filenameInstMsiW.exe
size1821008 (0x1bc950)
md5d0ef61e0a6eb919ba51229d14c3ef5d5
typePE32 executable (GUI) Intel 80386, for MS Windows, MS CAB-Installer self-extracting archive
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xd0

Rich Header

lib idversiontimes used
25904313
10126
5624021
28903724
6190431

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections3
TimeDateStamp0x3a9ec590
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion7.0
SizeOfCode0x8600
SizeOfInitializedData0x1b2600
SizeOfUninitializedData0
AddressOfEntryPoint0x5a8b
BaseOfCode0x1000
BaseOfData0xa000
ImageBase0x1000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion5.1
SubsystemVersion4.0
Reserved10
SizeOfImage0x1bf000
SizeOfHeaders0x400
CheckSum0x1bdb8c
Subsystem2
DllCharacteristics0x8000
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v6.0 SPx

Sections

namevavsizeraw sizeflags
.text0x10000x85f20x8600R-X CODE
.data0xa0000x1be40x400RW- IDATA
.rsrc0xc0000x1b20940x1b2200R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x8a880x8c
RESOURCE0xc0000x1b2094
EXCEPTION00
SECURITY0x1bb0000x1950
BASERELOC00
DEBUG0x12100x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x10000x210
Delay_IAT00
CLR_Header00
typenamesizecp
AVI#3001118021252
ICON#17441252
ICON#22961252
DIALOG#20017161252
DIALOG#20023941252
DIALOG#20033201252
DIALOG#20044061252
DIALOG#20052701252
DIALOG#20062501252
STRING#631401252
STRING#7613121252
STRING#7714841252
STRING#8012001252
STRING#8310981252
STRING#859741252
RCDATAADMQCMD671252
RCDATACABINET17523181252
RCDATAEXTRACTOPT41252
RCDATAFILESIZES361252
RCDATAFINISHMSG71252
RCDATALICENSE71252
RCDATAPACKINSTSPACE41252
RCDATAPOSTRUNPROGRAM71252
RCDATAREBOOT41252
RCDATARUNPROGRAM491252
RCDATASHOWWINDOW41252
RCDATATITLE471252
RCDATAUPROMPT71252
RCDATAUSRQCMD671252
GROUP_ICON#3000341252
VERSION#117641252
idlangstring
10001033Please select a folder to store the extracted files.
10011033%s
12001033Failed to get disk space information from: %s. System Message: %s.
12011033A required resource cannot be located.
12021033Are you sure you want to cancel?
12041033Unable to retrieve operating system version information.
12051033Memory allocation request failed.
12081033Unable to create extraction thread.
12101033Cabinet is not valid.
12111033Filetable full.
12121033Can not change to destination folder.
12131033Setup could not find a drive with %s KB free disk space to install the program. Please free up some space first and press RETRY or press CANCEL to exit setup.
12141033That folder is invalid. Please make sure the folder exists and is writable.
12151033You must specify a folder with fully qualified pathname or choose Cancel.
12161033Could not update folder edit box.
12171033Could not load functions required for browser dialog.
12181033Could not load Shell32.dll required for browser dialog.
12201033Error creating process <%s>. Reason: %s
12211033The cluster size in this system is not supported.
12221033A required resource appears to be corrupted.
12231033Windows 95 or Windows NT 4.0 Beta 2 or greater is required for this installation.
12241033Error loading %s
12251033GetProcAddress() failed on function '%s'. Possible reason: incorrect version of advpack.dll being used.
12261033Windows 95 or Windows NT is required to install
12271033Could not create folder '%s'
12281033To install this program, you need %s KB disk space on drive %s. It is recommended that you free up the required disk space before you continue. Do you still want to continue?
12641033Error retrieving Windows folder
12691033NT Shutdown: OpenProcessToken error.
12701033NT Shutdown: AdjustTokenPrivileges error.
12711033NT Shutdown: ExitWindowsEx error.
12721033Extracting file failed. It is most likely caused by low memory (low disk space for swapping file) or corrupted Cabinet file.
12731033The setup program could not retrieve the volume information for drive (%s) . System message: %s.
12741033Setup could not find a drive with %s KB free disk space to install the program. Please free up some space and try again.
12751033The installation program appears to be damaged or corrupted. Contact the vendor of this application.
13121033Command line option syntax error. Type Command /? for Help.
13131033Command line options: /Q -- Quiet modes for package, /T:<full path> -- Specifies temporary working folder, /C -- Extract files only to the folder when used also with /T. /C:<Cmd> -- Override Install Command defined by author.
13141033You must restart your computer before the new settings will take effect. Do you want to restart your computer now?
13161033Another copy of the '%s' package is already running on your system. Do you want to run another copy?
13171033Could not find the file: %s.
13511033You do not have administrator privileges on this machine. Some installations cannot be completed correctly unless they are run by an administrator.
13541033The folder '%s' does not exist. Do you want to create it?
13551033Another copy of the '%s' package is already running on your system. You can only run one copy at a time.
13561033The '%s' package is not compatible with the version of Windows you are running.
13571033The '%s' package is not compatible with the version of the file: %s on your system.
module_namehintordfunction_name
ADVAPI32.dll227FreeSid
ADVAPI32.dll26AllocateAndInitializeSid
ADVAPI32.dll218EqualSid
ADVAPI32.dll285GetTokenInformation
ADVAPI32.dll427OpenProcessToken
ADVAPI32.dll25AdjustTokenPrivileges
ADVAPI32.dll340LookupPrivilegeValueA
ADVAPI32.dll459RegCloseKey
ADVAPI32.dll468RegDeleteValueA
ADVAPI32.dll484RegOpenKeyExA
ADVAPI32.dll507RegSetValueExA
ADVAPI32.dll494RegQueryValueExA
ADVAPI32.dll463RegCreateKeyExA
ADVAPI32.dll489RegQueryInfoKeyA
KERNEL32.dll546LocalFree
KERNEL32.dll542LocalAlloc
KERNEL32.dll328GetLastError
KERNEL32.dll287GetCurrentProcess
KERNEL32.dll339GetModuleFileNameA
KERNEL32.dll895lstrlenA
KERNEL32.dll401GetSystemDirectoryA
KERNEL32.dll646RemoveDirectoryA
KERNEL32.dll177FindClose
KERNEL32.dll190FindNextFileA
KERNEL32.dll106DeleteFileA
KERNEL32.dll724SetFileAttributesA
KERNEL32.dll883lstrcmpA
KERNEL32.dll181FindFirstFileA
KERNEL32.dll880lstrcatA
KERNEL32.dll889lstrcpyA
KERNEL32.dll873_lclose
KERNEL32.dll875_llseek
KERNEL32.dll876_lopen
KERNEL32.dll860WritePrivateProfileStringA
KERNEL32.dll445GetWindowsDirectoryA
KERNEL32.dll54CreateDirectoryA
KERNEL32.dll312GetFileAttributesA
KERNEL32.dll158ExpandEnvironmentStringsA
KERNEL32.dll512IsDBCSLeadByte
KERNEL32.dll389GetShortPathNameA
KERNEL32.dll368GetPrivateProfileStringA
KERNEL32.dll362GetPrivateProfileIntA
KERNEL32.dll886lstrcmpiA
KERNEL32.dll372GetProcAddress
KERNEL32.dll468GlobalUnlock
KERNEL32.dll461GlobalLock
KERNEL32.dll450GlobalAlloc
KERNEL32.dll215FreeResource
KERNEL32.dll33CloseHandle
KERNEL32.dll541LoadResource
KERNEL32.dll777SizeofResource
KERNEL32.dll196FindResourceA
KERNEL32.dll631ReadFile
KERNEL32.dll855WriteFile
KERNEL32.dll726SetFilePointer
KERNEL32.dll730SetFileTime
KERNEL32.dll544LocalFileTimeToFileTime
KERNEL32.dll118DosDateTimeToFileTime
KERNEL32.dll713SetCurrentDirectoryA
KERNEL32.dll415GetTempFileNameA
KERNEL32.dll155ExitProcess
KERNEL32.dll61CreateFileA
KERNEL32.dll537LoadLibraryExA
KERNEL32.dll892lstrcpynA
KERNEL32.dll437GetVolumeInformationA
KERNEL32.dll208FormatMessageA
KERNEL32.dll285GetCurrentDirectoryA
KERNEL32.dll435GetVersionExA
KERNEL32.dll308GetExitCodeProcess
KERNEL32.dll838WaitForSingleObject
KERNEL32.dll78CreateProcessA
KERNEL32.dll417GetTempPathA
KERNEL32.dll403GetSystemInfo
KERNEL32.dll73CreateMutexA
KERNEL32.dll721SetEvent
KERNEL32.dll58CreateEventA
KERNEL32.dll87CreateThread
KERNEL32.dll654ResetEvent
KERNEL32.dll787TerminateThread
KERNEL32.dll301GetDriveTypeA
KERNEL32.dll341GetModuleHandleA
KERNEL32.dll391GetStartupInfoA
KERNEL32.dll237GetCommandLineA
KERNEL32.dll555LockResource
KERNEL32.dll536LoadLibraryA
KERNEL32.dll297GetDiskFreeSpaceA
KERNEL32.dll570MulDiv
KERNEL32.dll136EnumResourceLanguagesA
KERNEL32.dll213FreeLibrary
KERNEL32.dll457GlobalFree
GDI32.dll362GetDeviceCaps
USER32.dll221ExitWindowsEx
USER32.dll721wsprintfA
USER32.dll41CharNextA
USER32.dll51CharUpperA
USER32.dll44CharPrevA
USER32.dll633SetWindowLongA
USER32.dll362GetWindowLongA
USER32.dll26CallWindowProcA
USER32.dll159DispatchMessageA
USER32.dll483MsgWaitForMultipleObjects
USER32.dll502PeekMessageA
USER32.dll564SendMessageA
USER32.dll636SetWindowPos
USER32.dll547ReleaseDC
USER32.dll264GetDC
USER32.dll368GetWindowRect
USER32.dll559SendDlgItemMessageA
USER32.dll269GetDlgItem
USER32.dll592SetForegroundWindow
USER32.dll639SetWindowTextA
USER32.dll471MessageBoxA
USER32.dll154DialogBoxIndirectParamA
USER32.dll651ShowWindow
USER32.dll193EnableWindow
USER32.dll271GetDlgItemTextA
USER32.dll195EndDialog
USER32.dll266GetDesktopWindow
USER32.dll470MessageBeep
USER32.dll588SetDlgItemTextA
USER32.dll451LoadStringA
USER32.dll345GetSystemMetrics
COMCTL32.dll17
VERSION.dllGetFileVersionInfoA
VERSION.dll10VerQueryValueA
VERSION.dll1GetFileVersionInfoSizeA

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionInstaller for the Windows Installer
FileVersion2.0.2600.0
InternalNameInstMsi.exe
LegalCopyrightCopyright (c) Microsoft Corp. 2000
OriginalFilenameMsi.dll,MsiHnd.dll,MsiExec.exe
ProductNameWindows Installer - Unicode
ProductVersion2.0.2600.0

VS_FIXEDFILEINFO

FileVersion12.0.2600.0
ProductVersion12.0.2600.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags8
FileOS0x40004
FileType1
FileSubtype0

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/OU=Copyright (c) 2000 Microsoft Corp./CN=Microsoft Code Signing PCA
serial: 61062A8D00000000000B

Certificates (5)

Certificate:
    Data:
        Version: 1 (0x0)
        Serial Number:
            4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
        Signature Algorithm: md5WithRSAEncryption
        Issuer: O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
        Validity
            Not Before: May 12 00:00:00 1997 GMT
            Not After : Jan  7 23:59:59 2004 GMT
        Subject: O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:d3:2e:20:f0:68:7c:2c:2d:2e:81:1c:b1:06:b2:
                    a7:0b:b7:11:0d:57:da:53:d8:75:e3:c9:33:2a:b2:
                    d4:f6:09:5b:34:f3:e9:90:fe:09:0c:d0:db:1b:5a:
                    b9:cd:e7:f6:88:b1:9d:c0:87:25:eb:7d:58:10:73:
                    6a:78:cb:71:15:fd:c6:58:f6:29:ab:58:5e:96:04:
                    fd:2d:62:11:58:81:1c:ca:71:94:d5:22:58:2f:d5:
                    cc:14:05:84:36:ba:94:aa:b4:4d:4a:e9:ee:3b:22:
                    ad:56:99:7e:21:9c:6c:86:c0:4a:47:97:6a:b4:a6:
                    36:d5:fc:09:2d:d3:b4:39:9b
                Exponent: 65537 (0x10001)
    Signature Algorithm: md5WithRSAEncryption
    Signature Value:
        61:55:0e:3e:7b:c7:92:12:7e:11:10:8e:22:cc:d4:b3:13:2b:
        5b:e8:44:e4:0b:78:9e:a4:7e:f3:a7:07:72:1e:e2:59:ef:cc:
        84:e3:89:94:4c:db:4e:61:ef:b3:a4:fb:46:3d:50:34:0b:9f:
        70:56:f6:8e:2a:7f:17:ce:e5:63:bf:79:69:07:73:2e:b0:95:
        28:8a:f5:ed:aa:a9:d2:5d:cd:0a:ca:10:09:8f:ce:b3:af:28:
        96:c4:79:29:84:92:dc:ff:ba:67:42:48:a6:90:10:e4:bf:61:
        f8:9c:53:e5:93:d1:73:3f:f8:fd:9d:4f:84:ac:55:d1:fd:11:
        63:63

