:5a:c0:b6:80:bb:e1:0a:b5:f9:9e:
                    82:a0:16:db:ba:90:9e:34:82:4b:c5:53:60:ab:32:
                    c2:62:2c:59:6d:45:74:c7:fe:2d:68:d0:78:5e:d4:
                    7a:3b:09:45:8d:51:b2:26:1f:59:0a:f6:ad:b8:e7:
                    22:3e:72:59:47:e1:f9:6e:a2:9f:70:7e:d3:bb:20:
                    39:b4:de:d9:47:9c:1f:01:8f:16:64:93:10:fd:ac:
                    b3:1a:a1:59:0e:c9:45:91:f8:71:aa:42:15:8e:63:
                    a7:9e:35:eb:22:b0:b9:1f:91:01:12:a6:f2:59:a5:
                    86:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Subject Key Identifier: 
                DA:84:E0:D5:4D:7D:A5:8E:FB:FE:7B:E9:6D:8B:86:4C:E9:B2:71:2C
            X509v3 Authority Key Identifier: 
                keyid:61:71:A7:87:AF:FF:69:D5:21:76:4F:52:93:28:00:BE:79:12:AB:84

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://www.microsoft.com/pkiops/crl/Microsoft%20Windows%20Third%20Party%20Component%20CA%202012.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pkiops/certs/Microsoft%20Windows%20Third%20Party%20Component%20CA%202012.crt

            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
         49:34:ea:48:2d:87:ee:69:62:5f:d8:72:a3:3f:10:fe:cd:32:
         ff:73:1b:82:f2:8c:a6:cf:d3:1b:0d:19:75:2e:40:3a:92:cd:
         0c:97:20:ea:1d:98:08:f7:2f:56:a4:c9:0f:0f:08:73:c4:8a:
         84:d0:3c:b8:00:cf:4f:16:55:c9:5f:c9:80:ca:a0:45:ef:73:
         bd:b1:4c:4d:ee:2c:cc:a5:78:20:72:2c:f8:0a:4f:c5:21:10:
         ab:89:a1:6e:ea:b9:03:46:96:99:c8:41:5e:0f:0b:92:8f:05:
         c4:48:2e:1a:b7:5d:db:fd:da:26:35:3d:bc:d8:15:bb:33:04:
         ca:61:0e:6a:1e:76:29:a4:9f:6b:93:d0:89:67:fc:10:ac:87:
         d6:06:71:55:5c:43:09:4a:62:c0:b4:49:fa:99:88:b6:60:5f:
         b4:76:4a:ca:7f:01:c8:23:bc:79:c0:ce:b6:53:d2:ae:6b:7a:
         0c:d8:ed:41:ad:61:59:7c:4c:4b:bd:20:c0:69:8e:27:15:3a:
         19:b5:da:7e:11:81:53:46:c8:c5:78:aa:ea:dd:8d:f5:19:18:
         ed:f2:cd:64:c7:3c:5b:33:9e:9f:69:7f:02:61:d9:54:86:73:
         5a:28:22:eb:76:ba:e0:ee:1f:ef:c3:33:20:03:67:e9:a8:86:
         1f:46:72:e8
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0b:aa:c1:00:00:00:00:00:09
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
        Validity
            Not Before: Apr 18 23:48:38 2012 GMT
            Not After : Apr 18 23:58:38 2027 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows Third Party Component CA 2012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9c:30:84:09:a7:63:2e:cf:0a:47:f0:ea:24:
                    f9:a3:30:20:0f:5e:57:31:26:81:9a:31:07:b2:50:
                    d4:ce:67:09:08:65:0a:5a:a5:4b:ae:d5:ed:10:2e:
                    e7:a5:99:b5:9f:68:2f:98:8b:58:02:ac:20:b4:29:
                    c4:71:bd:28:1c:a5:fd:3c:9b:64:e4:c5:eb:df:61:
                    25:bc:f0:ee:68:bf:d1:a7:cb:7e:2a:02:81:4e:64:
                    5c:0c:53:86:79:57:19:37:61:b7:98:f9:0c:a0:4e:
                    22:59:9b:f9:1b:2d:67:3c:27:3c:56:90:66:e3:fd:
                    7f:65:7d:0f:86:bd:35:47:e8:8a:cc:f4:da:8e:e9:
                    6a:4e:ab:a7:55:ec:a2:89:1e:d5:33:45:53:cb:f9:
                    9e:77:bd:cd:2c:f9:05:b8:7f:74:01:1d:e8:fb:18:
                    e1:43:d1:0d:e9:aa:dc:37:6f:bd:fe:b8:0f:ed:1d:
                    4d:01:46:4e:0a:ac:fc:82:e8:ec:56:83:13:8e:3a:
                    01:ed:14:64:74:ea:64:b2:66:10:b6:68:6d:c8:70:
                    00:7d:50:48:2e:3d:43:ee:e0:24:95:c6:cd:8e:c7:
                    fd:b8:e4:95:cf:dd:7e:fb:95:5e:a1:01:cd:43:b1:
                    07:d7:a4:30:ee:9b:86:1a:2a:6e:c1:0b:59:a2:74:
                    6f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Subject Key Identifier: 
                61:71:A7:87:AF:FF:69:D5:21:76:4F:52:93:28:00:BE:79:12:AB:84
            1.3.6.1.4.1.311.20.2: 
                .
.S.u.b.C.A
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:D5:F6:56:CB:8F:E8:A2:5C:62:68:D1:3D:94:90:5B:D7:CE:9A:18:C4

