filenameprocdump64.exe
size343488 (0x53dc0)
md5f224f2502453b84eccdaf325d21ac97f
typePE32+ executable (console) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x108

Rich Header

lib idversiontimes used
206502031
22420806152
2232080611
2252080657
1473072916
10178
185307167
2293110128
219210051
15101
222311011

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections6
TimeDateStamp0x58fe61c5
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x22
Magic0x20b
LinkerVersion12.0
SizeOfCode0x2ac00
SizeOfInitializedData0x28600
SizeOfUninitializedData0
AddressOfEntryPoint0x188cc
BaseOfCode0x1000
ImageBase0x140000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.2
ImageVersion0.0
SubsystemVersion5.2
Reserved10
SizeOfImage0x57000
SizeOfHeaders0x400
CheckSum0x554c3
Subsystem3
DllCharacteristics0x8160
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x2ab950x2ac00R-X CODE
.rdata0x2c0000x1f30e0x1f400R-- IDATA
.data0x4c0000x5b800x1e00RW- IDATA
.pdata0x520000x252c0x2600R-- IDATA
.rsrc0x550000x5680x600R-- IDATA
.reloc0x560000x8f00xa00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x49fd40xf0
RESOURCE0x550000x568
EXCEPTION0x520000x252c
SECURITY0x4f8000x45c0
BASERELOC0x560000x8f0
DEBUG0x2c6500x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x46ac00x70
Bound_IAT00
IAT0x2c0000x598
Delay_IAT00
CLR_Header00
typenamesizecp
VERSION#18400
MANIFEST#13810
module_namehintordfunction_name
PSAPI.DLL4EnumProcessModules
PSAPI.DLL20GetProcessImageFileNameW
PSAPI.DLL14GetModuleBaseNameW
VERSION.dll14VerQueryValueW
VERSION.dll6GetFileVersionInfoW
VERSION.dll5GetFileVersionInfoSizeW
SHLWAPI.dll325StrStrIW
KERNEL32.dll1288WaitForSingleObject
KERNEL32.dll1216Sleep
KERNEL32.dll210DeleteCriticalSection
KERNEL32.dll653GetThreadContext
KERNEL32.dll666GetTickCount
KERNEL32.dll966ReadProcessMemory
KERNEL32.dll903OpenThread
KERNEL32.dll198DebugActiveProcess
KERNEL32.dll199DebugActiveProcessStop
KERNEL32.dll360FreeLibrary
KERNEL32.dll168CreateProcessW
KERNEL32.dll454GetCurrentProcess
KERNEL32.dll746InitializeCriticalSection
KERNEL32.dll898OpenProcess
KERNEL32.dll520GetLastError
KERNEL32.dll1152SetLastError
KERNEL32.dll103ContinueDebugEvent
KERNEL32.dll1285WaitForDebugEvent
KERNEL32.dll1046ResumeThread
KERNEL32.dll180CreateThread
KERNEL32.dll356FormatMessageW
KERNEL32.dll873MultiByteToWideChar
KERNEL32.dll291ExpandEnvironmentStringsW
KERNEL32.dll1230TerminateProcess
KERNEL32.dll1083SetConsoleCtrlHandler
KERNEL32.dll514GetFullPathNameW
KERNEL32.dll1228SystemTimeToTzSpecificLocalTime
KERNEL32.dll497GetFileAttributesW
KERNEL32.dll482GetEnvironmentVariableA
KERNEL32.dll453GetCurrentDirectoryW
KERNEL32.dll920Process32FirstW
KERNEL32.dll634GetSystemInfo
KERNEL32.dll1286WaitForMultipleObjects
KERNEL32.dll922Process32NextW
KERNEL32.dll82CloseHandle
KERNEL32.dll189CreateToolhelp32Snapshot
KERNEL32.dll455GetCurrentProcessId
KERNEL32.dll200DebugBreak
KERNEL32.dll638GetSystemTime
KERNEL32.dll143CreateFileW
KERNEL32.dll504GetFileSizeEx
KERNEL32.dll215DeleteFileW
KERNEL32.dll287ExitProcess
KERNEL32.dll463GetDateFormatW
KERNEL32.dll1141SetFilePointerEx
KERNEL32.dll670GetTimeFormatW
KERNEL32.dll1025ReleaseSemaphore
KERNEL32.dll174CreateSemaphoreW
KERNEL32.dll595GetProcessId
KERNEL32.dll225DeviceIoControl
KERNEL32.dll1281VirtualQueryEx
KERNEL32.dll730HeapReAlloc
KERNEL32.dll359FreeEnvironmentStringsW
KERNEL32.dll481GetEnvironmentStringsW
KERNEL32.dll640GetSystemTimeAsFileTime
KERNEL32.dll937QueryPerformanceCounter
KERNEL32.dll624GetStringTypeW
KERNEL32.dll416GetConsoleCP
KERNEL32.dll349FlushFileBuffers
KERNEL32.dll963ReadFile
KERNEL32.dll832LoadLibraryExW
KERNEL32.dll618GetStartupInfoW
KERNEL32.dll1236TlsFree
KERNEL32.dll1238TlsSetValue
KERNEL32.dll1237TlsGetValue
KERNEL32.dll1235TlsAlloc
KERNEL32.dll747InitializeCriticalSectionAndSpinCount
KERNEL32.dll242EnterCriticalSection
KERNEL32.dll1121SetEndOfFile
KERNEL32.dll827LeaveCriticalSection
KERNEL32.dll1127SetEvent
KERNEL32.dll684GetVersionExW
KERNEL32.dll538GetModuleFileNameW
KERNEL32.dll842LocalFree
KERNEL32.dll506GetFileType
KERNEL32.dll838LocalAlloc
KERNEL32.dll588GetProcAddress
KERNEL32.dll619GetStdHandle
KERNEL32.dll833LoadLibraryW
KERNEL32.dll542GetModuleHandleW
KERNEL32.dll397GetCommandLineW
KERNEL32.dll133CreateEventW
KERNEL32.dll815LCMapStringW
KERNEL32.dll908OutputDebugStringW
KERNEL32.dll1331WriteConsoleW
KERNEL32.dll961ReadConsoleW
KERNEL32.dll770IsDebuggerPresent
KERNEL32.dll1203SetUnhandledExceptionFilter
KERNEL32.dll1250UnhandledExceptionFilter
KERNEL32.dll1062RtlVirtualUnwind
KERNEL32.dll1048RtlCaptureContext
KERNEL32.dll1332WriteFile
KERNEL32.dll593GetProcessHeap
KERNEL32.dll459GetCurrentThreadId
KERNEL32.dll376GetCPInfo
KERNEL32.dll574GetOEMCP
KERNEL32.dll366GetACP
KERNEL32.dll780IsValidCodePage
KERNEL32.dll238EncodePointer
KERNEL32.dll203DecodePointer
KERNEL32.dll727HeapFree
KERNEL32.dll723HeapAlloc
KERNEL32.dll434GetConsoleMode
KERNEL32.dll952ReadConsoleInputA
KERNEL32.dll1099SetConsoleMode
KERNEL32.dll541GetModuleHandleExW
KERNEL32.dll1312WideCharToMultiByte
KERNEL32.dll1172SetStdHandle
KERNEL32.dll774IsProcessorFeaturePresent
KERNEL32.dll1057RtlPcToFileHeader
KERNEL32.dll948RaiseException
KERNEL32.dll1055RtlLookupFunctionEntry
KERNEL32.dll1061RtlUnwindEx
KERNEL32.dll732HeapSize
USER32.dll218EndDialog
USER32.dll297GetDlgItem
USER32.dll382GetSysColorBrush
USER32.dll723SetWindowTextW
USER32.dll640SendMessageW
USER32.dll827wsprintfW
USER32.dll468IsHungAppWindow
USER32.dll242EnumWindows
USER32.dll484IsWindowVisible
USER32.dll424GetWindowThreadProcessId
USER32.dll509LoadStringA
USER32.dll654SetCursor
USER32.dll170DialogBoxIndirectParamW
USER32.dll495LoadCursorW
USER32.dll441InflateRect
GDI32.dll242EndPage
GDI32.dll690StartPage
GDI32.dll459GetDeviceCaps
GDI32.dll660SetMapMode
GDI32.dll239EndDoc
GDI32.dll688StartDocW
COMDLG32.dll21PrintDlgW
ADVAPI32.dll274EnumServicesStatusExW
ADVAPI32.dll532OpenSCManagerW
ADVAPI32.dll101CloseServiceHandle
ADVAPI32.dll31AdjustTokenPrivileges
ADVAPI32.dll429LookupPrivilegeValueW
ADVAPI32.dll530OpenProcessToken
ADVAPI32.dll624RegDeleteValueW
ADVAPI32.dll620RegDeleteKeyW
ADVAPI32.dll609RegCreateKeyExW
ADVAPI32.dll678RegSetValueExW
ADVAPI32.dll600RegCloseKey
ADVAPI32.dll649RegOpenKeyExW
ADVAPI32.dll652RegOpenKeyW
ADVAPI32.dll662RegQueryValueExW
ADVAPI32.dll612RegCreateKeyW
SHELL32.dll6CommandLineToArgvW
ole32.dll20CoCreateInstance
ole32.dll14CoAllowSetForegroundWindow
ole32.dll112CoUninitialize
ole32.dll67CoInitializeEx
ole32.dll12CLSIDFromString
pdh.dll87PdhOpenQueryW
pdh.dll3PdhAddCounterW
pdh.dll18PdhCollectQueryData
pdh.dll65PdhGetFormattedCounterValue

StringTable 040904b0

CompanyNameSysinternals - www.sysinternals.com
FileDescriptionSysinternals process dump utility
FileVersion9.0
InternalNameProcDump
LegalCopyrightCopyright (C) 2009-2017 Mark Russinovich and Andrew Richards
OriginalFilenameprocdump
ProductNameProcDump
ProductVersion9.0

VS_FIXEDFILEINFO

FileVersion9.0.0.0
ProductVersion9.0.0.0
StrucVersion0x10000
FileFlagsMask0x17
FileFlags0
FileOS4
FileType0
FileSubtype0

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Code Signing PCA
serial: 330000014096A9EE7056FECC07000100000140

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:00:00:c8:47:22:9d:a3:0d:ca:c0:58:00:00:00:00:00:c8
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA
        Validity
            Not Before: Sep  7 17:58:54 2016 GMT
            Not After : Sep  7 17:58:54 2018 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, OU=nCipher DSE ESN:98FD-C61E-E641, CN=Microsoft Time-Stamp Service
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:43:4d:ca:49:e1:21:c4:32:57:8a:10:3b:8f:
                    9c:bb:dc:1d:78:b7:3a:db:87:bd:5b:46:f0:08:39:
                    c7:a5:dc:49:aa:d1:06:92:fe:df:fb:49:18:a7:26:
                    24:f2:ba:5f:09:ef:87:d9:a0:ae:03:91:74:5e:81:
                    56:2d:29:0e:b1:a8:c4:d6:7f:cc:45:50:07:db:8b:
                    25:2d:83:f2:67:f5:ce:ed:68:0c:1a:f6:d2:44:e2:
                    fd:ed:ec:12:45:92:04:90:59:b6:74:20:75:0d:10:
                    ce:79:fe:d9:57:0e:83:32:1a:e5:e6:1f:2c:db:df:
                    5e:0f:11:32:87:1a:d8:e2:2d:2f:41:92:8a:c0:30:
                    f7:f3:19:4c:5d:d8:5c:d9:42:46:03:41:99:d7:a0:
                    72:24:c1:90:cc:1a:ac:b9:1c:af:c4:01:ab:2c:d4:
                    b9:9a:30:a9:a2:01:2d:24:ae:42:0a:6e:c2:e8:ef:
                    38:65:64:95:37:c3:9e:fb:0e:bf:8a:02:9b:ab:db:
                    c4:27:c8:bc:43:85:68:84:07:10:3f:45:69:5b:e6:
                    20:de:a9:a8:18:c0:af:6f:80:d5:45:24:0c:78:9b:
                    2b:7b:3a:18:ed:b3:49:8e:98:9c:55:ea:3d:eb:6b:
                    d0:c9:fd:3d:6f:74:93:17:e7:2a:a6:3e:80:5f:31:
                    95:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0F:E1:65:FD:D8:8D:C3:96:A6:28:F0:D2:DF:9E:8D:3D:AA:7D:5E:CC
            X509v3 Authority Key Identifier: 
                keyid:23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt

            X509v3 Extended Key Usage: 
                Time Stamping
    Signature Algorithm: sha1WithRSAEncryption
         9a:94:0f:28:b2:07:de:e3:03:d5:3d:be:9e:c7:3a:af:0b:cc:
         22:1f:61:5b:50:7c:98:b9:3d:4c:c9:ae:9c:33:bf:a0:7b:6a:
         84:c2:fa:20:ab:f1:07:62:30:6e:c6:6b:27:7c:79:6a:c2:d0:
         1c:66:2b:29:53:3b:f9:52:ac:f6:74:ff:71:19:7f:86:f3:54:
         46:94:7c:0b:42:86:4e:0e:8e:fe:e2:28:23:eb:23:44:41:81:
         9d:3e:b5:03:d8:19:38:e2:a9:db:90:a3:6b:b8:c6:6d:06:6c:
         df:51:29:18:8d:35:bd:48:09:a7:49:d6:19:1f:da:ec:c1:3e:
         3e:c8:54:bb:61:57:91:6a:7e:af:4a:9a:d8:d6:0d:ea:9e:cb:
         64:01:08:01:bd:33:10:2a:32:8e:84:a5:ed:08:0d:bc:15:51:
         b4:86:d8:fc:cc:fa:b2:d2:27:bb:3c:a7:ef:eb:c4:26:cf:18:
         b8:b1:5a:50:2d:b9:8d:aa:16:7d:35:ff:67:d7:b5:26:b1:85:
         2e:2f:37:3a:45:84:ef:f3:ff:e9:b9:7c:79:bf:8f:ff:3c:cb:
         34:6f:41:f5:a9:b6:54:25:49:17:6f:c0:ee:f6:55:cf:8d:6e:
         fa:f6:f6:73:4d:c3:ae:b6:1b:10:db:1c:3b:86:37:74:ba:e6:
         b8:cf:b0:09
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA
        Validity
            Not Before: Aug 18 20:17:17 2016 GMT
            Not After : Nov  2 20:17:17 2017 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, CN=Microsoft Corporation
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4b:8b:e9:03:6a:5f:c8:1b:5d:0a:05:39:e4:
                    d5:0e:92:d0:c4:e1:8b:e8:a4:0d:05:19:58:c0:3c:
                    d7:29:dd:89:b7:68:6e:4b:9f:7e:bc:9a:bd:54:86:
                    39:a9:f1:38:35:16:e6:1d:ac:fb:ae:6b:dc:09:30:
                    ef:b8:1e:df:6c:f8:4a:9a:55:97:48:c8:23:89:b3:
                    59:27:34:bd:95:31:47:9c:0f:ce:40:35:32:37:fe:
                    e9:f3:4f:a4:1a:a4:b3:79:bc:80:9b:3f:24:98:c4:
                    d1:6f:d5:7f:e7:43:8d:e4:dc:f2:d2:e6:ae:66:ed:
                    04:3a:21:94:a6:57:dc:03:db:2c:c6:1b:ff:2b:39:
                    a8:5d:bf:55:fe:dd:49:df:54:05:94:ab:33:df:a4:
                    7d:31:a6:4d:bd:56:cf:16:31:68:3f:84:6b:1c:6d:
                    f3:ee:d5:30:8a:ee:65:1b:9e:b7:08:1c:29:7e:93:
                    bd:f2:7d:42:76:38:22:d4:7b:7c:f4:b8:b9:71:9e:
                    c3:94:f4:82:86:35:82:a6:74:bd:02:33:fa:54:86:
                    85:a3:25:be:aa:89:5e:e2:39:5f:26:41:98:1a:de:
                    b9:e6:46:85:78:bb:51:32:02:47:ec:e4:f9:1f:bd:
                    04:51:75:e6:12:9b:76:eb:85:97:14:22:0a:a1:13:
                    f7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Subject Key Identifier: 
                9C:E5:E8:6D:82:57:AE:37:24:DE:EA:5E:A9:C4:5F:90:1D:CE:D9:7B
            X509v3 Subject Alternative Name: 
                DirName:/OU=MOPR/serialNumber=229803+f785b1c0-5d9f-4316-8d6a-74ae642dde1c
            X509v3 Authority Key Identifier: 
                keyid:CB:11:E8:CA:D2:B4:16:58:01:C9:37:2E:33:16:16:B9:4C:9A:0A:1F

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt

    Signature Algorithm: sha1WithRSAEncryption
         6b:e4:56:e3:d7:13:1d:20:40:f9:6d:e9:de:4e:db:5d:1e:c6:
         6c:26:a3:f7:e5:09:80:0c:ff:57:e1:b4:d4:d9:f9:5c:48:e1:
         06:7f:c2:a4:54:b8:96:7a:f5:8d:c9:83:13:0c:71:bf:f8:fc:
         bb:2e:cc:15:73:f3:00:6b:4e:25:aa:f4:c4:0a:72:94:52:9f:
         77:4d:29:93:28:08:31:16:d9:df:6e:74:ab:c4:e8:4e:15:b1:
         99:05:44:4e:1a:49:49:2c:ac:79:ee:bf:85:4f:84:6e:47:ef:
         be:d8:d2:8b:49:69:0e:29:83:f5:a5:bd:a3:1b:21:ad:a2:a5:
         3e:90:20:9c:f5:9f:12:3d:7a:59:75:64:ef:da:a3:85:84:32:
         12:02:02:6a:64:77:01:a6:39:98:b3:ee:a2:28:49:6c:ac:24:
         32:28:3e:a8:8b:66:2c:fb:02:d8:83:2f:23:92:91:f7:57:65:
         ff:a4:d5:e9:51:08:94:f6:d6:fd:c0:d5:c0:20:45:fd:43:49:
         4f:79:ee:64:19:7f:60:4e:e2:c4:ca:53:4e:1f:fb:5a:91:0d:
         5b:cd:24:83:7c:73:e8:c9:42:77:12:5f:31:26:c9:b0:ce:53:
         8a:61:54:f7:c2:8d:72:99:f1:c5:b6:1d:7e:aa:90:84:04:3a:
         97:79:ad:60
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:33:26:1a:00:00:00:00:00:31
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
        Validity
            Not Before: Aug 31 22:19:32 2010 GMT
            Not After : Aug 31 22:29:32 2020 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:72:59:5c:19:30:64:bf:1d:9a:60:20:20:42:
                    99:76:53:6c:3e:1b:d6:6f:cc:cb:f1:ea:6b:fe:97:
                    16:10:e0:df:3a:74:83:1a:b7:2f:a0:32:ec:ff:de:
                    c2:42:4e:23:d5:72:00:db:35:57:0a:89:ca:ae:20:
                    49:f4:f0:68:ac:4d:4b:8d:a5:bd:79:4b:71:9b:47:
                    07:da:fd:25:df:9d:75:88:cf:aa:73:44:7f:d7:81:
                    db:f3:bd:f2:36:a4:c9:5c:45:dc:af:ad:3d:e0:28:
                    68:97:1a:a7:a5:72:73:56:f1:17:94:e4:fd:35:94:
                    72:a0:d6:76:5f:1e:77:45:83:85:38:16:d0:73:5b:
                    05:ba:67:52:8d:a5:b2:69:2f:da:19:0b:fe:92:74:
                    29:e2:76:2f:54:dd:14:30:59:f8:d2:8d:62:fd:cb:
                    c9:5f:46:31:50:b9:27:13:e4:40:30:cf:72:29:10:
                    28:22:c7:37:4e:3d:a0:32:3d:90:cd:a1:38:06:85:
                    5c:4e:56:82:28:2a:05:32:b7:4b:d7:4f:63:e7:d2:
                    2d:62:f1:45:3d:e7:ac:08:00:f6:46:a1:9e:d1:5b:
                    8c:26:53:e8:7a:aa:4a:f2:46:cf:37:3c:38:9e:b4:
                    77:5c:a5:17:9e:8d:cb:11:8f:56:3c:c1:ac:09:5f:
                    03:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                CB:11:E8:CA:D2:B4:16:58:01:C9:37:2E:33:16:16:B9:4C:9A:0A:1F
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            1.3.6.1.4.1.311.21.1: 
                .....
            1.3.6.1.4.1.311.21.2: 
                ....1N.&....`;.1o.<..-
            1.3.6.1.4.1.311.20.2: 
                .
.S.u.b.C.A
            X509v3 Authority Key Identifier: 
                keyid:0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt

    Signature Algorithm: sha1WithRSAEncryption
         59:39:3e:7f:26:46:af:eb:6f:40:b1:32:b5:6a:eb:0e:2f:6e:
         a8:49:f7:eb:5f:75:ed:4c:3b:2d:d7:43:ad:0b:fe:cb:e9:2d:
         31:a3:23:cc:7c:50:98:80:21:5d:ac:3d:2f:4c:ba:a2:a8:56:
         9c:e3:70:bb:b8:b4:f8:79:b5:49:72:f7:3e:ea:41:7f:ca:e1:
         0c:17:69:cb:a5:9c:20:2d:fa:0b:50:c4:56:cd:2d:e3:4a:d2:
         bc:70:e7:a8:0d:a2:03:a5:56:e0:b8:8a:4b:57:f2:95:42:9c:
         f1:f3:ef:ee:e3:86:1f:34:3c:b8:56:9a:f0:53:23:85:2a:a4:
         82:1c:93:e2:94:07:1d:f2:e2:4e:f8:8c:a1:ca:e8:13:a5:91:
         4e:c8:1b:d2:8f:72:95:2a:71:6d:9b:1a:f8:1c:f0:53:d6:67:
         cc:22:ff:5c:1d:cd:a2:8c:bd:27:b2:79:63:56:44:a2:51:cd:
         f9:e9:a3:58:56:dd:9b:02:45:44:2f:5f:f4:da:ae:d4:82:32:
         6e:fc:a4:95:13:e4:eb:69:e7:a9:a2:2c:be:c8:2b:10:0e:65:
         8e:99:db:f5:a2:fa:12:26:09:65:38:94:f1:7a:1f:4a:bb:d1:
         e1:56:e8:d0:78:96:18:5c:c9:35:16:5f:dd:93:1d:49:8e:2d:
         be:ad:34:44:1c:ee:10:15:1a:00:5d:dd:35:5b:21:ce:98:c7:
         09:ee:85:0e:8c:4f:6d:0e:13:4e:3d:7c:29:48:9c:72:d1:f3:
         6c:ca:c1:ec:70:a3:57:92:57:7d:94:8d:a0:1b:48:03:5a:f7:
         cf:a3:67:0a:74:a5:36:ed:2d:2f:17:c8:e6:72:37:12:f4:6f:
         b1:3c:67:82:f9:52:b2:8d:33:16:65:1e:0e:8a:dd:10:de:64:
         f4:6f:ce:46:d4:d3:17:e9:79:c4:04:b4:d3:fb:2c:df:1f:8a:
         9e:ac:0a:fb:13:27:40:ad:e4:f9:e1:a9:7f:46:bb:07:60:47:
         65:60:40:4e:b0:42:ec:4e:ed:b3:76:79:d8:0a:34:09:6d:1c:
         80:31:1f:e2:0e:54:dd:e5:a1:fb:e5:47:10:ad:64:98:ff:50:
         16:2e:7c:bf:05:21:7a:e2:95:41:27:69:c3:93:8f:95:c9:8d:
         d8:9b:21:ae:0d:5c:9c:f0:a2:ae:86:68:83:0c:6a:2d:bb:76:
         6b:00:1d:96:ad:f2:16:7b:f6:16:83:24:b9:88:cf:6a:a8:47:
         31:2f:9a:dc:e3:71:3d:d7:00:7e:62:47:d1:ce:88:c9:b8:18:
         fa:0e:72:8d:c1:a3:3d:af:02:40:6a:ff:69:9b:96:e2:10:a8:
         10:b4:37:50:08:d6:c3:3d
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:16:68:34:00:00:00:00:00:1c
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
        Validity
            Not Before: Apr  3 12:53:09 2007 GMT
            Not After : Apr  3 13:03:09 2021 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time-Stamp PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a1:6c:b1:df:db:48:92:2a:7c:6b:2e:19:e1:
                    bd:e2:e3:c5:99:51:23:50:ad:ce:dd:18:4e:24:0f:
                    ee:d1:a7:d1:4c:ad:74:30:20:11:eb:07:d5:54:95:
                    15:49:94:1b:42:92:ae:98:5c:30:26:da:00:6b:e8:
                    7b:bd:ec:89:07:0f:f7:0e:04:98:f0:89:cc:1f:cb:
                    33:24:87:9d:f2:f4:67:1c:2c:fc:7b:e7:88:1d:ea:
                    e7:4e:a3:a1:c1:23:53:ca:8d:fa:45:cf:09:d0:5e:
                    af:d0:b0:42:04:a2:f9:a6:6c:93:67:d7:28:dc:46:
                    53:b0:86:d0:e5:28:46:2e:27:ac:86:4f:55:52:0c:
                    e4:03:2c:fb:6a:90:90:30:6e:87:f3:59:30:9d:fa:
                    7e:d6:97:b3:e8:21:97:7e:f8:d2:13:f3:08:b7:53:
                    6d:52:b4:45:90:9f:48:00:4a:47:66:11:27:29:66:
                    a8:97:e4:d3:06:81:4a:a2:f9:84:a7:11:47:14:09:
                    82:9f:84:ed:55:78:fe:01:9a:1d:50:08:85:00:10:
                    30:46:ed:b7:de:23:46:bb:c4:2d:54:9f:af:1e:78:
                    41:31:77:cc:9b:df:3b:83:93:a1:61:02:b5:1d:0d:
                    b1:fc:f7:9b:b2:01:ce:22:4b:54:ff:f9:05:c3:c2:
                    20:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                23:34:F8:D9:52:46:70:0A:ED:40:FB:76:FB:B3:2B:B0:C3:35:B3:0F
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Authority Key Identifier: 
                keyid:0E:AC:82:60:40:56:27:97:E5:25:13:FC:2A:E1:0A:53:95:59:E4:A4
                DirName:/DC=com/DC=microsoft/CN=Microsoft Root Certificate Authority
                serial:79:AD:16:A1:4A:A0:A5:AD:4C:73:58:F4:07:13:2E:65

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt

            X509v3 Extended Key Usage: 
                Time Stamping
    Signature Algorithm: sha1WithRSAEncryption
         10:97:8a:c3:5c:03:44:36:dd:e9:b4:ad:77:db:ce:79:51:4d:
         01:b1:2e:74:71:5b:6d:0c:13:ab:ce:be:7b:8f:b8:2e:d4:12:
         a2:8c:6d:62:b8:57:02:cb:4e:20:13:50:99:dd:7a:40:e2:57:
         bb:af:58:9a:1c:e1:1d:01:86:ac:bb:78:f2:8b:d0:ec:3b:01:
         ee:e2:be:8f:0a:05:c8:8d:48:e2:f0:53:15:dd:4f:ab:92:e4:
         e7:8d:6a:d5:80:c1:e6:94:f2:06:2f:85:03:e9:91:2a:24:22:
         70:fb:f6:fc:e4:78:99:2e:0d:f7:07:e2:70:bc:18:4e:9d:8e:
         6b:0a:72:95:b8:a1:39:9c:67:2d:c5:51:0e:ea:62:5c:3f:16:
         98:8b:20:3f:e2:07:1a:32:f9:cc:31:4a:76:31:3d:2b:72:0b:
         c8:ea:70:3d:ff:85:0a:13:df:c2:0a:61:8e:f0:d7:b8:17:eb:
         4e:8b:7f:c5:35:2b:5e:a3:bf:eb:bc:7d:0b:42:7b:d4:53:72:
         21:ee:30:ca:bb:78:65:5c:5b:01:17:0a:14:0e:d2:da:14:98:
         f5:3c:b9:66:58:b3:2d:2f:e7:f9:85:86:cc:51:56:e8:9d:70:
         94:6c:ac:39:4c:d4:f6:79:bf:aa:18:7a:62:29:ef:a2:9b:29:
         34:06:77:1a:62:c9:3d:1e:6d:1f:82:f0:0b:c7:2c:bb:cf:43:
         b3:e5:f9:ec:7d:b5:e3:a4:a8:74:35:b8:4e:c5:71:23:12:26:
         76:0b:3c:52:8c:71:5a:46:43:14:bc:b3:b3:b0:4d:67:c8:9f:
         42:ff:80:79:21:80:9e:15:30:66:e8:42:12:5e:1a:c8:9e:22:
         21:d0:43:e9:2b:e9:bb:f4:48:cc:2c:d4:d8:32:80:4c:26:2a:
         48:24:5f:5a:ea:56:ef:a6:de:99:9d:ca:3a:6f:bd:81:27:74:
         06:11:ee:76:21:bf:9b:82:c1:27:54:b6:b1:6a:3d:89:a1:76:
         61:b4:6e:a1:13:a6:bf:aa:47:f0:12:6f:fd:8a:32:6c:b2:fe:
         df:51:c8:8c:23:c9:66:bd:9d:1d:87:12:64:02:3d:2d:af:59:
         8f:b8:e4:21:e5:b5:b0:ca:63:b4:78:54:05:d4:41:2e:50:ac:
         94:b0:a5:78:ab:b3:a0:96:75:1a:d9:92:87:13:75:22:2f:32:
         a8:08:6e:a0:5b:8c:25:bf:a0:ef:84:ca:21:d6:eb:1e:4f:c9:
         9a:ee:49:e0:f7:01:65:6f:89:0b:7d:c8:69:c8:e6:6e:ea:a7:
         97:ce:31:29:ff:0e:c5:5b:5c:d8:4d:1b:a1:d8:fa:2f:9e:3f:
         2e:55:16:6b:c9:13:a3:fd

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)04/CN=VeriSign Class 3 Code Signing 2004 CA
serial: 0D34695F3DF1206DA6579A0DB785C25F

Certificates (1)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:34:69:5f:3d:f1:20:6d:a6:57:9a:0d:b7:85:c2:5f
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)04, CN=VeriSign Class 3 Code Signing 2004 CA
        Validity
            Not Before: Aug  8 00:00:00 2008 GMT
            Not After : Oct  7 23:59:59 2011 GMT
        Subject: C=RU, ST=Saint-Petersburg, O=Doctor Web Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, CN=Doctor Web Ltd.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (1024 bit)
                Modulus:
                    00:b8:9e:4f:c7:8c:df:3f:29:92:2f:cb:55:9d:27:
                    59:9f:23:67:0f:30:78:9d:aa:8b:d6:ad:53:4a:9e:
                    6c:d2:f7:f8:97:c2:44:a3:f1:5b:ed:09:ea:e0:00:
                    b1:c2:0c:9d:07:d9:e5:83:25:ff:da:2e:31:9f:c4:
                    59:db:bd:29:5b:5a:ef:d6:e0:f3:8d:8c:1a:b9:63:
                    ee:b1:d6:fb:7d:74:4d:01:28:76:08:68:e4:68:3b:
                    9a:97:e4:ed:bf:42:b3:dd:b6:90:91:0e:08:5f:b8:
                    5f:ce:e6:eb:6f:ed:05:29:38:f8:e0:64:ac:4d:5c:
                    a8:3b:42:b4:10:d9:09:84:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://CSC3-2004-crl.verisign.com/CSC3-2004.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa

            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
                CA Issuers - URI:http://CSC3-2004-aia.verisign.com/CSC3-2004-aia.cer

            X509v3 Authority Key Identifier: 
                keyid:08:F5:51:E8:FB:FE:3D:3D:64:36:7C:68:CF:5B:78:A8:DF:B9:C5:37

            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
         39:ae:63:53:d0:87:71:f7:43:1f:f8:fb:97:d9:f0:9a:b4:36:
         25:be:e8:91:29:4b:b4:5c:31:7b:14:00:9b:d3:29:e7:b3:b0:
         9e:a6:56:e5:1f:63:73:56:6d:0c:59:c3:59:8e:58:22:d2:32:
         1b:e7:49:0e:ab:e7:c5:30:eb:48:31:05:98:3e:d5:08:1c:8e:
         ee:ca:5f:96:e9:9f:5b:9c:84:13:d2:9a:0c:3f:28:c7:9f:86:
         ef:67:dc:4a:06:94:63:49:c8:43:cc:d3:93:0c:73:69:45:25:
         71:9f:a2:10:29:a5:e8:d3:3b:89:4d:05:8d:42:2d:94:35:3b:
         ce:44:e1:2b:cc:99:96:0c:45:b3:09:4c:77:6c:02:05:05:da:
         27:ed:d7:fa:82:09:7f:21:3b:20:84:e8:34:1e:3f:a9:fc:1f:
         d8:67:2b:47:22:29:08:8f:c2:b1:2e:63:3f:e1:89:4a:d5:58:
         fb:4a:d7:45:48:67:d1:41:be:47:68:f7:51:d6:a9:70:05:b2:
         39:07:1c:dc:bc:da:68:07:75:43:0f:c4:25:1c:6f:f5:54:5e:
         97:8f:76:99:9d:95:07:80:8b:75:d6:85:98:63:3c:9e:93:af:
         89:88:ac:25:4d:49:31:eb:8e:69:69:ee:ef:b2:cc:d1:b6:8a:
         5a:d3:4f:78

undefined method `first' for #

pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
        • SHA1
          • 9c b7 bd 9f a3 db bb 44  1b ff 52 7f 8e b5 52 27  |.......D..R...R'|
c6 5d c1 c9                                       |.]..            |
    • Certificate #2
      • 2
        • 0D:34:69:5F:3D:F1:20:6D:A6:57:9A:0D:B7:85:C2:5F
        • RSA-SHA1: nil
        • Issuer
          • C: US
          • O: VeriSign, Inc.
          • OU: VeriSign Trust Network
          • OU: Terms of use at https://www.verisign.com/rpa (c)04
          • CN: VeriSign Class 3 Code Signing 2004 CA
        • 2008-08-08 00:00:00 UTC: 2011-10-07 23:59:59 UTC
        • Subject
          • C: RU
          • ST: Saint-Petersburg
          • O: Doctor Web Ltd.
          • OU: Digital ID Class 3 - Microsoft Software Validation v2
          • CN: Doctor Web Ltd.
        • #5
          • rsaEncryption: nil
          • B8:9E:4F:C7:8C:DF:3F:29:92:2F:CB:55:9D:27:59:9F:
            23:67:0F:30:78:9D:AA:8B:D6:AD:53:4A:9E:6C:D2:F7:
            F8:97:C2:44:A3:F1:5B:ED:09:EA:E0:00:B1:C2:0C:9D:
            07:D9:E5:83:25:FF:DA:2E:31:9F:C4:59:DB:BD:29:5B:
            5A:EF:D6:E0:F3:8D:8C:1A:B9:63:EE:B1:D6:FB:7D:74:
            4D:01:28:76:08:68:E4:68:3B:9A:97:E4:ED:BF:42:B3:
            DD:B6:90:91:0E:08:5F:B8:5F:CE:E6:EB:6F:ED:05:29:
            38:F8:E0:64:AC:4D:5C:A8:3B:42:B4:10:D9:09:84:6F            : 0x010001
        • X509v3 extensions
          • basicConstraints
            • nil
          • keyUsage: true, 0x80
          • crlDistributionPoints: http://CSC3-2004-crl.verisign.com/CSC3-2004.crl
          • certificatePolicies
            • 2.16.840.1.113733.1.7.23.3
              • id-qt-cps: https://www.verisign.com/rpa
          • extendedKeyUsage: codeSigning
          • authorityInfoAccess
            • #0
              • OCSP: http://ocsp.verisign.com
              • caIssuers: http://CSC3-2004-aia.verisign.com/CSC3-2004-aia.cer
          • authorityKeyIdentifier: 
            08 f5 51 e8 fb fe 3d 3d  64 36 7c 68 cf 5b 78 a8  |..Q...==d6|h.[x.|
df b9 c5 37                                       |...7            |
          • nsCertType: 0x10
          • 1.3.6.1.4.1.311.2.1.27
            • false: true
      • RSA-SHA1: 
        39 ae 63 53 d0 87 71 f7  43 1f f8 fb 97 d9 f0 9a  |9.cS..q.C.......|
b4 36 25 be e8 91 29 4b  b4 5c 31 7b 14 00 9b d3  |.6%...)K.\1{....|
29 e7 b3 b0 9e a6 56 e5  1f 63 73 56 6d 0c 59 c3  |).....V..csVm.Y.|
59 8e 58 22 d2 32 1b e7  49 0e ab e7 c5 30 eb 48  |Y.X".2..I....0.H|
31 05 98 3e d5 08 1c 8e  ee ca 5f 96 e9 9f 5b 9c  |1..>......_...[.|
84 13 d2 9a 0c 3f 28 c7  9f 86 ef 67 dc 4a 06 94  |.....?(....g.J..|
63 49 c8 43 cc d3 93 0c  73 69 45 25 71 9f a2 10  |cI.C....siE%q...|
29 a5 e8 d3 3b 89 4d 05  8d 42 2d 94 35 3b ce 44  |)...;.M..B-.5;.D|
e1 2b cc 99 96 0c 45 b3  09 4c 77 6c 02 05 05 da  |.+....E..Lwl....|
27 ed d7 fa 82 09 7f 21  3b 20 84 e8 34 1e 3f a9  |'......!; ..4.?.|
fc 1f d8 67 2b 47 22 29  08 8f c2 b1 2e 63 3f e1  |...g+G").....c?.|
89 4a d5 58 fb 4a d7 45  48 67 d1 41 be 47 68 f7  |.J.X.J.EHg.A.Gh.|
51 d6 a9 70 05 b2 39 07  1c dc bc da 68 07 75 43  |Q..p..9.....h.uC|
0f c4 25 1c 6f f5 54 5e  97 8f 76 99 9d 95 07 80  |..%.o.T^..v.....|
8b 75 d6 85 98 63 3c 9e  93 af 89 88 ac 25 4d 49  |.u...c<......%MI|
31 eb 8e 69 69 ee ef b2  cc d1 b6 8a 5a d3 4f 78  |1..ii.......Z.Ox|
    • 1
      • unnamed
        • #0
          • C: US
          • O: VeriSign, Inc.
          • OU: VeriSign Trust Network
          • OU: Terms of use at https://www.verisign.com/rpa (c)04
          • CN: VeriSign Class 3 Code Signing 2004 CA
        • 0D:34:69:5F:3D:F1:20:6D:A6:57:9A:0D:B7:85:C2:5F
      • SHA1: nil
      • #2
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • messageDigest: 
          83 a5 e2 27 03 ee 8a 4f  6a 04 af 38 71 71 51 b2  |...'...Oj..8qqQ.|
02 f9 97 e1                                       |....            |
      • rsaEncryption: 
        a2 af 1e b0 56 b4 e4 6e  db 4b a3 69 d8 55 21 cc  |....V..n.K.i.U!.|
e9 5a ee 01 b1 d3 d9 3f  ff fb d8 dc 4d 73 99 37  |.Z.....?....Ms.7|
26 c0 b6 91 11 8c e3 3c  3b fc eb a4 9c 69 f5 df  |&......<;....i..|
93 78 4e df 0e 12 ee 5c  81 f4 dc 2c 70 46 b8 5d  |.xN....\...,pF.]|
ad f8 8b bc d1 1a d5 53  a2 d8 e5 58 a9 fd 5d 15  |.......S...X..].|
ba a7 66 00 54 be 8d ac  70 82 08 e3 09 9f 8b 9b  |..f.T...p.......|
a9 5b db 98 ab 28 75 df  55 3c 20 f3 ec de 76 06  |.[...(u.U< ...v.|
b1 b6 ae fa 60 49 55 31  a4 57 48 1a 4d ac d2 8b  |....`IU1.WH.M...|
offsetsizetypecomment
15c115HTM#
15d0337904BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK