filenameVisualBasic6-KB896559-v1-ENU.exe
size935656 (0xe46e8)
md5b0ad0323ed6843cd4b92db483b182645
typePE32 executable (GUI) Intel 80386, for MS Windows, MS CAB-Installer self-extracting archive
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xc8

Rich Header

lib idversiontimes used
25921013
10126
6991111
28917824
6192101

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections3
TimeDateStamp0x3d6e0425
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion7.0
SizeOfCode0x8800
SizeOfInitializedData0xda000
SizeOfUninitializedData0
AddressOfEntryPoint0x5ae4
BaseOfCode0x1000
BaseOfData0xa000
ImageBase0x1000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion5.1
SubsystemVersion4.0
Reserved10
SizeOfImage0xe6000
SizeOfHeaders0x400
CheckSum0xed602
Subsystem2
DllCharacteristics0x8000
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v6.0 SPx

Sections

namevavsizeraw sizeflags
.text0x10000x86e60x8800R-X CODE
.data0xa0000x1be40x400RW- IDATA
.rsrc0xc0000xda0000xd9c00R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x8b7c0x8c
RESOURCE0xc0000xd9abc
EXCEPTION00
SECURITY0xe2c000x1ae8
BASERELOC00
DEBUG0x12100x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x10000x210
Delay_IAT00
CLR_Header00
typenamesizecp
AVI#3001118021252
ICON#17441252
ICON#22961252
DIALOG#20017161252
DIALOG#20023941252
DIALOG#20033201252
DIALOG#20044061252
DIALOG#20052701252
DIALOG#20062501252
STRING#631401252
STRING#7613121252
STRING#7714841252
STRING#8012001252
STRING#8310981252
STRING#859741252
RCDATAADMQCMD71252
RCDATACABINET8526051252
RCDATAEXTRACTOPT41252
RCDATAFILESIZES361252
RCDATAFINISHMSG531252
RCDATALICENSE142981252
RCDATAPACKINSTSPACE41252
RCDATAPOSTRUNPROGRAM71252
RCDATAREBOOT41252
RCDATARUNPROGRAM121252
RCDATASHOWWINDOW41252
RCDATATITLE221252
RCDATAUPROMPT691252
RCDATAUSRQCMD71252
GROUP_ICON#3000341252
VERSION#110241252
idlangstring
10001033Please select a folder to store the extracted files.
10011033%s
12001033Failed to get disk space information from: %s. System Message: %s.
12011033A required resource cannot be located.
12021033Are you sure you want to cancel?
12041033Unable to retrieve operating system version information.
12051033Memory allocation request failed.
12081033Unable to create extraction thread.
12101033Cabinet is not valid.
12111033Filetable full.
12121033Can not change to destination folder.
12131033Setup could not find a drive with %s KB free disk space to install the program. Please free up some space first and press RETRY or press CANCEL to exit setup.
12141033That folder is invalid. Please make sure the folder exists and is writable.
12151033You must specify a folder with fully qualified pathname or choose Cancel.
12161033Could not update folder edit box.
12171033Could not load functions required for browser dialog.
12181033Could not load Shell32.dll required for browser dialog.
12201033Error creating process <%s>. Reason: %s
12211033The cluster size in this system is not supported.
12221033A required resource appears to be corrupted.
12231033Windows 95 or Windows NT 4.0 Beta 2 or greater is required for this installation.
12241033Error loading %s
12251033GetProcAddress() failed on function '%s'. Possible reason: incorrect version of advpack.dll being used.
12261033Windows 95 or Windows NT is required to install
12271033Could not create folder '%s'
12281033To install this program, you need %s KB disk space on drive %s. It is recommended that you free up the required disk space before you continue. Do you still want to continue?
12641033Error retrieving Windows folder
12691033NT Shutdown: OpenProcessToken error.
12701033NT Shutdown: AdjustTokenPrivileges error.
12711033NT Shutdown: ExitWindowsEx error.
12721033Extracting file failed. It is most likely caused by low memory (low disk space for swapping file) or corrupted Cabinet file.
12731033The setup program could not retrieve the volume information for drive (%s) . System message: %s.
12741033Setup could not find a drive with %s KB free disk space to install the program. Please free up some space and try again.
12751033The installation program appears to be damaged or corrupted. Contact the vendor of this application.
13121033Command line option syntax error. Type Command /? for Help.
13131033Command line options: /Q -- Quiet modes for package, /T:<full path> -- Specifies temporary working folder, /C -- Extract files only to the folder when used also with /T. /C:<Cmd> -- Override Install Command defined by author.
13141033You must restart your computer before the new settings will take effect. Do you want to restart your computer now?
13161033Another copy of the '%s' package is already running on your system. Do you want to run another copy?
13171033Could not find the file: %s.
13511033You do not have administrator privileges on this machine. Some installations cannot be completed correctly unless they are run by an administrator.
13541033The folder '%s' does not exist. Do you want to create it?
13551033Another copy of the '%s' package is already running on your system. You can only run one copy at a time.
13561033The '%s' package is not compatible with the version of Windows you are running.
13571033The '%s' package is not compatible with the version of the file: %s on your system.
module_namehintordfunction_name
ADVAPI32.dll223FreeSid
ADVAPI32.dll29AllocateAndInitializeSid
ADVAPI32.dll214EqualSid
ADVAPI32.dll279GetTokenInformation
ADVAPI32.dll424OpenProcessToken
ADVAPI32.dll28AdjustTokenPrivileges
ADVAPI32.dll331LookupPrivilegeValueA
ADVAPI32.dll456RegCloseKey
ADVAPI32.dll465RegDeleteValueA
ADVAPI32.dll481RegOpenKeyExA
ADVAPI32.dll504RegSetValueExA
ADVAPI32.dll491RegQueryValueExA
ADVAPI32.dll460RegCreateKeyExA
ADVAPI32.dll486RegQueryInfoKeyA
KERNEL32.dll580LocalFree
KERNEL32.dll576LocalAlloc
KERNEL32.dll353GetLastError
KERNEL32.dll308GetCurrentProcess
KERNEL32.dll364GetModuleFileNameA
KERNEL32.dll940lstrlenA
KERNEL32.dll431GetSystemDirectoryA
KERNEL32.dll683RemoveDirectoryA
KERNEL32.dll197FindClose
KERNEL32.dll210FindNextFileA
KERNEL32.dll124DeleteFileA
KERNEL32.dll765SetFileAttributesA
KERNEL32.dll928lstrcmpA
KERNEL32.dll201FindFirstFileA
KERNEL32.dll925lstrcatA
KERNEL32.dll934lstrcpyA
KERNEL32.dll918_lclose
KERNEL32.dll920_llseek
KERNEL32.dll921_lopen
KERNEL32.dll905WritePrivateProfileStringA
KERNEL32.dll478GetWindowsDirectoryA
KERNEL32.dll69CreateDirectoryA
KERNEL32.dll335GetFileAttributesA
KERNEL32.dll178ExpandEnvironmentStringsA
KERNEL32.dll545IsDBCSLeadByte
KERNEL32.dll419GetShortPathNameA
KERNEL32.dll396GetPrivateProfileStringA
KERNEL32.dll390GetPrivateProfileIntA
KERNEL32.dll931lstrcmpiA
KERNEL32.dll400GetProcAddress
KERNEL32.dll501GlobalUnlock
KERNEL32.dll494GlobalLock
KERNEL32.dll483GlobalAlloc
KERNEL32.dll235FreeResource
KERNEL32.dll47CloseHandle
KERNEL32.dll575LoadResource
KERNEL32.dll822SizeofResource
KERNEL32.dll216FindResourceA
KERNEL32.dll668ReadFile
KERNEL32.dll900WriteFile
KERNEL32.dll767SetFilePointer
KERNEL32.dll771SetFileTime
KERNEL32.dll578LocalFileTimeToFileTime
KERNEL32.dll136DosDateTimeToFileTime
KERNEL32.dll752SetCurrentDirectoryA
KERNEL32.dll447GetTempFileNameA
KERNEL32.dll175ExitProcess
KERNEL32.dll77CreateFileA
KERNEL32.dll571LoadLibraryExA
KERNEL32.dll937lstrcpynA
KERNEL32.dll470GetVolumeInformationA
KERNEL32.dll228FormatMessageA
KERNEL32.dll306GetCurrentDirectoryA
KERNEL32.dll468GetVersionExA
KERNEL32.dll331GetExitCodeProcess
KERNEL32.dll883WaitForSingleObject
KERNEL32.dll96CreateProcessA
KERNEL32.dll449GetTempPathA
KERNEL32.dll433GetSystemInfo
KERNEL32.dll90CreateMutexA
KERNEL32.dll762SetEvent
KERNEL32.dll73CreateEventA
KERNEL32.dll105CreateThread
KERNEL32.dll693ResetEvent
KERNEL32.dll832TerminateThread
KERNEL32.dll324GetDriveTypeA
KERNEL32.dll366GetModuleHandleA
KERNEL32.dll421GetStartupInfoA
KERNEL32.dll258GetCommandLineA
KERNEL32.dll589LockResource
KERNEL32.dll570LoadLibraryA
KERNEL32.dll318GetDiskFreeSpaceA
KERNEL32.dll604MulDiv
KERNEL32.dll154EnumResourceLanguagesA
KERNEL32.dll233FreeLibrary
KERNEL32.dll490GlobalFree
GDI32.dll363GetDeviceCaps
USER32.dll225ExitWindowsEx
USER32.dll728wsprintfA
USER32.dll42CharNextA
USER32.dll52CharUpperA
USER32.dll45CharPrevA
USER32.dll640SetWindowLongA
USER32.dll366GetWindowLongA
USER32.dll27CallWindowProcA
USER32.dll161DispatchMessageA
USER32.dll490MsgWaitForMultipleObjects
USER32.dll509PeekMessageA
USER32.dll571SendMessageA
USER32.dll643SetWindowPos
USER32.dll554ReleaseDC
USER32.dll268GetDC
USER32.dll372GetWindowRect
USER32.dll566SendDlgItemMessageA
USER32.dll273GetDlgItem
USER32.dll599SetForegroundWindow
USER32.dll646SetWindowTextA
USER32.dll476MessageBoxA
USER32.dll155DialogBoxIndirectParamA
USER32.dll658ShowWindow
USER32.dll196EnableWindow
USER32.dll275GetDlgItemTextA
USER32.dll198EndDialog
USER32.dll270GetDesktopWindow
USER32.dll475MessageBeep
USER32.dll595SetDlgItemTextA
USER32.dll456LoadStringA
USER32.dll349GetSystemMetrics
COMCTL32.dll17
VERSION.dllGetFileVersionInfoA
VERSION.dll10VerQueryValueA
VERSION.dll1GetFileVersionInfoSizeA

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionWin32 Cabinet Self-Extractor
FileVersion6.00.2800.1106
InternalNameWextract
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenameWEXTRACT.EXE
ProductNameMicrosoft® Windows® Operating System
ProductVersion6.00.2800.1106

VS_FIXEDFILEINFO

FileVersion6.0.2800.1106
ProductVersion6.0.2800.1106
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/OU=Copyright (c) 2000 Microsoft Corp./CN=Microsoft Code Signing PCA
serial: 6105875800030000005A

Certificates (5)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec  4 00:00:00 2003 GMT
            Not After : Dec  3 23:59:59 2013 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:b2:a4:cc:cd:20:af:0a:7d:89:ac:87:75:
                    f0:b4:4e:f1:df:c1:0f:bf:67:61:bd:a3:64:1c:da:
                    bb:f9:ca:33:ab:84:30:89:58:7e:8c:db:6b:dd:36:
                    9e:0f:bf:d1:ec:78:f2:77:a6:7e:6f:3c:bf:93:af:
                    0d:ba:68:f4:6c:94:ca:bd:52:2d:ab:48:3d:f5:b6:
                    d5:5d:5f:1b:02:9f:fa:2f:6b:1e:a4:f7:a3:9a:a6:
                    1a:c8:02:e1:7f:4c:52:e3:0e:60:ec:40:1c:7e:b9:
                    0d:de:3f:c7:b4:df:87:bd:5f:7a:6a:31:2e:03:99:
                    81:13:a8:47:20:ce:31:73:0d:57:2d:cd:78:34:33:
                    95:12:99:12:b9:de:68:2f:aa:e6:e3:c2:8a:8c:2a:
                    c3:8b:21:87:66:bd:83:58:57:6f:75:bf:3c:aa:26:
                    87:5d:ca:10:15:3c:9f:84:ea:54:c1:0a:6e:c4:fe:
                    c5:4a:dd:b9:07:11:97:22:7c:db:3e:27:d1:1e:78:
                    ec:9f:31:c9:f1:e6:22:19:db:c4:b3:47:43:9a:1a:
                    5f:a0:1e:90:e4:5e:f5:ee:7c:f1:7d:ab:62:01:8f:
                    f5:4d:0b:de:d0:22:56:a8:95:cd:ae:88:76:ae:ee:
                    ba:0d:f3:e4:4d:d9:a0:fb:68:a0:ae:14:3b:b3:87:
                    c1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.verisign.com/ThawteTimestampingCA.crl
            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA2048-1-53
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        4a:6b:f9:ea:58:c2:44:1c:31:89:79:99:2b:96:bf:82:ac:01:
        d6:1c:4c:cd:b0:8a:58:6e:df:08:29:a3:5e:c8:ca:93:13:e7:
        04:52:0d:ef:47:27:2f:00:38:b0:e4:c9:93:4e:9a:d4:22:62:
        15:f7:3f:37:21:4f:70:31:80:f1:8b:38:87:b3:e8:e8:97:00:
        fe:cf:55:96:4e:24:d2:a9:27:4e:7a:ae:b7:61:41:f3:2a:ce:
        e7:c9:d9:5e:dd:bb:2b:85:3e:b5:9d:b5:d9:e1:57:ff:be:b4:
        c5:7e:f5:cf:0c:9e:f0:97:fe:2b:d3:3b:52:1b:1b:38:27:f7:
        3f:4a