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt

    Signature Algorithm: sha256WithRSAEncryption
         5a:8a:67:da:cc:d5:fd:0d:26:41:77:bf:0a:46:78:b4:b3:de:
         12:69:2b:77:23:c2:65:2f:01:5f:d2:03:f4:61:ba:50:9d:2e:
         8c:39:72:f3:6c:3e:6a:b1:1e:76:6d:ec:b7:f3:82:dc:cc:bb:
         c5:69:70:28:73:66:17:3f:54:eb:ee:01:16:48:c4:46:d9:1b:
         80:ae:81:3a:8d:0f:79:6d:68:b0:9e:ea:2d:3f:39:d3:ca:38:
         7e:bd:5e:7c:08:6e:19:dc:c6:c2:f4:38:33:68:61:e2:52:47:
         83:e1:00:01:56:d2:ba:cb:87:82:05:31:0a:41:8b:4e:e7:7f:
         5f:5f:ed:5f:d3:39:2d:45:eb:a2:13:bf:fd:1e:c2:98:41:71:
         61:16:5f:c8:0a:70:25:7c:59:69:31:24:e4:71:e7:0a:bb:04:
         17:f7:9f:72:1e:c9:d2:bb:1a:be:3d:02:fe:09:0c:b2:43:b4:
         59:1a:99:53:93:96:21:5f:e0:d6:b7:26:01:42:95:36:ac:27:
         fd:be:f4:85:77:68:3d:18:bd:f4:be:98:88:22:11:86:52:16:
         f3:45:ec:03:97:10:70:87:a3:70:43:71:3c:db:c9:86:03:17:
         0c:f5:73:5b:c6:7d:e1:5c:64:ed:d7:c5:48:d7:ed:32:e2:d1:
         aa:d3:cf:a7:f6:57:4e:61:f9:77:eb:67:f2:88:b3:de:00:da:
         03:8f:d0:8a:34:37:3e:1d:d8:62:b8:d2:b1:f3:e1:2f:8b:72:
         3b:81:96:7c:6f:fc:ec:66:76:72:60:1b:24:f2:a0:89:6d:5b:
         6d:00:2e:ef:28:dd:86:87:05:c2:b4:b9:e5:be:64:c2:2a:f2:
         4a:15:5c:98:e2:c4:27:85:ff:52:e3:62:7e:0f:b2:02:0b:d7:
         66:c7:0a:b2:d3:3d:20:04:14:50:32:59:83:0a:7d:9b:ed:5a:
         38:12:01:52:ba:2f:5e:20:72:8e:4a:f1:fd:e7:71:02:8c:3b:
         e1:07:be:c9:73:f4:dd:47:d8:b4:ef:b4:a4:b3:30:b9:89:3e:
         76:ca:b9:00:98:56:7e:ab:ea:8a:b8:a5:d0:38:ab:69:77:13:
         0b:14:2f:e9:aa:41:1f:f7:ba:bd:3a:2b:34:8a:ee:0a:ab:63:
         e6:63:f7:88:24:8e:20:0d:2b:3b:9d:e3:c2:49:52:ac:9f:1f:
         0e:39:3b:5d:d4:6e:50:6a:e6:7d:52:3a:aa:7c:33:15:29:0d:
         26:5e:01:58:a7:4e:a9:3d:7a:84:6f:74:3f:60:9f:e4:32:4f:
         36:00:af:6d:71:d3:3e:a6:46:65:5f:81:74:f1:fe:c1:71:da:
         4c:a0:41:5a:82:dd:f1:1f

undefined method `first' for #

offsetsizetypecomment
0671232EXE05/17/2012 23:33:58#
15c115HTM#
2692016249PNG(256 x 256)#
a3e008424PKCS7Authenticode Signature#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







[?] ignoring invalid PEdump::BITMAPINFOHEADER