msofd.dll - Microsoft OFD Interface Library

info
MZ
PE
resources
strings
imports
exports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	msofd.dll
size	2038136 (0x1f1978)
md5	b75eec8af89d923212a6425fca404529

type	PE32 executable (DLL) (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x108

Rich Header

lib id	version	times used
123	50727	6
126	50327	2
125	50727	6
93	4035	11
1	0	295
95	4035	8
122	50727	1
109	50727	11
110	50727	96
69	9111	1
120	50727	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x4b7c9825
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	8.0
SizeOfCode	0x152200
SizeOfInitializedData	0x9dc00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x12f6bc
BaseOfCode	0x1000
BaseOfData	0x154000
ImageBase	0x2ebc0000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.0
ImageVersion	6.0
SubsystemVersion	4.10
Reserved1	0
SizeOfImage	0x283000
SizeOfHeaders	0x400
CheckSum	0x1fe826
Subsystem	3
DllCharacteristics	0x100
SizeOfStackReserve	0x40000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x1521e2	0x152200	R-X CODE
.data	0x154000	0x118604	0x88800	RW- IDATA
.rsrc	0x26d000	0x654	0x800	R-- IDATA
.reloc	0x26e000	0x14ae4	0x14c00	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x153120	0xc2
IMPORT	0x151f54	0xb4
RESOURCE	0x26d000	0x654
EXCEPTION	0	0
SECURITY	0x1f0200	0x1778
BASERELOC	0x26e000	0xd43c
DEBUG	0x15e0	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x281d8	0x40
Bound_IAT	0	0
IAT	0x1000	0x458
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
STRING	#35	98	1252
VERSION	#1	948	1252
MANIFEST	#2	338	1252

id	lang	string
544	1033	Software\Microsoft\Money\Investor

module_name	hint	ord	function_name
KERNEL32.dll	84		CreateFileMappingA
KERNEL32.dll	85		CreateFileMappingW
KERNEL32.dll	594		LoadLibraryA
KERNEL32.dll	597		LoadLibraryW
KERNEL32.dll	96		CreateMutexA
KERNEL32.dll	97		CreateMutexW
KERNEL32.dll	107		CreateSemaphoreA
KERNEL32.dll	108		CreateSemaphoreW
KERNEL32.dll	372		GetLocaleInfoA
KERNEL32.dll	373		GetLocaleInfoW
KERNEL32.dll	381		GetModuleFileNameA
KERNEL32.dll	382		GetModuleFileNameW
KERNEL32.dll	625		MoveFileW
KERNEL32.dll	468		GetTempFileNameW
KERNEL32.dll	731		SearchPathA
KERNEL32.dll	732		SearchPathW
KERNEL32.dll	59		CompareStringW
KERNEL32.dll	547		InitializeCriticalSection
KERNEL32.dll	129		DeleteCriticalSection
KERNEL32.dll	152		EnterCriticalSection
KERNEL32.dll	593		LeaveCriticalSection
KERNEL32.dll	489		GetVersionExA
KERNEL32.dll	675		QueryPerformanceCounter
KERNEL32.dll	479		GetTickCount
KERNEL32.dll	326		GetCurrentThreadId
KERNEL32.dll	458		GetSystemTimeAsFileTime
KERNEL32.dll	862		TerminateProcess
KERNEL32.dll	878		UnhandledExceptionFilter
KERNEL32.dll	842		SetUnhandledExceptionFilter
KERNEL32.dll	253		GetACP
KERNEL32.dll	550		InterlockedCompareExchange
KERNEL32.dll	553		InterlockedExchange
KERNEL32.dll	622		MoveFileA
KERNEL32.dll	132		DeleteFileW
KERNEL32.dll	131		DeleteFileA
KERNEL32.dll	70		CopyFileW
KERNEL32.dll	67		CopyFileA
KERNEL32.dll	386		GetModuleHandleW
KERNEL32.dll	322		GetCurrentProcess
KERNEL32.dll	600		LocalAlloc
KERNEL32.dll	916		WideCharToMultiByte
KERNEL32.dll	629		MultiByteToWideChar
KERNEL32.dll	616		MapViewOfFile
KERNEL32.dll	881		UnmapViewOfFile
KERNEL32.dll	654		OutputDebugStringW
KERNEL32.dll	646		OpenProcess
KERNEL32.dll	323		GetCurrentProcessId
KERNEL32.dll	604		LocalFree
KERNEL32.dll	649		OpenSemaphoreW
KERNEL32.dll	707		ReleaseSemaphore
KERNEL32.dll	706		ReleaseMutex
KERNEL32.dll	912		WaitForSingleObject
KERNEL32.dll	371		GetLocalTime
KERNEL32.dll	230		FindResourceW
KERNEL32.dll	250		FreeResource
KERNEL32.dll	369		GetLastError
KERNEL32.dll	446		GetSystemDefaultLCID
KERNEL32.dll	52		CloseHandle
KERNEL32.dll	854		Sleep
KERNEL32.dll	416		GetProcAddress
KERNEL32.dll	248		FreeLibrary
KERNEL32.dll	467		GetTempFileNameA
KERNEL32.dll	679		RaiseException
KERNEL32.dll	474		GetThreadLocale
MSVCR80.dll	649		_ltow
MSVCR80.dll	1345		rand
MSVCR80.dll	1362		srand
MSVCR80.dll	365		_encode_pointer
MSVCR80.dll	653		_malloc_crt
MSVCR80.dll	366		_encoded_null
MSVCR80.dll	355		_decode_pointer
MSVCR80.dll	522		_initterm
MSVCR80.dll	523		_initterm_e
MSVCR80.dll	280		_amsg_exit
MSVCR80.dll	273		_adjust_fdiv
MSVCR80.dll	107		__CppXcptFilter
MSVCR80.dll	1005		_unlock
MSVCR80.dll	151		__dllonexit
MSVCR80.dll	636		_lock
MSVCR80.dll	802		_onexit
MSVCR80.dll	42		public: char const * __thiscall type_info::_name_internal_method(struct __type_info_node *)const ?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z
MSVCR80.dll	141		__clean_type_info_names_internal
MSVCR80.dll	65		void __cdecl terminate(void) ?terminate@@YAXXZ
MSVCR80.dll	374		_except_handler4_common
MSVCR80.dll	52		public: void __thiscall type_info::_type_info_dtor_internal_method(void) ?_type_info_dtor_internal_method@type_info@@QAEXXZ
MSVCR80.dll	91		_CxxThrowException
MSVCR80.dll	1331		memset
MSVCR80.dll	116		__CxxFrameHandler3
MSVCR80.dll	1047		_vsnwprintf
MSVCR80.dll	819		_purecall
MSVCR80.dll	1329		memmove
MSVCR80.dll	1327		memcpy
MSVCR80.dll	1227		bsearch
MSVCR80.dll	1250		floor
MSVCR80.dll	634		_localtime64
MSVCR80.dll	1084		_wcslwr
MSVCR80.dll	1346		rand_s
MSVCR80.dll	50		void (__cdecl__cdecl _set_se_translator(void (__cdecl)(unsigned int, struct _EXCEPTION_POINTERS )))(unsigned int, struct _EXCEPTION_POINTERS ) ?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
MSVCR80.dll	413		_fpreset
MSVCR80.dll	321		_controlfp
MSVCR80.dll	1203		_wtoi
MSVCR80.dll	81		_CIlog10
MSVCR80.dll	1094		_wcsnset
MSVCR80.dll	1300		iswdigit
MSVCR80.dll	80		_CIlog
MSVCR80.dll	78		_CIexp
MSVCR80.dll	964		_swprintf
MSVCR80.dll	1438		wcspbrk
MSVCR80.dll	977		_time64
MSVCR80.dll	891		_snwprintf
MSVCR80.dll	1443		wcsstr
MSVCR80.dll	1435		wcsncpy
MSVCR80.dll	1090		_wcsnicmp
MSVCR80.dll	1080		_wcsicmp
MSVCR80.dll	1187		_wsplitpath
MSVCR80.dll	1434		wcsncmp
MSVCR80.dll	21		public: bool __thiscall type_info::operator==(class type_info const &)const ??8type_info@@QBE_NABV0@@Z
MSVCR80.dll	831		_recalloc
MSVCR80.dll	1432		wcsncat
MSVCR80.dll	1424		wcschr
MSVCR80.dll	1305		iswspace
MSVCR80.dll	1342		qsort
MSVCR80.dll	125		__RTtypeid
MSVCR80.dll	1316		malloc
MSVCR80.dll	1261		free
USER32.dll	55		CharUpperW
USER32.dll	459		LoadStringA
USER32.dll	514		PostMessageA
USER32.dll	728		wsprintfW
USER32.dll	41		CharLowerW
USER32.dll	460		LoadStringW
USER32.dll	52		CharUpperA
ADVAPI32.dll	459		RegCloseKey
ADVAPI32.dll	493		RegOpenKeyExW
ADVAPI32.dll	160		CryptReleaseContext
ADVAPI32.dll	140		CryptDestroyKey
ADVAPI32.dll	226		FreeSid
ADVAPI32.dll	479		RegEnumKeyExW
ADVAPI32.dll	498		RegQueryInfoKeyW
ADVAPI32.dll	143		CryptEncrypt
ADVAPI32.dll	162		CryptSetKeyParam
ADVAPI32.dll	142		CryptDuplicateKey
ADVAPI32.dll	137		CryptDecrypt
ADVAPI32.dll	133		CryptAcquireContextA
ADVAPI32.dll	139		CryptDestroyHash
ADVAPI32.dll	154		CryptGetKeyParam
ADVAPI32.dll	138		CryptDeriveKey
ADVAPI32.dll	157		CryptHashData
ADVAPI32.dll	136		CryptCreateHash
ADVAPI32.dll	570		SetSecurityDescriptorDacl
ADVAPI32.dll	16		AddAccessAllowedAce
ADVAPI32.dll	307		InitializeAcl
ADVAPI32.dll	308		InitializeSecurityDescriptor
ADVAPI32.dll	320		IsValidSid
ADVAPI32.dll	282		GetTokenInformation
ADVAPI32.dll	428		OpenProcessToken
ADVAPI32.dll	29		AllocateAndInitializeSid
ADVAPI32.dll	465		RegCreateKeyExA
ADVAPI32.dll	466		RegCreateKeyExW
ADVAPI32.dll	468		RegDeleteKeyA
ADVAPI32.dll	471		RegDeleteKeyW
ADVAPI32.dll	492		RegOpenKeyExA
ADVAPI32.dll	516		RegSetValueExA
ADVAPI32.dll	517		RegSetValueExW
ADVAPI32.dll	503		RegQueryValueExA
ADVAPI32.dll	504		RegQueryValueExW
ADVAPI32.dll	473		RegDeleteValueW
ole32.dll	15		CoCreateGuid
ole32.dll	105		CoUninitialize
ole32.dll	59		CoInitialize
ole32.dll	8		CLSIDFromString
ole32.dll	309		StringFromGUID2
OLEAUT32.dll		40
OLEAUT32.dll		15
OLEAUT32.dll		18
OLEAUT32.dll		185
OLEAUT32.dll		184
OLEAUT32.dll		4
OLEAUT32.dll		411
OLEAUT32.dll		16
OLEAUT32.dll		148
OLEAUT32.dll		163
OLEAUT32.dll		82
OLEAUT32.dll		102
OLEAUT32.dll		3
OLEAUT32.dll		24
OLEAUT32.dll		23
OLEAUT32.dll		7
OLEAUT32.dll		12
OLEAUT32.dll		27
OLEAUT32.dll		17
OLEAUT32.dll		20
OLEAUT32.dll		19
OLEAUT32.dll		21
OLEAUT32.dll		22
OLEAUT32.dll		6
OLEAUT32.dll		149
OLEAUT32.dll		201
OLEAUT32.dll		29
OLEAUT32.dll		161
OLEAUT32.dll		2
OLEAUT32.dll		10
OLEAUT32.dll		9
OLEAUT32.dll		8
OLEAUT32.dll		150
UTLSRF08.DLL	23		HEAPFree
UTLSRF08.DLL			ComReleaseLibrary
UTLSRF08.DLL	25		HrComCreateInstance
UTLSRF08.DLL	27		HrComLoadLibraryW
UTLSRF08.DLL	82		StringCopyW
UTLSRF08.DLL	67		MakePathW
UTLSRF08.DLL	33		HrGetModuleFileNameW
UTLSRF08.DLL	80		StringAppendW
UTLSRF08.DLL	74		PvHEAPAllocate_
MYISAM08.dll		72
MYISAM08.dll		8
MYISAM08.dll		4
MYISAM08.dll		69
MYISAM08.dll		75
MYISAM08.dll		73
MYISAM08.dll		38
MYISAM08.dll		2
MYISAM08.dll		53
MYISAM08.dll		21
MYISAM08.dll		33
MYISAM08.dll		19
MYISAM08.dll		18
MYISAM08.dll		12
MYISAM08.dll		17
MYISAM08.dll		11
MYISAM08.dll		10
MYISAM08.dll		63
MYISAM08.dll		60
MYISAM08.dll		37
MYISAM08.dll		49
MYISAM08.dll		7
MYISAM08.dll		3
MYISAM08.dll		74
MYISAM08.dll		54
MYISAM08.dll		20
MYISAM08.dll		56
MYISAM08.dll		70
MYISAM08.dll		67
MYISAM08.dll		66
MYISAM08.dll		58
MYISAM08.dll		44
MYISAM08.dll		51
MYISAM08.dll		57
MYISAM08.dll		24
MYISAM08.dll		42
MYISAM08.dll		31
MYISAM08.dll		48
MYISAM08.dll		64
MYISAM08.dll		55
MYISAM08.dll		68
MYISAM08.dll		65
MYISAM08.dll		52
MYISAM08.dll		9
MYISAM08.dll		13
MYISAM08.dll		50
MYISAM08.dll		39
MYISAM08.dll		32
MYISAM08.dll		28
MYISAM08.dll		23
MYISAM08.dll		6
MYISAM08.dll		40
MYISAM08.dll		5
MYISAM08.dll		41
MYISAM08.dll		76
MYISAM08.dll		35

ord	entry_va	function_name
1	0x109f38	?TrapMathInt@@YAHHH@Z
2	0xfce06	DllCanUnloadNow
3	0xfd129	DllGetClassObject
4	0xfce87	DllRegisterServer
5	0xfd054	DllUnregisterServer

module_name	MSOFD.dll
flags	0
timestamp	2010-02-18 01:19:41
version	0.0
ordinal_base	1
nFunctions	5
nNames	5
Names(5)	0x15315c
Functions(5)	0x153148
NameOrdinals(5)	0x153170

StringTable 040904E4

CompanyName	Microsoft(R) Corporation
FileDescription	Microsoft OFD Interface Library
FileVersion	17.00.3817
InternalName	MSOFD
LegalCopyright	Copyright © Microsoft Corp.
OriginalName	MSOFD.DLL
OriginalFilename	MSOFD.DLL
ProductName	Microsoft(R) Money
ProductVersion	17.00.3817
LegalTrademarks	Copyright © Microsoft Corp.

VS_FIXEDFILEINFO

FileVersion	17.0.0.3817
ProductVersion	17.0.0.3817
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	2
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Code Signing PCA

serial: 6101CF3E00000000000F

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ab:11:dc:50:ff:5c:9d:cb:c0
        Signature Algorithm: sha1WithRSA
        Issuer: OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
        Validity
            Not Before: Aug 22 22:31:02 2007 GMT
            Not After : Aug 25 07:00:00 2012 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b7:79:7d:d6:5d:b3:45:39:a8:34:ac:31:da:f9:
                    25:35:49:77:c0:fb:1f:9e:c7:45:71:ef:d1:46:e8:
                    d4:8c:c3:6b:4c:52:62:f4:99:02:c3:4d:d8:49:6c:
                    2f:24:3e:65:bf:ce:23:b7:0b:48:b7:7f:75:dd:45:
                    bd:aa:8f:0e:50:c5:25:2b:f2:a0:e7:0d:23:1f:d1:
                    41:24:fa:62:99:cf:19:45:a5:93:4a:1f:99:cd:b3:
                    2f:22:c3:4a:2d:7c:6f:d9:15:1e:3b:8c:39:10:39:
                    dd:bd:29:f4:66:3b:2d:01:32:ff:fe:27:48:a6:b5:
                    6c:01:87:9c:fb:ba:b2:63:7f:82:f9:5c:a0:81:84:
                    85:8e:b0:f2:b8:94:a3:cf:38:a6:50:85:17:27:87:
                    4e:dd:30:f6:00:3d:f4:c6:f9:3d:81:be:86:ed:6c:
                    39:a7:2e:34:f6:b4:2e:af:0a:7d:62:91:78:66:9c:
                    98:73:0d:86:af:f2:c4:f3:20:b9:4f:12:8d:63:cb:
                    2c:d9:32:45:19:ee:bb:4a:96:3b:50:53:18:ce:66:
                    51:79:aa:ad:87:c8:56:3e:9f:82:50:88:6e:05:b1:
                    35:c1:7b:24:bd:52:66:3d:99:4e:cc:2b:7e:33:6e:
                    84:47:06:d1:9e:d0:4a:86:02:6e:86:00:a4:c0:87:
                    df:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Code Signing
            2.5.29.1: 
                0....[.p.ir.#Q~..M....r0p1+0)..U..."Copyright (c) 1997 Microsoft Corp.1.0...U....Microsoft Corporation1!0...U....Microsoft Root Authority......<<...>.c..@
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                CC:1D:CE:76:00:70:5B:AF:F1:DA:C4:4E:9A:51:44:2E:A3:44:63:F0
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
    Signature Algorithm: sha1WithRSA
    Signature Value:
        7b:ab:ae:7e:4a:26:f2:ce:bc:4e:74:a2:58:27:74:2a:75:b3:
        86:fd:ab:4c:94:78:00:4d:e9:ca:eb:18:dc:69:c5:0e:a2:7c:
        f3:02:43:c6:ca:87:cc:f8:53:cc:c2:9f:bd:56:6f:f0:63:44:
        a9:44:00:ee:96:c8:9a:d5:1c:b8:0b:9f:19:0d:94:d7:da:1e:
        ad:29:7d:ef:ed:a6:73:ac:8f:de:39:8e:3d:98:6a:bc:38:6d:
        d2:88:af:23:fd:df:e9:d6:69:09:91:88:bd:fe:e1:00:bb:34:
        f3:f7:7c:f9:10:12:2e:05:eb:29:96:93:42:6b:28:71:b7:38:
        8f:e0:07:0d:c9:5d:68:cd:bd:80:41:6b:66:a8:bb:b7:bb:8e:
        34:ca:f2:03:10:7c:7a:f5:d2:e0:42:df:7b:fe:e1:e1:ac:fe:
        f6:df:d5:0d:b3:70:d6:92:e3:4f:b6:38:a2:7c:2d:d4:3d:db:
        34:0b:62:37:02:9f:81:6a:23:89:f6:5c:63:8f:b0:5a:bb:39:
        d7:60:8c:55:84:1a:33:f5:3b:98:a0:82:0c:a2:5f:8b:b3:2c:
        b7:a1:a5:cb:ab:da:20:b6:bf:30:19:85:20:14:0d:2a:bc:52:
        f4:41:e0:5e:30:e3:92:28:69:87:c1:70:e2:f3:a7:ab:ce:80:
        42:72:76:0e

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:01:cf:3e:00:00:00:00:00:0f
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA
        Validity
            Not Before: Dec  7 22:40:29 2009 GMT
            Not After : Mar  7 22:40:29 2011 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, CN=Microsoft Corporation
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:89:fb:45:72:a8:53:6b:9e:89:4f:00:23:
                    c0:be:d4:1d:3d:b1:59:40:38:f3:73:91:82:26:e6:
                    96:12:00:53:d9:1c:82:0e:3c:ce:1d:bb:bd:f7:42:
                    8d:97:d4:fc:38:1a:e4:b9:f9:e3:ec:d3:61:03:bf:
                    a0:d3:d6:75:4d:5c:46:a9:ed:5e:f0:d2:e2:69:5b:
                    1a:73:ea:b3:1c:8d:04:cd:29:44:a0:64:59:2f:1e:
                    98:5d:6e:c7:ab:18:39:82:65:c4:a7:bc:ab:75:88:
                    19:ea:87:97:14:26:b3:7f:26:76:a4:d4:38:39:84:
                    e3:b3:26:d5:18:f9:2b:e9:d2:c9:16:5a:54:21:f2:
                    97:8d:87:86:29:fe:f4:49:2c:e6:8b:f8:04:3f:7d:
                    cd:cd:96:92:86:0d:71:03:e2:d0:fe:0c:42:35:ff:
                    d7:b8:3f:dd:8e:45:0a:7d:f6:d7:4b:ad:5b:f0:76:
                    72:1d:77:23:7d:89:35:c4:1c:5d:b2:50:03:4b:47:
                    6d:07:a7:55:88:98:06:80:a6:81:ad:54:4e:d8:81:
                    d6:fa:bf:42:c0:31:be:55:0d:99:d5:53:49:12:30:
                    eb:e5:a5:88:7c:5e:c4:7a:5a:14:87:08:b4:37:69:
                    a0:eb:32:24:8c:08:eb:f9:d4:14:ba:e0:fc:cd:ea:
                    a4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Subject Key Identifier: 
                38:78:05:73:C8:1B:32:9B:5F:92:86:55:AF:89:BA:C6:99:B1:74:8E
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Authority Key Identifier: 
                CC:1D:CE:76:00:70:5B:AF:F1:DA:C4:4E:9A:51:44:2E:A3:44:63:F0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/CSPCA.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/CSPCA.crt
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        28:03:83:ab:13:0d:f1:fe:11:6f:42:76:d8:43:ab:b8:c6:42:
        fa:24:65:34:ae:75:b0:71:30:8e:96:b6:83:fa:72:e4:fe:cd:
        37:e7:3a:70:98:51:20:0e:ba:71:b4:c9:f4:d5:e4:8a:e8:28:
        70:73:d5:ed:e1:c2:7b:ee:f1:56:34:5a:80:82:eb:10:d7:72:
        03:ea:12:4e:ec:dd:0d:8c:7b:44:4f:0c:61:75:fd:6e:9c:07:
        dd:ce:2b:5a:18:0d:39:b0:60:fd:da:ff:04:aa:02:a3:d8:fa:
        8e:a3:bb:bd:c1:6a:54:3b:31:5f:e4:2c:6e:cb:f1:4d:2a:1c:
        f2:1e:76:7b:86:af:c6:87:d6:b1:2a:ed:ac:cc:0e:c0:e4:9f:
        7f:e8:cf:e8:84:72:54:82:18:6e:2a:c8:9e:95:b4:1a:1e:c1:
        6f:93:db:62:a6:c1:4b:6b:ad:c9:ed:3d:92:e3:b2:2f:ab:7a:
        77:39:67:6a:00:7b:82:9d:03:10:de:63:95:49:26:42:de:95:
        22:c1:87:0b:d0:14:a3:5f:dc:73:32:72:36:1e:ff:c8:29:c5:
        24:52:4f:66:48:c9:1d:1d:a9:c5:26:39:69:50:4e:a7:ec:c2:
        06:6c:2e:72:1b:f1:21:da:6d:24:48:80:81:15:40:7c:9f:cc:
        74:38:4a:4f

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
        Validity
            Not Before: Sep 16 01:04:47 2006 GMT
            Not After : Sep 15 07:00:00 2019 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Timestamping PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:dc:37:6e:fb:af:c8:42:4a:71:18:c8:ce:48:3e:
                    53:c0:fa:ab:14:ba:2c:32:bb:12:4f:52:c8:83:ed:
                    3e:33:d9:49:31:92:28:b6:91:64:e0:1f:50:84:ba:
                    c2:4b:d1:7f:05:f8:ef:75:be:8b:c7:a8:d5:ae:69:
                    70:66:78:27:66:e8:b6:b7:ef:85:b9:cd:ee:aa:fd:
                    12:a4:0b:59:22:29:2f:cf:40:d9:56:04:1b:76:b5:
                    6d:64:6d:4a:54:db:dd:f1:de:bf:9f:83:c7:80:df:
                    7f:4c:02:37:94:f5:c0:9e:08:56:1e:68:47:cd:d9:
                    c0:76:5c:2f:7d:b6:25:04:b4:56:5b:6a:1c:63:ff:
                    80:7c:3c:ee:d5:04:25:4d:39:77:74:07:5d:c2:5c:
                    d8:86:37:2c:75:c9:0e:ea:1e:39:09:7c:76:fe:9d:
                    6c:6e:7a:e0:ec:3e:8f:97:9e:71:0e:5f:2a:4f:18:
                    62:60:32:9e:d2:83:4e:2b:22:5c:68:45:8b:de:2f:
                    84:10:50:b2:f9:b5:1a:8d:6c:ee:25:9b:13:f8:cb:
                    10:d7:85:0e:f4:82:76:73:36:c6:95:7a:a2:cc:60:
                    06:ec:05:b0:86:33:b7:f8:94:5b:84:41:84:58:85:
                    94:6e:b0:1f:2c:48:cc:6f:9c:43:e0:6a:e8:7f:26:
                    8e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Time Stamping
            2.5.29.1: 
                0....[.p.ir.#Q~..M....r0p1+0)..U..."Copyright (c) 1997 Microsoft Corp.1.0...U....Microsoft Corporation1!0...U....Microsoft Root Authority......<<...>.c..@
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Subject Key Identifier: 
                6F:E8:4E:3F:97:B9:34:AB:4B:86:8F:BC:9C:EA:AC:3B:41:43:C6:D0
            1.3.6.1.4.1.311.20.2: 
                .
.S.u.b.C.A
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        94:4d:11:31:c2:7c:50:bb:11:8e:a1:61:07:01:0e:8c:70:45:
        8d:ef:73:54:bd:3f:09:05:2d:ff:b8:51:53:85:1c:ed:39:91:
        b7:a3:56:0b:de:8c:b6:3b:1b:d1:fb:ac:a7:c9:b7:b1:51:21:
        1b:6f:08:69:7e:6b:03:a2:22:46:ed:6c:b4:6d:7c:22:b8:46:
        d3:84:f3:8d:0f:be:07:8a:36:c1:eb:7e:e9:70:5d:45:9f:92:
        d2:cc:ce:dd:8e:c0:e1:bf:2a:cd:7c:ec:c9:ae:32:d5:87:b9:
        cb:63:c4:36:d1:18:21:bf:76:de:3b:9a:b3:1b:73:9e:21:88:
        d8:b4:b4:12:54:8c:f4:9c:c2:65:4a:9a:28:26:9c:60:8a:0f:
        3b:c7:13:65:78:48:bb:cf:ad:83:3a:4f:b0:62:58:de:30:e9:
        e9:39:1d:e3:89:f2:da:39:81:f9:13:21:8c:64:80:63:06:04:
        96:f2:9a:02:43:2f:7b:46:88:ba:ff:02:d9:65:f9:4a:de:da:
        03:74:93:b3:05:6e:0c:cc:9d:dc:28:61:7c:48:f1:17:9c:11:
        21:38:02:1c:87:ac:06:c5:96:32:b8:e5:40:c6:53:3d:bd:a9:
        89:de:e8:66:37:8d:f4:22:96:9c:cc:b0:77:54:51:3a:d6:72:
        44:b2:23:f6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:06:94:2d:00:00:00:00:00:09
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Timestamping PCA
        Validity
            Not Before: Jul 25 19:02:17 2008 GMT
            Not After : Jul 25 19:12:17 2013 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, OU=nCipher DSE ESN:7A82-688A-9F92, CN=Microsoft Time-Stamp Service
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:95:81:0a:20:42:18:51:7a:d9:95:ed:9b:fd:dc:
                    87:d1:fb:0e:8f:13:ea:aa:37:28:12:76:fe:4d:50:
                    ab:76:97:2a:93:47:e0:a9:56:69:02:e5:94:7e:4d:
                    85:db:7f:71:ef:75:00:db:bb:43:6c:fb:6f:ac:71:
                    f0:2b:d1:7c:92:ce:94:17:9d:a1:c5:ba:f9:f7:7e:
                    dd:61:e1:2d:30:1e:9c:26:2d:76:3f:e6:46:96:8e:
                    ae:d8:89:37:d8:cc:ef:f3:cf:5b:c3:fc:68:e0:f2:
                    64:8f:9b:e8:c3:12:f9:a3:be:84:fc:d6:8b:ce:05:
                    3d:bd:01:76:50:27:03:f8:84:b7:16:86:8d:60:be:
                    5d:29:2c:3c:cf:a5:fd:98:5a:35:1d:4f:16:c0:38:
                    d8:1e:61:3f:3d:36:b3:56:14:15:77:95:3b:10:fa:
                    00:b0:93:e2:5d:37:ab:27:bb:63:2c:48:14:81:55:
                    e3:6c:ea:a9:2b:95:8d:88:0e:7e:a3:00:a5:77:24:
                    07:98:2a:70:03:b8:2a:24:90:9a:de:c5:a2:22:4b:
                    bf:4c:59:06:77:54:72:43:b0:3e:64:dd:93:84:08:
                    58:b6:fe:e9:87:49:09:36:b3:b3:f8:33:a9:7e:4c:
                    a2:79:7f:32:59:29:0e:9e:b5:f5:e0:3c:9e:3f:ec:
                    46:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                28:95:88:BF:02:3B:EB:DA:94:BA:7D:46:0F:FA:CB:F4:7E:9D:FF:D1
            X509v3 Authority Key Identifier: 
                6F:E8:4E:3F:97:B9:34:AB:4B:86:8F:BC:9C:EA:AC:3B:41:43:C6:D0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/tspca.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/tspca.crt
            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        00:ee:ac:fc:e2:d2:88:66:ca:29:e3:5a:b9:cd:00:82:7e:17:
        5c:c5:24:59:12:bb:a8:f7:6b:d7:87:fe:8d:cb:b5:76:1f:1b:
        22:f6:f7:e1:ca:b4:b9:41:01:1a:37:ad:48:37:96:70:fa:cc:
        33:a7:28:8c:b8:0b:b6:74:13:28:b7:b3:75:e1:2a:09:e2:8b:
        4f:df:98:3f:97:b7:34:12:81:ea:10:dd:1d:dc:ba:64:cf:4e:
        50:3b:4c:8a:fd:19:dd:25:ae:d5:96:87:ea:4b:c4:e5:f0:f9:
        41:17:5d:01:eb:57:88:7d:76:7a:e5:6f:fe:87:20:ac:93:9c:
        8c:9a:bf:5f:1a:a0:15:30:24:e0:a2:7e:61:91:1d:29:29:c3:
        49:90:3a:43:83:89:ee:de:d5:83:dd:4f:2c:35:3b:e7:41:41:
        01:aa:00:0c:0b:f2:d6:49:1b:ce:42:8d:7b:b0:f3:2d:8d:5d:
        29:e1:be:8d:7f:91:15:76:b4:60:fb:14:27:aa:6f:12:63:42:
        28:58:3a:8a:3b:8b:40:e4:b7:c5:cc:92:57:1c:46:56:6b:8f:
        cb:92:4d:56:05:00:ca:f8:30:40:45:4e:df:19:88:bd:f5:10:
        f0:dd:1a:df:28:1e:b4:51:f2:77:e0:26:e3:bb:09:81:12:dc:
        1e:3a:d0:45

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

d8 4e ae be 67 c5 bf 41 33 7e 3c 2a b0 dc fb 0f |.N..g..A3~<*....| 38 c6 b5 f2 |8... |

unnamed

2
- 2E:AB:11:DC:50:FF:5C:9D:CB:C0
- RSA-SHA1-2: nil
- #2
  - OU: Copyright (c) 1997 Microsoft Corp.
  - OU: Microsoft Corporation
  - CN: Microsoft Root Authority
- 2007-08-22 22:31:02 UTC: 2012-08-25 07:00:00 UTC
- Subject
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Code Signing PCA
- #5
  - rsaEncryption: nil
  - B7:79:7D:D6:5D:B3:45:39:A8:34:AC:31:DA:F9:25:35:
    49:77:C0:FB:1F:9E:C7:45:71:EF:D1:46:E8:D4:8C:C3:
    6B:4C:52:62:F4:99:02:C3:4D:D8:49:6C:2F:24:3E:65:
    BF:CE:23:B7:0B:48:B7:7F:75:DD:45:BD:AA:8F:0E:50:
    C5:25:2B:F2:A0:E7:0D:23:1F:D1:41:24:FA:62:99:CF:
    19:45:A5:93:4A:1F:99:CD:B3:2F:22:C3:4A:2D:7C:6F:
    D9:15:1E:3B:8C:39:10:39:DD:BD:29:F4:66:3B:2D:01:
    32:FF:FE:27:48:A6:B5:6C:01:87:9C:FB:BA:B2:63:7F:
    82:F9:5C:A0:81:84:85:8E:B0:F2:B8:94:A3:CF:38:A6:
    50:85:17:27:87:4E:DD:30:F6:00:3D:F4:C6:F9:3D:81:
    BE:86:ED:6C:39:A7:2E:34:F6:B4:2E:AF:0A:7D:62:91:
    78:66:9C:98:73:0D:86:AF:F2:C4:F3:20:B9:4F:12:8D:
    63:CB:2C:D9:32:45:19:EE:BB:4A:96:3B:50:53:18:CE:
    66:51:79:AA:AD:87:C8:56:3E:9F:82:50:88:6E:05:B1:
    35:C1:7B:24:BD:52:66:3D:99:4E:CC:2B:7E:33:6E:84:
    47:06:D1:9E:D0:4A:86:02:6E:86:00:A4:C0:87:DF:53: 0x010001
- #6
  - extendedKeyUsage: codeSigning
  - 2.5.29.1
    - 5b d0 70 ef 69 72 9e 23 51 7e 14 b2 4d 8e ff cb |[.p.ir.#Q~..M...|
      - #0
        OU: Copyright (c) 1997 Microsoft Corp.
        OU: Microsoft Corporation
        CN: Microsoft Root Authority
      - 00 c1 00 8b 3c 3c 88 11 d1 3e f6 63 ec df 40 |....<<...>.c..@ |
  - basicConstraints: true, true
  - subjectKeyIdentifier:
```
cc 1d ce 76 00 70 5b af  f1 da c4 4e 9a 51 44 2e  |...v.p[....N.QD.|
a3 44 63 f0                                       |.Dc.            |
```
  - keyUsage: 0x86

RSA-SHA1-2:

7b ab ae 7e 4a 26 f2 ce  bc 4e 74 a2 58 27 74 2a  |{..~J&...Nt.X't*|
75 b3 86 fd ab 4c 94 78  00 4d e9 ca eb 18 dc 69  |u....L.x.M.....i|
c5 0e a2 7c f3 02 43 c6  ca 87 cc f8 53 cc c2 9f  |...|..C.....S...|
bd 56 6f f0 63 44 a9 44  00 ee 96 c8 9a d5 1c b8  |.Vo.cD.D........|
0b 9f 19 0d 94 d7 da 1e  ad 29 7d ef ed a6 73 ac  |.........)}...s.|
8f de 39 8e 3d 98 6a bc  38 6d d2 88 af 23 fd df  |..9.=.j.8m...#..|
e9 d6 69 09 91 88 bd fe  e1 00 bb 34 f3 f7 7c f9  |..i........4..|.|
10 12 2e 05 eb 29 96 93  42 6b 28 71 b7 38 8f e0  |.....)..Bk(q.8..|
07 0d c9 5d 68 cd bd 80  41 6b 66 a8 bb b7 bb 8e  |...]h...Akf.....|
34 ca f2 03 10 7c 7a f5  d2 e0 42 df 7b fe e1 e1  |4....|z...B.{...|
ac fe f6 df d5 0d b3 70  d6 92 e3 4f b6 38 a2 7c  |.......p...O.8.||
2d d4 3d db 34 0b 62 37  02 9f 81 6a 23 89 f6 5c  |-.=.4.b7...j#..\|
63 8f b0 5a bb 39 d7 60  8c 55 84 1a 33 f5 3b 98  |c..Z.9.`.U..3.;.|
a0 82 0c a2 5f 8b b3 2c  b7 a1 a5 cb ab da 20 b6  |...._..,...... .|
bf 30 19 85 20 14 0d 2a  bc 52 f4 41 e0 5e 30 e3  |.0.. ..*.R.A.^0.|
92 28 69 87 c1 70 e2 f3  a7 ab ce 80 42 72 76 0e  |.(i..p......Brv.|

Certificate #1

2
- 61:01:CF:3E:00:00:00:00:00:0F
- RSA-SHA1: nil
- Issuer
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Code Signing PCA
- 2009-12-07 22:40:29 UTC: 2011-03-07 22:40:29 UTC
- Subject
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - OU: MOPR
  - CN: Microsoft Corporation
- #5
  - rsaEncryption: nil
  - BD:30:89:FB:45:72:A8:53:6B:9E:89:4F:00:23:C0:BE:
    D4:1D:3D:B1:59:40:38:F3:73:91:82:26:E6:96:12:00:
    53:D9:1C:82:0E:3C:CE:1D:BB:BD:F7:42:8D:97:D4:FC:
    38:1A:E4:B9:F9:E3:EC:D3:61:03:BF:A0:D3:D6:75:4D:
    5C:46:A9:ED:5E:F0:D2:E2:69:5B:1A:73:EA:B3:1C:8D:
    04:CD:29:44:A0:64:59:2F:1E:98:5D:6E:C7:AB:18:39:
    82:65:C4:A7:BC:AB:75:88:19:EA:87:97:14:26:B3:7F:
    26:76:A4:D4:38:39:84:E3:B3:26:D5:18:F9:2B:E9:D2:
    C9:16:5A:54:21:F2:97:8D:87:86:29:FE:F4:49:2C:E6:
    8B:F8:04:3F:7D:CD:CD:96:92:86:0D:71:03:E2:D0:FE:
    0C:42:35:FF:D7:B8:3F:DD:8E:45:0A:7D:F6:D7:4B:AD:
    5B:F0:76:72:1D:77:23:7D:89:35:C4:1C:5D:B2:50:03:
    4B:47:6D:07:A7:55:88:98:06:80:A6:81:AD:54:4E:D8:
    81:D6:FA:BF:42:C0:31:BE:55:0D:99:D5:53:49:12:30:
    EB:E5:A5:88:7C:5E:C4:7A:5A:14:87:08:B4:37:69:A0:
    EB:32:24:8C:08:EB:F9:D4:14:BA:E0:FC:CD:EA:A4:15: 0x010001
- #6
  - extendedKeyUsage: codeSigning
  - subjectKeyIdentifier:
```
38 78 05 73 c8 1b 32 9b  5f 92 86 55 af 89 ba c6  |8x.s..2._..U....|
99 b1 74 8e                                       |..t.            |
```
  - keyUsage: true, 0x80
  - authorityKeyIdentifier:
```
cc 1d ce 76 00 70 5b af  f1 da c4 4e 9a 51 44 2e  |...v.p[....N.QD.|
a3 44 63 f0                                       |.Dc.            |
```
  - crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/CSPCA.crl
  - authorityInfoAccess
    - caIssuers: http://www.microsoft.com/pki/certs/CSPCA.crt

RSA-SHA1:

28 03 83 ab 13 0d f1 fe  11 6f 42 76 d8 43 ab b8  |(........oBv.C..|
c6 42 fa 24 65 34 ae 75  b0 71 30 8e 96 b6 83 fa  |.B.$e4.u.q0.....|
72 e4 fe cd 37 e7 3a 70  98 51 20 0e ba 71 b4 c9  |r...7.:p.Q ..q..|
f4 d5 e4 8a e8 28 70 73  d5 ed e1 c2 7b ee f1 56  |.....(ps....{..V|
34 5a 80 82 eb 10 d7 72  03 ea 12 4e ec dd 0d 8c  |4Z.....r...N....|
7b 44 4f 0c 61 75 fd 6e  9c 07 dd ce 2b 5a 18 0d  |{DO.au.n....+Z..|
39 b0 60 fd da ff 04 aa  02 a3 d8 fa 8e a3 bb bd  |9.`.............|
c1 6a 54 3b 31 5f e4 2c  6e cb f1 4d 2a 1c f2 1e  |.jT;1_.,n..M*...|
76 7b 86 af c6 87 d6 b1  2a ed ac cc 0e c0 e4 9f  |v{......*.......|
7f e8 cf e8 84 72 54 82  18 6e 2a c8 9e 95 b4 1a  |.....rT..n*.....|
1e c1 6f 93 db 62 a6 c1  4b 6b ad c9 ed 3d 92 e3  |..o..b..Kk...=..|
b2 2f ab 7a 77 39 67 6a  00 7b 82 9d 03 10 de 63  |./.zw9gj.{.....c|
95 49 26 42 de 95 22 c1  87 0b d0 14 a3 5f dc 73  |.I&B.."......_.s|
32 72 36 1e ff c8 29 c5  24 52 4f 66 48 c9 1d 1d  |2r6...).$ROfH...|
a9 c5 26 39 69 50 4e a7  ec c2 06 6c 2e 72 1b f1  |..&9iPN....l.r..|
21 da 6d 24 48 80 81 15  40 7c 9f cc 74 38 4a 4f  |!.m$H...@|..t8JO|

2
- 6A:0B:99:4F:C0:00:25:AB:11:DB:45:1F:58:7A:67:A2
- RSA-SHA1: nil
- #2
  - OU: Copyright (c) 1997 Microsoft Corp.
  - OU: Microsoft Corporation
  - CN: Microsoft Root Authority
- 2006-09-16 01:04:47 UTC: 2019-09-15 07:00:00 UTC
- Subject
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Timestamping PCA
- #5
  - rsaEncryption: nil
  - DC:37:6E:FB:AF:C8:42:4A:71:18:C8:CE:48:3E:53:C0:
    FA:AB:14:BA:2C:32:BB:12:4F:52:C8:83:ED:3E:33:D9:
    49:31:92:28:B6:91:64:E0:1F:50:84:BA:C2:4B:D1:7F:
    05:F8:EF:75:BE:8B:C7:A8:D5:AE:69:70:66:78:27:66:
    E8:B6:B7:EF:85:B9:CD:EE:AA:FD:12:A4:0B:59:22:29:
    2F:CF:40:D9:56:04:1B:76:B5:6D:64:6D:4A:54:DB:DD:
    F1:DE:BF:9F:83:C7:80:DF:7F:4C:02:37:94:F5:C0:9E:
    08:56:1E:68:47:CD:D9:C0:76:5C:2F:7D:B6:25:04:B4:
    56:5B:6A:1C:63:FF:80:7C:3C:EE:D5:04:25:4D:39:77:
    74:07:5D:C2:5C:D8:86:37:2C:75:C9:0E:EA:1E:39:09:
    7C:76:FE:9D:6C:6E:7A:E0:EC:3E:8F:97:9E:71:0E:5F:
    2A:4F:18:62:60:32:9E:D2:83:4E:2B:22:5C:68:45:8B:
    DE:2F:84:10:50:B2:F9:B5:1A:8D:6C:EE:25:9B:13:F8:
    CB:10:D7:85:0E:F4:82:76:73:36:C6:95:7A:A2:CC:60:
    06:EC:05:B0:86:33:B7:F8:94:5B:84:41:84:58:85:94:
    6E:B0:1F:2C:48:CC:6F:9C:43:E0:6A:E8:7F:26:8E:6B: 0x010001
- #6
  - extendedKeyUsage: timeStamping
  - 2.5.29.1
    - 5b d0 70 ef 69 72 9e 23 51 7e 14 b2 4d 8e ff cb |[.p.ir.#Q~..M...|
      - #0
        OU: Copyright (c) 1997 Microsoft Corp.
        OU: Microsoft Corporation
        CN: Microsoft Root Authority
      - 00 c1 00 8b 3c 3c 88 11 d1 3e f6 63 ec df 40 |....<<...>.c..@ |
  - 1.3.6.1.4.1.311.21.1: 0
  - subjectKeyIdentifier:
```
6f e8 4e 3f 97 b9 34 ab  4b 86 8f bc 9c ea ac 3b  |o.N?..4.K......;|
41 43 c6 d0                                       |AC..            |
```
  - 1.3.6.1.4.1.311.20.2:
```
00 53 00 75 00 62 00 43  00 41                    |.S.u.b.C.A      |
```
  - keyUsage: 0x86
  - basicConstraints: true, true

RSA-SHA1:

94 4d 11 31 c2 7c 50 bb  11 8e a1 61 07 01 0e 8c  |.M.1.|P....a....|
70 45 8d ef 73 54 bd 3f  09 05 2d ff b8 51 53 85  |pE..sT.?..-..QS.|
1c ed 39 91 b7 a3 56 0b  de 8c b6 3b 1b d1 fb ac  |..9...V....;....|
a7 c9 b7 b1 51 21 1b 6f  08 69 7e 6b 03 a2 22 46  |....Q!.o.i~k.."F|
ed 6c b4 6d 7c 22 b8 46  d3 84 f3 8d 0f be 07 8a  |.l.m|".F........|
36 c1 eb 7e e9 70 5d 45  9f 92 d2 cc ce dd 8e c0  |6..~.p]E........|
e1 bf 2a cd 7c ec c9 ae  32 d5 87 b9 cb 63 c4 36  |..*.|...2....c.6|
d1 18 21 bf 76 de 3b 9a  b3 1b 73 9e 21 88 d8 b4  |..!.v.;...s.!...|
b4 12 54 8c f4 9c c2 65  4a 9a 28 26 9c 60 8a 0f  |..T....eJ.(&.`..|
3b c7 13 65 78 48 bb cf  ad 83 3a 4f b0 62 58 de  |;..exH....:O.bX.|
30 e9 e9 39 1d e3 89 f2  da 39 81 f9 13 21 8c 64  |0..9.....9...!.d|
80 63 06 04 96 f2 9a 02  43 2f 7b 46 88 ba ff 02  |.c......C/{F....|
d9 65 f9 4a de da 03 74  93 b3 05 6e 0c cc 9d dc  |.e.J...t...n....|
28 61 7c 48 f1 17 9c 11  21 38 02 1c 87 ac 06 c5  |(a|H....!8......|
96 32 b8 e5 40 c6 53 3d  bd a9 89 de e8 66 37 8d  |.2..@.S=.....f7.|
f4 22 96 9c cc b0 77 54  51 3a d6 72 44 b2 23 f6  |."....wTQ:.rD.#.|

Certificate #3
- 2
  - 61:06:94:2D:00:00:00:00:00:09
  - RSA-SHA1: nil
  - Issuer
    - C: US
    - ST: Washington
    - L: Redmond
    - O: Microsoft Corporation
    - CN: Microsoft Timestamping PCA
  - 2008-07-25 19:02:17 UTC: 2013-07-25 19:12:17 UTC
  - Subject
    - C: US
    - ST: Washington
    - L: Redmond
    - O: Microsoft Corporation
    - OU: MOPR
    - OU: nCipher DSE ESN:7A82-688A-9F92
    - CN: Microsoft Time-Stamp Service
  - #5
    - rsaEncryption: nil
    - 95:81:0A:20:42:18:51:7A:D9:95:ED:9B:FD:DC:87:D1:
      FB:0E:8F:13:EA:AA:37:28:12:76:FE:4D:50:AB:76:97:
      2A:93:47:E0:A9:56:69:02:E5:94:7E:4D:85:DB:7F:71:
      EF:75:00:DB:BB:43:6C:FB:6F:AC:71:F0:2B:D1:7C:92:
      CE:94:17:9D:A1:C5:BA:F9:F7:7E:DD:61:E1:2D:30:1E:
      9C:26:2D:76:3F:E6:46:96:8E:AE:D8:89:37:D8:CC:EF:
      F3:CF:5B:C3:FC:68:E0:F2:64:8F:9B:E8:C3:12:F9:A3:
      BE:84:FC:D6:8B:CE:05:3D:BD:01:76:50:27:03:F8:84:
      B7:16:86:8D:60:BE:5D:29:2C:3C:CF:A5:FD:98:5A:35:
      1D:4F:16:C0:38:D8:1E:61:3F:3D:36:B3:56:14:15:77:
      95:3B:10:FA:00:B0:93:E2:5D:37:AB:27:BB:63:2C:48:
      14:81:55:E3:6C:EA:A9:2B:95:8D:88:0E:7E:A3:00:A5:
      77:24:07:98:2A:70:03:B8:2A:24:90:9A:DE:C5:A2:22:
      4B:BF:4C:59:06:77:54:72:43:B0:3E:64:DD:93:84:08:
      58:B6:FE:E9:87:49:09:36:B3:B3:F8:33:A9:7E:4C:A2:
      79:7F:32:59:29:0E:9E:B5:F5:E0:3C:9E:3F:EC:46:3B: 0x010001
  - #6
    - subjectKeyIdentifier:
```
28 95 88 bf 02 3b eb da  94 ba 7d 46 0f fa cb f4  |(....;....}F....|
7e 9d ff d1                                       |~...            |
```
    - authorityKeyIdentifier:
```
6f e8 4e 3f 97 b9 34 ab  4b 86 8f bc 9c ea ac 3b  |o.N?..4.K......;|
41 43 c6 d0                                       |AC..            |
```
    - crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/tspca.crl
    - authorityInfoAccess
      - caIssuers: http://www.microsoft.com/pki/certs/tspca.crt
    - extendedKeyUsage: timeStamping
    - keyUsage: true, 0xc0
- RSA-SHA1:
```
00 ee ac fc e2 d2 88 66  ca 29 e3 5a b9 cd 00 82  |.......f.).Z....|
7e 17 5c c5 24 59 12 bb  a8 f7 6b d7 87 fe 8d cb  |~.\.$Y....k.....|
b5 76 1f 1b 22 f6 f7 e1  ca b4 b9 41 01 1a 37 ad  |.v.."......A..7.|
48 37 96 70 fa cc 33 a7  28 8c b8 0b b6 74 13 28  |H7.p..3.(....t.(|
b7 b3 75 e1 2a 09 e2 8b  4f df 98 3f 97 b7 34 12  |..u.*...O..?..4.|
81 ea 10 dd 1d dc ba 64  cf 4e 50 3b 4c 8a fd 19  |.......d.NP;L...|
dd 25 ae d5 96 87 ea 4b  c4 e5 f0 f9 41 17 5d 01  |.%.....K....A.].|
eb 57 88 7d 76 7a e5 6f  fe 87 20 ac 93 9c 8c 9a  |.W.}vz.o.. .....|
bf 5f 1a a0 15 30 24 e0  a2 7e 61 91 1d 29 29 c3  |._...0$..~a..)).|
49 90 3a 43 83 89 ee de  d5 83 dd 4f 2c 35 3b e7  |I.:C.......O,5;.|
41 41 01 aa 00 0c 0b f2  d6 49 1b ce 42 8d 7b b0  |AA.......I..B.{.|
f3 2d 8d 5d 29 e1 be 8d  7f 91 15 76 b4 60 fb 14  |.-.])......v.`..|
27 aa 6f 12 63 42 28 58  3a 8a 3b 8b 40 e4 b7 c5  |'.o.cB(X:.;.@...|
cc 92 57 1c 46 56 6b 8f  cb 92 4d 56 05 00 ca f8  |..W.FVk...MV....|
30 40 45 4e df 19 88 bd  f5 10 f0 dd 1a df 28 1e  |0@EN..........(.|
b4 51 f2 77 e0 26 e3 bb  09 81 12 dc 1e 3a d0 45  |.Q.w.&.......:.E|
```

Signer

1
unnamed
- #0
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Code Signing PCA
- 61:01:CF:3E:00:00:00:00:00:0F
SHA1: nil

contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

4c 69 07 1e b5 0c e7 0f  43 4f 73 00 45 10 cd c7  |Li......COs.E...|
a7 de 46 00                                       |..F.            |

1.3.6.1.4.1.311.2.1.12

00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 |.M.i.c.r.o.s.o.f| 00 74 00 20 00 4d 00 6f 00 6e 00 65 00 79 00 20 |.t. .M.o.n.e.y. | 00 50 00 6c 00 75 00 73 00 20 00 44 00 52 00 4d |.P.l.u.s. .D.R.M| 00 4c 00 20 00 55 00 53 |.L. .U.S |
: http://www.microsoft.com/money

rsaEncryption:

5b 3e 2d 27 a7 37 64 27  c4 f4 49 c7 1a 0f 5b 0a  |[>-'.7d'..I...[.|
8e 84 6d 73 97 0a 83 79  2b 7f d0 2d 34 1a 0d 0e  |..ms...y+..-4...|
31 9b 75 c1 17 27 7e fc  63 d3 e1 bb 87 b2 73 ec  |1.u..'~.c.....s.|
1c 68 26 e7 87 60 d9 cc  aa c1 fd ae bf df 48 db  |.h&..`........H.|
a1 f5 85 3a d4 48 2e 47  58 6d 1f 7a 36 eb 54 49  |...:.H.GXm.z6.TI|
30 27 75 11 88 d8 7e af  c7 a2 46 eb f9 e8 64 af  |0'u...~...F...d.|
55 cf 36 86 9b 75 bb 3c  94 68 5b 8a bf 90 fe 40  |U.6..u.<.h[....@|
98 d5 10 4a b7 ba 0d f8  37 b3 1d cf 24 8b 2c 7f  |...J....7...$.,.|
08 98 e1 60 57 ae 25 ab  ca fe 81 bb 9b 94 84 0c  |...`W.%.........|
92 f4 c1 18 08 65 ee 35  0a 42 fc e4 58 b6 0f a7  |.....e.5.B..X...|
e6 5d f7 9f 57 91 df 79  20 24 39 bc 18 3b 36 12  |.]..W..y $9..;6.|
38 6e 5e 09 0d 5f f2 9d  f8 c3 1b 45 90 a1 25 dd  |8n^.._.....E..%.|
da 64 a7 8e 4d d8 cc 72  9e e7 6e fe 0a ff 29 8d  |.d..M..r..n...).|
19 9d ff 5d 41 0f f1 13  a1 76 fb f9 6b ad 8a b8  |...]A....v..k...|
a7 98 69 b2 34 15 4c 98  e1 dc 7b 75 60 70 74 68  |..i.4.L...{u`pth|
58 fc e1 d9 33 23 0f a3  9c d3 81 ac f2 18 84 2d  |X...3#.........-|

countersignature

unnamed
- #0
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Timestamping PCA
- 61:06:94:2D:00:00:00:00:00:09
SHA1

contentType: pkcs7-data
signingTime: 2010-03-01 22:33:30 UTC

messageDigest:

8f 90 1a c4 0b 03 00 76  ea 29 02 21 d5 ed 95 ec  |.......v.).!....|
0a 75 44 33                                       |.uD3            |

RSA-SHA1:

5c b8 0c 61 c8 ed 77 ba  95 84 9c 99 ce ac d2 17  |\..a..w.........|
d7 7b b4 82 d6 46 0e 0c  ea 70 b1 59 5d 26 25 d9  |.{...F...p.Y]&%.|
2b e9 c1 49 94 3f 61 3f  e4 db c1 9b e1 84 cf 2a  |+..I.?a?.......*|
9e b8 c2 11 d4 ae 90 53  8d 67 f8 1a 79 7d 96 48  |.......S.g..y}.H|
6a 9b c3 b8 50 d1 ed f9  f7 9e 5c de b3 37 d2 c7  |j...P.....\..7..|
2a 7d f8 6a 08 d6 66 c4  d8 31 ed e7 0c 9c 89 e3  |*}.j..f..1......|
a8 9b 71 c3 fc 9e 64 cf  fe 36 01 c9 2b 4a 2c 51  |..q...d..6..+J,Q|
7c c8 b9 b3 f2 38 27 ce  50 19 e7 53 31 81 26 48  ||....8'.P..S1.&H|
af e4 a3 e4 e4 cb 95 2f  8d 9a fb 38 f1 6b 97 af  |......./...8.k..|
39 37 68 46 1f d9 3a 9e  85 02 46 49 e9 c7 f0 f2  |97hF..:...FI....|
80 5f a1 e2 75 68 63 e8  ec 19 88 2e 70 ec 08 8b  |._..uhc.....p...|
4e e0 3d 20 e9 15 83 7b  2f f2 76 98 a0 48 b7 8f  |N.= ...{/.v..H..|
43 52 f6 88 6c 98 ec a9  65 d4 29 92 fd b7 65 ae  |CR..l...e.)...e.|
36 36 ee 8b ab c8 78 5c  66 a0 8f e2 74 ff 89 40  |66....x\f...t..@|
c7 e6 aa 47 2f 31 50 89  06 84 11 64 19 95 2a d4  |...G/1P....d..*.|
8c 14 7a 0f da 8b 1b 69  c1 4e d3 c5 e4 fa ce c1  |..z....i.N......|

show previews

offset	size	type	comment
0	2032128	DLL	02/18/2010 01:30:13	#
15c1	15	HTM		#
1f0200	6008	PKCS7	Authenticode Signature	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

msofd.dll-

MZ Header

Rich Header

DOS stub

PE Header

Sections

Data Directory

StringTable 040904E4

VS_FIXEDFILEINFO

Signers (1)

Certificates (4)

msofd.dll
-