kdcom.dll - Serial Kernel Debugger

info
MZ
PE
resources
imports
exports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	kdcom.dll
size	15952 (0x3e50)
md5	c8c436accf484f153e687b65031d17c4

type	PE32 executable (DLL) (native) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xd8

Rich Header

lib id	version	times used
1	0	15
147	30729	5
146	30729	1
131	30729	5
148	30729	1
145	30729	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	6
TimeDateStamp	0x4a5bdaaa
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0x1400
SizeOfInitializedData	0xa00
SizeOfUninitializedData	0
AddressOfEntryPoint	0
BaseOfCode	0x1000
BaseOfData	0x3000
ImageBase	0x40310000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.1
ImageVersion	6.1
SubsystemVersion	6.1
Reserved1	0
SizeOfImage	0x8000
SizeOfHeaders	0x400
CheckSum	0x138b1
Subsystem	1
DllCharacteristics	0x400
SizeOfStackReserve	0x40000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x10a1	0x1200	R-X CODE
.data	0x3000	0xb4	0x200	RW- IDATA
.edata	0x4000	0xfa	0x200	R-- IDATA
INIT	0x5000	0x1b0	0x200	RWX CODE DISCARDABLE
.rsrc	0x6000	0x3f0	0x400	R-- IDATA DISCARDABLE
.reloc	0x7000	0x17c	0x200	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x4000	0xfa
IMPORT	0x5000	0x3c
RESOURCE	0x6000	0x3f0
EXCEPTION	0	0
SECURITY	0x2200	0x1c50
BASERELOC	0x7000	0x148
DEBUG	0x1050	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x1000	0x44
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
VERSION	#1	908	0

module_name	hint	function_name
ntoskrnl.exe	422	HalPrivateDispatchTable
ntoskrnl.exe	1829	WRITE_REGISTER_UCHAR
ntoskrnl.exe	427	InbvDisplayString
ntoskrnl.exe	755	KeFindConfigurationEntry
ntoskrnl.exe	1013	MmMapIoSpace
ntoskrnl.exe	701	KdDebuggerNotPresent
ntoskrnl.exe	2088	_strupr
ntoskrnl.exe	2150	strstr
ntoskrnl.exe	1355	READ_REGISTER_UCHAR
ntoskrnl.exe	2112	atol
ntoskrnl.exe	924	KeTickCount
HAL.dll	103	READ_PORT_UCHAR
HAL.dll	109	WRITE_PORT_UCHAR
HAL.dll	46	HalQueryRealTimeClock
HAL.dll	76	KdComPortInUse

ord	entry_va	function_name
1	0x1094	KdD0Transition
2	0x1094	KdD3Transition
3	0x109c	KdDebuggerInitialize0
4	0x1150	KdDebuggerInitialize1
5	0x1300	KdReceivePacket
6	0x1170	KdRestore
7	0x1160	KdSave
8	0x157c	KdSendPacket

module_name	KDCOM.dll
flags	0
timestamp	2009-07-13 21:18:47
version	0.0
ordinal_base	1
nFunctions	8
nNames	8
Names(8)	0x4048
Functions(8)	0x4028
NameOrdinals(8)	0x4068

StringTable 040904B0

CompanyName	Microsoft Corporation
FileDescription	Serial Kernel Debugger
FileVersion	6.1.7600.16385 (win7_rtm.090713-1255)
InternalName	kdcom.dll
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	kdcom.dll
ProductName	Microsoft® Windows® Operating System
ProductVersion	6.1.7600.16385

VS_FIXEDFILEINFO

FileVersion	6.1.7600.16385
ProductVersion	6.1.7600.16385
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	3
FileSubtype	0xa

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Windows Verification PCA

serial: 6101C6C1000000000007

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:03:dc:f6:00:00:00:00:00:0c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA
        Validity
            Not Before: Jul 25 19:12:50 2008 GMT
            Not After : Jul 25 19:22:50 2011 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, OU=nCipher DSE ESN:159C-A3F7-2570, CN=Microsoft Time-Stamp Service
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ed:81:14:a1:5e:77:c0:5b:f4:76:89:62:fa:
                    ad:7c:68:14:b4:f7:bd:35:d8:13:79:5a:17:ca:d9:
                    6c:51:45:62:26:7a:2f:1f:d8:ea:c1:6e:01:17:f9:
                    c3:a6:1f:67:db:51:b0:2c:de:8a:17:ed:ff:20:ad:
                    34:ea:98:fb:a5:d6:2a:d2:f1:44:27:07:5a:2d:3a:
                    93:ff:56:53:b0:c8:f5:f3:03:f2:49:cc:16:d0:f5:
                    00:4c:58:f8:9b:f5:07:25:b1:66:17:c0:bd:c8:d2:
                    52:85:8d:c2:2b:38:b2:c3:36:be:f9:87:da:f4:8e:
                    5d:43:d7:06:bf:99:05:9f:a4:ce:fe:ab:8d:61:63:
                    e7:39:c5:f3:18:f6:d8:fc:31:36:69:72:5a:a2:1a:
                    4c:3e:ea:87:25:42:9d:d1:3e:f1:97:d2:18:32:93:
                    70:55:53:81:1e:e3:3b:0d:e8:be:82:78:6d:e6:fa:
                    cd:98:a4:6f:db:ee:66:f4:95:c8:cd:35:c9:9e:bb:
                    36:0d:83:96:94:26:a7:90:e0:a9:34:3b:d5:c0:9e:
                    3e:f0:d4:47:8d:86:0c:82:a4:58:30:3a:1c:76:e3:
                    ad:95:66:b4:b7:fd:09:8a:05:60:0f:a3:0f:e2:93:
                    96:58:22:9c:9d:2b:db:a2:94:18:90:95:02:bd:06:
                    40:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D2:ED:0D:1E:24:BB:37:A9:D8:20:6A:4D:1D:D2:16:D5:2E:BE:9E:EB
            X509v3 Authority Key Identifier: 
                keyid:23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
    Signature Algorithm: sha1WithRSAEncryption
         9c:0a:55:c8:cc:44:13:34:0c:d8:63:27:76:7d:3e:fa:38:32:
         83:53:9d:f2:08:f9:32:f5:c5:6e:70:a1:c9:b1:63:6b:19:9d:
         09:67:d9:9d:eb:8a:6a:db:60:66:e9:e9:52:26:f3:3b:c6:6a:
         d3:c2:52:be:a8:b9:eb:6a:aa:78:8c:c9:16:7d:90:95:a0:cc:
         21:b3:9e:81:bd:cd:c1:8b:29:bd:62:25:ef:09:57:e7:86:4e:
         2a:ec:80:ca:bb:fc:21:16:c4:3f:4e:52:19:e6:0e:b1:d8:c1:
         c2:79:90:64:b4:50:73:10:35:5e:5d:11:c1:b8:ba:aa:cf:52:
         f6:80:91:00:e6:ef:51:43:46:e9:d0:e8:94:f6:2c:24:0d:8a:
         c6:b2:31:8a:a3:7e:36:6c:a4:05:4c:67:07:2a:bb:bb:10:a5:
         a5:30:1a:72:d0:06:20:3b:24:93:5b:15:d9:39:93:d3:73:2d:
         1a:c4:d4:6c:1e:a1:08:ec:f6:31:b8:6b:4b:ec:ee:5c:33:02:
         14:32:8c:7c:11:20:2f:20:03:7f:f9:0c:9d:b8:d3:9e:5f:d6:
         08:fc:81:a0:99:b8:bb:55:6e:cd:42:4b:3a:4d:8c:14:2b:ca:
         c8:12:d3:62:6e:ea:0d:0a:9d:09:a3:66:d9:79:4f:8e:1a:a2:
         ff:cc:98:04

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:01:c6:c1:00:00:00:00:00:07
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows Verification PCA
        Validity
            Not Before: Oct 22 20:39:22 2008 GMT
            Not After : Jan 22 20:49:22 2010 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, CN=Microsoft Windows
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3a:d3:44:f4:6e:20:9f:dd:a4:0e:82:4e:c7:
                    86:5e:63:cc:ca:e5:42:53:4b:85:fa:5d:71:6c:cf:
                    76:0c:18:8b:a6:0d:f5:4a:f7:fe:17:f2:90:cc:62:
                    c7:24:ad:9b:9a:e1:45:3b:61:d8:0d:05:69:c7:cd:
                    88:2a:b8:b9:18:1e:60:10:5f:88:c6:d2:82:4e:6d:
                    49:c5:be:5c:12:86:48:85:89:91:81:cd:1b:ad:1f:
                    b7:2d:67:79:f1:7b:9f:25:87:14:76:5f:e3:0e:64:
                    a1:72:61:25:e5:75:69:c5:14:f1:5f:07:56:a4:0d:
                    70:06:23:a7:6c:dd:82:ae:d9:9b:47:a4:a5:6c:08:
                    b0:58:f1:53:6a:4f:da:85:61:cb:02:7b:49:af:1f:
                    bb:e0:d7:b9:5e:db:73:89:76:c1:3a:bb:0d:f5:97:
                    f0:88:5d:69:77:80:cf:f1:7e:03:9f:73:6d:de:05:
                    b8:2f:77:b5:54:55:45:d0:d2:38:bd:96:e3:f7:ea:
                    40:e5:ac:19:fc:71:cb:28:27:aa:71:a1:72:b5:12:
                    27:c1:51:f6:36:c5:c0:c7:7b:3a:3a:93:37:04:cc:
                    ee:0b:69:78:64:75:41:b6:78:22:0f:77:84:f7:4b:
                    8d:46:65:92:5b:4d:56:6b:75:04:46:3f:0b:1b:b4:
                    19:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Code Signing, 1.3.6.1.4.1.311.10.3.6
            X509v3 Subject Key Identifier: 
                A1:E6:C3:65:D0:E6:E8:28:62:C2:F3:C2:23:A6:1C:49:82:0B:D5:53
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Authority Key Identifier: 
                keyid:90:8B:11:A5:70:ED:E0:F9:A9:C0:AC:08:C7:B5:F4:82:B1:3C:C5:4A

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/WinPCA.crl
                  URI:http://www.microsoft.com/pki/crl/products/WinPCA.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftWinPCA.crt

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.311.21.47
                  CPS: https://www.microsoft.com/pki/ssl/cps/WindowsPCA.htm
                  User Notice:
                    Explicit Text: 

    Signature Algorithm: sha1WithRSAEncryption
         73:5f:ca:80:1c:60:46:6f:b9:34:9d:88:e3:be:22:8c:fa:e6:
         58:9a:ab:7b:1a:97:fd:ed:2e:39:cc:59:5b:1d:7a:06:8a:bb:
         43:93:7b:1e:a1:88:53:df:44:f8:53:a9:ea:f6:67:1b:3a:78:
         84:11:6a:6f:29:47:90:0a:0c:7b:22:77:4e:6f:b8:64:29:df:
         06:c7:c8:73:84:d6:66:a0:ca:d9:5a:26:82:57:f9:e3:4f:39:
         af:2e:8e:b1:06:5b:72:f2:37:32:ae:4e:ce:3c:7d:b0:12:2b:
         9e:a5:75:e3:43:a6:12:8b:06:14:98:77:e3:58:32:25:60:07:
         8c:59:71:a7:71:41:b3:06:8d:5c:ef:9c:7f:5a:22:6d:b7:d3:
         d9:f5:a6:1b:52:de:f5:7e:76:7c:fe:f4:c8:23:1a:4b:25:eb:
         e4:ee:af:10:0b:55:c3:d8:c1:17:85:61:6f:d3:3f:b6:e9:ec:
         84:a5:ee:6d:b2:ff:e8:6c:95:ab:2b:5e:c8:85:c3:11:60:ac:
         fa:02:05:f1:7b:da:c3:69:49:96:a5:70:f9:65:66:46:10:8d:
         34:e9:21:94:3c:0f:71:4a:1c:ea:1f:f7:23:a6:87:60:34:e9:
         14:e1:de:03:59:b4:02:1d:3a:af:e3:55:05:f5:ed:c1:f4:e4:
         5d:0e:d3:97

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:16:68:34:00:00:00:00:00:1c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
        Validity
            Not Before: Apr  3 12:53:09 2007 GMT
            Not After : Apr  3 13:03:09 2021 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a1:6c:b1:df:db:48:92:2a:7c:6b:2e:19:e1:
                    bd:e2:e3:c5:99:51:23:50:ad:ce:dd:18:4e:24:0f:
                    ee:d1:a7:d1:4c:ad:74:30:20:11:eb:07:d5:54:95:
                    15:49:94:1b:42:92:ae:98:5c:30:26:da:00:6b:e8:
                    7b:bd:ec:89:07:0f:f7:0e:04:98:f0:89:cc:1f:cb:
                    33:24:87:9d:f2:f4:67:1c:2c:fc:7b:e7:88:1d:ea:
                    e7:4e:a3:a1:c1:23:53:ca:8d:fa:45:cf:09:d0:5e:
                    af:d0:b0:42:04:a2:f9:a6:6c:93:67:d7:28:dc:46:
                    53:b0:86:d0:e5:28:46:2e:27:ac:86:4f:55:52:0c:
                    e4:03:2c:fb:6a:90:90:30:6e:87:f3:59:30:9d:fa:
                    7e:d6:97:b3:e8:21:97:7e:f8:d2:13:f3:08:b7:53:
                    6d:52:b4:45:90:9f:48:00:4a:47:66:11:27:29:66:
                    a8:97:e4:d3:06:81:4a:a2:f9:84:a7:11:47:14:09:
                    82:9f:84:ed:55:78:fe:01:9a:1d:50:08:85:00:10:
                    30:46:ed:b7:de:23:46:bb:c4:2d:54:9f:af:1e:78:
                    41:31:77:cc:9b:df:3b:83:93:a1:61:02:b5:1d:0d:
                    b1:fc:f7:9b:b2:01:ce:22:4b:54:ff:f9:05:c3:c2:
                    20:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Authority Key Identifier: 
                keyid:0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4
                DirName:/DC=com/DC=microsoft/CN=Microsoft Root Certificate Authority
                serial:79:AD:16:A1:4A:A0:A5:AD:4C:73:58:F4:07:13:2E:65

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt

            X509v3 Extended Key Usage: 
                Time Stamping
    Signature Algorithm: sha1WithRSAEncryption
         10:97:8a:c3:5c:03:44:36:dd:e9:b4:ad:77:db:ce:79:51:4d:
         01:b1:2e:74:71:5b:6d:0c:13:ab:ce:be:7b:8f:b8:2e:d4:12:
         a2:8c:6d:62:b8:57:02:cb:4e:20:13:50:99:dd:7a:40:e2:57:
         bb:af:58:9a:1c:e1:1d:01:86:ac:bb:78:f2:8b:d0:ec:3b:01:
         ee:e2:be:8f:0a:05:c8:8d:48:e2:f0:53:15:dd:4f:ab:92:e4:
         e7:8d:6a:d5:80:c1:e6:94:f2:06:2f:85:03:e9:91:2a:24:22:
         70:fb:f6:fc:e4:78:99:2e:0d:f7:07:e2:70:bc:18:4e:9d:8e:
         6b:0a:72:95:b8:a1:39:9c:67:2d:c5:51:0e:ea:62:5c:3f:16:
         98:8b:20:3f:e2:07:1a:32:f9:cc:31:4a:76:31:3d:2b:72:0b:
         c8:ea:70:3d:ff:85:0a:13:df:c2:0a:61:8e:f0:d7:b8:17:eb:
         4e:8b:7f:c5:35:2b:5e:a3:bf:eb:bc:7d:0b:42:7b:d4:53:72:
         21:ee:30:ca:bb:78:65:5c:5b:01:17:0a:14:0e:d2:da:14:98:
         f5:3c:b9:66:58:b3:2d:2f:e7:f9:85:86:cc:51:56:e8:9d:70:
         94:6c:ac:39:4c:d4:f6:79:bf:aa:18:7a:62:29:ef:a2:9b:29:
         34:06:77:1a:62:c9:3d:1e:6d:1f:82:f0:0b:c7:2c:bb:cf:43:
         b3:e5:f9:ec:7d:b5:e3:a4:a8:74:35:b8:4e:c5:71:23:12:26:
         76:0b:3c:52:8c:71:5a:46:43:14:bc:b3:b3:b0:4d:67:c8:9f:
         42:ff:80:79:21:80:9e:15:30:66:e8:42:12:5e:1a:c8:9e:22:
         21:d0:43:e9:2b:e9:bb:f4:48:cc:2c:d4:d8:32:80:4c:26:2a:
         48:24:5f:5a:ea:56:ef:a6:de:99:9d:ca:3a:6f:bd:81:27:74:
         06:11:ee:76:21:bf:9b:82:c1:27:54:b6:b1:6a:3d:89:a1:76:
         61:b4:6e:a1:13:a6:bf:aa:47:f0:12:6f:fd:8a:32:6c:b2:fe:
         df:51:c8:8c:23:c9:66:bd:9d:1d:87:12:64:02:3d:2d:af:59:
         8f:b8:e4:21:e5:b5:b0:ca:63:b4:78:54:05:d4:41:2e:50:ac:
         94:b0:a5:78:ab:b3:a0:96:75:1a:d9:92:87:13:75:22:2f:32:
         a8:08:6e:a0:5b:8c:25:bf:a0:ef:84:ca:21:d6:eb:1e:4f:c9:
         9a:ee:49:e0:f7:01:65:6f:89:0b:7d:c8:69:c8:e6:6e:ea:a7:
         97:ce:31:29:ff:0e:c5:5b:5c:d8:4d:1b:a1:d8:fa:2f:9e:3f:
         2e:55:16:6b:c9:13:a3:fd

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:07:02:dc:00:00:00:00:00:0b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
        Validity
            Not Before: Sep 15 21:55:41 2005 GMT
            Not After : Mar 15 22:05:41 2016 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows Verification PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ac:93:4e:e6:4a:11:9e:37:d0:35:d2:b0:06:
                    5c:83:14:a5:61:92:fc:fe:b3:89:c1:e6:cd:c8:1f:
                    31:84:09:91:34:46:92:2c:b8:ee:2c:c5:20:73:c4:
                    e8:1a:d8:8d:ce:7a:68:b5:66:78:8b:e5:60:15:a2:
                    f6:29:5a:1d:5e:5d:fc:62:d3:c1:5c:29:89:fb:33:
                    f8:16:95:36:dd:b1:46:74:69:72:53:d5:aa:e8:8a:
                    99:1a:d8:f7:67:09:d9:09:20:22:38:7a:d6:03:23:
                    d7:89:9f:1c:01:b7:51:df:98:66:2a:02:8b:06:ec:
                    e4:29:ef:5b:42:17:15:97:51:8d:7d:25:0a:af:25:
                    e8:de:dc:9b:67:16:0a:56:73:9d:b3:1d:85:83:0b:
                    7e:33:2b:62:33:ce:1c:20:81:4b:5e:d3:c6:49:b8:
                    f6:2e:d3:4e:b0:71:44:46:64:3e:de:43:66:04:b9:
                    cc:83:48:3a:c5:36:7a:04:48:0b:89:02:3d:63:a2:
                    01:76:29:97:75:e9:01:e6:00:97:09:92:f8:e2:27:
                    f0:29:67:43:77:c3:50:96:53:31:e1:b6:71:8b:ec:
                    77:c7:7c:31:48:d5:b8:25:22:8c:00:f7:28:38:7a:
                    bd:7c:c7:3f:cd:40:26:77:dd:00:00:11:9a:95:be:
                    1f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Subject Key Identifier: 
                90:8B:11:A5:70:ED:E0:F9:A9:C0:AC:08:C7:B5:F4:82:B1:3C:C5:4A
            X509v3 Key Usage: 
                Digital Signature, Non Repudiation, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4
                DirName:/DC=com/DC=microsoft/CN=Microsoft Root Certificate Authority
                serial:79:AD:16:A1:4A:A0:A5:AD:4C:73:58:F4:07:13:2E:65

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.311.21.47
                  User Notice:
                    Explicit Text: 

            X509v3 Extended Key Usage: 
                Code Signing, 1.3.6.1.4.1.311.10.3.6
    Signature Algorithm: sha1WithRSAEncryption
         25:31:a1:58:ea:52:e5:e1:17:0c:e6:f1:3f:78:a3:3f:72:af:
         a7:57:10:53:89:10:5e:32:9c:b6:70:c3:15:2b:4d:15:30:34:
         e8:c0:6a:e4:1c:d3:2e:20:65:48:d7:1b:98:62:21:ba:45:9f:
         4a:ec:db:2f:09:19:51:e5:ed:32:19:51:2f:e1:dd:fb:c6:52:
         fd:eb:c6:82:25:42:03:09:a6:38:b6:36:1f:cc:c9:80:bb:5a:
         69:18:31:c3:b3:a0:b3:67:47:be:9d:c7:e2:3f:96:b3:88:f8:
         19:be:39:b9:e9:95:ce:fc:7c:af:a8:cd:d0:41:90:e0:d5:b3:
         1c:2f:68:bb:db:0f:6c:6a:dd:f2:af:de:f2:b5:de:0d:b6:a6:
         5a:f0:86:0a:b9:6d:99:4b:3f:7b:2d:01:84:6c:8f:87:dc:7f:
         8f:ab:14:88:d0:06:91:34:be:1b:82:22:a4:bc:55:8a:ad:9b:
         fc:73:14:10:c4:c9:19:1e:07:7d:9b:0e:c0:95:26:5d:c6:1f:
         ac:b4:f2:7e:ba:25:70:4a:7b:d7:8e:d1:9d:a0:13:49:7a:b0:
         02:52:52:24:f4:af:dd:40:2d:e5:3e:32:58:b3:4a:6a:dd:11:
         59:aa:2d:bc:a4:a0:73:38:f9:40:77:6b:34:19:57:cd:38:68:
         27:82:f8:d1:6f:eb:23:c0:3f:52:f3:4e:d5:02:3e:6a:9a:2b:
         c1:f5:31:71:db:41:4d:3b:de:ef:ad:af:1f:88:65:43:1b:51:
         b7:9a:75:ca:8e:69:49:10:8f:78:8a:74:45:b9:09:8e:73:77:
         07:32:4a:4b:d7:68:2b:98:c5:ba:54:ea:3f:cb:a2:00:8c:bb:
         d8:10:58:f2:db:dc:9b:cd:d8:ea:48:43:e2:4a:7e:65:b2:dc:
         f5:2d:4e:25:67:a8:e0:b5:ba:a7:dd:7e:5e:c1:4c:02:74:c9:
         b3:6e:e3:f8:f0:0b:ed:fc:b9:29:c5:5b:c9:36:51:90:db:78:
         7d:b9:32:0f:5e:76:d2:15:5c:3b:37:21:c6:db:c9:19:6e:ed:
         74:2a:5c:2c:0b:51:49:45:53:b0:b2:b3:23:d4:a1:b0:5f:0d:
         19:cd:14:a7:e3:3c:9b:97:72:94:14:df:ff:c1:90:1b:a5:df:
         f5:a9:f3:1b:17:da:b5:fc:44:e0:e8:e2:3c:a2:7a:bb:bb:65:
         e6:4d:b1:b5:15:a1:d9:67:3b:b0:0c:7d:3b:e9:ee:51:2a:47:
         f5:15:0f:8c:ad:5d:2e:35:df:f4:a4:2e:f6:13:37:5a:2b:e8:
         55:9a:49:2c:97:ce:9d:01:9e:97:46:5c:d9:2d:bc:24:5a:95:
         59:6f:4d:ca:9d:d6:57:26

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

bd 3f 32 f1 a0 35 af 60 6f e1 c3 21 56 65 f4 6f |.?2..5.`o..!Ve.o| 15 bf 68 97 |..h. |

unnamed

Certificate #0
- 2
  - 61:03:DC:F6:00:00:00:00:00:0C
  - RSA-SHA1: nil
  - Issuer
    - C: US
    - ST: Washington
    - L: Redmond
    - O: Microsoft Corporation
    - CN: Microsoft Time-Stamp PCA
  - 2008-07-25 19:12:50 UTC: 2011-07-25 19:22:50 UTC
  - Subject
    - C: US
    - ST: Washington
    - L: Redmond
    - O: Microsoft Corporation
    - OU: MOPR
    - OU: nCipher DSE ESN:159C-A3F7-2570
    - CN: Microsoft Time-Stamp Service
  - #5
    - rsaEncryption: nil
    - C0:ED:81:14:A1:5E:77:C0:5B:F4:76:89:62:FA:AD:7C:
      68:14:B4:F7:BD:35:D8:13:79:5A:17:CA:D9:6C:51:45:
      62:26:7A:2F:1F:D8:EA:C1:6E:01:17:F9:C3:A6:1F:67:
      DB:51:B0:2C:DE:8A:17:ED:FF:20:AD:34:EA:98:FB:A5:
      D6:2A:D2:F1:44:27:07:5A:2D:3A:93:FF:56:53:B0:C8:
      F5:F3:03:F2:49:CC:16:D0:F5:00:4C:58:F8:9B:F5:07:
      25:B1:66:17:C0:BD:C8:D2:52:85:8D:C2:2B:38:B2:C3:
      36:BE:F9:87:DA:F4:8E:5D:43:D7:06:BF:99:05:9F:A4:
      CE:FE:AB:8D:61:63:E7:39:C5:F3:18:F6:D8:FC:31:36:
      69:72:5A:A2:1A:4C:3E:EA:87:25:42:9D:D1:3E:F1:97:
      D2:18:32:93:70:55:53:81:1E:E3:3B:0D:E8:BE:82:78:
      6D:E6:FA:CD:98:A4:6F:DB:EE:66:F4:95:C8:CD:35:C9:
      9E:BB:36:0D:83:96:94:26:A7:90:E0:A9:34:3B:D5:C0:
      9E:3E:F0:D4:47:8D:86:0C:82:A4:58:30:3A:1C:76:E3:
      AD:95:66:B4:B7:FD:09:8A:05:60:0F:A3:0F:E2:93:96:
      58:22:9C:9D:2B:DB:A2:94:18:90:95:02:BD:06:40:95: 0x010001
  - #6
    - subjectKeyIdentifier:
```
d2 ed 0d 1e 24 bb 37 a9  d8 20 6a 4d 1d d2 16 d5  |....$.7.. jM....|
2e be 9e eb                                       |....            |
```
    - authorityKeyIdentifier:
```
23 34 f8 d9 52 46 70 0a  ed 40 fb 76 fb b3 2b b0  |#4..RFp..@.v..+.|
c3 35 b3 0f                                       |.5..            |
```
    - crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl
    - authorityInfoAccess
      - caIssuers: http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt
    - extendedKeyUsage: timeStamping
    - keyUsage: true, 0xc0
- RSA-SHA1:
```
9c 0a 55 c8 cc 44 13 34  0c d8 63 27 76 7d 3e fa  |..U..D.4..c'v}>.|
38 32 83 53 9d f2 08 f9  32 f5 c5 6e 70 a1 c9 b1  |82.S....2..np...|
63 6b 19 9d 09 67 d9 9d  eb 8a 6a db 60 66 e9 e9  |ck...g....j.`f..|
52 26 f3 3b c6 6a d3 c2  52 be a8 b9 eb 6a aa 78  |R&.;.j..R....j.x|
8c c9 16 7d 90 95 a0 cc  21 b3 9e 81 bd cd c1 8b  |...}....!.......|
29 bd 62 25 ef 09 57 e7  86 4e 2a ec 80 ca bb fc  |).b%..W..N*.....|
21 16 c4 3f 4e 52 19 e6  0e b1 d8 c1 c2 79 90 64  |!..?NR.......y.d|
b4 50 73 10 35 5e 5d 11  c1 b8 ba aa cf 52 f6 80  |.Ps.5^]......R..|
91 00 e6 ef 51 43 46 e9  d0 e8 94 f6 2c 24 0d 8a  |....QCF.....,$..|
c6 b2 31 8a a3 7e 36 6c  a4 05 4c 67 07 2a bb bb  |..1..~6l..Lg.*..|
10 a5 a5 30 1a 72 d0 06  20 3b 24 93 5b 15 d9 39  |...0.r.. ;$.[..9|
93 d3 73 2d 1a c4 d4 6c  1e a1 08 ec f6 31 b8 6b  |..s-...l.....1.k|
4b ec ee 5c 33 02 14 32  8c 7c 11 20 2f 20 03 7f  |K..\3..2.|. / ..|
f9 0c 9d b8 d3 9e 5f d6  08 fc 81 a0 99 b8 bb 55  |......_........U|
6e cd 42 4b 3a 4d 8c 14  2b ca c8 12 d3 62 6e ea  |n.BK:M..+....bn.|
0d 0a 9d 09 a3 66 d9 79  4f 8e 1a a2 ff cc 98 04  |.....f.yO.......|
```

Certificate #1

2
- 61:01:C6:C1:00:00:00:00:00:07
- RSA-SHA1: nil
- Issuer
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Windows Verification PCA
- 2008-10-22 20:39:22 UTC: 2010-01-22 20:49:22 UTC
- Subject
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - OU: MOPR
  - CN: Microsoft Windows
- #5
  - rsaEncryption: nil
  - DC:3A:D3:44:F4:6E:20:9F:DD:A4:0E:82:4E:C7:86:5E:
    63:CC:CA:E5:42:53:4B:85:FA:5D:71:6C:CF:76:0C:18:
    8B:A6:0D:F5:4A:F7:FE:17:F2:90:CC:62:C7:24:AD:9B:
    9A:E1:45:3B:61:D8:0D:05:69:C7:CD:88:2A:B8:B9:18:
    1E:60:10:5F:88:C6:D2:82:4E:6D:49:C5:BE:5C:12:86:
    48:85:89:91:81:CD:1B:AD:1F:B7:2D:67:79:F1:7B:9F:
    25:87:14:76:5F:E3:0E:64:A1:72:61:25:E5:75:69:C5:
    14:F1:5F:07:56:A4:0D:70:06:23:A7:6C:DD:82:AE:D9:
    9B:47:A4:A5:6C:08:B0:58:F1:53:6A:4F:DA:85:61:CB:
    02:7B:49:AF:1F:BB:E0:D7:B9:5E:DB:73:89:76:C1:3A:
    BB:0D:F5:97:F0:88:5D:69:77:80:CF:F1:7E:03:9F:73:
    6D:DE:05:B8:2F:77:B5:54:55:45:D0:D2:38:BD:96:E3:
    F7:EA:40:E5:AC:19:FC:71:CB:28:27:AA:71:A1:72:B5:
    12:27:C1:51:F6:36:C5:C0:C7:7B:3A:3A:93:37:04:CC:
    EE:0B:69:78:64:75:41:B6:78:22:0F:77:84:F7:4B:8D:
    46:65:92:5B:4D:56:6B:75:04:46:3F:0B:1B:B4:19:BF: 0x010001
- #6
  - extendedKeyUsage
    - codeSigning: 1.3.6.1.4.1.311.10.3.6
  - subjectKeyIdentifier:
```
a1 e6 c3 65 d0 e6 e8 28  62 c2 f3 c2 23 a6 1c 49  |...e...(b...#..I|
82 0b d5 53                                       |...S            |
```
  - keyUsage: true, 0x80
  - authorityKeyIdentifier:
```
90 8b 11 a5 70 ed e0 f9  a9 c0 ac 08 c7 b5 f4 82  |....p...........|
b1 3c c5 4a                                       |.<.J            |
```
  - crlDistributionPoints
    - http://crl.microsoft.com/pki/crl/products/WinPCA.crl: http://www.microsoft.com/pki/crl/products/WinPCA.crl
  - authorityInfoAccess
    - caIssuers: http://www.microsoft.com/pki/certs/MicrosoftWinPCA.crt
  - certificatePolicies
    - 1.3.6.1.4.1.311.21.47
      - #0
        id-qt-cps: https://www.microsoft.com/pki/ssl/cps/WindowsPCA.htm
        id-qt-unotice:
        00 43 00 6f 00 70 00 79 00 72 00 69 00 67 00 68 |.C.o.p.y.r.i.g.h| 00 74 00 20 00 a9 00 20 00 31 00 39 00 39 00 39 |.t. ... .1.9.9.9| 00 2d 00 32 00 30 00 30 00 35 00 20 00 4d 00 69 |.-.2.0.0.5. .M.i| 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 20 |.c.r.o.s.o.f.t. | 00 43 00 6f 00 72 00 70 00 6f 00 72 00 61 00 74 |.C.o.r.p.o.r.a.t| 00 69 00 6f 00 6e 00 2e |.i.o.n.. |

RSA-SHA1:

73 5f ca 80 1c 60 46 6f  b9 34 9d 88 e3 be 22 8c  |s_...`Fo.4....".|
fa e6 58 9a ab 7b 1a 97  fd ed 2e 39 cc 59 5b 1d  |..X..{.....9.Y[.|
7a 06 8a bb 43 93 7b 1e  a1 88 53 df 44 f8 53 a9  |z...C.{...S.D.S.|
ea f6 67 1b 3a 78 84 11  6a 6f 29 47 90 0a 0c 7b  |..g.:x..jo)G...{|
22 77 4e 6f b8 64 29 df  06 c7 c8 73 84 d6 66 a0  |"wNo.d)....s..f.|
ca d9 5a 26 82 57 f9 e3  4f 39 af 2e 8e b1 06 5b  |..Z&.W..O9.....[|
72 f2 37 32 ae 4e ce 3c  7d b0 12 2b 9e a5 75 e3  |r.72.N.<}..+..u.|
43 a6 12 8b 06 14 98 77  e3 58 32 25 60 07 8c 59  |C......w.X2%`..Y|
71 a7 71 41 b3 06 8d 5c  ef 9c 7f 5a 22 6d b7 d3  |q.qA...\...Z"m..|
d9 f5 a6 1b 52 de f5 7e  76 7c fe f4 c8 23 1a 4b  |....R..~v|...#.K|
25 eb e4 ee af 10 0b 55  c3 d8 c1 17 85 61 6f d3  |%......U.....ao.|
3f b6 e9 ec 84 a5 ee 6d  b2 ff e8 6c 95 ab 2b 5e  |?......m...l..+^|
c8 85 c3 11 60 ac fa 02  05 f1 7b da c3 69 49 96  |....`.....{..iI.|
a5 70 f9 65 66 46 10 8d  34 e9 21 94 3c 0f 71 4a  |.p.efF..4.!.<.qJ|
1c ea 1f f7 23 a6 87 60  34 e9 14 e1 de 03 59 b4  |....#..`4.....Y.|
02 1d 3a af e3 55 05 f5  ed c1 f4 e4 5d 0e d3 97  |..:..U......]...|

2
- 61:16:68:34:00:00:00:00:00:1C
- RSA-SHA1: nil
- #2
  - DC: com
  - DC: microsoft
  - CN: Microsoft Root Certificate Authority
- 2007-04-03 12:53:09 UTC: 2021-04-03 13:03:09 UTC
- Subject
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Time-Stamp PCA
- #5
  - rsaEncryption: nil
  - 9F:A1:6C:B1:DF:DB:48:92:2A:7C:6B:2E:19:E1:BD:E2:
    E3:C5:99:51:23:50:AD:CE:DD:18:4E:24:0F:EE:D1:A7:
    D1:4C:AD:74:30:20:11:EB:07:D5:54:95:15:49:94:1B:
    42:92:AE:98:5C:30:26:DA:00:6B:E8:7B:BD:EC:89:07:
    0F:F7:0E:04:98:F0:89:CC:1F:CB:33:24:87:9D:F2:F4:
    67:1C:2C:FC:7B:E7:88:1D:EA:E7:4E:A3:A1:C1:23:53:
    CA:8D:FA:45:CF:09:D0:5E:AF:D0:B0:42:04:A2:F9:A6:
    6C:93:67:D7:28:DC:46:53:B0:86:D0:E5:28:46:2E:27:
    AC:86:4F:55:52:0C:E4:03:2C:FB:6A:90:90:30:6E:87:
    F3:59:30:9D:FA:7E:D6:97:B3:E8:21:97:7E:F8:D2:13:
    F3:08:B7:53:6D:52:B4:45:90:9F:48:00:4A:47:66:11:
    27:29:66:A8:97:E4:D3:06:81:4A:A2:F9:84:A7:11:47:
    14:09:82:9F:84:ED:55:78:FE:01:9A:1D:50:08:85:00:
    10:30:46:ED:B7:DE:23:46:BB:C4:2D:54:9F:AF:1E:78:
    41:31:77:CC:9B:DF:3B:83:93:A1:61:02:B5:1D:0D:B1:
    FC:F7:9B:B2:01:CE:22:4B:54:FF:F9:05:C3:C2:20:0B: 0x010001
- X509v3 extensions
  - basicConstraints: true, true
  - subjectKeyIdentifier:
```
23 34 f8 d9 52 46 70 0a  ed 40 fb 76 fb b3 2b b0  |#4..RFp..@.v..+.|
c3 35 b3 0f                                       |.5..            |
```
  - keyUsage: 0x86
  - 1.3.6.1.4.1.311.21.1: 0
  - authorityKeyIdentifier
    - 0e ac 82 60 40 56 27 97 e5 25 13 fc 2a e1 0a 53 |...`@V'..%..*..S| 95 59 e4 a4 |.Y.. |
      - #0
        DC: com
        DC: microsoft
        CN: Microsoft Root Certificate Authority
      - 79 ad 16 a1 4a a0 a5 ad 4c 73 58 f4 07 13 2e 65 |y...J...LsX....e|
  - crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl
  - authorityInfoAccess
    - caIssuers: http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt
  - extendedKeyUsage: timeStamping

RSA-SHA1:

10 97 8a c3 5c 03 44 36  dd e9 b4 ad 77 db ce 79  |....\.D6....w..y|
51 4d 01 b1 2e 74 71 5b  6d 0c 13 ab ce be 7b 8f  |QM...tq[m.....{.|
b8 2e d4 12 a2 8c 6d 62  b8 57 02 cb 4e 20 13 50  |......mb.W..N .P|
99 dd 7a 40 e2 57 bb af  58 9a 1c e1 1d 01 86 ac  |..z@.W..X.......|
bb 78 f2 8b d0 ec 3b 01  ee e2 be 8f 0a 05 c8 8d  |.x....;.........|
48 e2 f0 53 15 dd 4f ab  92 e4 e7 8d 6a d5 80 c1  |H..S..O.....j...|
e6 94 f2 06 2f 85 03 e9  91 2a 24 22 70 fb f6 fc  |..../....*$"p...|
e4 78 99 2e 0d f7 07 e2  70 bc 18 4e 9d 8e 6b 0a  |.x......p..N..k.|
72 95 b8 a1 39 9c 67 2d  c5 51 0e ea 62 5c 3f 16  |r...9.g-.Q..b\?.|
98 8b 20 3f e2 07 1a 32  f9 cc 31 4a 76 31 3d 2b  |.. ?...2..1Jv1=+|
72 0b c8 ea 70 3d ff 85  0a 13 df c2 0a 61 8e f0  |r...p=.......a..|
d7 b8 17 eb 4e 8b 7f c5  35 2b 5e a3 bf eb bc 7d  |....N...5+^....}|
0b 42 7b d4 53 72 21 ee  30 ca bb 78 65 5c 5b 01  |.B{.Sr!.0..xe\[.|
17 0a 14 0e d2 da 14 98  f5 3c b9 66 58 b3 2d 2f  |.........<.fX.-/|
e7 f9 85 86 cc 51 56 e8  9d 70 94 6c ac 39 4c d4  |.....QV..p.l.9L.|
f6 79 bf aa 18 7a 62 29  ef a2 9b 29 34 06 77 1a  |.y...zb)...)4.w.|
62 c9 3d 1e 6d 1f 82 f0  0b c7 2c bb cf 43 b3 e5  |b.=.m.....,..C..|
f9 ec 7d b5 e3 a4 a8 74  35 b8 4e c5 71 23 12 26  |..}....t5.N.q#.&|
76 0b 3c 52 8c 71 5a 46  43 14 bc b3 b3 b0 4d 67  |v.

2
- 61:07:02:DC:00:00:00:00:00:0B
- RSA-SHA1: nil
- #2
  - DC: com
  - DC: microsoft
  - CN: Microsoft Root Certificate Authority
- 2005-09-15 21:55:41 UTC: 2016-03-15 22:05:41 UTC
- Subject
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Windows Verification PCA
- #5
  - rsaEncryption: nil
  - C5:AC:93:4E:E6:4A:11:9E:37:D0:35:D2:B0:06:5C:83:
    14:A5:61:92:FC:FE:B3:89:C1:E6:CD:C8:1F:31:84:09:
    91:34:46:92:2C:B8:EE:2C:C5:20:73:C4:E8:1A:D8:8D:
    CE:7A:68:B5:66:78:8B:E5:60:15:A2:F6:29:5A:1D:5E:
    5D:FC:62:D3:C1:5C:29:89:FB:33:F8:16:95:36:DD:B1:
    46:74:69:72:53:D5:AA:E8:8A:99:1A:D8:F7:67:09:D9:
    09:20:22:38:7A:D6:03:23:D7:89:9F:1C:01:B7:51:DF:
    98:66:2A:02:8B:06:EC:E4:29:EF:5B:42:17:15:97:51:
    8D:7D:25:0A:AF:25:E8:DE:DC:9B:67:16:0A:56:73:9D:
    B3:1D:85:83:0B:7E:33:2B:62:33:CE:1C:20:81:4B:5E:
    D3:C6:49:B8:F6:2E:D3:4E:B0:71:44:46:64:3E:DE:43:
    66:04:B9:CC:83:48:3A:C5:36:7A:04:48:0B:89:02:3D:
    63:A2:01:76:29:97:75:E9:01:E6:00:97:09:92:F8:E2:
    27:F0:29:67:43:77:C3:50:96:53:31:E1:B6:71:8B:EC:
    77:C7:7C:31:48:D5:B8:25:22:8C:00:F7:28:38:7A:BD:
    7C:C7:3F:CD:40:26:77:DD:00:00:11:9A:95:BE:1F:DB: 0x010001
- #6
  - 1.3.6.1.4.1.311.21.1: 0
  - subjectKeyIdentifier:
```
90 8b 11 a5 70 ed e0 f9  a9 c0 ac 08 c7 b5 f4 82  |....p...........|
b1 3c c5 4a                                       |.<.J            |
```
  - keyUsage: 0xc6
  - basicConstraints: true, true
  - authorityKeyIdentifier
    - 0e ac 82 60 40 56 27 97 e5 25 13 fc 2a e1 0a 53 |...`@V'..%..*..S| 95 59 e4 a4 |.Y.. |
      - #0
        DC: com
        DC: microsoft
        CN: Microsoft Root Certificate Authority
      - 79 ad 16 a1 4a a0 a5 ad 4c 73 58 f4 07 13 2e 65 |y...J...LsX....e|
  - crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl
  - authorityInfoAccess
    - caIssuers: http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt
  - certificatePolicies
    - 1.3.6.1.4.1.311.21.47
      - id-qt-unotice:
        00 43 00 6f 00 70 00 79 00 72 00 69 00 67 00 68 |.C.o.p.y.r.i.g.h| 00 74 00 20 00 a9 00 20 00 31 00 39 00 39 00 39 |.t. ... .1.9.9.9| 00 2d 00 32 00 30 00 30 00 35 00 20 00 4d 00 69 |.-.2.0.0.5. .M.i| 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 20 |.c.r.o.s.o.f.t. | 00 43 00 6f 00 72 00 70 00 6f 00 72 00 61 00 74 |.C.o.r.p.o.r.a.t| 00 69 00 6f 00 6e 00 2e |.i.o.n.. |
  - extendedKeyUsage
    - codeSigning: 1.3.6.1.4.1.311.10.3.6

RSA-SHA1:

25 31 a1 58 ea 52 e5 e1  17 0c e6 f1 3f 78 a3 3f  |%1.X.R......?x.?|
72 af a7 57 10 53 89 10  5e 32 9c b6 70 c3 15 2b  |r..W.S..^2..p..+|
4d 15 30 34 e8 c0 6a e4  1c d3 2e 20 65 48 d7 1b  |M.04..j.... eH..|
98 62 21 ba 45 9f 4a ec  db 2f 09 19 51 e5 ed 32  |.b!.E.J../..Q..2|
19 51 2f e1 dd fb c6 52  fd eb c6 82 25 42 03 09  |.Q/....R....%B..|
a6 38 b6 36 1f cc c9 80  bb 5a 69 18 31 c3 b3 a0  |.8.6.....Zi.1...|
b3 67 47 be 9d c7 e2 3f  96 b3 88 f8 19 be 39 b9  |.gG....?......9.|
e9 95 ce fc 7c af a8 cd  d0 41 90 e0 d5 b3 1c 2f  |....|....A...../|
68 bb db 0f 6c 6a dd f2  af de f2 b5 de 0d b6 a6  |h...lj..........|
5a f0 86 0a b9 6d 99 4b  3f 7b 2d 01 84 6c 8f 87  |Z....m.K?{-..l..|
dc 7f 8f ab 14 88 d0 06  91 34 be 1b 82 22 a4 bc  |.........4..."..|
55 8a ad 9b fc 73 14 10  c4 c9 19 1e 07 7d 9b 0e  |U....s.......}..|
c0 95 26 5d c6 1f ac b4  f2 7e ba 25 70 4a 7b d7  |..&].....~.%pJ{.|
8e d1 9d a0 13 49 7a b0  02 52 52 24 f4 af dd 40  |.....Iz..RR$...@|
2d e5 3e 32 58 b3 4a 6a  dd 11 59 aa 2d bc a4 a0  |-.>2X.Jj..Y.-...|
73 38 f9 40 77 6b 34 19  57 cd 38 68 27 82 f8 d1  |s8.@wk4.W.8h'...|
6f eb 23 c0 3f 52 f3 4e  d5 02 3e 6a 9a 2b c1 f5  |o.#.?R.N..>j.+..|
31 71 db 41 4d 3b de ef  ad af 1f 88 65 43 1b 51  |1q.AM;......eC.Q|
b7 9a 75 ca 8e 69 49 10  8f 78 8a 74 45 b9 09 8e  |..u..iI..x.tE...|
73 77 07 32 4a 4b d7 68  2b 98 c5 ba 54 ea 3f cb  |sw.2JK.h+...T.?.|
a2 00 8c bb d8 10 58 f2  db dc 9b cd d8 ea 48 43  |......X.......HC|
e2 4a 7e 65 b2 dc f5 2d  4e 25 67 a8 e0 b5 ba a7  |.J~e...-N%g.....|
dd 7e 5e c1 4c 02 74 c9  b3 6e e3 f8 f0 0b ed fc  |.~^.L.t..n......|
b9 29 c5 5b c9 36 51 90  db 78 7d b9 32 0f 5e 76  |.).[.6Q..x}.2.^v|
d2 15 5c 3b 37 21 c6 db  c9 19 6e ed 74 2a 5c 2c  |..\;7!....n.t*\,|
0b 51 49 45 53 b0 b2 b3  23 d4 a1 b0 5f 0d 19 cd  |.QIES...#..._...|
14 a7 e3 3c 9b 97 72 94  14 df ff c1 90 1b a5 df  |...<..r.........|
f5 a9 f3 1b 17 da b5 fc  44 e0 e8 e2 3c a2 7a bb  |........D...<.z.|
bb 65 e6 4d b1 b5 15 a1  d9 67 3b b0 0c 7d 3b e9  |.e.M.....g;..};.|
ee 51 2a 47 f5 15 0f 8c  ad 5d 2e 35 df f4 a4 2e  |.Q*G.....].5....|
f6 13 37 5a 2b e8 55 9a  49 2c 97 ce 9d 01 9e 97  |..7Z+.U.I,......|
46 5c d9 2d bc 24 5a 95  59 6f 4d ca 9d d6 57 26  |F\.-.$Z.YoM...W&|

Signer

1
unnamed
- #0
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Windows Verification PCA
- 61:01:C6:C1:00:00:00:00:00:07
SHA1: nil

contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

38 f1 36 53 9b 6c 3a 03  e1 ee df 7a e3 f5 dc fa  |8.6S.l:....z....|
b0 ed 8f 8f                                       |....            |

1.3.6.1.4.1.311.2.1.12

00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 |.M.i.c.r.o.s.o.f| 00 74 00 20 00 57 00 69 00 6e 00 64 00 6f 00 77 |.t. .W.i.n.d.o.w| 00 73 |.s |
: http://www.microsoft.com/windows

rsaEncryption:

88 17 3c 1e 92 8f 21 76  8e d7 df 0c d3 89 5a 2b  |..<...!v......Z+|
f7 37 3d 72 ec 0a 98 20  97 cd 19 61 23 49 d9 7a  |.7=r... ...a#I.z|
20 b5 d4 39 da b5 45 15  de 44 0c a4 eb 4c c4 a9  | ..9..E..D...L..|
76 fe 9c a1 2d 96 dc a9  5a 88 1f 2b 72 e6 dd ba  |v...-...Z..+r...|
44 b5 9d 97 b2 d1 50 96  44 3d 4e 2c 22 ad ac fb  |D.....P.D=N,"...|
42 a5 9b 7f 19 f4 15 c1  c8 99 94 1c ea 02 11 a5  |B...............|
73 e7 34 f1 09 00 69 99  3a 2e bf 0f 60 18 92 29  |s.4...i.:...`..)|
e0 24 25 86 83 1f b3 2d  21 e9 a2 0f 00 6a f2 6a  |.$%....-!....j.j|
f6 de 1f f5 5d 3a eb 5c  60 36 11 fc 43 a9 46 a0  |....]:.\`6..C.F.|
27 a8 79 17 29 04 82 9d  05 06 48 c4 6b 26 c1 7a  |'.y.).....H.k&.z|
47 91 7a 5f 67 e8 36 8f  88 6a bd ad 3f 7a 88 5a  |G.z_g.6..j..?z.Z|
ee db c2 d1 a7 c8 0b fc  e1 cb ce fc 39 7d 60 f6  |............9}`.|
22 7c a8 5a 5d 9f 73 b4  3b f5 c3 78 db d8 5b e4  |"|.Z].s.;..x..[.|
e2 c3 bf 73 82 a4 25 4e  91 a9 95 8f b9 10 cf d7  |...s..%N........|
4f 57 82 9f a0 36 5c b9  a6 e1 47 39 59 b6 e5 45  |OW...6\...G9Y..E|
78 57 83 65 4c 54 df 13  02 ed ac 97 ae 6f f3 d3  |xW.eLT.......o..|

countersignature

unnamed
- #0
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Time-Stamp PCA
- 61:03:DC:F6:00:00:00:00:00:0C
SHA1

contentType: pkcs7-data
signingTime: 2009-07-14 01:20:46 UTC

messageDigest:

c4 c7 2c 22 dc 75 ec 29  30 8e 60 25 aa 0b 22 14  |..,".u.)0.`%..".|
50 86 51 9e                                       |P.Q.            |

RSA-SHA1:

0c 0e ee ff 6c c8 98 82  25 06 62 a0 fe 1c 50 8f  |....l...%.b...P.|
fe 57 c3 55 db fe a5 d5  53 c5 28 e7 cd 88 78 3e  |.W.U....S.(...x>|
1a 25 45 a0 c4 d5 22 4c  f3 fe ec 7e bf f5 74 7c  |.%E..."L...~..t||
1f a8 2c 08 7c fc c6 84  e3 77 50 f6 11 f6 8d 53  |..,.|....wP....S|
40 65 b8 92 a4 9f 76 9b  b8 8d 76 33 3c ce 1a 11  |@e....v...v3<...|
6b 04 10 3f a1 6e 83 b5  95 8b 64 0d 9b a9 8c f0  |k..?.n....d.....|
5c a1 3b f0 4b 08 a5 2d  ec 03 f4 33 4b b4 a8 d9  |\.;.K..-...3K...|
b5 33 47 b7 dc 02 4c 6b  7a 39 4c 87 fa 24 41 f1  |.3G...Lkz9L..$A.|
0a ce 5d 3b b6 7b de 0f  26 36 bf dc 83 6d 7e 0b  |..];.{..&6...m~.|
bd e1 1f 02 2d f3 1b 61  06 03 9a ca a4 a8 ca ac  |....-..a........|
81 ec 27 dc ba 50 cc 36  76 91 e5 e8 4c 3c 04 04  |..'..P.6v...L<..|
6e 1f c1 f2 55 44 6a 07  9a d8 83 32 fe b2 4e 36  |n...UDj....2..N6|
75 45 5a 25 79 b9 26 a3  c2 1b 7c 81 06 0c 8d 16  |uEZ%y.&...|.....|
3d 5b 73 1b 49 fe 04 8b  91 31 87 87 d9 3f 54 f9  |=[s.I....1...?T.|
44 2e e1 3c 8d f7 e6 9e  87 23 7c 13 59 dd 20 af  |D..<.....#|.Y. .|
57 0e cd a7 e4 80 15 6d  65 d3 0a 86 c5 75 5c a5  |W......me....u\.|

show previews

offset	size	type	comment
0	8704	DLL	07/14/2009 01:08:58	#
15c1	15	HTM		#
2200	7248	PKCS7	Authenticode Signature	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

kdcom.dll- Serial Kernel Debugger

MZ Header

Rich Header

DOS stub

PE Header

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

Signers (1)

Certificates (4)

kdcom.dll
- Serial Kernel Debugger