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services CA
        Validity
            Not Before: Dec  4 00:00:00 2003 GMT
            Not After : Dec  3 23:59:59 2008 GMT
        Subject: C=US, O=VeriSign, Inc., CN=VeriSign Time Stamping Services Signer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b2:50:28:48:dd:d3:68:7a:84:18:44:66:75:5d:
                    7e:c4:b8:9f:63:26:ff:3d:43:9c:7c:11:38:10:25:
                    55:73:d9:75:27:69:fd:4e:b9:20:5c:d3:0a:f9:a0:
                    1b:2a:ed:55:56:21:61:d8:1e:db:e4:bc:33:6b:c7:
                    ef:dd:a3:37:65:8e:1b:93:0c:b6:53:1e:5c:7c:66:
                    35:5f:05:8a:45:fe:76:4e:df:53:80:a2:81:20:9d:
                    ae:88:5c:a2:08:f7:e5:30:f9:ee:22:37:4c:42:0a:
                    ce:df:c6:1f:c4:d6:55:e9:81:3f:b5:52:a3:2c:aa:
                    01:7a:f2:a2:aa:8d:35:fe:9f:e6:5d:6a:05:9f:3d:
                    6b:e3:bf:96:c0:fe:cc:60:f9:40:e7:07:a0:44:eb:
                    81:51:6e:a5:2a:f2:b6:8a:10:28:ed:8f:dc:06:a0:
                    86:50:9a:7b:4a:08:0d:30:1d:ca:10:9e:6b:f7:e9:
                    58:ae:04:a9:40:99:b2:28:e8:8f:16:ac:3c:e3:53:
                    6f:4b:d3:35:9d:b5:6f:64:1d:b3:96:2c:bb:3d:e7:
                    79:eb:6d:7a:f9:16:e6:26:ad:af:ef:99:53:b7:40:
                    2c:95:b8:79:aa:fe:d4:52:ab:29:74:7e:42:ec:39:
                    1e:a2:6a:16:e6:59:bb:24:68:d8:00:80:43:10:87:
                    80:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.verisign.com/tss-ca.crl
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Subject Alternative Name: 
                DirName:/CN=TSA2048-1-54
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        87:78:70:da:4e:52:01:20:5b:e0:79:c9:82:30:c4:fd:b9:19:
        96:bd:91:00:c3:bd:cd:cd:c6:f4:0e:d8:ff:f9:4d:c0:33:62:
        30:11:c5:f5:74:1b:d4:92:de:5f:9c:20:13:b1:7c:45:be:50:
        cd:83:e7:80:17:83:a7:27:93:67:13:46:fb:ca:b8:98:41:03:
        cc:9b:51:5b:05:8b:7f:a8:6f:f3:1b:50:1b:24:2e:f2:69:8d:
        6c:22:f7:bb:ca:16:95:ed:0c:74:c0:68:77:d9:eb:99:62:87:
        c1:73:90:f8:89:74:7a:23:ab:a3:98:7b:97:b1:f7:8f:29:71:
        4d:2e:75:1b:48:41:da:f0:b5:0d:20:54:d6:77:a0:97:82:63:
        69:fd:09:cf:8a:f0:75:bb:09:9b:d9:f9:11:55:26:9a:61:32:
        be:7a:02:b0:7b:86:be:a2:c3:8b:22:2c:78:d1:35:76:bc:92:
        73:5c:f9:b9:e6:4c:15:0a:23:cc:e4:d2:d4:34:2e:49:40:15:
        3c:0f:60:7a:24:c6:a5:66:ef:96:cf:70:eb:3e:e7:f4:0d:7e:
        dc:d1:7c:a3:76:71:69:c1:9c:4f:47:30:35:21:b1:a2:af:1a:
        62:3c:2b:d9:8e:aa:2a:07:7b:d8:18:b3:5c:7b:e2:9d:a5:6f:
        fe:3c:89:ad

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
        Signature Algorithm: md5WithRSAEncryption
        Issuer: OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
        Validity
            Not Before: Jan 10 07:00:00 1997 GMT
            Not After : Dec 31 07:00:00 2020 GMT
        Subject: OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a9:02:bd:c1:70:e6:3b:f2:4e:1b:28:9f:97:78:
                    5e:30:ea:a2:a9:8d:25:5f:f8:fe:95:4c:a3:b7:fe:
                    9d:a2:20:3e:7c:51:a2:9b:a2:8f:60:32:6b:d1:42:
                    64:79:ee:ac:76:c9:54:da:f2:eb:9c:86:1c:8f:9f:
                    84:66:b3:c5:6b:7a:62:23:d6:1d:3c:de:0f:01:92:
                    e8:96:c4:bf:2d:66:9a:9a:68:26:99:d0:3a:2c:bf:
                    0c:b5:58:26:c1:46:e7:0a:3e:38:96:2c:a9:28:39:
                    a8:ec:49:83:42:e3:84:0f:bb:9a:6c:55:61:ac:82:
                    7c:a1:60:2d:77:4c:e9:99:b4:64:3b:9a:50:1c:31:
                    08:24:14:9f:a9:e7:91:2b:18:e6:3d:98:63:14:60:
                    58:05:65:9f:1d:37:52:87:f7:a7:ef:94:02:c6:1b:
                    d3:bf:55:45:b3:89:80:bf:3a:ec:54:94:4e:ae:fd:
                    a7:7a:6d:74:4e:af:18:cc:96:09:28:21:00:57:90:
                    60:69:37:bb:4b:12:07:3c:56:ff:5b:fb:a4:66:0a:
                    08:a6:d2:81:56:57:ef:b6:3b:5e:16:81:77:04:da:
                    f6:be:ae:80:95:fe:b0:cd:7f:d6:a7:1a:72:5c:3c:
                    ca:bc:f0:08:a3:22:30:b3:06:85:c9:b3:20:77:13:
                    85:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            2.5.29.1: 
                0....[.p.ir.#Q~..M....r0p1+0)..U..."Copyright (c) 1997 Microsoft Corp.1.0...U....Microsoft Corporation1!0...U....Microsoft Root Authority......<<...>.c..@
    Signature Algorithm: md5WithRSAEncryption
    Signature Value:
        95:e8:0b:c0:8d:f3:97:18:35:ed:b8:01:24:d8:77:11:f3:5c:
        60:32:9f:9e:0b:cb:3e:05:91:88:8f:c9:3a:e6:21:f2:f0:57:
        93:2c:b5:a0:47:c8:62:ef:fc:d7:cc:3b:3b:5a:a9:36:54:69:
        fe:24:6d:3f:c9:cc:aa:de:05:7c:dd:31:8d:3d:9f:10:70:6a:
        bb:fe:12:4f:18:69:c0:fc:d0:43:e3:11:5a:20:4f:ea:62:7b:
        af:aa:19:c8:2b:37:25:2d:be:65:a1:12:8a:25:0f:63:a3:f7:
        54:1c:f9:21:c9:d6:15:f3:52:ac:6e:43:32:07:fd:82:17:f8:
        e5:67:6c:0d:51:f6:bd:f1:52:c7:bd:e7:c4:30:fc:20:31:09:
        88:1d:95:29:1a:4d:d5:1d:02:a5:f1:80:e0:03:b4:5b:f4:b1:
        dd:c8:57:ee:65:49:c7:52:54:b6:b4:03:28:12:ff:90:d6:f0:
        08:8f:7e:b8:97:c5:ab:37:2c:e4:7a:e4:a8:77:e3:76:a0:00:
        d0:6a:3f:c1:d2:36:8a:e0:41:12:a8:35:6a:1b:6a:db:35:e1:
        d4:1c:04:e4:a8:45:04:c8:5a:33:38:6e:4d:1c:0d:62:b7:0a:
        a2:8c:d3:d5:54:3f:46:cd:1c:55:a6:70:db:12:3a:87:93:75:
        9f:a7:d2:a0

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0b:99:4f:c0:00:0c:ab:11:d8:22:ef:7d:6c:79:7e
        Signature Algorithm: md5WithRSAEncryption
        Issuer: OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
        Validity
            Not Before: May 23 08:00:00 2002 GMT
            Not After : Sep 25 08:00:00 2011 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Copyright (c) 2000 Microsoft Corp., CN=Microsoft Code Signing PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c3:cc:20:8d:bc:df:ff:3e:50:ee:7a:c2:d4:24:
                    25:f6:76:ce:21:ff:cd:2a:56:4e:ca:9c:b7:82:b2:
                    35:79:2d:00:c4:a8:08:d5:63:c9:b7:a5:f6:e9:c1:
                    c1:d6:b1:8c:96:a2:07:fa:0f:b6:82:52:9a:eb:82:
                    c6:bd:10:c5:a8:c0:ee:6b:84:8e:53:1b:bb:50:fa:
                    64:01:89:c1:16:d4:82:68:00:40:78:44:f5:12:38:
                    4e:fb:63:51:e0:fa:3d:b9:e5:37:b1:df:63:07:23:
                    3b:71:40:34:47:f4:6b:ae:46:f5:27:73:1e:22:cb:
                    42:19:1e:51:b6:52:9a:d3:a3:d0:13:c6:19:3f:71:
                    06:6d:f2:95:21:44:5f:42:ed:c0:c9:99:64:20:b8:
                    c1:34:fc:a2:44:e6:7b:b2:1d:2f:b8:a6:de:f4:a1:
                    df:9b:21:0f:fe:58:31:41:55:38:7e:af:58:e7:e4:
                    ec:59:79:25:ab:f7:2a:2f:11:3f:38:78:3e:42:7f:
                    a7:68:e4:7e:22:68:17:e6:4a:92:c4:78:44:52:47:
                    a1:4f:84:89:93:9b:c0:67:7b:ea:09:fb:86:03:7d:
                    f6:99:71:3c:2b:a7:66:98:cc:df:2d:e2:2b:02:1a:
                    0f:34:48:65:f5:3c:12:af:f1:87:1c:1d:26:52:6f:
                    cc:03
                Exponent: 3 (0x3)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Code Signing
            2.5.29.1: 
                0....[.p.ir.#Q~..M....r0p1+0)..U..."Copyright (c) 1997 Microsoft Corp.1.0...U....Microsoft Corporation1!0...U....Microsoft Root Authority......<<...>.c..@
            1.3.6.1.4.1.311.21.1: 
                .....
            X509v3 Subject Key Identifier: 
                25:F8:2B:4B:5D:C8:72:54:AD:E5:F6:A0:2A:17:16:FB:C1:F9:53:81
            1.3.6.1.4.1.311.20.2: 
                .
.S.u.b.C.A
            X509v3 Key Usage: 
                Non Repudiation, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: md5WithRSAEncryption
    Signature Value:
        9f:64:4a:74:e1:69:27:5a:f8:06:53:27:97:c7:1e:d1:81:73:
        d1:ce:ba:81:f4:1a:ea:93:97:87:af:dc:8f:3a:02:b5:8b:10:
        bf:d3:2e:74:74:01:3b:b4:40:13:ee:51:5f:3c:c3:32:9b:4f:
        d6:e9:59:ca:28:00:96:72:15:eb:71:2f:98:98:c0:03:e1:35:
        42:e9:08:2f:62:31:99:fc:31:f3:dc:42:ae:dc:4f:8f:cc:38:
        de:70:41:38:60:0d:3c:20:92:2b:18:9c:07:fe:56:93:a9:d2:
        4b:88:bd:99:4a:22:02:85:6f:44:ec:91:e6:19:de:2b:b8:15:
        b2:9b:70:fa:c5:eb:4e:83:2c:3a:71:a0:32:58:f2:35:52:db:
        91:88:40:ef:6f:1b:e7:29:42:b4:70:cd:7d:6c:6f:1a:c8:db:
        9c:fa:d1:5e:8a:f7:d2:2c:9a:00:5f:d9:f4:c2:b3:9f:7b:d4:
        3b:fe:53:74:2a:67:1d:81:27:a2:75:e8:40:98:07:18:8b:18:
        20:0b:46:72:df:ef:f7:ec:36:6d:ee:6b:c9:66:53:1d:bd:35:
        aa:e5:cb:1d:6a:72:13:45:80:1e:d9:5d:87:66:8a:1c:2c:a6:
        ca:cb:61:03:03:de:09:c9:01:b1:59:c0:b0:fd:e6:66:97:cb:
        fa:09:3b:7c

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:05:87:58:00:03:00:00:00:5a
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Copyright (c) 2000 Microsoft Corp., CN=Microsoft Code Signing PCA
        Validity
            Not Before: Jan  5 23:20:19 2005 GMT
            Not After : Apr  5 23:30:19 2006 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Corporation
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cf:38:f7:e1:a4:27:5e:f8:f0:cc:aa:ce:fb:3a:
                    de:3b:62:31:46:05:46:bb:f5:b6:05:1a:d3:b3:ac:
                    c2:9f:0f:4c:67:08:28:c4:43:10:f5:3b:75:79:7f:
                    6a:91:f4:d6:33:c8:61:bf:fa:91:90:00:7a:f0:79:
                    1d:5d:68:70:f6:90:b2:98:77:b5:03:1d:2f:9b:9d:
                    9b:75:89:2f:4a:01:41:7c:9e:7c:cb:87:43:9b:f4:
                    96:74:99:9e:98:c1:cf:40:57:58:16:f6:c0:d5:92:
                    16:e5:24:85:71:8f:99:49:ed:55:7c:65:c9:1f:38:
                    00:23:c5:3e:ab:11:d6:29:6c:c6:9e:a0:70:5b:7d:
                    d5:37:d4:67:77:20:c3:06:ce:85:f8:4e:34:80:a0:
                    35:c4:1c:53:32:01:57:ef:b1:28:bd:6c:01:e3:ad:
                    40:bc:80:a9:09:49:db:36:e3:37:f4:1d:49:aa:2a:
                    a7:6b:d0:19:d3:cc:8e:9d:d6:86:46:7a:13:4a:d6:
                    45:19:a5:53:b3:e2:78:2f:2e:35:97:6b:4c:c6:e8:
                    1a:b0:d3:d1:24:90:69:ab:ce:fc:69:6e:3e:4c:fb:
                    02:41:62:dc:07:98:5d:7e:5c:a7:4c:27:31:6b:56:
                    4c:e1:98:d8:e0:d1:1d:71:8d:3d:2a:c0:7f:71:4d:
                    ff:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Subject Key Identifier: 
                92:11:12:14:34:77:B1:8F:68:34:E2:0E:F1:32:34:C0:E9:F3:63:31
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Authority Key Identifier: 
                keyid:25:F8:2B:4B:5D:C8:72:54:AD:E5:F6:A0:2A:17:16:FB:C1:F9:53:81
                DirName:/OU=Copyright (c) 1997 Microsoft Corp./OU=Microsoft Corporation/CN=Microsoft Root Authority
                serial:6A:0B:99:4F:C0:00:0C:AB:11:D8:22:EF:7D:6C:79:7E
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/CodeSignPCA.crl
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        0c:01:0a:0d:ee:26:1e:c3:11:bc:c4:74:3c:a7:1d:ee:f5:4a:
        de:27:99:a2:f7:ab:8c:8e:47:72:a0:51:bf:a8:b1:4b:d8:7f:
        42:d5:1c:8f:a3:e6:b8:12:bd:51:23:af:b1:3b:d3:65:f1:2d:
        8c:03:e9:4c:50:ed:38:f6:57:5e:3a:73:4f:33:ac:13:2d:b5:
        25:c3:3b:e5:91:59:df:d0:1b:b8:d0:ae:11:07:09:cc:05:d3:
        52:1c:e2:0a:64:77:05:18:19:77:12:75:10:93:1a:36:16:8c:
        d5:20:1f:6c:33:ef:60:2f:6d:af:e6:f1:d4:da:29:be:8a:db:
        b5:0f:6b:95:22:40:f2:2b:97:32:50:ff:fa:ea:8a:c6:b6:e3:
        ec:36:8a:b2:77:29:54:3e:7e:16:95:fe:71:59:8d:a7:ca:84:
        0f:e1:ff:82:11:81:2f:19:87:dd:e7:44:9f:8d:ef:22:f2:fe:
        b6:8c:cf:c8:db:21:86:b5:97:98:48:0d:ab:d8:e1:63:72:dd:
        6f:e7:2c:93:2b:9f:ee:b6:12:d6:3a:59:4a:21:e5:9f:a9:62:
        50:93:15:75:1d:76:5f:d8:a0:c2:fa:f9:a4:ac:7e:11:ca:f9:
        57:bf:fd:d2:89:e9:7d:ee:8c:a4:da:07:bb:ba:14:dd:13:43:
        d5:ea:9d:e6
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • : 
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • SHA1
          • 27 15 dc 50 c5 cd 61 ce  fa 7e 94 be ed cc b0 c2  |'..P..a..~......|
c8 7f 6a 18                                       |..j.            |
    • unnamed
      • Certificate #0
        • 2
          • 47:BF:19:95:DF:8D:52:46:43:F7:DB:6D:48:0D:31:A4
          • RSA-SHA1: nil
          • Issuer
            • C: ZA
            • ST: Western Cape
            • L: Durbanville
            • O: Thawte
            • OU: Thawte Certification
            • CN: Thawte Timestamping CA
          • 2003-12-04 00:00:00 UTC: 2013-12-03 23:59:59 UTC
          • Subject
            • C: US
            • O: VeriSign, Inc.
            • CN: VeriSign Time Stamping Services CA
          • #5
            • rsaEncryption: nil
            • A9:CA:B2:A4:CC:CD:20:AF:0A:7D:89:AC:87:75:F0:B4:
              4E:F1:DF:C1:0F:BF:67:61:BD:A3:64:1C:DA:BB:F9:CA:
              33:AB:84:30:89:58:7E:8C:DB:6B:DD:36:9E:0F:BF:D1:
              EC:78:F2:77:A6:7E:6F:3C:BF:93:AF:0D:BA:68:F4:6C:
              94:CA:BD:52:2D:AB:48:3D:F5:B6:D5:5D:5F:1B:02:9F:
              FA:2F:6B:1E:A4:F7:A3:9A:A6:1A:C8:02:E1:7F:4C:52:
              E3:0E:60:EC:40:1C:7E:B9:0D:DE:3F:C7:B4:DF:87:BD:
              5F:7A:6A:31:2E:03:99:81:13:A8:47:20:CE:31:73:0D:
              57:2D:CD:78:34:33:95:12:99:12:B9:DE:68:2F:AA:E6:
              E3:C2:8A:8C:2A:C3:8B:21:87:66:BD:83:58:57:6F:75:
              BF:3C:AA:26:87:5D:CA:10:15:3C:9F:84:EA:54:C1:0A:
              6E:C4:FE:C5:4A:DD:B9:07:11:97:22:7C:DB:3E:27:D1:
              1E:78:EC:9F:31:C9:F1:E6:22:19:DB:C4:B3:47:43:9A:
              1A:5F:A0:1E:90:E4:5E:F5:EE:7C:F1:7D:AB:62:01:8F:
              F5:4D:0B:DE:D0:22:56:A8:95:CD:AE:88:76:AE:EE:BA:
              0D:F3:E4:4D:D9:A0:FB:68:A0:AE:14:3B:B3:87:C1:BB              : 0x010001
          • X509v3 extensions
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com
            • basicConstraints
              • true
              • true: 0
            • crlDistributionPoints: http://crl.verisign.com/ThawteTimestampingCA.crl
            • extendedKeyUsage: timeStamping
            • keyUsage: true, 6
            • subjectAltName
              • CN: TSA2048-1-53
        • RSA-SHA1: 
          4a 6b f9 ea 58 c2 44 1c  31 89 79 99 2b 96 bf 82  |Jk..X.D.1.y.+...|
ac 01 d6 1c 4c cd b0 8a  58 6e df 08 29 a3 5e c8  |....L...Xn..).^.|
ca 93 13 e7 04 52 0d ef  47 27 2f 00 38 b0 e4 c9  |.....R..G'/.8...|
93 4e 9a d4 22 62 15 f7  3f 37 21 4f 70 31 80 f1  |.N.."b..?7!Op1..|
8b 38 87 b3 e8 e8 97 00  fe cf 55 96 4e 24 d2 a9  |.8........U.N$..|
27 4e 7a ae b7 61 41 f3  2a ce e7 c9 d9 5e dd bb  |'Nz..aA.*....^..|
2b 85 3e b5 9d b5 d9 e1  57 ff be b4 c5 7e f5 cf  |+.>.....W....~..|
0c 9e f0 97 fe 2b d3 3b  52 1b 1b 38 27 f7 3f 4a  |.....+.;R..8'.?J|
      • Certificate #1
        • 2
          • 0D:E9:2B:F0:D4:D8:29:88:18:32:05:09:5E:9A:76:88
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • CN: VeriSign Time Stamping Services CA
          • 2003-12-04 00:00:00 UTC: 2008-12-03 23:59:59 UTC
          • Subject
            • C: US
            • O: VeriSign, Inc.
            • CN: VeriSign Time Stamping Services Signer
          • #5
            • rsaEncryption: nil
            • B2:50:28:48:DD:D3:68:7A:84:18:44:66:75:5D:7E:C4:
              B8:9F:63:26:FF:3D:43:9C:7C:11:38:10:25:55:73:D9:
              75:27:69:FD:4E:B9:20:5C:D3:0A:F9:A0:1B:2A:ED:55:
              56:21:61:D8:1E:DB:E4:BC:33:6B:C7:EF:DD:A3:37:65:
              8E:1B:93:0C:B6:53:1E:5C:7C:66:35:5F:05:8A:45:FE:
              76:4E:DF:53:80:A2:81:20:9D:AE:88:5C:A2:08:F7:E5:
              30:F9:EE:22:37:4C:42:0A:CE:DF:C6:1F:C4:D6:55:E9:
              81:3F:B5:52:A3:2C:AA:01:7A:F2:A2:AA:8D:35:FE:9F:
              E6:5D:6A:05:9F:3D:6B:E3:BF:96:C0:FE:CC:60:F9:40:
              E7:07:A0:44:EB:81:51:6E:A5:2A:F2:B6:8A:10:28:ED:
              8F:DC:06:A0:86:50:9A:7B:4A:08:0D:30:1D:CA:10:9E:
              6B:F7:E9:58:AE:04:A9:40:99:B2:28:E8:8F:16:AC:3C:
              E3:53:6F:4B:D3:35:9D:B5:6F:64:1D:B3:96:2C:BB:3D:
              E7:79:EB:6D:7A:F9:16:E6:26:AD:AF:EF:99:53:B7:40:
              2C:95:B8:79:AA:FE:D4:52:AB:29:74:7E:42:EC:39:1E:
              A2:6A:16:E6:59:BB:24:68:D8:00:80:43:10:87:80:6B              : 0x010001
          • X509v3 extensions
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com
            • basicConstraints
              • true
              • nil
            • crlDistributionPoints: http://crl.verisign.com/tss-ca.crl
            • extendedKeyUsage: true, timeStamping
            • keyUsage: true, 0xc0
            • subjectAltName
              • CN: TSA2048-1-54
        • RSA-SHA1: 
          87 78 70 da 4e 52 01 20  5b e0 79 c9 82 30 c4 fd  |.xp.NR. [.y..0..|
b9 19 96 bd 91 00 c3 bd  cd cd c6 f4 0e d8 ff f9  |................|
4d c0 33 62 30 11 c5 f5  74 1b d4 92 de 5f 9c 20  |M.3b0...t...._. |
13 b1 7c 45 be 50 cd 83  e7 80 17 83 a7 27 93 67  |..|E.P.......'.g|
13 46 fb ca b8 98 41 03  cc 9b 51 5b 05 8b 7f a8  |.F....A...Q[....|
6f f3 1b 50 1b 24 2e f2  69 8d 6c 22 f7 bb ca 16  |o..P.$..i.l"....|
95 ed 0c 74 c0 68 77 d9  eb 99 62 87 c1 73 90 f8  |...t.hw...b..s..|
89 74 7a 23 ab a3 98 7b  97 b1 f7 8f 29 71 4d 2e  |.tz#...{....)qM.|
75 1b 48 41 da f0 b5 0d  20 54 d6 77 a0 97 82 63  |u.HA.... T.w...c|
69 fd 09 cf 8a f0 75 bb  09 9b d9 f9 11 55 26 9a  |i.....u......U&.|
61 32 be 7a 02 b0 7b 86  be a2 c3 8b 22 2c 78 d1  |a2.z..{.....",x.|
35 76 bc 92 73 5c f9 b9  e6 4c 15 0a 23 cc e4 d2  |5v..s\...L..#...|
d4 34 2e 49 40 15 3c 0f  60 7a 24 c6 a5 66 ef 96  |.4.I@.<.`z$..f..|
cf 70 eb 3e e7 f4 0d 7e  dc d1 7c a3 76 71 69 c1  |.p.>...~..|.vqi.|
9c 4f 47 30 35 21 b1 a2  af 1a 62 3c 2b d9 8e aa  |.OG05!....b<+...|
2a 07 7b d8 18 b3 5c 7b  e2 9d a5 6f fe 3c 89 ad  |*.{...\{...o.<..|
      • #2
        • 2
          • C1:00:8B:3C:3C:88:11:D1:3E:F6:63:EC:DF:40
          • RSA-MD5: nil
          • #2
            • OU: Copyright (c) 1997 Microsoft Corp.
            • OU: Microsoft Corporation
            • CN: Microsoft Root Authority
          • 1997-01-10 07:00:00 UTC: 2020-12-31 07:00:00 UTC
          • #4
            • OU: Copyright (c) 1997 Microsoft Corp.
            • OU: Microsoft Corporation
            • CN: Microsoft Root Authority
          • #5
            • rsaEncryption: nil
            • A9:02:BD:C1:70:E6:3B:F2:4E:1B:28:9F:97:78:5E:30:
              EA:A2:A9:8D:25:5F:F8:FE:95:4C:A3:B7:FE:9D:A2:20:
              3E:7C:51:A2:9B:A2:8F:60:32:6B:D1:42:64:79:EE:AC:
              76:C9:54:DA:F2:EB:9C:86:1C:8F:9F:84:66:B3:C5:6B:
              7A:62:23:D6:1D:3C:DE:0F:01:92:E8:96:C4:BF:2D:66:
              9A:9A:68:26:99:D0:3A:2C:BF:0C:B5:58:26:C1:46:E7:
              0A:3E:38:96:2C:A9:28:39:A8:EC:49:83:42:E3:84:0F:
              BB:9A:6C:55:61:AC:82:7C:A1:60:2D:77:4C:E9:99:B4:
              64:3B:9A:50:1C:31:08:24:14:9F:A9:E7:91:2B:18:E6:
              3D:98:63:14:60:58:05:65:9F:1D:37:52:87:F7:A7:EF:
              94:02:C6:1B:D3:BF:55:45:B3:89:80:BF:3A:EC:54:94:
              4E:AE:FD:A7:7A:6D:74:4E:AF:18:CC:96:09:28:21:00:
              57:90:60:69:37:BB:4B:12:07:3C:56:FF:5B:FB:A4:66:
              0A:08:A6:D2:81:56:57:EF:B6:3B:5E:16:81:77:04:DA:
              F6:BE:AE:80:95:FE:B0:CD:7F:D6:A7:1A:72:5C:3C:CA:
              BC:F0:08:A3:22:30:B3:06:85:C9:B3:20:77:13:85:DF              : 0x010001
          • 2.5.29.1
            • 5b d0 70 ef 69 72 9e 23  51 7e 14 b2 4d 8e ff cb  |[.p.ir.#Q~..M...|
              • #0
                • OU: Copyright (c) 1997 Microsoft Corp.
                • OU: Microsoft Corporation
                • CN: Microsoft Root Authority
              • 00 c1 00 8b 3c 3c 88 11  d1 3e f6 63 ec df 40     |....<<...>.c..@ |
        • RSA-MD5: 
          95 e8 0b c0 8d f3 97 18  35 ed b8 01 24 d8 77 11  |........5...$.w.|
f3 5c 60 32 9f 9e 0b cb  3e 05 91 88 8f c9 3a e6  |.\`2....>.....:.|
21 f2 f0 57 93 2c b5 a0  47 c8 62 ef fc d7 cc 3b  |!..W.,..G.b....;|
3b 5a a9 36 54 69 fe 24  6d 3f c9 cc aa de 05 7c  |;Z.6Ti.$m?.....||
dd 31 8d 3d 9f 10 70 6a  bb fe 12 4f 18 69 c0 fc  |.1.=..pj...O.i..|
d0 43 e3 11 5a 20 4f ea  62 7b af aa 19 c8 2b 37  |.C..Z O.b{....+7|
25 2d be 65 a1 12 8a 25  0f 63 a3 f7 54 1c f9 21  |%-.e...%.c..T..!|
c9 d6 15 f3 52 ac 6e 43  32 07 fd 82 17 f8 e5 67  |....R.nC2......g|
6c 0d 51 f6 bd f1 52 c7  bd e7 c4 30 fc 20 31 09  |l.Q...R....0. 1.|
88 1d 95 29 1a 4d d5 1d  02 a5 f1 80 e0 03 b4 5b  |...).M.........[|
f4 b1 dd c8 57 ee 65 49  c7 52 54 b6 b4 03 28 12  |....W.eI.RT...(.|
ff 90 d6 f0 08 8f 7e b8  97 c5 ab 37 2c e4 7a e4  |......~....7,.z.|
a8 77 e3 76 a0 00 d0 6a  3f c1 d2 36 8a e0 41 12  |.w.v...j?..6..A.|
a8 35 6a 1b 6a db 35 e1  d4 1c 04 e4 a8 45 04 c8  |.5j.j.5......E..|
5a 33 38 6e 4d 1c 0d 62  b7 0a a2 8c d3 d5 54 3f  |Z38nM..b......T?|
46 cd 1c 55 a6 70 db 12  3a 87 93 75 9f a7 d2 a0  |F..U.p..:..u....|
      • #3
        • 2
          • 6A:0B:99:4F:C0:00:0C:AB:11:D8:22:EF:7D:6C:79:7E
          • RSA-MD5: nil
          • #2
            • OU: Copyright (c) 1997 Microsoft Corp.
            • OU: Microsoft Corporation
            • CN: Microsoft Root Authority
          • 2002-05-23 08:00:00 UTC: 2011-09-25 08:00:00 UTC
          • Subject
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • OU: Copyright (c) 2000 Microsoft Corp.
            • CN: Microsoft Code Signing PCA
          • #5
            • rsaEncryption: nil
            • C3:CC:20:8D:BC:DF:FF:3E:50:EE:7A:C2:D4:24:25:F6:
              76:CE:21:FF:CD:2A:56:4E:CA:9C:B7:82:B2:35:79:2D:
              00:C4:A8:08:D5:63:C9:B7:A5:F6:E9:C1:C1:D6:B1:8C:
              96:A2:07:FA:0F:B6:82:52:9A:EB:82:C6:BD:10:C5:A8:
              C0:EE:6B:84:8E:53:1B:BB:50:FA:64:01:89:C1:16:D4:
              82:68:00:40:78:44:F5:12:38:4E:FB:63:51:E0:FA:3D:
              B9:E5:37:B1:DF:63:07:23:3B:71:40:34:47:F4:6B:AE:
              46:F5:27:73:1E:22:CB:42:19:1E:51:B6:52:9A:D3:A3:
              D0:13:C6:19:3F:71:06:6D:F2:95:21:44:5F:42:ED:C0:
              C9:99:64:20:B8:C1:34:FC:A2:44:E6:7B:B2:1D:2F:B8:
              A6:DE:F4:A1:DF:9B:21:0F:FE:58:31:41:55:38:7E:AF:
              58:E7:E4:EC:59:79:25:AB:F7:2A:2F:11:3F:38:78:3E:
              42:7F:A7:68:E4:7E:22:68:17:E6:4A:92:C4:78:44:52:
              47:A1:4F:84:89:93:9B:C0:67:7B:EA:09:FB:86:03:7D:
              F6:99:71:3C:2B:A7:66:98:CC:DF:2D:E2:2B:02:1A:0F:
              34:48:65:F5:3C:12:AF:F1:87:1C:1D:26:52:6F:CC:03              : 3
          • #6
            • extendedKeyUsage: codeSigning
            • 2.5.29.1
              • 5b d0 70 ef 69 72 9e 23  51 7e 14 b2 4d 8e ff cb  |[.p.ir.#Q~..M...|
                • #0
                  • OU: Copyright (c) 1997 Microsoft Corp.
                  • OU: Microsoft Corporation
                  • CN: Microsoft Root Authority
                • 00 c1 00 8b 3c 3c 88 11  d1 3e f6 63 ec df 40     |....<<...>.c..@ |
            • 1.3.6.1.4.1.311.21.1: 0x030003
            • subjectKeyIdentifier: 
              25 f8 2b 4b 5d c8 72 54  ad e5 f6 a0 2a 17 16 fb  |%.+K].rT....*...|
c1 f9 53 81                                       |..S.            |
            • 1.3.6.1.4.1.311.20.2: 
              00 53 00 75 00 62 00 43  00 41                    |.S.u.b.C.A      |
            • keyUsage: F
            • basicConstraints: true, true
        • RSA-MD5: 
          9f 64 4a 74 e1 69 27 5a  f8 06 53 27 97 c7 1e d1  |.dJt.i'Z..S'....|
81 73 d1 ce ba 81 f4 1a  ea 93 97 87 af dc 8f 3a  |.s.............:|
02 b5 8b 10 bf d3 2e 74  74 01 3b b4 40 13 ee 51  |.......tt.;.@..Q|
5f 3c c3 32 9b 4f d6 e9  59 ca 28 00 96 72 15 eb  |_<.2.O..Y.(..r..|
71 2f 98 98 c0 03 e1 35  42 e9 08 2f 62 31 99 fc  |q/.....5B../b1..|
31 f3 dc 42 ae dc 4f 8f  cc 38 de 70 41 38 60 0d  |1..B..O..8.pA8`.|
3c 20 92 2b 18 9c 07 fe  56 93 a9 d2 4b 88 bd 99  |< .+....V...K...|
4a 22 02 85 6f 44 ec 91  e6 19 de 2b b8 15 b2 9b  |J"..oD.....+....|
70 fa c5 eb 4e 83 2c 3a  71 a0 32 58 f2 35 52 db  |p...N.,:q.2X.5R.|
91 88 40 ef 6f 1b e7 29  42 b4 70 cd 7d 6c 6f 1a  |..@.o..)B.p.}lo.|
c8 db 9c fa d1 5e 8a f7  d2 2c 9a 00 5f d9 f4 c2  |.....^...,.._...|
b3 9f 7b d4 3b fe 53 74  2a 67 1d 81 27 a2 75 e8  |..{.;.St*g..'.u.|
40 98 07 18 8b 18 20 0b  46 72 df ef f7 ec 36 6d  |@..... .Fr....6m|
ee 6b c9 66 53 1d bd 35  aa e5 cb 1d 6a 72 13 45  |.k.fS..5....jr.E|
80 1e d9 5d 87 66 8a 1c  2c a6 ca cb 61 03 03 de  |...].f..,...a...|
09 c9 01 b1 59 c0 b0 fd  e6 66 97 cb fa 09 3b 7c  |....Y....f....;||
      • Certificate #4
        • 2
          • 61:05:87:58:00:03:00:00:00:5A
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • OU: Copyright (c) 2000 Microsoft Corp.
            • CN: Microsoft Code Signing PCA
          • 2005-01-05 23:20:19 UTC: 2006-04-05 23:30:19 UTC
          • Subject
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • CN: Microsoft Corporation
          • #5
            • rsaEncryption: nil
            • CF:38:F7:E1:A4:27:5E:F8:F0:CC:AA:CE:FB:3A:DE:3B:
              62:31:46:05:46:BB:F5:B6:05:1A:D3:B3:AC:C2:9F:0F:
              4C:67:08:28:C4:43:10:F5:3B:75:79:7F:6A:91:F4:D6:
              33:C8:61:BF:FA:91:90:00:7A:F0:79:1D:5D:68:70:F6:
              90:B2:98:77:B5:03:1D:2F:9B:9D:9B:75:89:2F:4A:01:
              41:7C:9E:7C:CB:87:43:9B:F4:96:74:99:9E:98:C1:CF:
              40:57:58:16:F6:C0:D5:92:16:E5:24:85:71:8F:99:49:
              ED:55:7C:65:C9:1F:38:00:23:C5:3E:AB:11:D6:29:6C:
              C6:9E:A0:70:5B:7D:D5:37:D4:67:77:20:C3:06:CE:85:
              F8:4E:34:80:A0:35:C4:1C:53:32:01:57:EF:B1:28:BD:
              6C:01:E3:AD:40:BC:80:A9:09:49:DB:36:E3:37:F4:1D:
              49:AA:2A:A7:6B:D0:19:D3:CC:8E:9D:D6:86:46:7A:13:
              4A:D6:45:19:A5:53:B3:E2:78:2F:2E:35:97:6B:4C:C6:
              E8:1A:B0:D3:D1:24:90:69:AB:CE:FC:69:6E:3E:4C:FB:
              02:41:62:DC:07:98:5D:7E:5C:A7:4C:27:31:6B:56:4C:
              E1:98:D8:E0:D1:1D:71:8D:3D:2A:C0:7F:71:4D:FF:CF              : 0x010001
          • #6
            • keyUsage: true, 0xc0
            • subjectKeyIdentifier: 
              92 11 12 14 34 77 b1 8f  68 34 e2 0e f1 32 34 c0  |....4w..h4...24.|
e9 f3 63 31                                       |..c1            |
            • extendedKeyUsage: codeSigning
            • authorityKeyIdentifier
              • 25 f8 2b 4b 5d c8 72 54  ad e5 f6 a0 2a 17 16 fb  |%.+K].rT....*...|
c1 f9 53 81                                       |..S.            |
                • #0
                  • OU: Copyright (c) 1997 Microsoft Corp.
                  • OU: Microsoft Corporation
                  • CN: Microsoft Root Authority
                • 6a 0b 99 4f c0 00 0c ab  11 d8 22 ef 7d 6c 79 7e  |j..O......".}ly~|
            • crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/CodeSignPCA.crl
        • RSA-SHA1: 
          0c 01 0a 0d ee 26 1e c3  11 bc c4 74 3c a7 1d ee  |.....&.....t<...|
f5 4a de 27 99 a2 f7 ab  8c 8e 47 72 a0 51 bf a8  |.J.'......Gr.Q..|
b1 4b d8 7f 42 d5 1c 8f  a3 e6 b8 12 bd 51 23 af  |.K..B........Q#.|
b1 3b d3 65 f1 2d 8c 03  e9 4c 50 ed 38 f6 57 5e  |.;.e.-...LP.8.W^|
3a 73 4f 33 ac 13 2d b5  25 c3 3b e5 91 59 df d0  |:sO3..-.%.;..Y..|
1b b8 d0 ae 11 07 09 cc  05 d3 52 1c e2 0a 64 77  |..........R...dw|
05 18 19 77 12 75 10 93  1a 36 16 8c d5 20 1f 6c  |...w.u...6... .l|
33 ef 60 2f 6d af e6 f1  d4 da 29 be 8a db b5 0f  |3.`/m.....).....|
6b 95 22 40 f2 2b 97 32  50 ff fa ea 8a c6 b6 e3  |k."@.+.2P.......|
ec 36 8a b2 77 29 54 3e  7e 16 95 fe 71 59 8d a7  |.6..w)T>~...qY..|
ca 84 0f e1 ff 82 11 81  2f 19 87 dd e7 44 9f 8d  |......../....D..|
ef 22 f2 fe b6 8c cf c8  db 21 86 b5 97 98 48 0d  |.".......!....H.|
ab d8 e1 63 72 dd 6f e7  2c 93 2b 9f ee b6 12 d6  |...cr.o.,.+.....|
3a 59 4a 21 e5 9f a9 62  50 93 15 75 1d 76 5f d8  |:YJ!...bP..u.v_.|
a0 c2 fa f9 a4 ac 7e 11  ca f9 57 bf fd d2 89 e9  |......~...W.....|
7d ee 8c a4 da 07 bb ba  14 dd 13 43 d5 ea 9d e6  |}..........C....|
    • Signer
      • 1
      • unnamed
        • #0
          • C: US
          • ST: Washington
          • L: Redmond
          • O: Microsoft Corporation
          • OU: Copyright (c) 2000 Microsoft Corp.
          • CN: Microsoft Code Signing PCA
        • 61:05:87:58:00:03:00:00:00:5A
      • SHA1: nil
      • #3
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest: 
          ca 06 5e 65 06 91 78 41  21 fe 2a 39 50 62 87 fb  |..^e..xA!.*9Pb..|
24 66 d5 d5                                       |$f..            |
        • 1.3.6.1.4.1.311.2.1.12
          • 00 56 00 42 00 36 00 2e  00 30 00 20 00 43 00 6f  |.V.B.6...0. .C.o|
00 6d 00 6d 00 6f 00 6e  00 20 00 43 00 6f 00 6e  |.m.m.o.n. .C.o.n|
00 74 00 72 00 6f 00 6c  00 73                    |.t.r.o.l.s      |
            : http://support.microsoft.com/?id=896559
      • rsaEncryption: 
        68 dc d7 1a a2 2c 7a 5f  fb 9b d6 4a 06 eb ef 9d  |h....,z_...J....|
2b d8 34 0e b6 f1 30 d2  c3 19 3d 0c 1a 55 ce 70  |+.4...0...=..U.p|
7a 62 af 65 36 dd 7d d7  95 6c b1 14 77 88 5c 7a  |zb.e6.}..l..w.\z|
de ff f0 e2 9b ee 84 66  70 4d 3b 65 90 ca c7 8c  |.......fpM;e....|
6d ec 6c fc 8f 7f 1b eb  f0 d4 77 a4 b6 76 f3 9d  |m.l.......w..v..|
e0 a7 09 97 d8 50 39 83  88 96 db d5 0f 93 df cc  |.....P9.........|
ff 4b ca 39 e2 25 b4 cd  f1 c0 20 2e 9b d8 74 6d  |.K.9.%.... ...tm|
1f c3 e9 89 97 28 20 d3  08 a7 bd b3 4e 78 1e cb  |.....( .....Nx..|
36 dc 79 e3 12 86 cf 6f  87 28 f9 10 b9 cd 7b 9e  |6.y....o.(....{.|
de 42 c4 5b 7d ea 49 af  31 38 e6 cb ed 22 b3 4c  |.B.[}.I.18...".L|
8c d8 7b 4f f1 0d 09 ee  d0 b3 c7 de f3 21 95 3d  |..{O.........!.=|
91 85 98 89 7d dd 68 5a  66 c2 78 76 1b f9 6a 3e  |....}.hZf.xv..j>|
6d 50 4d ad f1 a2 9b 5f  a6 b5 38 23 f7 0b 11 3b  |mPM...._..8#...;|
7d 2a d9 e6 be 04 3b 4b  61 dc 89 e1 b2 3f db eb  |}*....;Ka....?..|
e9 c5 db 0a f1 b2 27 04  21 db 55 c8 74 c7 d1 ce  |......'.!.U.t...|
21 d3 7d 85 8e 9b ca 29  db 95 9a 94 69 dd ac 39  |!.}....)....i..9|
      • countersignature
        • 1
          • unnamed
            • #0
              • C: US
              • O: VeriSign, Inc.
              • CN: VeriSign Time Stamping Services CA
            • 0D:E9:2B:F0:D4:D8:29:88:18:32:05:09:5E:9A:76:88
          • MD5: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2005-04-21 23:19:02 UTC
            • messageDigest: 
              2f 09 b8 5a 3f 17 1d 01  6a 9d 7f fb e7 85 7c e0  |/..Z?...j.....|.|
          • rsaEncryption: 
            3c f9 37 2a 5f c9 13 a2  a1 14 5a a2 09 37 5e 42  |<.7*_.....Z..7^B|
b4 17 7d cc 79 5f b2 7d  3d cc bc 15 b2 4c e4 e9  |..}.y_.}=....L..|
2c c0 dc ac ce 3b 97 14  8b c7 8d 44 8e c8 52 14  |,....;.....D..R.|
4d 9c 0b df cb 91 e7 2f  57 70 29 bf e1 97 cd 72  |M....../Wp)....r|
54 1e e4 02 ee 13 af 9a  35 3a cc eb 3c 31 b9 0e  |T.......5:..<1..|
c3 9f eb 04 28 a8 ea 0b  24 aa f2 cf c7 f8 bc d4  |....(...$.......|
54 2a 99 39 44 2a 9a a3  16 0b 6c 3d dc 32 9c ef  |T*.9D*....l=.2..|
e0 54 00 03 a0 38 6c 1b  39 6b 67 50 32 91 82 eb  |.T...8l.9kgP2...|
e7 25 6d 3c 21 1d 43 93  37 b9 aa 58 8d d5 94 b0  |.%m...Z..._.y.M8..|
offsetsizetypecomment
0928768EXE08/29/2002 11:23:17#
15c115HTM#
97a011794AVI#
e2c006888PKCS7Authenticode Signature#
Scanning the drive for archives:
1 file, 935656 bytes (914 KiB)


--
Type = PE
Physical Size = 935656
CPU = x86
Characteristics = Executable 32-bit NoRelocs NoLineNums NoLocalSyms
Created = 2002-08-29 11:23:17
Headers Size = 1024
Checksum = 972290
Name = WEXTRACT.EXE            
Image Size = 942080
Section Alignment = 4096
File Alignment = 512
Code Size = 34816
Initialized Data Size = 892928
Uninitialized Data Size = 0
Linker Version = 7.0
OS Version = 5.1
Image Version = 5.1
Subsystem Version = 4.0
Subsystem = Windows GUI
DLL Characteristics = TerminalServerAware
Stack Reserve = 262144
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 16777216
Comment = FileVersion: 6.0.2800.1106
FileVersion: 6.00.2800.1106
ProductVersion: 6.0.2800.1106
ProductVersion: 6.00.2800.1106
CompanyName: Microsoft Corporation
FileDescription: Win32 Cabinet Self-Extractor                                           
InternalName: Wextract                
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: WEXTRACT.EXE            
ProductName: Microsoft® Windows® Operating System
----
Path = .rsrc/RCDATA/CABINET
Size = 852605
Packed Size = 852605
--
Path = .rsrc/RCDATA/CABINET
Type = Cab
Physical Size = 852605
Method = LZX:21
Blocks = 1
Volumes = 1
Volume Index = 0
ID = 6602

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2005-04-21 14:04:00 ....A          685               mscmupd.inf
2005-04-15 19:58:16 ....A      1071088               mscomctl.ocx
2005-04-15 19:58:18 ....A      1351392               comctl32.ocx
2005-04-13 12:09:44 ....A        14297               KB896559.TXT
2002-08-29 08:14:40 ....A        91136               ADVPACK.DLL
2002-08-29 08:14:40 ....A         4608               W95INF32.DLL
2002-08-29 08:14:40 ....A         2272               W95INF16.DLL
------------------- ----- ------------ ------------  ------------------------
2005-04-21 14:04:00            2535478       935656  7 files
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK