XNAGS40_setup.exe - XNA Game Studio 4.0 Setup

info
MZ
PE
resources
strings
imports
foremost
7zip
version info
signature
hexdump
disasm
log
discuss
donate

filename	XNAGS40_setup.exe
size	51182360 (0x30cfb18)
md5	d8cebedda6bf24ce43b0f2b7a1475c96

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	scan pending
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xc8

Rich Header

lib id	version	times used
93	2179	15
1	0	107
95	2190	20
94	2179	1
90	2179	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x429de67b
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0xd0f
Magic	0x10b
LinkerVersion	7.10
SizeOfCode	0x7a00
SizeOfInitializedData	0x1800
SizeOfUninitializedData	0
AddressOfEntryPoint	0x5972
BaseOfCode	0x2000
BaseOfData	0xa000
ImageBase	0x1000000
SectionAlignment	0x2000
FileAlignment	0x200
OperatingSystemVersion	5.2
ImageVersion	5.2
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x1e000
SizeOfHeaders	0x400
CheckSum	0x30db596
Subsystem	2
DllCharacteristics	0x8400
SizeOfStackReserve	0x40000
SizeOfStackCommit	0x2000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS SFX CAB Archive file

Sections

name	va	vsize	raw size	flags
.text	0x2000	0x78a0	0x7a00	R-X CODE
.data	0xa000	0x110d4	0x200	RW- IDATA
.rsrc	0x1c000	0x1438	0x30c6000	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x8e40	0xa0
RESOURCE	0x1c000	0x1438
EXCEPTION	0	0
SECURITY	0x30ce000	0x1b18
BASERELOC	0	0
DEBUG	0x21d0	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x2000	0x1c8
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
ICON	#1	744	1252
DIALOG	#100	282	1252
DIALOG	#107	224	1252
STRING	#1	730	1252
GROUP_ICON	#101	20	1252
VERSION	#1	1320	1252
VERSION	#1	664	1252
MANIFEST	#1	589	1252
#255	#1	4	1252

id	lang	string
1	1033	File is corrupt
2	1033	Extraction Complete
3	1033	Extraction Failed
4	1033	Extracting File:
5	1033	Choose Directory For Extracted Files
6	1033	To Directory:
7	1033	Setup was unable to shutdown system. Please shutdown your system manually.
8	1033	Unable to find a volume for file extraction. Please verify that you have proper permissions.
9	1033	Unable to find a volume with enough disk space for file extraction.

module_name	hint	ord	function_name
KERNEL32.dll	331		GetDriveTypeA
KERNEL32.dll	524		HeapFree
KERNEL32.dll	234		FormatMessageA
KERNEL32.dll	583		LeaveCriticalSection
KERNEL32.dll	124		DeleteFileA
KERNEL32.dll	143		EnterCriticalSection
KERNEL32.dll	849		TerminateProcess
KERNEL32.dll	899		WaitForMultipleObjects
KERNEL32.dll	74		CreateEventW
KERNEL32.dll	779		SetEvent
KERNEL32.dll	841		Sleep
KERNEL32.dll	776		SetEnvironmentVariableA
KERNEL32.dll	336		GetEnvironmentVariableA
KERNEL32.dll	905		WideCharToMultiByte
KERNEL32.dll	518		HeapAlloc
KERNEL32.dll	797		SetLastError
KERNEL32.dll	919		WriteFile
KERNEL32.dll	612		MoveFileA
KERNEL32.dll	175		ExitProcess
KERNEL32.dll	122		DeleteCriticalSection
KERNEL32.dll	229		FlushFileBuffers
KERNEL32.dll	479		GetVersionExA
KERNEL32.dll	901		WaitForSingleObject
KERNEL32.dll	627		OpenEventA
KERNEL32.dll	314		GetCurrentProcess
KERNEL32.dll	342		GetFileAttributesA
KERNEL32.dll	264		GetCommandLineA
KERNEL32.dll	373		GetModuleFileNameA
KERNEL32.dll	77		CreateFileA
KERNEL32.dll	211		FindNextFileA
KERNEL32.dll	201		FindFirstFileA
KERNEL32.dll	61		CopyFileA
KERNEL32.dll	782		SetFileAttributesA
KERNEL32.dll	846		SystemTimeToFileTime
KERNEL32.dll	446		GetSystemTime
KERNEL32.dll	325		GetDiskFreeSpaceA
KERNEL32.dll	661		QueryDosDeviceA
KERNEL32.dll	312		GetCurrentDirectoryA
KERNEL32.dll	773		SetEndOfFile
KERNEL32.dll	788		SetFileTime
KERNEL32.dll	592		LocalFileTimeToFileTime
KERNEL32.dll	136		DosDateTimeToFileTime
KERNEL32.dll	338		GetExitCodeProcess
KERNEL32.dll	96		CreateProcessA
KERNEL32.dll	178		ExpandEnvironmentStringsA
KERNEL32.dll	347		GetFileSize
KERNEL32.dll	105		CreateThread
KERNEL32.dll	73		CreateEventA
KERNEL32.dll	411		GetProcessHeap
KERNEL32.dll	538		InitializeCriticalSectionAndSpinCount
KERNEL32.dll	375		GetModuleHandleA
KERNEL32.dll	665		QueryPerformanceCounter
KERNEL32.dll	318		GetCurrentThreadId
KERNEL32.dll	315		GetCurrentProcessId
KERNEL32.dll	448		GetSystemTimeAsFileTime
KERNEL32.dll	829		SetUnhandledExceptionFilter
KERNEL32.dll	46		CloseHandle
KERNEL32.dll	131		DeviceIoControl
KERNEL32.dll	441		GetSystemDirectoryA
KERNEL32.dll	584		LoadLibraryA
KERNEL32.dll	408		GetProcAddress
KERNEL32.dll	239		FreeLibrary
KERNEL32.dll	778		SetErrorMode
KERNEL32.dll	469		GetTickCount
KERNEL32.dll	69		CreateDirectoryA
KERNEL32.dll	361		GetLastError
KERNEL32.dll	698		RemoveDirectoryA
KERNEL32.dll	613		MoveFileExA
KERNEL32.dll	784		SetFilePointer
KERNEL32.dll	197		FindClose
KERNEL32.dll	683		ReadFile
msvcrt.dll	776		strchr
msvcrt.dll	517		_strnicmp
msvcrt.dll	513		_stricmp
msvcrt.dll	788		strrchr
msvcrt.dll	515		_strlwr
msvcrt.dll	786		strncpy
msvcrt.dll	790		strstr
msvcrt.dll	491		_snprintf
msvcrt.dll	771		sprintf
ADVAPI32.dll	29		AllocateAndInitializeSid
ADVAPI32.dll	281		GetTokenInformation
ADVAPI32.dll	246		GetLengthSid
ADVAPI32.dll	308		InitiateSystemShutdownA
ADVAPI32.dll	160		CryptReleaseContext
ADVAPI32.dll	150		CryptGenRandom
ADVAPI32.dll	133		CryptAcquireContextA
ADVAPI32.dll	559		SetSecurityDescriptorDacl
ADVAPI32.dll	16		AddAccessAllowedAce
ADVAPI32.dll	305		InitializeAcl
ADVAPI32.dll	306		InitializeSecurityDescriptor
ADVAPI32.dll	426		OpenProcessToken
USER32.dll	657		ShowWindow
USER32.dll	565		SendDlgItemMessageA
USER32.dll	570		SendMessageA
USER32.dll	158		DialogBoxParamA
USER32.dll	458		LoadStringA
USER32.dll	198		EndDialog
USER32.dll	613		SetParent
USER32.dll	478		MessageBoxA
ntdll.dll	374		NtShutdownSystem
ntdll.dll	121		NtAdjustPrivilegesToken
ntdll.dll	136		NtClose
ntdll.dll	243		NtOpenProcessToken
COMCTL32.dll		17
SHELL32.dll	121		SHBrowseForFolderA
SHELL32.dll	188		SHGetPathFromIDListA

StringTable 040904b0

CompanyName	Microsoft Corporation
FileDescription	XNA Game Studio 4.0 Setup
FileVersion	4.0.20823.0
InternalName	XNAGS40_setup.exe
LegalCopyright	Copyright Microsoft Corporation. All rights reserved.
OriginalFilename	XNAGS40_setup.exe
ProductName	XNA Game Studio 4.0 Setup
ProductVersion	4.0.20823.0

StringTable 040904b0

CompanyName
FileDescription	sfxcab
FileVersion	6, 1, 22, 5
InternalName	sfxcab
LegalCopyright	Copyright (C) 2006
OriginalFilename	sfxcab.exe
ProductName	sfxcab
ProductVersion	6, 1, 22, 5

VS_FIXEDFILEINFO

FileVersion	4.0.20823.0
ProductVersion	4.0.20823.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

VS_FIXEDFILEINFO

FileVersion	6.1.22.5
ProductVersion	6.1.22.5
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Code Signing PCA

serial: 6108775F00000000004A

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:08:77:5f:00:00:00:00:00:4a
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA
        Validity
            Not Before: Jul 19 22:53:10 2010 GMT
            Not After : Oct 19 22:53:10 2011 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, CN=Microsoft Corporation
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7e:80:7b:41:fa:8b:b4:4d:99:29:43:dd:e6:
                    f8:52:df:5b:42:97:bd:33:19:9c:ef:b5:da:d0:c0:
                    dc:e8:f1:b7:be:5c:e1:0a:b2:c2:35:a0:7e:e4:f3:
                    d4:38:a7:f2:0f:42:72:a7:ba:9b:cf:1f:24:de:56:
                    0d:84:73:cc:d3:63:f7:17:cd:af:69:6f:61:4d:4c:
                    80:4f:c8:77:1c:51:64:c8:d3:04:f3:14:26:b3:b8:
                    42:3f:33:43:b0:db:26:59:58:93:b5:6d:89:62:0f:
                    07:56:5b:d5:12:a0:b1:09:cc:16:2b:f9:8c:df:61:
                    56:e8:06:78:7f:d7:73:88:26:03:67:d1:a3:ff:34:
                    82:ac:2d:4c:d8:02:ec:ed:6f:b9:a2:31:c5:32:4c:
                    bb:f6:fd:5f:62:5b:5e:f1:f6:64:91:c7:85:77:47:
                    1c:f6:a7:2b:47:2d:0b:37:54:4f:b6:1f:04:8d:b5:
                    ec:60:27:a7:f3:7e:b6:7c:a1:4c:91:a6:8b:71:d6:
                    c6:35:61:47:bc:c1:15:4b:dd:ac:33:22:be:06:19:
                    96:4b:8a:1e:6e:00:eb:be:1e:69:dd:58:59:21:03:
                    2b:3c:be:e6:13:05:17:66:35:a7:86:2d:1a:f1:d9:
                    34:c0:01:80:1a:fc:9a:46:9d:6e:a4:e7:48:dc:35:
                    ea:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Subject Key Identifier: 
                E4:6F:5F:CA:89:F9:53:BE:F0:70:57:06:50:AA:C2:79:0D:AC:56:9B
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Authority Key Identifier: 
                keyid:57:45:74:1C:5D:B0:F6:C8:43:05:E0:8C:54:2D:8F:32:A7:FE:48:96

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/CodeSigPCA.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/CodeSigPCA.crt

    Signature Algorithm: sha1WithRSAEncryption
         96:41:5d:3d:5c:2b:a4:ce:b8:2a:45:2f:42:02:5e:a1:90:1c:
         4c:74:27:09:ce:0b:54:7d:70:28:41:72:3b:a4:15:bc:d1:04:
         52:57:af:77:74:6d:0b:55:57:87:37:10:49:1e:d6:e6:d4:c2:
         63:94:b4:fd:a4:2e:2d:fa:5f:e2:19:59:15:84:d9:b7:b6:e9:
         52:a2:52:de:23:5f:20:2f:59:d3:ab:1a:84:7f:1d:e3:bd:ea:
         0f:df:01:88:39:25:d8:ed:64:61:19:1b:7a:af:a6:14:4a:46:
         50:48:d9:72:4b:d5:4b:92:dd:f0:0f:84:7c:cb:d3:c6:f2:4c:
         78:6e:fd:bc:ff:66:10:0a:f7:03:5d:15:ea:5e:98:0c:09:d2:
         99:8f:2e:b5:20:bd:61:e6:c9:6f:05:14:11:cb:7b:fb:42:08:
         bd:03:f1:26:57:67:4d:8f:59:8b:b8:44:c7:45:d3:62:04:0c:
         2d:30:03:58:5e:ec:48:f4:6e:a8:14:31:04:fd:34:a2:b8:04:
         2d:02:dd:3a:a1:09:5e:ad:61:b1:8f:70:c0:78:55:23:63:a8:
         9f:59:77:a2:db:b9:1b:71:28:1c:fc:2e:e1:04:8f:b5:ef:34:
         be:4a:99:47:e3:64:52:16:3c:fa:bd:e0:e8:e0:14:0c:10:22:
         34:82:82:1e

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:04:b3:f5:00:00:00:00:00:0d
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA
        Validity
            Not Before: Jul 25 19:13:45 2008 GMT
            Not After : Jul 25 19:23:45 2011 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, OU=nCipher DSE ESN:9E78-864B-039D, CN=Microsoft Time-Stamp Service
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:46:2f:bc:a8:14:f2:f8:46:3f:0c:05:a1:a4:
                    63:45:05:7f:9a:e9:33:72:cc:27:d3:32:ec:98:c3:
                    e0:34:88:85:ce:a1:12:97:ae:48:50:4e:48:20:7f:
                    70:e4:59:33:fc:99:5b:b9:07:80:48:28:bc:8d:b8:
                    fa:66:02:66:b5:f1:7f:1c:50:96:28:93:55:8d:81:
                    55:aa:70:5b:a5:c9:ce:ef:2e:e2:e7:25:c3:76:6f:
                    29:0b:9f:2c:c8:53:80:9a:c1:0d:e3:bd:a7:45:bf:
                    31:df:e6:86:8b:7d:89:01:8b:1c:78:58:38:b2:dd:
                    93:4a:5b:9e:1d:d7:9c:c6:f0:c4:4d:d0:bf:27:4a:
                    07:94:04:71:02:88:0d:70:e6:f8:2a:e7:0e:61:e3:
                    98:4b:d1:dd:ab:54:b6:37:fb:c6:46:fd:a4:1c:bc:
                    ff:af:ec:b2:97:80:dc:b8:93:fd:b8:22:a8:9d:25:
                    59:70:3e:5c:7b:1c:41:29:fe:73:99:22:49:81:d7:
                    55:26:c0:ec:f2:4e:28:54:62:3b:70:2d:61:93:1d:
                    50:d5:9f:01:c2:05:c3:55:1a:4a:87:a4:00:86:54:
                    a0:7b:62:b2:ea:0f:fa:5d:5c:c5:2a:11:82:97:be:
                    86:1b:1d:ab:b7:ab:0a:29:fc:cc:cd:34:89:bf:40:
                    b6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A0:85:31:5E:87:AE:0F:AA:0A:04:EB:E1:C0:D3:64:BD:3C:BB:69:F5
            X509v3 Authority Key Identifier: 
                keyid:23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
    Signature Algorithm: sha1WithRSAEncryption
         47:71:4f:b6:48:45:c0:08:eb:9c:2f:d3:25:5b:db:67:51:11:
         92:a6:d9:d9:b2:14:9a:26:c2:fd:06:c1:cc:d7:88:f5:a6:35:
         b5:cd:2b:b6:6b:58:6a:cd:f9:9d:f3:5a:eb:46:2f:a1:fa:a7:
         1f:7d:7a:42:b2:b0:d1:1a:09:28:54:6c:6f:99:8b:38:fc:3a:
         e4:c1:24:aa:72:4c:12:04:2f:f1:d4:7a:76:3b:c5:cf:71:27:
         0b:6d:fc:38:67:a7:c5:22:62:2b:7b:7f:c1:76:ac:a7:c5:26:
         4c:a9:af:98:dd:8a:38:5d:cf:65:a4:81:2e:a9:ef:56:02:4c:
         b9:08:be:65:c4:1e:8b:21:2d:6e:a7:f2:75:64:b4:dc:1a:6b:
         d0:f1:25:e5:c2:e7:80:44:39:d4:2f:0a:79:7e:01:2a:a7:78:
         5b:a3:6b:5b:ce:09:ef:39:3a:39:b7:c4:67:53:b9:aa:f3:61:
         ff:9d:79:e3:cf:48:67:ff:ab:c8:c6:2b:62:09:94:d0:1f:a2:
         78:f7:73:49:3b:58:53:c1:09:ab:4c:06:0b:d5:40:28:7e:f6:
         b1:66:c5:bf:52:c4:be:3e:3b:e0:f9:8e:74:8d:e6:22:0c:c1:
         c6:33:98:b5:79:e8:0c:f7:00:7c:ea:b2:4e:cc:80:9a:16:2d:
         c8:a4:10:05

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:16:68:34:00:00:00:00:00:1c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
        Validity
            Not Before: Apr  3 12:53:09 2007 GMT
            Not After : Apr  3 13:03:09 2021 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a1:6c:b1:df:db:48:92:2a:7c:6b:2e:19:e1:
                    bd:e2:e3:c5:99:51:23:50:ad:ce:dd:18:4e:24:0f:
                    ee:d1:a7:d1:4c:ad:74:30:20:11:eb:07:d5:54:95:
                    15:49:94:1b:42:92:ae:98:5c:30:26:da:00:6b:e8:
                    7b:bd:ec:89:07:0f:f7:0e:04:98:f0:89:cc:1f:cb:
                    33:24:87:9d:f2:f4:67:1c:2c:fc:7b:e7:88:1d:ea:
                    e7:4e:a3:a1:c1:23:53:ca:8d:fa:45:cf:09:d0:5e:
                    af:d0:b0:42:04:a2:f9:a6:6c:93:67:d7:28:dc:46:
                    53:b0:86:d0:e5:28:46:2e:27:ac:86:4f:55:52:0c:
                    e4:03:2c:fb:6a:90:90:30:6e:87:f3:59:30:9d:fa:
                    7e:d6:97:b3:e8:21:97:7e:f8:d2:13:f3:08:b7:53:
                    6d:52:b4:45:90:9f:48:00:4a:47:66:11:27:29:66:
                    a8:97:e4:d3:06:81:4a:a2:f9:84:a7:11:47:14:09:
                    82:9f:84:ed:55:78:fe:01:9a:1d:50:08:85:00:10:
                    30:46:ed:b7:de:23:46:bb:c4:2d:54:9f:af:1e:78:
                    41:31:77:cc:9b:df:3b:83:93:a1:61:02:b5:1d:0d:
                    b1:fc:f7:9b:b2:01:ce:22:4b:54:ff:f9:05:c3:c2:
                    20:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Authority Key Identifier: 
                keyid:0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4
                DirName:/DC=com/DC=microsoft/CN=Microsoft Root Certificate Authority
                serial:79:AD:16:A1:4A:A0:A5:AD:4C:73:58:F4:07:13:2E:65

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt

            X509v3 Extended Key Usage: 
                Time Stamping
    Signature Algorithm: sha1WithRSAEncryption
         10:97:8a:c3:5c:03:44:36:dd:e9:b4:ad:77:db:ce:79:51:4d:
         01:b1:2e:74:71:5b:6d:0c:13:ab:ce:be:7b:8f:b8:2e:d4:12:
         a2:8c:6d:62:b8:57:02:cb:4e:20:13:50:99:dd:7a:40:e2:57:
         bb:af:58:9a:1c:e1:1d:01:86:ac:bb:78:f2:8b:d0:ec:3b:01:
         ee:e2:be:8f:0a:05:c8:8d:48:e2:f0:53:15:dd:4f:ab:92:e4:
         e7:8d:6a:d5:80:c1:e6:94:f2:06:2f:85:03:e9:91:2a:24:22:
         70:fb:f6:fc:e4:78:99:2e:0d:f7:07:e2:70:bc:18:4e:9d:8e:
         6b:0a:72:95:b8:a1:39:9c:67:2d:c5:51:0e:ea:62:5c:3f:16:
         98:8b:20:3f:e2:07:1a:32:f9:cc:31:4a:76:31:3d:2b:72:0b:
         c8:ea:70:3d:ff:85:0a:13:df:c2:0a:61:8e:f0:d7:b8:17:eb:
         4e:8b:7f:c5:35:2b:5e:a3:bf:eb:bc:7d:0b:42:7b:d4:53:72:
         21:ee:30:ca:bb:78:65:5c:5b:01:17:0a:14:0e:d2:da:14:98:
         f5:3c:b9:66:58:b3:2d:2f:e7:f9:85:86:cc:51:56:e8:9d:70:
         94:6c:ac:39:4c:d4:f6:79:bf:aa:18:7a:62:29:ef:a2:9b:29:
         34:06:77:1a:62:c9:3d:1e:6d:1f:82:f0:0b:c7:2c:bb:cf:43:
         b3:e5:f9:ec:7d:b5:e3:a4:a8:74:35:b8:4e:c5:71:23:12:26:
         76:0b:3c:52:8c:71:5a:46:43:14:bc:b3:b3:b0:4d:67:c8:9f:
         42:ff:80:79:21:80:9e:15:30:66:e8:42:12:5e:1a:c8:9e:22:
         21:d0:43:e9:2b:e9:bb:f4:48:cc:2c:d4:d8:32:80:4c:26:2a:
         48:24:5f:5a:ea:56:ef:a6:de:99:9d:ca:3a:6f:bd:81:27:74:
         06:11:ee:76:21:bf:9b:82:c1:27:54:b6:b1:6a:3d:89:a1:76:
         61:b4:6e:a1:13:a6:bf:aa:47:f0:12:6f:fd:8a:32:6c:b2:fe:
         df:51:c8:8c:23:c9:66:bd:9d:1d:87:12:64:02:3d:2d:af:59:
         8f:b8:e4:21:e5:b5:b0:ca:63:b4:78:54:05:d4:41:2e:50:ac:
         94:b0:a5:78:ab:b3:a0:96:75:1a:d9:92:87:13:75:22:2f:32:
         a8:08:6e:a0:5b:8c:25:bf:a0:ef:84:ca:21:d6:eb:1e:4f:c9:
         9a:ee:49:e0:f7:01:65:6f:89:0b:7d:c8:69:c8:e6:6e:ea:a7:
         97:ce:31:29:ff:0e:c5:5b:5c:d8:4d:1b:a1:d8:fa:2f:9e:3f:
         2e:55:16:6b:c9:13:a3:fd

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:15:08:27:00:00:00:00:00:0c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
        Validity
            Not Before: Jan 25 23:22:32 2006 GMT
            Not After : Jan 25 23:32:32 2017 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8d:df:85:37:8c:b1:06:56:66:36:4e:d4:0a:
                    eb:36:23:91:1e:af:ab:8d:58:e9:c4:cf:c1:9f:3a:
                    0a:24:c4:c4:c4:5e:b0:ee:15:14:c5:fa:3e:99:33:
                    6b:19:69:72:f4:7c:05:5f:e5:99:25:44:d7:35:19:
                    8a:90:dc:28:8e:90:0c:ef:d5:90:61:ad:de:dc:18:
                    70:2d:83:c9:6f:af:85:2c:f8:dd:b9:b9:30:fd:71:
                    78:1c:83:fd:c8:a9:b9:82:67:0d:7a:b8:c1:09:c2:
                    bc:16:97:57:3f:1c:98:d3:69:d7:30:90:90:90:8d:
                    30:1f:d8:26:d4:9e:7b:88:d9:e2:09:ed:97:49:45:
                    eb:04:52:81:75:7b:b8:b5:22:b8:2e:56:bb:d7:cf:
                    a9:4e:3c:0a:83:a2:a8:3a:c5:ad:b6:01:0e:6a:cf:
                    22:b4:23:1f:6c:d5:27:e7:b7:7e:c1:b4:d5:32:ad:
                    79:25:1c:42:86:e2:9d:85:f4:57:da:1b:59:2f:2d:
                    26:92:29:c5:b3:d7:85:a3:9e:60:5a:94:e6:7b:9c:
                    7b:5e:82:34:4b:6d:ff:d4:ee:27:d0:a2:dc:d1:90:
                    0c:ce:7d:0e:15:7c:88:ac:34:c7:c0:6c:98:84:4a:
                    c9:44:79:68:28:df:22:83:0d:b8:8a:2c:48:61:e2:
                    fe:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Subject Key Identifier: 
                57:45:74:1C:5D:B0:F6:C8:43:05:E0:8C:54:2D:8F:32:A7:FE:48:96
            X509v3 Key Usage: 
                Digital Signature, Non Repudiation, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4
                DirName:/DC=com/DC=microsoft/CN=Microsoft Root Certificate Authority
                serial:79:AD:16:A1:4A:A0:A5:AD:4C:73:58:F4:07:13:2E:65

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.311.21.47
                  User Notice:
                    Explicit Text: 

            X509v3 Extended Key Usage: 
                Code Signing
    Signature Algorithm: sha1WithRSAEncryption
         30:bc:b0:20:a4:62:a0:a7:ef:39:26:61:3d:dc:ac:c6:99:d0:
         86:c4:2e:f5:83:32:65:5e:22:3e:9b:d6:86:f8:e8:b6:9f:ca:
         8b:d6:3b:75:0b:a1:91:3e:4c:dd:64:74:8c:49:f2:88:8c:18:
         67:6c:fe:15:66:46:b8:3a:46:42:97:c8:91:37:d4:24:b1:e7:
         ac:d3:ea:41:14:83:77:d3:c9:4f:05:5f:a3:14:52:bf:96:a4:
         2f:3e:56:5b:10:75:ce:53:c3:ce:05:54:69:b4:65:c9:24:a5:
         0f:e1:25:b8:1a:b9:4d:e5:02:b9:50:1e:4f:b3:98:0c:1d:95:
         02:ee:22:59:ad:22:cb:05:74:0b:04:45:7b:04:59:e0:d8:0f:
         b3:eb:4c:f8:60:dd:c2:78:9e:d1:ba:9f:6b:f7:f3:ee:7e:44:
         11:40:d2:bd:ba:9b:4b:16:08:6e:a4:be:55:e4:a6:38:12:a3:
         48:f4:1c:55:7a:8a:20:d1:7d:fe:91:db:94:8f:2f:c2:7b:6b:
         a6:64:85:4f:a3:e5:2c:34:29:5d:0b:bf:f5:c7:38:2f:c4:20:
         c4:56:31:f6:69:ce:85:f8:0a:91:ec:d0:d6:ae:ba:38:05:0c:
         eb:6e:4f:4c:9c:03:29:aa:a2:fc:18:a0:29:0c:0d:5c:5c:56:
         23:57:da:1c:96:0d:c8:26:36:c1:44:cb:e5:e1:e6:6f:89:e7:
         8f:e9:98:b5:73:d3:78:e3:ed:a3:01:3c:74:e5:5e:bc:6c:f6:
         21:89:67:05:ec:97:9d:b5:b1:fd:af:a6:e9:72:a5:c3:34:e1:
         2f:9f:f9:f4:6a:39:e2:2d:04:82:5b:fc:d0:9c:ae:7c:9d:11:
         f9:e6:b5:53:19:74:ba:39:4a:39:eb:7d:42:b3:4a:3b:37:3d:
         c2:4a:7b:27:98:e7:e2:4e:9b:1b:4a:54:38:6a:23:37:be:6a:
         b7:48:ee:ea:42:0d:49:24:91:8e:b7:04:2e:97:6f:e4:e7:45:
         bb:8f:4d:fd:60:d9:d7:59:c2:d8:80:d6:60:34:7b:b7:a1:93:
         20:fe:81:b8:aa:a5:5c:09:e9:8a:0d:be:28:4d:7e:d7:e8:0f:
         ed:65:78:d1:31:5f:b9:66:db:df:42:e7:0b:cc:02:07:8d:df:
         ff:20:06:a3:45:65:b4:b3:32:8d:2e:91:e2:4d:b4:a9:c9:fa:
         bc:6b:04:0e:b2:9f:ea:9f:de:a4:c9:0a:96:f4:8d:f7:d8:98:
         a8:f0:85:02:08:59:a4:20:a6:2c:0b:1a:f2:52:06:ed:69:e5:
         64:18:1b:e0:a3:ab:de:ca:7c:14:61:43:b8:65:f5:36:a3:55:
         13:2b:67:2c:4d:1b:30:4c

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

4e 97 f8 6a ef 9a 38 9e 23 22 16 9e 5e 89 64 77 |N..j..8.#"..^.dw| 1c 40 60 86 |.@`. |

unnamed

Certificate #0

2
- 61:08:77:5F:00:00:00:00:00:4A
- RSA-SHA1: nil
- Issuer
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Code Signing PCA
- 2010-07-19 22:53:10 UTC: 2011-10-19 22:53:10 UTC
- Subject
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - OU: MOPR
  - CN: Microsoft Corporation
- #5
  - rsaEncryption: nil
  - CC:7E:80:7B:41:FA:8B:B4:4D:99:29:43:DD:E6:F8:52:
    DF:5B:42:97:BD:33:19:9C:EF:B5:DA:D0:C0:DC:E8:F1:
    B7:BE:5C:E1:0A:B2:C2:35:A0:7E:E4:F3:D4:38:A7:F2:
    0F:42:72:A7:BA:9B:CF:1F:24:DE:56:0D:84:73:CC:D3:
    63:F7:17:CD:AF:69:6F:61:4D:4C:80:4F:C8:77:1C:51:
    64:C8:D3:04:F3:14:26:B3:B8:42:3F:33:43:B0:DB:26:
    59:58:93:B5:6D:89:62:0F:07:56:5B:D5:12:A0:B1:09:
    CC:16:2B:F9:8C:DF:61:56:E8:06:78:7F:D7:73:88:26:
    03:67:D1:A3:FF:34:82:AC:2D:4C:D8:02:EC:ED:6F:B9:
    A2:31:C5:32:4C:BB:F6:FD:5F:62:5B:5E:F1:F6:64:91:
    C7:85:77:47:1C:F6:A7:2B:47:2D:0B:37:54:4F:B6:1F:
    04:8D:B5:EC:60:27:A7:F3:7E:B6:7C:A1:4C:91:A6:8B:
    71:D6:C6:35:61:47:BC:C1:15:4B:DD:AC:33:22:BE:06:
    19:96:4B:8A:1E:6E:00:EB:BE:1E:69:DD:58:59:21:03:
    2B:3C:BE:E6:13:05:17:66:35:A7:86:2D:1A:F1:D9:34:
    C0:01:80:1A:FC:9A:46:9D:6E:A4:E7:48:DC:35:EA:37: 0x010001
- #6
  - extendedKeyUsage: codeSigning
  - subjectKeyIdentifier:
```
e4 6f 5f ca 89 f9 53 be  f0 70 57 06 50 aa c2 79  |.o_...S..pW.P..y|
0d ac 56 9b                                       |..V.            |
```
  - keyUsage: true, 0x80
  - authorityKeyIdentifier:
```
57 45 74 1c 5d b0 f6 c8  43 05 e0 8c 54 2d 8f 32  |WEt.]...C...T-.2|
a7 fe 48 96                                       |..H.            |
```
  - crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/CodeSigPCA.crl
  - authorityInfoAccess
    - caIssuers: http://www.microsoft.com/pki/certs/CodeSigPCA.crt

RSA-SHA1:

96 41 5d 3d 5c 2b a4 ce  b8 2a 45 2f 42 02 5e a1  |.A]=\+...*E/B.^.|
90 1c 4c 74 27 09 ce 0b  54 7d 70 28 41 72 3b a4  |..Lt'...T}p(Ar;.|
15 bc d1 04 52 57 af 77  74 6d 0b 55 57 87 37 10  |....RW.wtm.UW.7.|
49 1e d6 e6 d4 c2 63 94  b4 fd a4 2e 2d fa 5f e2  |I.....c.....-._.|
19 59 15 84 d9 b7 b6 e9  52 a2 52 de 23 5f 20 2f  |.Y......R.R.#_ /|
59 d3 ab 1a 84 7f 1d e3  bd ea 0f df 01 88 39 25  |Y.............9%|
d8 ed 64 61 19 1b 7a af  a6 14 4a 46 50 48 d9 72  |..da..z...JFPH.r|
4b d5 4b 92 dd f0 0f 84  7c cb d3 c6 f2 4c 78 6e  |K.K.....|....Lxn|
fd bc ff 66 10 0a f7 03  5d 15 ea 5e 98 0c 09 d2  |...f....]..^....|
99 8f 2e b5 20 bd 61 e6  c9 6f 05 14 11 cb 7b fb  |.... .a..o....{.|
42 08 bd 03 f1 26 57 67  4d 8f 59 8b b8 44 c7 45  |B....&WgM.Y..D.E|
d3 62 04 0c 2d 30 03 58  5e ec 48 f4 6e a8 14 31  |.b..-0.X^.H.n..1|
04 fd 34 a2 b8 04 2d 02  dd 3a a1 09 5e ad 61 b1  |..4...-..:..^.a.|
8f 70 c0 78 55 23 63 a8  9f 59 77 a2 db b9 1b 71  |.p.xU#c..Yw....q|
28 1c fc 2e e1 04 8f b5  ef 34 be 4a 99 47 e3 64  |(........4.J.G.d|
52 16 3c fa bd e0 e8 e0  14 0c 10 22 34 82 82 1e  |R.<........"4...|

Certificate #1
- 2
  - 61:04:B3:F5:00:00:00:00:00:0D
  - RSA-SHA1: nil
  - Issuer
    - C: US
    - ST: Washington
    - L: Redmond
    - O: Microsoft Corporation
    - CN: Microsoft Time-Stamp PCA
  - 2008-07-25 19:13:45 UTC: 2011-07-25 19:23:45 UTC
  - Subject
    - C: US
    - ST: Washington
    - L: Redmond
    - O: Microsoft Corporation
    - OU: MOPR
    - OU: nCipher DSE ESN:9E78-864B-039D
    - CN: Microsoft Time-Stamp Service
  - #5
    - rsaEncryption: nil
    - AB:46:2F:BC:A8:14:F2:F8:46:3F:0C:05:A1:A4:63:45:
      05:7F:9A:E9:33:72:CC:27:D3:32:EC:98:C3:E0:34:88:
      85:CE:A1:12:97:AE:48:50:4E:48:20:7F:70:E4:59:33:
      FC:99:5B:B9:07:80:48:28:BC:8D:B8:FA:66:02:66:B5:
      F1:7F:1C:50:96:28:93:55:8D:81:55:AA:70:5B:A5:C9:
      CE:EF:2E:E2:E7:25:C3:76:6F:29:0B:9F:2C:C8:53:80:
      9A:C1:0D:E3:BD:A7:45:BF:31:DF:E6:86:8B:7D:89:01:
      8B:1C:78:58:38:B2:DD:93:4A:5B:9E:1D:D7:9C:C6:F0:
      C4:4D:D0:BF:27:4A:07:94:04:71:02:88:0D:70:E6:F8:
      2A:E7:0E:61:E3:98:4B:D1:DD:AB:54:B6:37:FB:C6:46:
      FD:A4:1C:BC:FF:AF:EC:B2:97:80:DC:B8:93:FD:B8:22:
      A8:9D:25:59:70:3E:5C:7B:1C:41:29:FE:73:99:22:49:
      81:D7:55:26:C0:EC:F2:4E:28:54:62:3B:70:2D:61:93:
      1D:50:D5:9F:01:C2:05:C3:55:1A:4A:87:A4:00:86:54:
      A0:7B:62:B2:EA:0F:FA:5D:5C:C5:2A:11:82:97:BE:86:
      1B:1D:AB:B7:AB:0A:29:FC:CC:CD:34:89:BF:40:B6:4F: 0x010001
  - #6
    - subjectKeyIdentifier:
```
a0 85 31 5e 87 ae 0f aa  0a 04 eb e1 c0 d3 64 bd  |..1^..........d.|
3c bb 69 f5                                       |<.i.            |
```
    - authorityKeyIdentifier:
```
23 34 f8 d9 52 46 70 0a  ed 40 fb 76 fb b3 2b b0  |#4..RFp..@.v..+.|
c3 35 b3 0f                                       |.5..            |
```
    - crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl
    - authorityInfoAccess
      - caIssuers: http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt
    - extendedKeyUsage: timeStamping
    - keyUsage: true, 0xc0
- RSA-SHA1:
```
47 71 4f b6 48 45 c0 08  eb 9c 2f d3 25 5b db 67  |GqO.HE..../.%[.g|
51 11 92 a6 d9 d9 b2 14  9a 26 c2 fd 06 c1 cc d7  |Q........&......|
88 f5 a6 35 b5 cd 2b b6  6b 58 6a cd f9 9d f3 5a  |...5..+.kXj....Z|
eb 46 2f a1 fa a7 1f 7d  7a 42 b2 b0 d1 1a 09 28  |.F/....}zB.....(|
54 6c 6f 99 8b 38 fc 3a  e4 c1 24 aa 72 4c 12 04  |Tlo..8.:..$.rL..|
2f f1 d4 7a 76 3b c5 cf  71 27 0b 6d fc 38 67 a7  |/..zv;..q'.m.8g.|
c5 22 62 2b 7b 7f c1 76  ac a7 c5 26 4c a9 af 98  |."b+{..v...&L...|
dd 8a 38 5d cf 65 a4 81  2e a9 ef 56 02 4c b9 08  |..8].e.....V.L..|
be 65 c4 1e 8b 21 2d 6e  a7 f2 75 64 b4 dc 1a 6b  |.e...!-n..ud...k|
d0 f1 25 e5 c2 e7 80 44  39 d4 2f 0a 79 7e 01 2a  |..%....D9./.y~.*|
a7 78 5b a3 6b 5b ce 09  ef 39 3a 39 b7 c4 67 53  |.x[.k[...9:9..gS|
b9 aa f3 61 ff 9d 79 e3  cf 48 67 ff ab c8 c6 2b  |...a..y..Hg....+|
62 09 94 d0 1f a2 78 f7  73 49 3b 58 53 c1 09 ab  |b.....x.sI;XS...|
4c 06 0b d5 40 28 7e f6  b1 66 c5 bf 52 c4 be 3e  |L...@(~..f..R..>|
3b e0 f9 8e 74 8d e6 22  0c c1 c6 33 98 b5 79 e8  |;...t.."...3..y.|
0c f7 00 7c ea b2 4e cc  80 9a 16 2d c8 a4 10 05  |...|..N....-....|
```

2
- 61:16:68:34:00:00:00:00:00:1C
- RSA-SHA1: nil
- #2
  - DC: com
  - DC: microsoft
  - CN: Microsoft Root Certificate Authority
- 2007-04-03 12:53:09 UTC: 2021-04-03 13:03:09 UTC
- Subject
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Time-Stamp PCA
- #5
  - rsaEncryption: nil
  - 9F:A1:6C:B1:DF:DB:48:92:2A:7C:6B:2E:19:E1:BD:E2:
    E3:C5:99:51:23:50:AD:CE:DD:18:4E:24:0F:EE:D1:A7:
    D1:4C:AD:74:30:20:11:EB:07:D5:54:95:15:49:94:1B:
    42:92:AE:98:5C:30:26:DA:00:6B:E8:7B:BD:EC:89:07:
    0F:F7:0E:04:98:F0:89:CC:1F:CB:33:24:87:9D:F2:F4:
    67:1C:2C:FC:7B:E7:88:1D:EA:E7:4E:A3:A1:C1:23:53:
    CA:8D:FA:45:CF:09:D0:5E:AF:D0:B0:42:04:A2:F9:A6:
    6C:93:67:D7:28:DC:46:53:B0:86:D0:E5:28:46:2E:27:
    AC:86:4F:55:52:0C:E4:03:2C:FB:6A:90:90:30:6E:87:
    F3:59:30:9D:FA:7E:D6:97:B3:E8:21:97:7E:F8:D2:13:
    F3:08:B7:53:6D:52:B4:45:90:9F:48:00:4A:47:66:11:
    27:29:66:A8:97:E4:D3:06:81:4A:A2:F9:84:A7:11:47:
    14:09:82:9F:84:ED:55:78:FE:01:9A:1D:50:08:85:00:
    10:30:46:ED:B7:DE:23:46:BB:C4:2D:54:9F:AF:1E:78:
    41:31:77:CC:9B:DF:3B:83:93:A1:61:02:B5:1D:0D:B1:
    FC:F7:9B:B2:01:CE:22:4B:54:FF:F9:05:C3:C2:20:0B: 0x010001
- X509v3 extensions
  - basicConstraints: true, true
  - subjectKeyIdentifier:
```
23 34 f8 d9 52 46 70 0a  ed 40 fb 76 fb b3 2b b0  |#4..RFp..@.v..+.|
c3 35 b3 0f                                       |.5..            |
```
  - keyUsage: 0x86
  - 1.3.6.1.4.1.311.21.1: 0
  - authorityKeyIdentifier
    - 0e ac 82 60 40 56 27 97 e5 25 13 fc 2a e1 0a 53 |...`@V'..%..*..S| 95 59 e4 a4 |.Y.. |
      - #0
        DC: com
        DC: microsoft
        CN: Microsoft Root Certificate Authority
      - 79 ad 16 a1 4a a0 a5 ad 4c 73 58 f4 07 13 2e 65 |y...J...LsX....e|
  - crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl
  - authorityInfoAccess
    - caIssuers: http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt
  - extendedKeyUsage: timeStamping

RSA-SHA1:

10 97 8a c3 5c 03 44 36  dd e9 b4 ad 77 db ce 79  |....\.D6....w..y|
51 4d 01 b1 2e 74 71 5b  6d 0c 13 ab ce be 7b 8f  |QM...tq[m.....{.|
b8 2e d4 12 a2 8c 6d 62  b8 57 02 cb 4e 20 13 50  |......mb.W..N .P|
99 dd 7a 40 e2 57 bb af  58 9a 1c e1 1d 01 86 ac  |..z@.W..X.......|
bb 78 f2 8b d0 ec 3b 01  ee e2 be 8f 0a 05 c8 8d  |.x....;.........|
48 e2 f0 53 15 dd 4f ab  92 e4 e7 8d 6a d5 80 c1  |H..S..O.....j...|
e6 94 f2 06 2f 85 03 e9  91 2a 24 22 70 fb f6 fc  |..../....*$"p...|
e4 78 99 2e 0d f7 07 e2  70 bc 18 4e 9d 8e 6b 0a  |.x......p..N..k.|
72 95 b8 a1 39 9c 67 2d  c5 51 0e ea 62 5c 3f 16  |r...9.g-.Q..b\?.|
98 8b 20 3f e2 07 1a 32  f9 cc 31 4a 76 31 3d 2b  |.. ?...2..1Jv1=+|
72 0b c8 ea 70 3d ff 85  0a 13 df c2 0a 61 8e f0  |r...p=.......a..|
d7 b8 17 eb 4e 8b 7f c5  35 2b 5e a3 bf eb bc 7d  |....N...5+^....}|
0b 42 7b d4 53 72 21 ee  30 ca bb 78 65 5c 5b 01  |.B{.Sr!.0..xe\[.|
17 0a 14 0e d2 da 14 98  f5 3c b9 66 58 b3 2d 2f  |.........<.fX.-/|
e7 f9 85 86 cc 51 56 e8  9d 70 94 6c ac 39 4c d4  |.....QV..p.l.9L.|
f6 79 bf aa 18 7a 62 29  ef a2 9b 29 34 06 77 1a  |.y...zb)...)4.w.|
62 c9 3d 1e 6d 1f 82 f0  0b c7 2c bb cf 43 b3 e5  |b.=.m.....,..C..|
f9 ec 7d b5 e3 a4 a8 74  35 b8 4e c5 71 23 12 26  |..}....t5.N.q#.&|
76 0b 3c 52 8c 71 5a 46  43 14 bc b3 b3 b0 4d 67  |v.

2
- 61:15:08:27:00:00:00:00:00:0C
- RSA-SHA1: nil
- #2
  - DC: com
  - DC: microsoft
  - CN: Microsoft Root Certificate Authority
- 2006-01-25 23:22:32 UTC: 2017-01-25 23:32:32 UTC
- Subject
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Code Signing PCA
- #5
  - rsaEncryption: nil
  - 9F:8D:DF:85:37:8C:B1:06:56:66:36:4E:D4:0A:EB:36:
    23:91:1E:AF:AB:8D:58:E9:C4:CF:C1:9F:3A:0A:24:C4:
    C4:C4:5E:B0:EE:15:14:C5:FA:3E:99:33:6B:19:69:72:
    F4:7C:05:5F:E5:99:25:44:D7:35:19:8A:90:DC:28:8E:
    90:0C:EF:D5:90:61:AD:DE:DC:18:70:2D:83:C9:6F:AF:
    85:2C:F8:DD:B9:B9:30:FD:71:78:1C:83:FD:C8:A9:B9:
    82:67:0D:7A:B8:C1:09:C2:BC:16:97:57:3F:1C:98:D3:
    69:D7:30:90:90:90:8D:30:1F:D8:26:D4:9E:7B:88:D9:
    E2:09:ED:97:49:45:EB:04:52:81:75:7B:B8:B5:22:B8:
    2E:56:BB:D7:CF:A9:4E:3C:0A:83:A2:A8:3A:C5:AD:B6:
    01:0E:6A:CF:22:B4:23:1F:6C:D5:27:E7:B7:7E:C1:B4:
    D5:32:AD:79:25:1C:42:86:E2:9D:85:F4:57:DA:1B:59:
    2F:2D:26:92:29:C5:B3:D7:85:A3:9E:60:5A:94:E6:7B:
    9C:7B:5E:82:34:4B:6D:FF:D4:EE:27:D0:A2:DC:D1:90:
    0C:CE:7D:0E:15:7C:88:AC:34:C7:C0:6C:98:84:4A:C9:
    44:79:68:28:DF:22:83:0D:B8:8A:2C:48:61:E2:FE:11: 0x010001
- #6
  - 1.3.6.1.4.1.311.21.1: 0
  - subjectKeyIdentifier:
```
57 45 74 1c 5d b0 f6 c8  43 05 e0 8c 54 2d 8f 32  |WEt.]...C...T-.2|
a7 fe 48 96                                       |..H.            |
```
  - keyUsage: 0xc6
  - basicConstraints: true, true
  - authorityKeyIdentifier
    - 0e ac 82 60 40 56 27 97 e5 25 13 fc 2a e1 0a 53 |...`@V'..%..*..S| 95 59 e4 a4 |.Y.. |
      - #0
        DC: com
        DC: microsoft
        CN: Microsoft Root Certificate Authority
      - 79 ad 16 a1 4a a0 a5 ad 4c 73 58 f4 07 13 2e 65 |y...J...LsX....e|
  - crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl
  - authorityInfoAccess
    - caIssuers: http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt
  - certificatePolicies
    - 1.3.6.1.4.1.311.21.47
      - id-qt-unotice:
        00 43 00 6f 00 70 00 79 00 72 00 69 00 67 00 68 |.C.o.p.y.r.i.g.h| 00 74 00 20 00 a9 00 20 00 32 00 30 00 30 00 36 |.t. ... .2.0.0.6| 00 20 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f |. .M.i.c.r.o.s.o| 00 66 00 74 00 20 00 43 00 6f 00 72 00 70 00 6f |.f.t. .C.o.r.p.o| 00 72 00 61 00 74 00 69 00 6f 00 6e 00 2e |.r.a.t.i.o.n.. |
  - extendedKeyUsage: codeSigning

RSA-SHA1:

30 bc b0 20 a4 62 a0 a7  ef 39 26 61 3d dc ac c6  |0.. .b...9&a=...|
99 d0 86 c4 2e f5 83 32  65 5e 22 3e 9b d6 86 f8  |.......2e^">....|
e8 b6 9f ca 8b d6 3b 75  0b a1 91 3e 4c dd 64 74  |......;u...>L.dt|
8c 49 f2 88 8c 18 67 6c  fe 15 66 46 b8 3a 46 42  |.I....gl..fF.:FB|
97 c8 91 37 d4 24 b1 e7  ac d3 ea 41 14 83 77 d3  |...7.$.....A..w.|
c9 4f 05 5f a3 14 52 bf  96 a4 2f 3e 56 5b 10 75  |.O._..R.../>V[.u|
ce 53 c3 ce 05 54 69 b4  65 c9 24 a5 0f e1 25 b8  |.S...Ti.e.$...%.|
1a b9 4d e5 02 b9 50 1e  4f b3 98 0c 1d 95 02 ee  |..M...P.O.......|
22 59 ad 22 cb 05 74 0b  04 45 7b 04 59 e0 d8 0f  |"Y."..t..E{.Y...|
b3 eb 4c f8 60 dd c2 78  9e d1 ba 9f 6b f7 f3 ee  |..L.`..x....k...|
7e 44 11 40 d2 bd ba 9b  4b 16 08 6e a4 be 55 e4  |~D.@....K..n..U.|
a6 38 12 a3 48 f4 1c 55  7a 8a 20 d1 7d fe 91 db  |.8..H..Uz. .}...|
94 8f 2f c2 7b 6b a6 64  85 4f a3 e5 2c 34 29 5d  |../.{k.d.O..,4)]|
0b bf f5 c7 38 2f c4 20  c4 56 31 f6 69 ce 85 f8  |....8/. .V1.i...|
0a 91 ec d0 d6 ae ba 38  05 0c eb 6e 4f 4c 9c 03  |.......8...nOL..|
29 aa a2 fc 18 a0 29 0c  0d 5c 5c 56 23 57 da 1c  |).....)..\\V#W..|
96 0d c8 26 36 c1 44 cb  e5 e1 e6 6f 89 e7 8f e9  |...&6.D....o....|
98 b5 73 d3 78 e3 ed a3  01 3c 74 e5 5e bc 6c f6  |..s.x....

Signer

1
unnamed
- #0
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Code Signing PCA
- 61:08:77:5F:00:00:00:00:00:4A
SHA1: nil

contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

e3 15 0b 34 5a dc c5 fd  5a de d1 f1 a6 04 44 43  |...4Z...Z.....DC|
7a bb 83 d9                                       |z...            |

1.3.6.1.4.1.311.2.1.12

00 58 00 4e 00 41 00 20 00 47 00 61 00 6d 00 65 |.X.N.A. .G.a.m.e| 00 20 00 53 00 74 00 75 00 64 00 69 00 6f 00 20 |. .S.t.u.d.i.o. | 00 34 00 2e 00 30 |.4...0 |
: http://www.microsoft.com/xna

rsaEncryption:

63 ee b7 4f d9 7f 65 99  31 ff 7c e4 f2 eb c0 d7  |c..O..e.1.|.....|
f5 e9 cc 6a b4 7e 42 4c  20 a7 df c6 3e 24 59 97  |...j.~BL ...>$Y.|
eb be 18 87 36 38 88 67  0d bc 48 b8 7a b5 2f 14  |....68.g..H.z./.|
28 1c 50 ac 62 f8 85 15  69 29 bc 30 fa c3 7b 1b  |(.P.b...i).0..{.|
c1 32 8c bd f4 0f 06 cf  4a e2 01 59 68 22 be 9a  |.2......J..Yh"..|
bd 08 95 98 bc 97 b8 32  7e ce 0b 28 54 fd 2c 3d  |.......2~..(T.,=|
a7 b5 fb 26 98 8b 25 c2  57 ac dd cf 1d 3f c2 ff  |...&..%.W....?..|
2e 35 3b df fd 47 91 5c  86 8c 05 e2 5f cb 5e 8f  |.5;..G.\...._.^.|
91 f2 3c 5c 16 47 39 62  49 f0 16 07 ad a1 14 09  |..<\.G9bI.......|
fc b8 09 79 7c e0 d6 61  44 2e fc 9f 99 2b ac ac  |...y|..aD....+..|
95 6b d2 82 61 0e 3c b9  a9 d0 9c 87 d5 c3 6e b2  |.k..a.<.......n.|
99 46 b3 70 c6 bc 81 e4  4b 22 c1 c6 2b 96 6a ad  |.F.p....K"..+.j.|
0a 2e 4b 09 46 36 84 4b  76 ee 77 57 43 21 18 fd  |..K.F6.Kv.wWC!..|
fe 16 b2 ff fc 36 37 9a  8e a7 01 2d a0 d7 d0 5b  |.....67....-...[|
4b cc 8a c6 59 8f aa a2  0f 56 ad 92 6c a3 98 ae  |K...Y....V..l...|
3c f1 b9 70 5c bf 99 e5  65 8b 5d 6c 58 dc d2 99  |<..p\...e.]lX...|

countersignature

unnamed
- #0
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Time-Stamp PCA
- 61:04:B3:F5:00:00:00:00:00:0D
SHA1

contentType: pkcs7-data
signingTime: 2010-09-01 21:36:29 UTC

messageDigest:

3a 47 c7 18 e6 e4 b5 b9  ff 7c 89 5f e7 84 f0 03  |:G.......|._....|
42 d3 34 22                                       |B.4"            |

RSA-SHA1:

38 64 e6 fb 47 dd ec 18  6f 0b a3 47 a4 b1 2c 09  |8d..G...o..G..,.|
fc 34 d3 40 bf c6 02 aa  61 49 8f 05 62 b5 e1 50  |.4.@....aI..b..P|
68 b3 dc 0c 44 0b 48 dc  cb f6 ec 8d c4 d4 ba 14  |h...D.H.........|
40 c9 1e 6c 0e aa 6e 27  25 d2 9d 9d 8e cd 1c 68  |@..l..n'%......h|
5a 3d 1b 43 ea 82 57 d2  b0 f5 ad 2f eb 41 3a f2  |Z=.C..W..../.A:.|
80 d1 d5 62 4e 18 37 81  cb 56 95 69 e9 d0 c0 d0  |...bN.7..V.i....|
b6 5a 79 69 e1 18 97 40  93 92 11 53 ef 18 fd 40  |.Zyi...@...S...@|
56 cb 0e 29 17 5a e5 4d  39 30 52 a2 1e 0b 56 bc  |V..).Z.M90R...V.|
42 a2 cf 64 fa a7 ee e2  7a c4 c4 2f 39 5c 29 8b  |B..d....z../9\).|
dc 99 e1 9f b9 f3 95 29  5c 2f de 90 59 b3 b7 a9  |.......)\/..Y...|
37 1e 73 38 bb 47 9a ea  a0 1f a6 46 f5 ff 10 39  |7.s8.G.....F...9|
9d 03 05 e9 a4 23 25 86  29 8f 77 2c e0 76 6f 13  |.....#%.).w,.vo.|
34 36 8b e8 07 62 a7 78  f1 3d a3 79 5f 3e 7f 4d  |46...b.x.=.y_>.M|
db fb f8 32 42 84 d7 f0  c1 ea 67 0e f6 fa 18 08  |...2B.....g.....|
8d 70 eb cb 51 77 cd 50  26 7a ef ec c6 b3 90 56  |.p..Qw.P&z.....V|
ef c6 dd 1b 9d 73 17 04  f3 36 80 ae 6b f2 84 a8  |.....s...6..k...|

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	51176776	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 51182360 bytes (49 MiB)


--
Type = PE
Physical Size = 51182360
CPU = x86
Characteristics = Executable 32-bit NoRelocs NoLineNums NoLocalSyms RemovableRun NetRun
Created = 2005-06-01 16:46:51
Headers Size = 1024
Checksum = 51230102
Name = XNAGS40_setup.exe
Image Size = 122880
Section Alignment = 8192
File Alignment = 512
Code Size = 31232
Initialized Data Size = 6144
Uninitialized Data Size = 0
Linker Version = 7.10
OS Version = 5.2
Image Version = 5.2
Subsystem Version = 4.0
Subsystem = Windows GUI
DLL Characteristics = NoSEH TerminalServerAware
Stack Reserve = 262144
Stack Commit = 8192
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 16777216
Comment = FileVersion: 4.0.20823.0
FileVersion: 6.1.22.5
FileVersion: 6, 1, 22, 5
ProductVersion: 4.0.20823.0
ProductVersion: 6.1.22.5
ProductVersion: 6, 1, 22, 5
CompanyName: Microsoft Corporation
CompanyName: 
FileDescription: XNA Game Studio 4.0 Setup
FileDescription: sfxcab
InternalName: XNAGS40_setup.exe
InternalName: sfxcab
LegalCopyright: Copyright Microsoft Corporation. All rights reserved.
LegalCopyright: Copyright (C) 2006
OriginalFilename: XNAGS40_setup.exe
OriginalFilename: sfxcab.exe
ProductName: XNA Game Studio 4.0 Setup
ProductName:  sfxcab
----
Path = .rsrc_1
Size = 51137480
Packed Size = 51137480
Virtual Size = 51137480
Offset = 37944
--
Path = .rsrc_1
Type = Cab
WARNINGS:
There are data after the end of archive
Offset = 456
Physical Size = 51136544
Tail Size = 480
Method = LZX:21
Blocks = 1
Volumes = 1
Volume Index = 0
ID = 12603

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2010-08-23 13:52:58 ....A           87               _sfx_manifest_
2010-08-23 13:53:02 ....A        38400               arpentry.msi
2010-08-23 13:52:58 ....A       945944               Bootstrapper.exe
2010-08-23 13:53:16 ....A     51117056               redists.msi
2010-08-23 13:52:58 ....A         6191               tasklist.xml
2010-08-23 13:52:58 .....         1691               tasklistcosts.xml
2010-08-23 13:52:58 .....         3372               TME.xsd
2010-08-23 13:52:58 ....A        43800               nativestub.exe
2010-08-23 14:17:58 .....        13735               xnags_setup.EULA.rtf
------------------- ----- ------------ ------------  ------------------------
2010-08-23 14:17:58           52170276     51182360  9 files

Warnings: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

XNAGS40_setup.exe- XNA Game Studio 4.0 Setup

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904b0

StringTable 040904b0

VS_FIXEDFILEINFO

VS_FIXEDFILEINFO

Signers (1)

Certificates (4)

XNAGS40_setup.exe
- XNA Game Studio 4.0 Setup