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
        Signature Algorithm: md5WithRSAEncryption
        Issuer: O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
        Validity
            Not Before: Feb 28 00:00:00 2001 GMT
            Not After : Jan  6 23:59:59 2004 GMT
        Subject: O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)01, CN=VeriSign Time Stamping Service
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c0:7a:61:87:eb:b2:a7:03:63:1b:2b:1a:61:de:
                    80:b7:15:1d:a0:8b:90:3d:bb:27:92:84:14:39:eb:
                    85:ce:29:92:06:66:48:a4:03:4f:8d:e8:4f:a7:f0:
                    af:5e:d1:2f:19:c7:91:f1:b5:9e:7b:91:21:ce:e9:
                    ff:e3:4e:f0:fc:af:95:58:b8:63:2d:e6:8e:f6:29:
                    18:cd:70:8e:50:c3:ed:96:bb:40:db:be:25:e8:42:
                    55:d6:f6:85:f2:06:e7:8b:99:1c:31:f3:03:0f:d4:
                    4c:9c:24:2a:dc:1b:1b:8f:82:f3:b0:ef:a7:4d:e3:
                    14:a7:e0:8f:d6:c7:68:c2:61:58:a9:72:d4:f8:30:
                    48:4f:d9:2f:6f:63:20:d9:89:ca:82:7b:c2:4b:bc:
                    28:c5:81:68:e7:e6:82:40:ac:46:3a:a0:f9:3f:36:
                    cd:4c:bb:54:42:5a:7a:65:7b:fe:84:e4:c7:47:54:
                    ac:b9:3d:ec:80:c7:1a:f7:c4:33:81:81:c9:2a:95:
                    fb:7f:5e:3a:87:90:14:db:cc:2e:75:f2:ef:6b:e6:
                    3d:a9:60:be:42:01:aa:4f:aa:5b:a8:3f:22:31:9f:
                    12:15:f9:73:a1:1e:82:8b:04:2b:ea:46:02:4c:6d:
                    8f:1f:50:2e:95:4b:2a:78:06:84:74:3d:91:8f:2c:
                    47:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com/ocsp/status
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.1.1
                  CPS: https://www.verisign.com/rpa
            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: 
                Digital Signature, Non Repudiation
    Signature Algorithm: md5WithRSAEncryption
    Signature Value:
        2d:f3:4f:63:60:2c:18:da:f5:24:0f:52:b3:0c:eb:b3:bc:67:
        85:c2:23:ed:8f:46:0d:cf:1a:4d:be:f3:7c:7a:20:30:32:18:
        68:8b:92:bb:32:99:f0:93:b8:3b:15:06:27:7b:3e:02:06:00:
        a4:21:92:84:13:0a:c5:98:e5:40:57:c5:05:25:e8:af:af:11:
        6a:a9:e5:3b:cb:e9:23:f6:94:29:5d:40:55:f3:a5:53:9d:c8:
        36:3a:39:65:08:73:73:a4:32:d2:af:ac:bf:c7:05:3c:ff:45:
        ec:c3:e8:da:24:d1:ce:63:ae:09:a7:fb:e2:1b:e3:fd:41:0a:
        6a:96

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
        Signature Algorithm: md5WithRSAEncryption
        Issuer: OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
        Validity
            Not Before: Jan 10 07:00:00 1997 GMT
            Not After : Dec 31 07:00:00 2020 GMT
        Subject: OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a9:02:bd:c1:70:e6:3b:f2:4e:1b:28:9f:97:78:
                    5e:30:ea:a2:a9:8d:25:5f:f8:fe:95:4c:a3:b7:fe:
                    9d:a2:20:3e:7c:51:a2:9b:a2:8f:60:32:6b:d1:42:
                    64:79:ee:ac:76:c9:54:da:f2:eb:9c:86:1c:8f:9f:
                    84:66:b3:c5:6b:7a:62:23:d6:1d:3c:de:0f:01:92:
                    e8:96:c4:bf:2d:66:9a:9a:68:26:99:d0:3a:2c:bf:
                    0c:b5:58:26:c1:46:e7:0a:3e:38:96:2c:a9:28:39:
                    a8:ec:49:83:42:e3:84:0f:bb:9a:6c:55:61:ac:82:
                    7c:a1:60:2d:77:4c:e9:99:b4:64:3b:9a:50:1c:31:
                    08:24:14:9f:a9:e7:91:2b:18:e6:3d:98:63:14:60:
                    58:05:65:9f:1d:37:52:87:f7:a7:ef:94:02:c6:1b:
                    d3:bf:55:45:b3:89:80:bf:3a:ec:54:94:4e:ae:fd:
                    a7:7a:6d:74:4e:af:18:cc:96:09:28:21:00:57:90:
                    60:69:37:bb:4b:12:07:3c:56:ff:5b:fb:a4:66:0a:
                    08:a6:d2:81:56:57:ef:b6:3b:5e:16:81:77:04:da:
                    f6:be:ae:80:95:fe:b0:cd:7f:d6:a7:1a:72:5c:3c:
                    ca:bc:f0:08:a3:22:30:b3:06:85:c9:b3:20:77:13:
                    85:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            2.5.29.1: 
                0....[.p.ir.#Q~..M....r0p1+0)..U..."Copyright (c) 1997 Microsoft Corp.1.0...U....Microsoft Corporation1!0...U....Microsoft Root Authority......<<...>.c..@
    Signature Algorithm: md5WithRSAEncryption
    Signature Value:
        95:e8:0b:c0:8d:f3:97:18:35:ed:b8:01:24:d8:77:11:f3:5c:
        60:32:9f:9e:0b:cb:3e:05:91:88:8f:c9:3a:e6:21:f2:f0:57:
        93:2c:b5:a0:47:c8:62:ef:fc:d7:cc:3b:3b:5a:a9:36:54:69:
        fe:24:6d:3f:c9:cc:aa:de:05:7c:dd:31:8d:3d:9f:10:70:6a:
        bb:fe:12:4f:18:69:c0:fc:d0:43:e3:11:5a:20:4f:ea:62:7b:
        af:aa:19:c8:2b:37:25:2d:be:65:a1:12:8a:25:0f:63:a3:f7:
        54:1c:f9:21:c9:d6:15:f3:52:ac:6e:43:32:07:fd:82:17:f8:
        e5:67:6c:0d:51:f6:bd:f1:52:c7:bd:e7:c4:30:fc:20:31:09:
        88:1d:95:29:1a:4d:d5:1d:02:a5:f1:80:e0:03:b4:5b:f4:b1:
        dd:c8:57:ee:65:49:c7:52:54:b6:b4:03:28:12:ff:90:d6:f0:
        08:8f:7e:b8:97:c5:ab:37:2c:e4:7a:e4:a8:77:e3:76:a0:00:
        d0:6a:3f:c1:d2:36:8a:e0:41:12:a8:35:6a:1b:6a:db:35:e1:
        d4:1c:04:e4:a8:45:04:c8:5a:33:38:6e:4d:1c:0d:62:b7:0a:
        a2:8c:d3:d5:54:3f:46:cd:1c:55:a6:70:db:12:3a:87:93:75:
        9f:a7:d2:a0

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:06:2a:8d:00:00:00:00:00:0b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Copyright (c) 2000 Microsoft Corp., CN=Microsoft Code Signing PCA
        Validity
            Not Before: Mar 29 21:27:26 2001 GMT
            Not After : May 29 21:37:26 2002 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Copyright (c) 2001 Microsoft Corp., CN=Microsoft Corporation
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:8e:16:6f:da:17:d3:e3:45:95:b2:ac:d3:e5:cf:
                    31:3d:1d:c4:87:bb:4e:48:05:f9:8b:56:a9:2b:87:
                    63:c8:44:da:30:c9:14:bc:eb:78:1a:ba:c4:ea:e2:
                    72:00:4c:46:66:9b:de:62:46:6e:9e:f7:44:ba:e8:
                    ba:cf:c2:d5:f5:3b:96:47:b8:51:5e:d1:77:67:22:
                    7b:53:2a:2d:ea:22:8f:7c:4e:ff:02:b5:1b:33:a0:
                    ea:95:eb:18:ba:76:f9:61:d2:00:0b:94:60:34:3b:
                    49:86:2c:b3:d9:8e:93:2e:2d:6b:fd:e3:55:aa:b8:
                    aa:6e:e0:70:f4:a2:60:06:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Subject Key Identifier: 
                EF:90:40:DE:4F:E0:1B:B3:45:D8:07:03:7B:99:F9:75:19:66:35:1A
            X509v3 Authority Key Identifier: 
                keyid:29:5C:B9:1B:B6:CD:33:EE:BB:9E:59:7D:F7:E5:CA:2E:C4:0D:34:28
                DirName:/OU=Copyright (c) 1997 Microsoft Corp./OU=Microsoft Corporation/CN=Microsoft Root Authority
                serial:6A:0B:99:4F:C0:00:DE:AA:11:D4:D8:40:9A:A8:BE:E6
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/CodeSignPCA.crl
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        04:67:cc:cf:dd:71:4d:47:c2:8e:83:69:12:6b:a2:5f:96:26:
        07:e8:8f:d8:d3:9e:5a:db:27:69:1d:1d:f4:3c:55:28:53:dd:
        11:24:27:92:ae:59:56:40:e9:c4:4d:9d:ec:db:ab:7e:94:9b:
        3d:20:2c:35:f2:27:4e:c0:c8:39:b7:65:63:d1:35:66:da:53:
        bd:41:7e:59:4a:a4:52:b7:f5:fd:c8:bd:a1:7b:06:b8:98:d8:
        98:ee:d1:0b:34:75:66:0d:dc:41:8f:c3:b0:92:84:57:c1:42:
        7a:85:c6:91:13:db:54:ad:de:7e:41:dc:20:af:e9:1b:c9:c2:
        32:31:c5:8d:e9:cb:fa:83:4b:c1:58:93:32:c4:d7:e3:cd:7a:
        ab:df:7d:08:9c:c6:85:3b:e8:41:81:38:b1:78:19:bc:38:f7:
        cd:6b:c2:ce:aa:4c:90:1d:83:c6:e6:01:89:68:aa:e7:8f:e8:
        07:50:2a:32:dd:d7:cf:bd:cc:7a:d9:3a:0f:ff:b2:44:8a:57:
        c8:1a:37:64:07:17:7d:7b:72:4b:46:06:a1:28:5b:23:57:1e:
        6a:fd:91:22:33:40:d1:75:4b:12:01:6e:06:21:84:36:6f:a8:
        2a:0c:7f:3e:ae:35:2b:f6:b7:7d:0b:08:13:e5:57:f3:4b:ad:
        8f:20:bf:b8

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
        Signature Algorithm: md5WithRSAEncryption
        Issuer: OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
        Validity
            Not Before: Dec 10 08:00:00 2000 GMT
            Not After : Nov 12 08:00:00 2005 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Copyright (c) 2000 Microsoft Corp., CN=Microsoft Code Signing PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a2:84:15:53:d8:0b:30:0e:34:95:ff:3a:1b:c2:
                    f3:2f:7b:6d:37:23:4d:f3:d2:8c:e5:fd:af:fd:c5:
                    02:34:1f:24:c7:e5:a1:dc:54:ec:7e:02:74:47:ab:
                    db:32:58:16:14:51:29:38:f1:7e:b2:b4:8c:3a:47:
                    b5:39:4e:6e:54:c2:31:0c:3a:6d:fb:cd:cd:cb:50:
                    9c:1b:ae:a7:d8:d9:4a:26:3f:b5:c5:cb:8f:96:e2:
                    49:f2:6d:d8:e9:96:3e:de:05:cf:f0:a6:55:37:ad:
                    2f:60:cd:80:61:42:a1:49:54:4a:0f:18:b7:4b:d9:
                    93:99:30:5a:47:75:64:b4:d3:bb:dd:b6:ab:0c:9d:
                    4f:b8:73:3b:18:3a:aa:b4:87:8c:b0:88:b0:4d:4f:
                    1f:4e:11:b5:33:80:df:0d:3a:64:6f:44:c7:34:bd:
                    4a:93:9b:bc:a6:1d:f9:05:23:4e:60:29:8f:cc:2a:
                    f2:84:9a:99:ad:a8:db:0a:70:7b:d6:34:41:90:a5:
                    b7:66:c7:5c:1b:1d:a3:33:0e:9b:54:03:1a:3f:98:
                    90:b8:cc:e7:3d:04:74:43:1c:8f:f7:39:e6:b3:ac:
                    48:7a:6b:2a:0e:62:01:61:39:76:6e:fd:3e:98:07:
                    4b:14:f1:01:46:fd:15:00:e0:47:da:4f:e4:05:e4:
                    80:25
                Exponent: 3 (0x3)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Code Signing
            2.5.29.1: 
                0....[.p.ir.#Q~..M....r0p1+0)..U..."Copyright (c) 1997 Microsoft Corp.1.0...U....Microsoft Corporation1!0...U....Microsoft Root Authority......<<...>.c..@
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Subject Key Identifier: 
                29:5C:B9:1B:B6:CD:33:EE:BB:9E:59:7D:F7:E5:CA:2E:C4:0D:34:28
            1.3.6.1.4.1.311.20.2: 
                .
.S.u.b.C.A
            X509v3 Key Usage: 
                Non Repudiation, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: md5WithRSAEncryption
    Signature Value:
        45:58:e2:9a:41:7f:fc:9d:bf:48:77:77:ae:8c:d9:e6:19:c5:
        57:b4:1a:bd:b4:b9:5f:02:a1:45:6a:39:59:f9:b9:27:9c:2d:
        4d:9e:fc:a2:e4:38:8a:38:64:22:42:df:b9:2f:2a:cf:b7:d6:
        06:ca:eb:2a:bf:e0:1a:85:7c:db:51:08:3d:f4:22:d3:d4:c0:
        6d:88:81:15:44:5f:64:83:64:c4:a9:94:2c:8a:db:90:37:4a:
        0f:b7:e8:d4:61:8f:76:76:e1:d9:25:ff:24:84:95:8d:04:56:
        54:94:a1:1c:3a:3e:82:bc:ee:a5:87:8c:1c:8c:4b:79:5f:b5:
        49:fa:5e:32:69:3a:1f:54:ad:75:4d:df:64:e7:30:3c:db:64:
        49:44:fb:fb:c4:1c:42:71:e6:a0:3d:45:ee:6b:00:9f:ac:42:
        bd:ba:11:b3:56:e4:fb:d5:a2:2a:81:d8:1f:4e:a2:55:be:27:
        8f:70:a6:a2:6c:1b:ff:54:8a:82:bc:81:4b:a6:a1:b1:66:7a:
        a9:17:a7:cb:06:c0:47:eb:a6:b3:e9:31:15:53:3d:2a:04:bf:
        ff:73:48:dc:8b:27:43:fc:63:e8:ee:24:87:5b:be:36:d1:e8:
        31:f5:32:d9:5e:df:79:7a:ba:30:ac:69:86:4a:fb:8c:11:bf:
        1b:8d:54:59
pkcs7-signedData
  • 1
    • MD5: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • : 
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • MD5
          • 58 d2 1b 37 a9 ac ac a3  f0 e9 ab 7a 20 e9 d5 76  |X..7.......z ..v|
    • unnamed
      • #0
        • 4A:19:D2:38:8C:82:59:1C:A5:5D:73:5F:15:5D:DC:A3
          • RSA-MD5: nil
          • #1
            • O: VeriSign Trust Network
            • OU: VeriSign, Inc.
            • OU: VeriSign Time Stamping Service Root
            • OU: NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
          • 1997-05-12 00:00:00 UTC: 2004-01-07 23:59:59 UTC
          • #3
            • O: VeriSign Trust Network
            • OU: VeriSign, Inc.
            • OU: VeriSign Time Stamping Service Root
            • OU: NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
          • #4
            • rsaEncryption: nil
            • D3:2E:20:F0:68:7C:2C:2D:2E:81:1C:B1:06:B2:A7:0B:
              B7:11:0D:57:DA:53:D8:75:E3:C9:33:2A:B2:D4:F6:09:
              5B:34:F3:E9:90:FE:09:0C:D0:DB:1B:5A:B9:CD:E7:F6:
              88:B1:9D:C0:87:25:EB:7D:58:10:73:6A:78:CB:71:15:
              FD:C6:58:F6:29:AB:58:5E:96:04:FD:2D:62:11:58:81:
              1C:CA:71:94:D5:22:58:2F:D5:CC:14:05:84:36:BA:94:
              AA:B4:4D:4A:E9:EE:3B:22:AD:56:99:7E:21:9C:6C:86:
              C0:4A:47:97:6A:B4:A6:36:D5:FC:09:2D:D3:B4:39:9B              : 0x010001
        • RSA-MD5: 
          61 55 0e 3e 7b c7 92 12  7e 11 10 8e 22 cc d4 b3  |aU.>{...~..."...|
13 2b 5b e8 44 e4 0b 78  9e a4 7e f3 a7 07 72 1e  |.+[.D..x..~...r.|
e2 59 ef cc 84 e3 89 94  4c db 4e 61 ef b3 a4 fb  |.Y......L.Na....|
46 3d 50 34 0b 9f 70 56  f6 8e 2a 7f 17 ce e5 63  |F=P4..pV..*....c|
bf 79 69 07 73 2e b0 95  28 8a f5 ed aa a9 d2 5d  |.yi.s...(......]|
cd 0a ca 10 09 8f ce b3  af 28 96 c4 79 29 84 92  |.........(..y)..|
dc ff ba 67 42 48 a6 90  10 e4 bf 61 f8 9c 53 e5  |...gBH.....a..S.|
93 d1 73 3f f8 fd 9d 4f  84 ac 55 d1 fd 11 63 63  |..s?...O..U...cc|
      • #1
        • 2
          • 08:7A:6D:5C:6F:62:93:4F:BA:C4:FD:43:E1:14:18:9D
          • RSA-MD5: nil
          • #2
            • O: VeriSign Trust Network
            • OU: VeriSign, Inc.
            • OU: VeriSign Time Stamping Service Root
            • OU: NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
          • 2001-02-28 00:00:00 UTC: 2004-01-06 23:59:59 UTC
          • #4
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: Terms of use at https://www.verisign.com/rpa (c)01
            • CN: VeriSign Time Stamping Service
          • #5
            • rsaEncryption: nil
            • C0:7A:61:87:EB:B2:A7:03:63:1B:2B:1A:61:DE:80:B7:
              15:1D:A0:8B:90:3D:BB:27:92:84:14:39:EB:85:CE:29:
              92:06:66:48:A4:03:4F:8D:E8:4F:A7:F0:AF:5E:D1:2F:
              19:C7:91:F1:B5:9E:7B:91:21:CE:E9:FF:E3:4E:F0:FC:
              AF:95:58:B8:63:2D:E6:8E:F6:29:18:CD:70:8E:50:C3:
              ED:96:BB:40:DB:BE:25:E8:42:55:D6:F6:85:F2:06:E7:
              8B:99:1C:31:F3:03:0F:D4:4C:9C:24:2A:DC:1B:1B:8F:
              82:F3:B0:EF:A7:4D:E3:14:A7:E0:8F:D6:C7:68:C2:61:
              58:A9:72:D4:F8:30:48:4F:D9:2F:6F:63:20:D9:89:CA:
              82:7B:C2:4B:BC:28:C5:81:68:E7:E6:82:40:AC:46:3A:
              A0:F9:3F:36:CD:4C:BB:54:42:5A:7A:65:7B:FE:84:E4:
              C7:47:54:AC:B9:3D:EC:80:C7:1A:F7:C4:33:81:81:C9:
              2A:95:FB:7F:5E:3A:87:90:14:DB:CC:2E:75:F2:EF:6B:
              E6:3D:A9:60:BE:42:01:AA:4F:AA:5B:A8:3F:22:31:9F:
              12:15:F9:73:A1:1E:82:8B:04:2B:EA:46:02:4C:6D:8F:
              1F:50:2E:95:4B:2A:78:06:84:74:3D:91:8F:2C:47:31              : 0x010001
          • X509v3 extensions
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com/ocsp/status
            • basicConstraints
              • nil
            • certificatePolicies
              • 2.16.840.1.113733.1.7.1.1
                • id-qt-cps: https://www.verisign.com/rpa
            • extendedKeyUsage: timeStamping
            • keyUsage: 0xc0
        • RSA-MD5: 
          2d f3 4f 63 60 2c 18 da  f5 24 0f 52 b3 0c eb b3  |-.Oc`,...$.R....|
bc 67 85 c2 23 ed 8f 46  0d cf 1a 4d be f3 7c 7a  |.g..#..F...M..|z|
20 30 32 18 68 8b 92 bb  32 99 f0 93 b8 3b 15 06  | 02.h...2....;..|
27 7b 3e 02 06 00 a4 21  92 84 13 0a c5 98 e5 40  |'{>....!.......@|
57 c5 05 25 e8 af af 11  6a a9 e5 3b cb e9 23 f6  |W..%....j..;..#.|
94 29 5d 40 55 f3 a5 53  9d c8 36 3a 39 65 08 73  |.)]@U..S..6:9e.s|
73 a4 32 d2 af ac bf c7  05 3c ff 45 ec c3 e8 da  |s.2......<.E....|
24 d1 ce 63 ae 09 a7 fb  e2 1b e3 fd 41 0a 6a 96  |$..c........A.j.|
      • #2
        • 2
          • C1:00:8B:3C:3C:88:11:D1:3E:F6:63:EC:DF:40
          • RSA-MD5: nil
          • #2
            • OU: Copyright (c) 1997 Microsoft Corp.
            • OU: Microsoft Corporation
            • CN: Microsoft Root Authority
          • 1997-01-10 07:00:00 UTC: 2020-12-31 07:00:00 UTC
          • #4
            • OU: Copyright (c) 1997 Microsoft Corp.
            • OU: Microsoft Corporation
            • CN: Microsoft Root Authority
          • #5
            • rsaEncryption: nil
            • A9:02:BD:C1:70:E6:3B:F2:4E:1B:28:9F:97:78:5E:30:
              EA:A2:A9:8D:25:5F:F8:FE:95:4C:A3:B7:FE:9D:A2:20:
              3E:7C:51:A2:9B:A2:8F:60:32:6B:D1:42:64:79:EE:AC:
              76:C9:54:DA:F2:EB:9C:86:1C:8F:9F:84:66:B3:C5:6B:
              7A:62:23:D6:1D:3C:DE:0F:01:92:E8:96:C4:BF:2D:66:
              9A:9A:68:26:99:D0:3A:2C:BF:0C:B5:58:26:C1:46:E7:
              0A:3E:38:96:2C:A9:28:39:A8:EC:49:83:42:E3:84:0F:
              BB:9A:6C:55:61:AC:82:7C:A1:60:2D:77:4C:E9:99:B4:
              64:3B:9A:50:1C:31:08:24:14:9F:A9:E7:91:2B:18:E6:
              3D:98:63:14:60:58:05:65:9F:1D:37:52:87:F7:A7:EF:
              94:02:C6:1B:D3:BF:55:45:B3:89:80:BF:3A:EC:54:94:
              4E:AE:FD:A7:7A:6D:74:4E:AF:18:CC:96:09:28:21:00:
              57:90:60:69:37:BB:4B:12:07:3C:56:FF:5B:FB:A4:66:
              0A:08:A6:D2:81:56:57:EF:B6:3B:5E:16:81:77:04:DA:
              F6:BE:AE:80:95:FE:B0:CD:7F:D6:A7:1A:72:5C:3C:CA:
              BC:F0:08:A3:22:30:B3:06:85:C9:B3:20:77:13:85:DF              : 0x010001
          • 2.5.29.1
            • 5b d0 70 ef 69 72 9e 23  51 7e 14 b2 4d 8e ff cb  |[.p.ir.#Q~..M...|
              • #0
                • OU: Copyright (c) 1997 Microsoft Corp.
                • OU: Microsoft Corporation
                • CN: Microsoft Root Authority
              • 00 c1 00 8b 3c 3c 88 11  d1 3e f6 63 ec df 40     |....<<...>.c..@ |
        • RSA-MD5: 
          95 e8 0b c0 8d f3 97 18  35 ed b8 01 24 d8 77 11  |........5...$.w.|
f3 5c 60 32 9f 9e 0b cb  3e 05 91 88 8f c9 3a e6  |.\`2....>.....:.|
21 f2 f0 57 93 2c b5 a0  47 c8 62 ef fc d7 cc 3b  |!..W.,..G.b....;|
3b 5a a9 36 54 69 fe 24  6d 3f c9 cc aa de 05 7c  |;Z.6Ti.$m?.....||
dd 31 8d 3d 9f 10 70 6a  bb fe 12 4f 18 69 c0 fc  |.1.=..pj...O.i..|
d0 43 e3 11 5a 20 4f ea  62 7b af aa 19 c8 2b 37  |.C..Z O.b{....+7|
25 2d be 65 a1 12 8a 25  0f 63 a3 f7 54 1c f9 21  |%-.e...%.c..T..!|
c9 d6 15 f3 52 ac 6e 43  32 07 fd 82 17 f8 e5 67  |....R.nC2......g|
6c 0d 51 f6 bd f1 52 c7  bd e7 c4 30 fc 20 31 09  |l.Q...R....0. 1.|
88 1d 95 29 1a 4d d5 1d  02 a5 f1 80 e0 03 b4 5b  |...).M.........[|
f4 b1 dd c8 57 ee 65 49  c7 52 54 b6 b4 03 28 12  |....W.eI.RT...(.|
ff 90 d6 f0 08 8f 7e b8  97 c5 ab 37 2c e4 7a e4  |......~....7,.z.|
a8 77 e3 76 a0 00 d0 6a  3f c1 d2 36 8a e0 41 12  |.w.v...j?..6..A.|
a8 35 6a 1b 6a db 35 e1  d4 1c 04 e4 a8 45 04 c8  |.5j.j.5......E..|
5a 33 38 6e 4d 1c 0d 62  b7 0a a2 8c d3 d5 54 3f  |Z38nM..b......T?|
46 cd 1c 55 a6 70 db 12  3a 87 93 75 9f a7 d2 a0  |F..U.p..:..u....|
      • Certificate #3
        • 2
          • 61:06:2A:8D:00:00:00:00:00:0B
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • OU: Copyright (c) 2000 Microsoft Corp.
            • CN: Microsoft Code Signing PCA
          • 2001-03-29 21:27:26 UTC: 2002-05-29 21:37:26 UTC
          • Subject
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • OU: Copyright (c) 2001 Microsoft Corp.
            • CN: Microsoft Corporation
          • #5
            • rsaEncryption: nil
            • 8E:16:6F:DA:17:D3:E3:45:95:B2:AC:D3:E5:CF:31:3D:
              1D:C4:87:BB:4E:48:05:F9:8B:56:A9:2B:87:63:C8:44:
              DA:30:C9:14:BC:EB:78:1A:BA:C4:EA:E2:72:00:4C:46:
              66:9B:DE:62:46:6E:9E:F7:44:BA:E8:BA:CF:C2:D5:F5:
              3B:96:47:B8:51:5E:D1:77:67:22:7B:53:2A:2D:EA:22:
              8F:7C:4E:FF:02:B5:1B:33:A0:EA:95:EB:18:BA:76:F9:
              61:D2:00:0B:94:60:34:3B:49:86:2C:B3:D9:8E:93:2E:
              2D:6B:FD:E3:55:AA:B8:AA:6E:E0:70:F4:A2:60:06:2F              : 0x010001
          • #6
            • keyUsage: true, 0xc0
            • extendedKeyUsage: codeSigning
            • subjectKeyIdentifier: 
              ef 90 40 de 4f e0 1b b3  45 d8 07 03 7b 99 f9 75  |..@.O...E...{..u|
19 66 35 1a                                       |.f5.            |
            • authorityKeyIdentifier
              • 29 5c b9 1b b6 cd 33 ee  bb 9e 59 7d f7 e5 ca 2e  |)\....3...Y}....|
c4 0d 34 28                                       |..4(            |
                • #0
                  • OU: Copyright (c) 1997 Microsoft Corp.
                  • OU: Microsoft Corporation
                  • CN: Microsoft Root Authority
                • 6a 0b 99 4f c0 00 de aa  11 d4 d8 40 9a a8 be e6  |j..O.......@....|
            • crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/CodeSignPCA.crl
        • RSA-SHA1: 
          04 67 cc cf dd 71 4d 47  c2 8e 83 69 12 6b a2 5f  |.g...qMG...i.k._|
96 26 07 e8 8f d8 d3 9e  5a db 27 69 1d 1d f4 3c  |.&......Z.'i...<|
55 28 53 dd 11 24 27 92  ae 59 56 40 e9 c4 4d 9d  |U(S..$'..YV@..M.|
ec db ab 7e 94 9b 3d 20  2c 35 f2 27 4e c0 c8 39  |...~..= ,5.'N..9|
b7 65 63 d1 35 66 da 53  bd 41 7e 59 4a a4 52 b7  |.ec.5f.S.A~YJ.R.|
f5 fd c8 bd a1 7b 06 b8  98 d8 98 ee d1 0b 34 75  |.....{........4u|
66 0d dc 41 8f c3 b0 92  84 57 c1 42 7a 85 c6 91  |f..A.....W.Bz...|
13 db 54 ad de 7e 41 dc  20 af e9 1b c9 c2 32 31  |..T..~A. .....21|
c5 8d e9 cb fa 83 4b c1  58 93 32 c4 d7 e3 cd 7a  |......K.X.2....z|
ab df 7d 08 9c c6 85 3b  e8 41 81 38 b1 78 19 bc  |..}....;.A.8.x..|
38 f7 cd 6b c2 ce aa 4c  90 1d 83 c6 e6 01 89 68  |8..k...L.......h|
aa e7 8f e8 07 50 2a 32  dd d7 cf bd cc 7a d9 3a  |.....P*2.....z.:|
0f ff b2 44 8a 57 c8 1a  37 64 07 17 7d 7b 72 4b  |...D.W..7d..}{rK|
46 06 a1 28 5b 23 57 1e  6a fd 91 22 33 40 d1 75  |F..([#W.j.."3@.u|
4b 12 01 6e 06 21 84 36  6f a8 2a 0c 7f 3e ae 35  |K..n.!.6o.*..>.5|
2b f6 b7 7d 0b 08 13 e5  57 f3 4b ad 8f 20 bf b8  |+..}....W.K.. ..|
      • #4
        • 2
          • 6A:0B:99:4F:C0:00:DE:AA:11:D4:D8:40:9A:A8:BE:E6
          • RSA-MD5: nil
          • #2
            • OU: Copyright (c) 1997 Microsoft Corp.
            • OU: Microsoft Corporation
            • CN: Microsoft Root Authority
          • 2000-12-10 08:00:00 UTC: 2005-11-12 08:00:00 UTC
          • Subject
            • C: US
            • ST: Washington
            • L: Redmond
            • O: Microsoft Corporation
            • OU: Copyright (c) 2000 Microsoft Corp.
            • CN: Microsoft Code Signing PCA
          • #5
            • rsaEncryption: nil
            • A2:84:15:53:D8:0B:30:0E:34:95:FF:3A:1B:C2:F3:2F:
              7B:6D:37:23:4D:F3:D2:8C:E5:FD:AF:FD:C5:02:34:1F:
              24:C7:E5:A1:DC:54:EC:7E:02:74:47:AB:DB:32:58:16:
              14:51:29:38:F1:7E:B2:B4:8C:3A:47:B5:39:4E:6E:54:
              C2:31:0C:3A:6D:FB:CD:CD:CB:50:9C:1B:AE:A7:D8:D9:
              4A:26:3F:B5:C5:CB:8F:96:E2:49:F2:6D:D8:E9:96:3E:
              DE:05:CF:F0:A6:55:37:AD:2F:60:CD:80:61:42:A1:49:
              54:4A:0F:18:B7:4B:D9:93:99:30:5A:47:75:64:B4:D3:
              BB:DD:B6:AB:0C:9D:4F:B8:73:3B:18:3A:AA:B4:87:8C:
              B0:88:B0:4D:4F:1F:4E:11:B5:33:80:DF:0D:3A:64:6F:
              44:C7:34:BD:4A:93:9B:BC:A6:1D:F9:05:23:4E:60:29:
              8F:CC:2A:F2:84:9A:99:AD:A8:DB:0A:70:7B:D6:34:41:
              90:A5:B7:66:C7:5C:1B:1D:A3:33:0E:9B:54:03:1A:3F:
              98:90:B8:CC:E7:3D:04:74:43:1C:8F:F7:39:E6:B3:AC:
              48:7A:6B:2A:0E:62:01:61:39:76:6E:FD:3E:98:07:4B:
              14:F1:01:46:FD:15:00:E0:47:DA:4F:E4:05:E4:80:25              : 3
          • #6
            • extendedKeyUsage: codeSigning
            • 2.5.29.1
              • 5b d0 70 ef 69 72 9e 23  51 7e 14 b2 4d 8e ff cb  |[.p.ir.#Q~..M...|
                • #0
                  • OU: Copyright (c) 1997 Microsoft Corp.
                  • OU: Microsoft Corporation
                  • CN: Microsoft Root Authority
                • 00 c1 00 8b 3c 3c 88 11  d1 3e f6 63 ec df 40     |....<<...>.c..@ |
            • 1.3.6.1.4.1.311.21.1: 0
            • subjectKeyIdentifier: 
              29 5c b9 1b b6 cd 33 ee  bb 9e 59 7d f7 e5 ca 2e  |)\....3...Y}....|
c4 0d 34 28                                       |..4(            |
            • 1.3.6.1.4.1.311.20.2: 
              00 53 00 75 00 62 00 43  00 41                    |.S.u.b.C.A      |
            • keyUsage: F
            • basicConstraints: true, true
        • RSA-MD5: 
          45 58 e2 9a 41 7f fc 9d  bf 48 77 77 ae 8c d9 e6  |EX..A....Hww....|
19 c5 57 b4 1a bd b4 b9  5f 02 a1 45 6a 39 59 f9  |..W....._..Ej9Y.|
b9 27 9c 2d 4d 9e fc a2  e4 38 8a 38 64 22 42 df  |.'.-M....8.8d"B.|
b9 2f 2a cf b7 d6 06 ca  eb 2a bf e0 1a 85 7c db  |./*......*....|.|
51 08 3d f4 22 d3 d4 c0  6d 88 81 15 44 5f 64 83  |Q.=."...m...D_d.|
64 c4 a9 94 2c 8a db 90  37 4a 0f b7 e8 d4 61 8f  |d...,...7J....a.|
76 76 e1 d9 25 ff 24 84  95 8d 04 56 54 94 a1 1c  |vv..%.$....VT...|
3a 3e 82 bc ee a5 87 8c  1c 8c 4b 79 5f b5 49 fa  |:>........Ky_.I.|
5e 32 69 3a 1f 54 ad 75  4d df 64 e7 30 3c db 64  |^2i:.T.uM.d.0<.d|
49 44 fb fb c4 1c 42 71  e6 a0 3d 45 ee 6b 00 9f  |ID....Bq..=E.k..|
ac 42 bd ba 11 b3 56 e4  fb d5 a2 2a 81 d8 1f 4e  |.B....V....*...N|
a2 55 be 27 8f 70 a6 a2  6c 1b ff 54 8a 82 bc 81  |.U.'.p..l..T....|
4b a6 a1 b1 66 7a a9 17  a7 cb 06 c0 47 eb a6 b3  |K...fz......G...|
e9 31 15 53 3d 2a 04 bf  ff 73 48 dc 8b 27 43 fc  |.1.S=*...sH..'C.|
63 e8 ee 24 87 5b be 36  d1 e8 31 f5 32 d9 5e df  |c..$.[.6..1.2.^.|
79 7a ba 30 ac 69 86 4a  fb 8c 11 bf 1b 8d 54 59  |yz.0.i.J......TY|
    • Signer
      • 1
      • unnamed
        • #0
          • C: US
          • ST: Washington
          • L: Redmond
          • O: Microsoft Corporation
          • OU: Copyright (c) 2000 Microsoft Corp.
          • CN: Microsoft Code Signing PCA
        • 61:06:2A:8D:00:00:00:00:00:0B
      • MD5: nil
      • #3
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest: 
          2e 04 f2 45 ce e4 c1 47  3a e1 21 5f 67 e2 fc 5f  |...E...G:.!_g.._|
        • 1.3.6.1.4.1.311.2.1.12
          • 00 57 00 69 00 6e 00 64  00 6f 00 77 00 73 00 20  |.W.i.n.d.o.w.s. |
00 49 00 6e 00 73 00 74  00 61 00 6c 00 6c 00 65  |.I.n.s.t.a.l.l.e|
00 72 00 20 00 32 00 2e  00 30 00 20 00 55 00 6e  |.r. .2...0. .U.n|
00 69 00 63 00 6f 00 64  00 65                    |.i.c.o.d.e      |
            : www.microsoft.com
      • rsaEncryption: 
        0a 04 6f 69 40 95 11 31  a7 f5 97 dc 93 fb 11 e8  |..oi@..1........|
cb e2 74 58 00 4c 53 ef  41 3a ed 0b 6a fa 92 41  |..tX.LS.A:..j..A|
30 6a d0 fd 1e 75 b1 e6  ce 1c 9c fd 68 f2 f7 78  |0j...u......h..x|
29 90 59 e5 2d 48 1d 45  34 ed b2 ca 26 82 b9 c7  |).Y.-H.E4...&...|
aa b5 8a 46 04 12 d7 05  17 c1 09 16 ce ee 5b e4  |...F..........[.|
88 f7 c0 48 36 c2 9a 56  49 26 a3 92 bc 18 df b5  |...H6..VI&......|
d4 09 eb ff 16 60 9a f3  45 f0 fc f7 7a 13 20 dd  |.....`..E...z. .|
35 3a 68 c0 46 a4 65 30  9a fe 90 fb 06 f3 86 a8  |5:h.F.e0........|
      • countersignature
        • 1
          • unnamed
            • #0
              • O: VeriSign Trust Network
              • OU: VeriSign, Inc.
              • OU: VeriSign Time Stamping Service Root
              • OU: NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
            • 08:7A:6D:5C:6F:62:93:4F:BA:C4:FD:43:E1:14:18:9D
          • MD5: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2001-08-27 20:13:06 UTC
            • messageDigest: 
              cd 01 6c f4 9f 80 7e d6  ee d8 00 00 fd 5f cb 37  |..l...~......_.7|
          • rsaEncryption: 
            42 60 11 a1 76 54 22 89  b6 0f 13 a7 3e 71 7c 12  |B`..vT".....>q|.|
e2 49 0b d1 93 f5 83 a1  58 f3 d6 96 cc fc 09 1f  |.I......X.......|
eb 7b b9 72 27 e6 f9 f4  48 dc 15 15 07 cf 25 26  |.{.r'...H.....%&|
20 75 ed 4d a3 6d 9f d3  0f a4 0a 16 8d d4 10 62  | u.M.m.........b|
67 7c 98 7d 2b 3b ec da  21 10 a0 76 f3 7b 35 27  |g|.}+;..!..v.{5'|
98 88 27 34 fb fd 13 d0  c5 c1 b8 6e 71 7e d6 18  |..'4.......nq~..|
36 24 e1 19 10 0d 30 d0  46 26 ce 28 dd b9 c6 e4  |6$....0.F&.(....|
7f ec 26 05 2c fd 0a e5  fb 4c 60 88 8d cb 79 88  |..&.,....L`...y.|
9f f1 cd 3c 08 dd bd db  87 6b 05 de 69 fe 90 04  |...<.....k..i...|
cf ea 47 f2 f4 08 50 f8  3a f1 fe 33 b6 e2 f8 b2  |..G...P.:..3....|
00 02 bf e0 7a 03 36 f5  79 35 75 90 59 e7 ef fe  |....z.6.y5u.Y...|
95 d9 a6 cc 65 da 9f 15  3f 53 d1 19 8b 85 30 27  |....e...?S....0'|
e1 dd 3f 80 d4 1f 9a 45  51 c8 b4 bb 30 a2 08 e9  |..?....EQ...0...|
b2 be 90 1a 5f 05 bc 1f  77 40 3d a8 fc 31 04 55  |...._...w@=..1.U|
6c 50 2b c9 02 8a b1 f4  72 54 e5 fa be dc bf de  |lP+.....rT......|
e9 d0 6f cb 2e bc 7f ad  99 29 05 ac 5f 9a 4c ac  |..o......).._.L.|
offsetsizetypecomment
01814528EXE03/01/2001 21:56:32#
15c115HTM#
95a011794AVI#
1bb0006480PKCS7Authenticode Signature#
Scanning the drive for archives:
1 file, 1821008 bytes (1779 KiB)


--
Type = PE
Physical Size = 1821008
CPU = x86
Characteristics = Executable 32-bit NoRelocs NoLineNums NoLocalSyms
Created = 2001-03-01 21:56:32
Headers Size = 1024
Checksum = 1825676
Name = Msi.dll,MsiHnd.dll,MsiExec.exe
Image Size = 1830912
Section Alignment = 4096
File Alignment = 512
Code Size = 34304
Initialized Data Size = 1779200
Uninitialized Data Size = 0
Linker Version = 7.0
OS Version = 5.1
Image Version = 5.1
Subsystem Version = 4.0
Subsystem = Windows GUI
DLL Characteristics = TerminalServerAware
Stack Reserve = 262144
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 16777216
Comment = FileVersion: 12.0.2600.0
FileVersion: 2.0.2600.0
ProductVersion: 12.0.2600.0
ProductVersion: 2.0.2600.0
CompanyName: Microsoft Corporation
FileDescription: Installer for the Windows Installer
InternalName: InstMsi.exe
LegalCopyright: Copyright (c) Microsoft Corp. 2000
OriginalFilename: Msi.dll,MsiHnd.dll,MsiExec.exe
ProductName: Windows Installer - Unicode
----
Path = .rsrc/RCDATA/CABINET
Size = 1752318
Packed Size = 1752318
--
Path = .rsrc/RCDATA/CABINET
Type = Cab
Physical Size = 1752318
Method = LZX:21
Blocks = 1
Volumes = 1
Volume Index = 0
ID = 18222

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2001-08-17 22:36:50 ....A        63488               msiexec.exe
2001-08-17 22:36:24 ....A       304640               msihnd.dll
2001-08-17 22:36:24 ....A        39936               msisip.dll
2001-08-17 22:35:06 .....       847872               msimsg.dll
2001-08-17 14:26:50 ....A       134164               msimain.sdb
2001-08-17 13:58:22 ....A        50688               msiinst.exe
2001-08-17 15:07:54 ....A      1991168               msi.dll
2001-08-18 00:27:16 ....A         9178               msi.cat
2001-07-21 14:14:40 .....         1116               msi.inf
2001-08-17 11:57:38 ....A       431133               riched20.dll
2001-08-17 11:57:40 ....A       314906               usp10.dll
2001-07-21 14:14:32 .....       167936               msls31.dll
2001-08-17 11:57:40 ....A        21021               shfolder.dll
2001-08-17 22:40:26 ....A       951808               instmsi.msi
2001-08-17 11:57:38 ....A       106013               imagehlp.dll
2001-07-21 14:14:32 .....        56080               cabinet.dll
2001-08-17 11:57:38 ....A        28746               mspatcha.dll
2001-08-17 22:37:08 ....A        72192               sdbapiU.dll
------------------- ----- ------------ ------------  ------------------------
2001-08-18 00:27:16            5592085      1821008  18 files
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK