AccessRuntime.exe

info
MZ
PE
resources
imports
foremost
7zip
version info
signature
hexdump
disasm
log
discuss
donate

filename	AccessRuntime.exe
size	58937448 (0x3835068)
md5	f448b8b0d41b867fa0491df96bfe624d

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	scan pending
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0x38338f7
lfanew	0x100

Rich Header

lib id	version	times used
125	50727	24
109	50727	126
93	2035	2
25	9210	2
37	8755	2
93	2067	7
1	0	230
124	50727	1
110	50727	119
120	50727	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x49d49d29
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	8.0
SizeOfCode	0x81200
SizeOfInitializedData	0x11200
SizeOfUninitializedData	0
AddressOfEntryPoint	0x57873
BaseOfCode	0x1000
BaseOfData	0x84000
ImageBase	0x30000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x9b000
SizeOfHeaders	0x400
CheckSum	0x38356ce
Subsystem	2
DllCharacteristics	0x40
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x81021	0x81200	R-X CODE
.data	0x83000	0x95b8	0x4200	RW- IDATA
.rsrc	0x8d000	0x512c	0x5200	R-- IDATA
.reloc	0x93000	0x7dd4	0x7e00	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x81190	0x8c
RESOURCE	0x8d000	0x512c
EXCEPTION	0	0
SECURITY	0x3833908	0x1760
BASERELOC	0x93000	0x7dd4
DEBUG	0x81f80	0x38
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0xcef8	0x40
Bound_IAT	0	0
IAT	0x1000	0x298
Delay_IAT	0x80d8c	0xc0
CLR_Header	0	0

show previews

type	name	size	cp
ICON	#1	744	1252
ICON	#2	296	1252
DIALOG	#100	228	1252
DIALOG	#200	228	1252
DIALOG	#400	254	1252
DIALOG	#500	254	1252
RCDATA	SCRIPT	16210	1252
GROUP_ICON	0	34	1252
VERSION	#1	1044	1252
MANIFEST	#1	817	1252

module_name	hint	ord	function_name
KERNEL32.dll	943		lstrlenW
KERNEL32.dll	235		FreeLibrary
KERNEL32.dll	403		GetProcAddress
KERNEL32.dll	574		LoadLibraryA
KERNEL32.dll	43		CloseHandle
KERNEL32.dll	333		GetExitCodeProcess
KERNEL32.dll	885		WaitForSingleObject
KERNEL32.dll	609		MultiByteToWideChar
KERNEL32.dll	942		lstrlenA
KERNEL32.dll	342		GetFileSize
KERNEL32.dll	74		CreateFileA
KERNEL32.dll	66		CreateDirectoryA
KERNEL32.dll	120		DeleteFileA
KERNEL32.dll	448		GetTempFileNameA
KERNEL32.dll	450		GetTempPathA
KERNEL32.dll	348		GetFullPathNameA
KERNEL32.dll	853		UnmapViewOfFile
KERNEL32.dll	596		MapViewOfFile
KERNEL32.dll	75		CreateFileMappingA
KERNEL32.dll	58		CopyFileA
KERNEL32.dll	602		MoveFileA
KERNEL32.dll	670		ReadFile
KERNEL32.dll	174		ExpandEnvironmentStringsA
KERNEL32.dll	764		SetEvent
KERNEL32.dll	70		CreateEventA
KERNEL32.dll	769		SetFilePointer
KERNEL32.dll	593		LockResource
KERNEL32.dll	579		LoadResource
KERNEL32.dll	214		FindResourceA
KERNEL32.dll	434		GetSystemDirectoryA
KERNEL32.dll	464		GetUserDefaultLangID
KERNEL32.dll	432		GetSystemDefaultLangID
KERNEL32.dll	469		GetVersionExA
KERNEL32.dll	902		WriteFile
KERNEL32.dll	491		GlobalFree
KERNEL32.dll	484		GlobalAlloc
KERNEL32.dll	49		CompareStringA
KERNEL32.dll	309		GetCurrentProcess
KERNEL32.dll	907		WritePrivateProfileStringA
KERNEL32.dll	479		GetWindowsDirectoryA
KERNEL32.dll	754		SetCurrentDirectoryA
KERNEL32.dll	92		CreateProcessA
KERNEL32.dll	321		GetDiskFreeSpaceExA
KERNEL32.dll	368		GetModuleFileNameA
KERNEL32.dll	782		SetLastError
KERNEL32.dll	889		WideCharToMultiByte
KERNEL32.dll	773		SetFileTime
KERNEL32.dll	132		DosDateTimeToFileTime
KERNEL32.dll	901		WriteConsoleW
KERNEL32.dll	296		GetConsoleOutputCP
KERNEL32.dll	891		WriteConsoleA
KERNEL32.dll	796		SetStdHandle
KERNEL32.dll	294		GetConsoleMode
KERNEL32.dll	277		GetConsoleCP
KERNEL32.dll	225		FlushFileBuffers
KERNEL32.dll	561		LCMapStringW
KERNEL32.dll	560		LCMapStringA
KERNEL32.dll	430		GetStringTypeW
KERNEL32.dll	427		GetStringTypeA
KERNEL32.dll	390		GetOEMCP
KERNEL32.dll	247		GetCPInfo
KERNEL32.dll	520		HeapSize
KERNEL32.dll	825		Sleep
KERNEL32.dll	869		VirtualAlloc
KERNEL32.dll	310		GetCurrentProcessId
KERNEL32.dll	459		GetTickCount
KERNEL32.dll	653		QueryPerformanceCounter
KERNEL32.dll	872		VirtualFree
KERNEL32.dll	510		HeapCreate
KERNEL32.dll	512		HeapDestroy
KERNEL32.dll	532		InterlockedDecrement
KERNEL32.dll	536		InterlockedIncrement
KERNEL32.dll	839		TlsFree
KERNEL32.dll	841		TlsSetValue
KERNEL32.dll	838		TlsAlloc
KERNEL32.dll	840		TlsGetValue
KERNEL32.dll	345		GetFileType
KERNEL32.dll	307		GetCurrentDirectoryA
KERNEL32.dll	356		GetLastError
KERNEL32.dll	573		LeaveCriticalSection
KERNEL32.dll	139		EnterCriticalSection
KERNEL32.dll	527		InitializeCriticalSection
KERNEL32.dll	118		DeleteCriticalSection
KERNEL32.dll	584		LocalFree
KERNEL32.dll	337		GetFileAttributesA
KERNEL32.dll	580		LocalAlloc
KERNEL32.dll	533		InterlockedExchange
KERNEL32.dll	241		GetACP
KERNEL32.dll	359		GetLocaleInfoA
KERNEL32.dll	454		GetThreadLocale
KERNEL32.dll	259		GetCommandLineA
KERNEL32.dll	514		HeapFree
KERNEL32.dll	508		HeapAlloc
KERNEL32.dll	405		GetProcessHeap
KERNEL32.dll	424		GetStartupInfoA
KERNEL32.dll	833		TerminateProcess
KERNEL32.dll	850		UnhandledExceptionFilter
KERNEL32.dll	813		SetUnhandledExceptionFilter
KERNEL32.dll	549		IsDebuggerPresent
KERNEL32.dll	657		RaiseException
KERNEL32.dll	518		HeapReAlloc
KERNEL32.dll	703		RtlUnwind
KERNEL32.dll	172		ExitThread
KERNEL32.dll	313		GetCurrentThreadId
KERNEL32.dll	101		CreateThread
KERNEL32.dll	370		GetModuleHandleA
KERNEL32.dll	171		ExitProcess
KERNEL32.dll	440		GetSystemTimeAsFileTime
KERNEL32.dll	426		GetStdHandle
KERNEL32.dll	233		FreeEnvironmentStringsA
KERNEL32.dll	328		GetEnvironmentStrings
KERNEL32.dll	234		FreeEnvironmentStringsW
KERNEL32.dll	330		GetEnvironmentStringsW
KERNEL32.dll	778		SetHandleCount
OLEAUT32.dll		2
OLEAUT32.dll		150
OLEAUT32.dll		149
OLEAUT32.dll		8
OLEAUT32.dll		9
OLEAUT32.dll		200
OLEAUT32.dll		10
OLEAUT32.dll		12
OLEAUT32.dll		7
OLEAUT32.dll		6
VERSION.dll	10		VerQueryValueA
VERSION.dll			GetFileVersionInfoA
VERSION.dll	1		GetFileVersionInfoSizeA
ole32.dll	6		CLSIDFromProgID
ole32.dll	58		CoInitialize
ole32.dll	100		CoTaskMemFree
ole32.dll	252		OleRun
ole32.dll	8		CLSIDFromString
ole32.dll	16		CoCreateInstance
USER32.dll	640		SetWindowLongA
USER32.dll	571		SendMessageA
USER32.dll	366		GetWindowLongA
USER32.dll	153		DestroyWindow
USER32.dll	515		PostQuitMessage
USER32.dll	161		DispatchMessageA
USER32.dll	194		EnableMenuItem
USER32.dll	196		EnableWindow
USER32.dll	658		ShowWindow
USER32.dll	699		UpdateWindow
USER32.dll	273		GetDlgItem
USER32.dll	513		PostMessageA
USER32.dll	682		TranslateMessage
USER32.dll	417		IsDialogMessageA
USER32.dll	314		GetMessageA
USER32.dll	198		EndDialog
USER32.dll	419		IsDlgButtonChecked
USER32.dll	158		DialogBoxParamA
USER32.dll	85		CreateDialogParamA
USER32.dll	225		ExitWindowsEx
USER32.dll	478		MessageBoxA
USER32.dll	646		SetWindowTextA
USER32.dll	665		SystemParametersInfoA
USER32.dll	348		GetSystemMenu
USER32.dll	42		CharNextA
USER32.dll	511		PeekMessageA
GDI32.dll	58		CreateFontIndirectA

StringTable 000004E4

CompanyName	Microsoft Corporation
FileDescription
FileVersion	12.0.6425.1000
InternalName
LegalCopyright	© 2006 Microsoft Corporation. All rights reserved.
LegalTrademarks1	Microsoft® is a registered trademark of Microsoft Corporation.
LegalTrademarks2	Windows® is a registered trademark of Microsoft Corporation.
OriginalFilename
ProductName
ProductVersion	12.0.6425.1000

VS_FIXEDFILEINFO

FileVersion	12.0.6425.1000
ProductVersion	12.0.6425.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	0
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Code Signing PCA

serial: 61062781000000000008

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ab:11:dc:50:ff:5c:9d:cb:c0
        Signature Algorithm: sha1WithRSA
        Issuer: OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
        Validity
            Not Before: Aug 22 22:31:02 2007 GMT
            Not After : Aug 25 07:00:00 2012 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b7:79:7d:d6:5d:b3:45:39:a8:34:ac:31:da:f9:
                    25:35:49:77:c0:fb:1f:9e:c7:45:71:ef:d1:46:e8:
                    d4:8c:c3:6b:4c:52:62:f4:99:02:c3:4d:d8:49:6c:
                    2f:24:3e:65:bf:ce:23:b7:0b:48:b7:7f:75:dd:45:
                    bd:aa:8f:0e:50:c5:25:2b:f2:a0:e7:0d:23:1f:d1:
                    41:24:fa:62:99:cf:19:45:a5:93:4a:1f:99:cd:b3:
                    2f:22:c3:4a:2d:7c:6f:d9:15:1e:3b:8c:39:10:39:
                    dd:bd:29:f4:66:3b:2d:01:32:ff:fe:27:48:a6:b5:
                    6c:01:87:9c:fb:ba:b2:63:7f:82:f9:5c:a0:81:84:
                    85:8e:b0:f2:b8:94:a3:cf:38:a6:50:85:17:27:87:
                    4e:dd:30:f6:00:3d:f4:c6:f9:3d:81:be:86:ed:6c:
                    39:a7:2e:34:f6:b4:2e:af:0a:7d:62:91:78:66:9c:
                    98:73:0d:86:af:f2:c4:f3:20:b9:4f:12:8d:63:cb:
                    2c:d9:32:45:19:ee:bb:4a:96:3b:50:53:18:ce:66:
                    51:79:aa:ad:87:c8:56:3e:9f:82:50:88:6e:05:b1:
                    35:c1:7b:24:bd:52:66:3d:99:4e:cc:2b:7e:33:6e:
                    84:47:06:d1:9e:d0:4a:86:02:6e:86:00:a4:c0:87:
                    df:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Code Signing
            2.5.29.1: 
                0....[.p.ir.#Q~..M....r0p1+0)..U..."Copyright (c) 1997 Microsoft Corp.1.0...U....Microsoft Corporation1!0...U....Microsoft Root Authority......<<...>.c..@
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier: 
                CC:1D:CE:76:00:70:5B:AF:F1:DA:C4:4E:9A:51:44:2E:A3:44:63:F0
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
    Signature Algorithm: sha1WithRSA
    Signature Value:
        7b:ab:ae:7e:4a:26:f2:ce:bc:4e:74:a2:58:27:74:2a:75:b3:
        86:fd:ab:4c:94:78:00:4d:e9:ca:eb:18:dc:69:c5:0e:a2:7c:
        f3:02:43:c6:ca:87:cc:f8:53:cc:c2:9f:bd:56:6f:f0:63:44:
        a9:44:00:ee:96:c8:9a:d5:1c:b8:0b:9f:19:0d:94:d7:da:1e:
        ad:29:7d:ef:ed:a6:73:ac:8f:de:39:8e:3d:98:6a:bc:38:6d:
        d2:88:af:23:fd:df:e9:d6:69:09:91:88:bd:fe:e1:00:bb:34:
        f3:f7:7c:f9:10:12:2e:05:eb:29:96:93:42:6b:28:71:b7:38:
        8f:e0:07:0d:c9:5d:68:cd:bd:80:41:6b:66:a8:bb:b7:bb:8e:
        34:ca:f2:03:10:7c:7a:f5:d2:e0:42:df:7b:fe:e1:e1:ac:fe:
        f6:df:d5:0d:b3:70:d6:92:e3:4f:b6:38:a2:7c:2d:d4:3d:db:
        34:0b:62:37:02:9f:81:6a:23:89:f6:5c:63:8f:b0:5a:bb:39:
        d7:60:8c:55:84:1a:33:f5:3b:98:a0:82:0c:a2:5f:8b:b3:2c:
        b7:a1:a5:cb:ab:da:20:b6:bf:30:19:85:20:14:0d:2a:bc:52:
        f4:41:e0:5e:30:e3:92:28:69:87:c1:70:e2:f3:a7:ab:ce:80:
        42:72:76:0e

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:06:27:81:00:00:00:00:00:08
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA
        Validity
            Not Before: Oct 22 21:24:55 2008 GMT
            Not After : Jan 22 21:34:55 2010 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, CN=Microsoft Corporation
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bd:72:b4:89:e7:1c:9f:85:c7:74:b8:60:5c:03:
                    36:3d:9c:fd:99:7a:9a:29:46:22:b0:a7:87:53:ed:
                    ee:46:3a:c7:5b:05:0b:57:a8:b7:ca:05:cc:d3:4c:
                    77:47:70:85:b3:e5:cb:df:67:e7:a3:fd:74:27:93:
                    67:9f:d7:8a:03:44:30:c6:f7:c9:ba:c9:3a:1d:08:
                    56:44:4f:17:08:0d:f9:b4:19:68:aa:24:1c:fb:05:
                    57:85:e9:c5:4e:07:21:37:a7:eb:ce:2c:2f:b6:42:
                    cd:21:05:a7:d6:e6:d3:28:57:c7:1b:7a:ce:29:36:
                    07:cd:9e:55:cc:bb:f1:22:eb:a8:23:a4:0d:29:c2:
                    fb:d0:c3:5a:3e:63:3d:c7:2c:49:0b:7b:79:85:f0:
                    88:ef:71:bd:43:5a:e3:a3:b3:0d:f3:55:fb:25:e0:
                    e2:20:d3:e7:9a:5e:94:a5:33:2d:28:7f:57:1b:55:
                    6a:0c:32:44:ef:66:6c:6f:f0:38:9c:ef:02:ad:9a:
                    a1:dd:98:07:10:0e:3c:18:69:e2:79:4e:46:14:e0:
                    b9:8c:d0:75:6d:9c:ac:00:9c:2d:42:f5:51:b8:5a:
                    f4:78:45:83:e9:2e:7c:2b:bb:5d:cd:19:61:28:ad:
                    94:43:0a:c5:6a:42:ff:b5:32:ae:a4:29:22:de:16:
                    e8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Subject Key Identifier: 
                23:D1:73:2A:4C:BD:FB:E5:21:FA:71:1E:99:15:D1:17:F9:C4:A6:8A
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Authority Key Identifier: 
                CC:1D:CE:76:00:70:5B:AF:F1:DA:C4:4E:9A:51:44:2E:A3:44:63:F0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/CSPCA.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/CSPCA.crt
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        43:29:cf:63:bd:6c:e3:73:6d:c3:99:d7:6d:0c:88:3b:c6:48:
        73:7a:25:ce:2c:e2:37:7b:9d:34:9f:bd:23:ce:be:df:d8:5c:
        79:11:6b:13:51:20:01:63:b9:72:f7:08:e3:c6:7d:51:2a:16:
        28:d4:d1:e7:9b:2a:cf:18:0d:d2:13:71:91:29:ec:56:bd:f9:
        d6:c5:0d:2f:af:65:2d:6d:4d:45:29:56:72:84:4f:3f:d2:6a:
        1d:41:62:a9:79:5c:8e:f0:c7:77:8a:cb:02:28:2e:9d:c7:9c:
        2b:e5:b9:2a:09:dd:ec:97:e2:e5:7a:8d:5e:10:88:53:a1:dd:
        60:4f:77:98:71:60:a8:5b:39:91:d3:ab:12:1f:05:e9:c3:45:
        a9:d3:c2:51:b9:af:b8:dc:fc:06:84:00:f4:74:a3:db:ff:cc:
        1d:a0:23:05:07:e4:27:35:c2:97:90:19:aa:82:60:27:e8:fb:
        84:2b:1e:d1:04:cb:8e:cf:82:0d:d7:a8:4d:43:40:75:d2:de:
        dd:77:ef:8a:5c:6b:0f:87:64:8f:b4:ba:b7:ba:ab:67:54:21:
        45:aa:4a:68:e7:54:5e:8b:14:5c:67:78:ec:90:5c:03:10:91:
        08:9d:24:20:97:e8:df:00:11:70:a9:f9:b2:72:70:b7:ae:e2:
        c2:9f:16:02

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
        Validity
            Not Before: Sep 16 01:04:47 2006 GMT
            Not After : Sep 15 07:00:00 2019 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Timestamping PCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:dc:37:6e:fb:af:c8:42:4a:71:18:c8:ce:48:3e:
                    53:c0:fa:ab:14:ba:2c:32:bb:12:4f:52:c8:83:ed:
                    3e:33:d9:49:31:92:28:b6:91:64:e0:1f:50:84:ba:
                    c2:4b:d1:7f:05:f8:ef:75:be:8b:c7:a8:d5:ae:69:
                    70:66:78:27:66:e8:b6:b7:ef:85:b9:cd:ee:aa:fd:
                    12:a4:0b:59:22:29:2f:cf:40:d9:56:04:1b:76:b5:
                    6d:64:6d:4a:54:db:dd:f1:de:bf:9f:83:c7:80:df:
                    7f:4c:02:37:94:f5:c0:9e:08:56:1e:68:47:cd:d9:
                    c0:76:5c:2f:7d:b6:25:04:b4:56:5b:6a:1c:63:ff:
                    80:7c:3c:ee:d5:04:25:4d:39:77:74:07:5d:c2:5c:
                    d8:86:37:2c:75:c9:0e:ea:1e:39:09:7c:76:fe:9d:
                    6c:6e:7a:e0:ec:3e:8f:97:9e:71:0e:5f:2a:4f:18:
                    62:60:32:9e:d2:83:4e:2b:22:5c:68:45:8b:de:2f:
                    84:10:50:b2:f9:b5:1a:8d:6c:ee:25:9b:13:f8:cb:
                    10:d7:85:0e:f4:82:76:73:36:c6:95:7a:a2:cc:60:
                    06:ec:05:b0:86:33:b7:f8:94:5b:84:41:84:58:85:
                    94:6e:b0:1f:2c:48:cc:6f:9c:43:e0:6a:e8:7f:26:
                    8e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                Time Stamping
            2.5.29.1: 
                0....[.p.ir.#Q~..M....r0p1+0)..U..."Copyright (c) 1997 Microsoft Corp.1.0...U....Microsoft Corporation1!0...U....Microsoft Root Authority......<<...>.c..@
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Subject Key Identifier: 
                6F:E8:4E:3F:97:B9:34:AB:4B:86:8F:BC:9C:EA:AC:3B:41:43:C6:D0
            1.3.6.1.4.1.311.20.2: 
                .
.S.u.b.C.A
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        94:4d:11:31:c2:7c:50:bb:11:8e:a1:61:07:01:0e:8c:70:45:
        8d:ef:73:54:bd:3f:09:05:2d:ff:b8:51:53:85:1c:ed:39:91:
        b7:a3:56:0b:de:8c:b6:3b:1b:d1:fb:ac:a7:c9:b7:b1:51:21:
        1b:6f:08:69:7e:6b:03:a2:22:46:ed:6c:b4:6d:7c:22:b8:46:
        d3:84:f3:8d:0f:be:07:8a:36:c1:eb:7e:e9:70:5d:45:9f:92:
        d2:cc:ce:dd:8e:c0:e1:bf:2a:cd:7c:ec:c9:ae:32:d5:87:b9:
        cb:63:c4:36:d1:18:21:bf:76:de:3b:9a:b3:1b:73:9e:21:88:
        d8:b4:b4:12:54:8c:f4:9c:c2:65:4a:9a:28:26:9c:60:8a:0f:
        3b:c7:13:65:78:48:bb:cf:ad:83:3a:4f:b0:62:58:de:30:e9:
        e9:39:1d:e3:89:f2:da:39:81:f9:13:21:8c:64:80:63:06:04:
        96:f2:9a:02:43:2f:7b:46:88:ba:ff:02:d9:65:f9:4a:de:da:
        03:74:93:b3:05:6e:0c:cc:9d:dc:28:61:7c:48:f1:17:9c:11:
        21:38:02:1c:87:ac:06:c5:96:32:b8:e5:40:c6:53:3d:bd:a9:
        89:de:e8:66:37:8d:f4:22:96:9c:cc:b0:77:54:51:3a:d6:72:
        44:b2:23:f6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:05:a2:30:00:00:00:00:00:08
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Timestamping PCA
        Validity
            Not Before: Jul 25 19:01:15 2008 GMT
            Not After : Jul 25 19:11:15 2013 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=MOPR, OU=nCipher DSE ESN:85D3-305C-5BCF, CN=Microsoft Time-Stamp Service
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:f0:04:2d:b2:96:c0:1a:81:67:25:b1:26:62:b3:
                    13:4b:ce:30:ba:c0:12:38:fc:81:65:34:07:c4:36:
                    b2:24:68:f6:07:04:c0:07:97:f4:b7:f1:7b:1e:62:
                    2c:46:d9:4b:a4:51:34:b7:d3:6c:ed:5a:3b:b4:83:
                    a1:47:3d:11:08:2e:35:6b:45:e6:c2:3c:8c:02:66:
                    02:a9:18:69:eb:4a:ed:27:2c:ee:3c:77:5b:a4:d4:
                    70:99:4b:57:84:10:d0:af:2d:f8:89:1d:e6:ea:29:
                    b4:e7:cf:9e:06:62:a7:72:54:c2:3b:c6:cf:3f:b8:
                    e1:b0:58:10:6c:e5:a5:d7:c3:c2:75:37:bd:f4:85:
                    e1:81:e8:28:d8:1b:f1:f2:ae:f1:82:a3:d6:d7:03:
                    a2:9f:15:84:fb:3d:fa:ab:e1:b6:32:c8:a0:02:64:
                    f3:e6:ff:1a:26:71:08:53:8a:15:02:f2:83:27:76:
                    49:82:71:a7:ef:ad:32:78:c6:d7:6c:16:4f:22:65:
                    97:62:4d:46:2f:ff:23:af:85:ec:a6:70:bd:03:cb:
                    da:d8:32:05:c5:2b:90:40:b6:9e:d5:2c:86:6c:b7:
                    cb:13:32:7d:8d:c6:7e:ae:17:2f:32:fc:66:bb:1d:
                    b0:45:55:f8:ad:fa:2d:67:83:67:29:93:84:d2:5a:
                    a1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E8:97:F6:F7:EF:8C:F1:E6:69:E3:59:68:4E:F7:98:8A:7A:DD:9B:2E
            X509v3 Authority Key Identifier: 
                6F:E8:4E:3F:97:B9:34:AB:4B:86:8F:BC:9C:EA:AC:3B:41:43:C6:D0
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/tspca.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/tspca.crt
            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        0d:3f:77:5f:91:3c:be:a5:35:a4:db:05:05:84:1f:56:f2:ef:
        99:a6:c7:08:8d:2f:b3:cd:3f:71:d5:86:7c:77:1f:dd:eb:17:
        b2:bd:7c:e3:f9:99:f2:0a:45:48:ad:14:bb:69:2c:f2:3e:67:
        62:54:f2:ee:7f:27:11:92:39:ec:ce:d9:87:4e:88:f7:60:47:
        23:7b:27:15:40:08:9f:bf:0d:31:04:82:d8:35:b6:0c:9c:00:
        d3:8b:aa:78:61:c5:b5:88:41:9d:3e:36:dc:58:a4:27:9b:3a:
        da:bd:06:5d:14:a6:b2:0f:4c:c1:8e:3c:8b:f2:62:99:f8:66:
        ed:d5:f3:1c:28:b0:32:db:ca:31:09:bc:fb:22:68:46:4c:fa:
        d3:73:22:e7:29:8e:22:00:fb:56:bf:06:ae:81:a0:15:ba:34:
        f9:28:8e:1f:4a:62:05:a1:89:f5:81:47:e9:0d:91:08:d7:58:
        3b:8f:1e:6b:09:69:a9:c0:48:7c:55:82:3f:5f:00:38:43:9c:
        06:cc:3f:d8:2f:bf:4f:73:09:3d:fd:ba:5e:f4:c7:ec:37:c2:
        64:61:a0:4d:d4:3d:70:cc:5b:b0:13:81:c1:d4:a3:31:1a:bd:
        64:d6:96:d2:7a:3f:2a:5b:46:53:09:3c:cd:03:f9:3f:59:00:
        cc:89:53:61

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

96 a9 7d d4 16 7f 3a b3 03 de e5 a4 84 a6 e9 80 |..}...:.........| 27 e8 da b3 |'... |

unnamed

2
- 2E:AB:11:DC:50:FF:5C:9D:CB:C0
- RSA-SHA1-2: nil
- #2
  - OU: Copyright (c) 1997 Microsoft Corp.
  - OU: Microsoft Corporation
  - CN: Microsoft Root Authority
- 2007-08-22 22:31:02 UTC: 2012-08-25 07:00:00 UTC
- Subject
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Code Signing PCA
- #5
  - rsaEncryption: nil
  - B7:79:7D:D6:5D:B3:45:39:A8:34:AC:31:DA:F9:25:35:
    49:77:C0:FB:1F:9E:C7:45:71:EF:D1:46:E8:D4:8C:C3:
    6B:4C:52:62:F4:99:02:C3:4D:D8:49:6C:2F:24:3E:65:
    BF:CE:23:B7:0B:48:B7:7F:75:DD:45:BD:AA:8F:0E:50:
    C5:25:2B:F2:A0:E7:0D:23:1F:D1:41:24:FA:62:99:CF:
    19:45:A5:93:4A:1F:99:CD:B3:2F:22:C3:4A:2D:7C:6F:
    D9:15:1E:3B:8C:39:10:39:DD:BD:29:F4:66:3B:2D:01:
    32:FF:FE:27:48:A6:B5:6C:01:87:9C:FB:BA:B2:63:7F:
    82:F9:5C:A0:81:84:85:8E:B0:F2:B8:94:A3:CF:38:A6:
    50:85:17:27:87:4E:DD:30:F6:00:3D:F4:C6:F9:3D:81:
    BE:86:ED:6C:39:A7:2E:34:F6:B4:2E:AF:0A:7D:62:91:
    78:66:9C:98:73:0D:86:AF:F2:C4:F3:20:B9:4F:12:8D:
    63:CB:2C:D9:32:45:19:EE:BB:4A:96:3B:50:53:18:CE:
    66:51:79:AA:AD:87:C8:56:3E:9F:82:50:88:6E:05:B1:
    35:C1:7B:24:BD:52:66:3D:99:4E:CC:2B:7E:33:6E:84:
    47:06:D1:9E:D0:4A:86:02:6E:86:00:A4:C0:87:DF:53: 0x010001
- #6
  - extendedKeyUsage: codeSigning
  - 2.5.29.1
    - 5b d0 70 ef 69 72 9e 23 51 7e 14 b2 4d 8e ff cb |[.p.ir.#Q~..M...|
      - #0
        OU: Copyright (c) 1997 Microsoft Corp.
        OU: Microsoft Corporation
        CN: Microsoft Root Authority
      - 00 c1 00 8b 3c 3c 88 11 d1 3e f6 63 ec df 40 |....<<...>.c..@ |
  - basicConstraints: true, true
  - subjectKeyIdentifier:
```
cc 1d ce 76 00 70 5b af  f1 da c4 4e 9a 51 44 2e  |...v.p[....N.QD.|
a3 44 63 f0                                       |.Dc.            |
```
  - keyUsage: 0x86

RSA-SHA1-2:

7b ab ae 7e 4a 26 f2 ce  bc 4e 74 a2 58 27 74 2a  |{..~J&...Nt.X't*|
75 b3 86 fd ab 4c 94 78  00 4d e9 ca eb 18 dc 69  |u....L.x.M.....i|
c5 0e a2 7c f3 02 43 c6  ca 87 cc f8 53 cc c2 9f  |...|..C.....S...|
bd 56 6f f0 63 44 a9 44  00 ee 96 c8 9a d5 1c b8  |.Vo.cD.D........|
0b 9f 19 0d 94 d7 da 1e  ad 29 7d ef ed a6 73 ac  |.........)}...s.|
8f de 39 8e 3d 98 6a bc  38 6d d2 88 af 23 fd df  |..9.=.j.8m...#..|
e9 d6 69 09 91 88 bd fe  e1 00 bb 34 f3 f7 7c f9  |..i........4..|.|
10 12 2e 05 eb 29 96 93  42 6b 28 71 b7 38 8f e0  |.....)..Bk(q.8..|
07 0d c9 5d 68 cd bd 80  41 6b 66 a8 bb b7 bb 8e  |...]h...Akf.....|
34 ca f2 03 10 7c 7a f5  d2 e0 42 df 7b fe e1 e1  |4....|z...B.{...|
ac fe f6 df d5 0d b3 70  d6 92 e3 4f b6 38 a2 7c  |.......p...O.8.||
2d d4 3d db 34 0b 62 37  02 9f 81 6a 23 89 f6 5c  |-.=.4.b7...j#..\|
63 8f b0 5a bb 39 d7 60  8c 55 84 1a 33 f5 3b 98  |c..Z.9.`.U..3.;.|
a0 82 0c a2 5f 8b b3 2c  b7 a1 a5 cb ab da 20 b6  |...._..,...... .|
bf 30 19 85 20 14 0d 2a  bc 52 f4 41 e0 5e 30 e3  |.0.. ..*.R.A.^0.|
92 28 69 87 c1 70 e2 f3  a7 ab ce 80 42 72 76 0e  |.(i..p......Brv.|

Certificate #1

2
- 61:06:27:81:00:00:00:00:00:08
- RSA-SHA1: nil
- Issuer
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Code Signing PCA
- 2008-10-22 21:24:55 UTC: 2010-01-22 21:34:55 UTC
- Subject
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - OU: MOPR
  - CN: Microsoft Corporation
- #5
  - rsaEncryption: nil
  - BD:72:B4:89:E7:1C:9F:85:C7:74:B8:60:5C:03:36:3D:
    9C:FD:99:7A:9A:29:46:22:B0:A7:87:53:ED:EE:46:3A:
    C7:5B:05:0B:57:A8:B7:CA:05:CC:D3:4C:77:47:70:85:
    B3:E5:CB:DF:67:E7:A3:FD:74:27:93:67:9F:D7:8A:03:
    44:30:C6:F7:C9:BA:C9:3A:1D:08:56:44:4F:17:08:0D:
    F9:B4:19:68:AA:24:1C:FB:05:57:85:E9:C5:4E:07:21:
    37:A7:EB:CE:2C:2F:B6:42:CD:21:05:A7:D6:E6:D3:28:
    57:C7:1B:7A:CE:29:36:07:CD:9E:55:CC:BB:F1:22:EB:
    A8:23:A4:0D:29:C2:FB:D0:C3:5A:3E:63:3D:C7:2C:49:
    0B:7B:79:85:F0:88:EF:71:BD:43:5A:E3:A3:B3:0D:F3:
    55:FB:25:E0:E2:20:D3:E7:9A:5E:94:A5:33:2D:28:7F:
    57:1B:55:6A:0C:32:44:EF:66:6C:6F:F0:38:9C:EF:02:
    AD:9A:A1:DD:98:07:10:0E:3C:18:69:E2:79:4E:46:14:
    E0:B9:8C:D0:75:6D:9C:AC:00:9C:2D:42:F5:51:B8:5A:
    F4:78:45:83:E9:2E:7C:2B:BB:5D:CD:19:61:28:AD:94:
    43:0A:C5:6A:42:FF:B5:32:AE:A4:29:22:DE:16:E8:D3: 0x010001
- #6
  - extendedKeyUsage: codeSigning
  - subjectKeyIdentifier:
```
23 d1 73 2a 4c bd fb e5  21 fa 71 1e 99 15 d1 17  |#.s*L...!.q.....|
f9 c4 a6 8a                                       |....            |
```
  - keyUsage: true, 0x80
  - authorityKeyIdentifier:
```
cc 1d ce 76 00 70 5b af  f1 da c4 4e 9a 51 44 2e  |...v.p[....N.QD.|
a3 44 63 f0                                       |.Dc.            |
```
  - crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/CSPCA.crl
  - authorityInfoAccess
    - caIssuers: http://www.microsoft.com/pki/certs/CSPCA.crt

RSA-SHA1:

43 29 cf 63 bd 6c e3 73  6d c3 99 d7 6d 0c 88 3b  |C).c.l.sm...m..;|
c6 48 73 7a 25 ce 2c e2  37 7b 9d 34 9f bd 23 ce  |.Hsz%.,.7{.4..#.|
be df d8 5c 79 11 6b 13  51 20 01 63 b9 72 f7 08  |...\y.k.Q .c.r..|
e3 c6 7d 51 2a 16 28 d4  d1 e7 9b 2a cf 18 0d d2  |..}Q*.(....*....|
13 71 91 29 ec 56 bd f9  d6 c5 0d 2f af 65 2d 6d  |.q.).V...../.e-m|
4d 45 29 56 72 84 4f 3f  d2 6a 1d 41 62 a9 79 5c  |ME)Vr.O?.j.Ab.y\|
8e f0 c7 77 8a cb 02 28  2e 9d c7 9c 2b e5 b9 2a  |...w...(....+..*|
09 dd ec 97 e2 e5 7a 8d  5e 10 88 53 a1 dd 60 4f  |......z.^..S..`O|
77 98 71 60 a8 5b 39 91  d3 ab 12 1f 05 e9 c3 45  |w.q`.[9........E|
a9 d3 c2 51 b9 af b8 dc  fc 06 84 00 f4 74 a3 db  |...Q.........t..|
ff cc 1d a0 23 05 07 e4  27 35 c2 97 90 19 aa 82  |....#...'5......|
60 27 e8 fb 84 2b 1e d1  04 cb 8e cf 82 0d d7 a8  |`'...+..........|
4d 43 40 75 d2 de dd 77  ef 8a 5c 6b 0f 87 64 8f  |MC@u...w..\k..d.|
b4 ba b7 ba ab 67 54 21  45 aa 4a 68 e7 54 5e 8b  |.....gT!E.Jh.T^.|
14 5c 67 78 ec 90 5c 03  10 91 08 9d 24 20 97 e8  |.\gx..\.....$ ..|
df 00 11 70 a9 f9 b2 72  70 b7 ae e2 c2 9f 16 02  |...p...rp.......|

2
- 6A:0B:99:4F:C0:00:25:AB:11:DB:45:1F:58:7A:67:A2
- RSA-SHA1: nil
- #2
  - OU: Copyright (c) 1997 Microsoft Corp.
  - OU: Microsoft Corporation
  - CN: Microsoft Root Authority
- 2006-09-16 01:04:47 UTC: 2019-09-15 07:00:00 UTC
- Subject
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Timestamping PCA
- #5
  - rsaEncryption: nil
  - DC:37:6E:FB:AF:C8:42:4A:71:18:C8:CE:48:3E:53:C0:
    FA:AB:14:BA:2C:32:BB:12:4F:52:C8:83:ED:3E:33:D9:
    49:31:92:28:B6:91:64:E0:1F:50:84:BA:C2:4B:D1:7F:
    05:F8:EF:75:BE:8B:C7:A8:D5:AE:69:70:66:78:27:66:
    E8:B6:B7:EF:85:B9:CD:EE:AA:FD:12:A4:0B:59:22:29:
    2F:CF:40:D9:56:04:1B:76:B5:6D:64:6D:4A:54:DB:DD:
    F1:DE:BF:9F:83:C7:80:DF:7F:4C:02:37:94:F5:C0:9E:
    08:56:1E:68:47:CD:D9:C0:76:5C:2F:7D:B6:25:04:B4:
    56:5B:6A:1C:63:FF:80:7C:3C:EE:D5:04:25:4D:39:77:
    74:07:5D:C2:5C:D8:86:37:2C:75:C9:0E:EA:1E:39:09:
    7C:76:FE:9D:6C:6E:7A:E0:EC:3E:8F:97:9E:71:0E:5F:
    2A:4F:18:62:60:32:9E:D2:83:4E:2B:22:5C:68:45:8B:
    DE:2F:84:10:50:B2:F9:B5:1A:8D:6C:EE:25:9B:13:F8:
    CB:10:D7:85:0E:F4:82:76:73:36:C6:95:7A:A2:CC:60:
    06:EC:05:B0:86:33:B7:F8:94:5B:84:41:84:58:85:94:
    6E:B0:1F:2C:48:CC:6F:9C:43:E0:6A:E8:7F:26:8E:6B: 0x010001
- #6
  - extendedKeyUsage: timeStamping
  - 2.5.29.1
    - 5b d0 70 ef 69 72 9e 23 51 7e 14 b2 4d 8e ff cb |[.p.ir.#Q~..M...|
      - #0
        OU: Copyright (c) 1997 Microsoft Corp.
        OU: Microsoft Corporation
        CN: Microsoft Root Authority
      - 00 c1 00 8b 3c 3c 88 11 d1 3e f6 63 ec df 40 |....<<...>.c..@ |
  - 1.3.6.1.4.1.311.21.1: 0
  - subjectKeyIdentifier:
```
6f e8 4e 3f 97 b9 34 ab  4b 86 8f bc 9c ea ac 3b  |o.N?..4.K......;|
41 43 c6 d0                                       |AC..            |
```
  - 1.3.6.1.4.1.311.20.2:
```
00 53 00 75 00 62 00 43  00 41                    |.S.u.b.C.A      |
```
  - keyUsage: 0x86
  - basicConstraints: true, true

RSA-SHA1:

94 4d 11 31 c2 7c 50 bb  11 8e a1 61 07 01 0e 8c  |.M.1.|P....a....|
70 45 8d ef 73 54 bd 3f  09 05 2d ff b8 51 53 85  |pE..sT.?..-..QS.|
1c ed 39 91 b7 a3 56 0b  de 8c b6 3b 1b d1 fb ac  |..9...V....;....|
a7 c9 b7 b1 51 21 1b 6f  08 69 7e 6b 03 a2 22 46  |....Q!.o.i~k.."F|
ed 6c b4 6d 7c 22 b8 46  d3 84 f3 8d 0f be 07 8a  |.l.m|".F........|
36 c1 eb 7e e9 70 5d 45  9f 92 d2 cc ce dd 8e c0  |6..~.p]E........|
e1 bf 2a cd 7c ec c9 ae  32 d5 87 b9 cb 63 c4 36  |..*.|...2....c.6|
d1 18 21 bf 76 de 3b 9a  b3 1b 73 9e 21 88 d8 b4  |..!.v.;...s.!...|
b4 12 54 8c f4 9c c2 65  4a 9a 28 26 9c 60 8a 0f  |..T....eJ.(&.`..|
3b c7 13 65 78 48 bb cf  ad 83 3a 4f b0 62 58 de  |;..exH....:O.bX.|
30 e9 e9 39 1d e3 89 f2  da 39 81 f9 13 21 8c 64  |0..9.....9...!.d|
80 63 06 04 96 f2 9a 02  43 2f 7b 46 88 ba ff 02  |.c......C/{F....|
d9 65 f9 4a de da 03 74  93 b3 05 6e 0c cc 9d dc  |.e.J...t...n....|
28 61 7c 48 f1 17 9c 11  21 38 02 1c 87 ac 06 c5  |(a|H....!8......|
96 32 b8 e5 40 c6 53 3d  bd a9 89 de e8 66 37 8d  |.2..@.S=.....f7.|
f4 22 96 9c cc b0 77 54  51 3a d6 72 44 b2 23 f6  |."....wTQ:.rD.#.|

Certificate #3
- 2
  - 61:05:A2:30:00:00:00:00:00:08
  - RSA-SHA1: nil
  - Issuer
    - C: US
    - ST: Washington
    - L: Redmond
    - O: Microsoft Corporation
    - CN: Microsoft Timestamping PCA
  - 2008-07-25 19:01:15 UTC: 2013-07-25 19:11:15 UTC
  - Subject
    - C: US
    - ST: Washington
    - L: Redmond
    - O: Microsoft Corporation
    - OU: MOPR
    - OU: nCipher DSE ESN:85D3-305C-5BCF
    - CN: Microsoft Time-Stamp Service
  - #5
    - rsaEncryption: nil
    - F0:04:2D:B2:96:C0:1A:81:67:25:B1:26:62:B3:13:4B:
      CE:30:BA:C0:12:38:FC:81:65:34:07:C4:36:B2:24:68:
      F6:07:04:C0:07:97:F4:B7:F1:7B:1E:62:2C:46:D9:4B:
      A4:51:34:B7:D3:6C:ED:5A:3B:B4:83:A1:47:3D:11:08:
      2E:35:6B:45:E6:C2:3C:8C:02:66:02:A9:18:69:EB:4A:
      ED:27:2C:EE:3C:77:5B:A4:D4:70:99:4B:57:84:10:D0:
      AF:2D:F8:89:1D:E6:EA:29:B4:E7:CF:9E:06:62:A7:72:
      54:C2:3B:C6:CF:3F:B8:E1:B0:58:10:6C:E5:A5:D7:C3:
      C2:75:37:BD:F4:85:E1:81:E8:28:D8:1B:F1:F2:AE:F1:
      82:A3:D6:D7:03:A2:9F:15:84:FB:3D:FA:AB:E1:B6:32:
      C8:A0:02:64:F3:E6:FF:1A:26:71:08:53:8A:15:02:F2:
      83:27:76:49:82:71:A7:EF:AD:32:78:C6:D7:6C:16:4F:
      22:65:97:62:4D:46:2F:FF:23:AF:85:EC:A6:70:BD:03:
      CB:DA:D8:32:05:C5:2B:90:40:B6:9E:D5:2C:86:6C:B7:
      CB:13:32:7D:8D:C6:7E:AE:17:2F:32:FC:66:BB:1D:B0:
      45:55:F8:AD:FA:2D:67:83:67:29:93:84:D2:5A:A1:23: 0x010001
  - #6
    - subjectKeyIdentifier:
```
e8 97 f6 f7 ef 8c f1 e6  69 e3 59 68 4e f7 98 8a  |........i.YhN...|
7a dd 9b 2e                                       |z...            |
```
    - authorityKeyIdentifier:
```
6f e8 4e 3f 97 b9 34 ab  4b 86 8f bc 9c ea ac 3b  |o.N?..4.K......;|
41 43 c6 d0                                       |AC..            |
```
    - crlDistributionPoints: http://crl.microsoft.com/pki/crl/products/tspca.crl
    - authorityInfoAccess
      - caIssuers: http://www.microsoft.com/pki/certs/tspca.crt
    - extendedKeyUsage: timeStamping
    - keyUsage: true, 0xc0
- RSA-SHA1:
```
0d 3f 77 5f 91 3c be a5  35 a4 db 05 05 84 1f 56  |.?w_.<..5......V|
f2 ef 99 a6 c7 08 8d 2f  b3 cd 3f 71 d5 86 7c 77  |......./..?q..|w|
1f dd eb 17 b2 bd 7c e3  f9 99 f2 0a 45 48 ad 14  |......|.....EH..|
bb 69 2c f2 3e 67 62 54  f2 ee 7f 27 11 92 39 ec  |.i,.>gbT...'..9.|
ce d9 87 4e 88 f7 60 47  23 7b 27 15 40 08 9f bf  |...N..`G#{'.@...|
0d 31 04 82 d8 35 b6 0c  9c 00 d3 8b aa 78 61 c5  |.1...5.......xa.|
b5 88 41 9d 3e 36 dc 58  a4 27 9b 3a da bd 06 5d  |..A.>6.X.'.:...]|
14 a6 b2 0f 4c c1 8e 3c  8b f2 62 99 f8 66 ed d5  |....L..<..b..f..|
f3 1c 28 b0 32 db ca 31  09 bc fb 22 68 46 4c fa  |..(.2..1..."hFL.|
d3 73 22 e7 29 8e 22 00  fb 56 bf 06 ae 81 a0 15  |.s".)."..V......|
ba 34 f9 28 8e 1f 4a 62  05 a1 89 f5 81 47 e9 0d  |.4.(..Jb.....G..|
91 08 d7 58 3b 8f 1e 6b  09 69 a9 c0 48 7c 55 82  |...X;..k.i..H|U.|
3f 5f 00 38 43 9c 06 cc  3f d8 2f bf 4f 73 09 3d  |?_.8C...?./.Os.=|
fd ba 5e f4 c7 ec 37 c2  64 61 a0 4d d4 3d 70 cc  |..^...7.da.M.=p.|
5b b0 13 81 c1 d4 a3 31  1a bd 64 d6 96 d2 7a 3f  |[......1..d...z?|
2a 5b 46 53 09 3c cd 03  f9 3f 59 00 cc 89 53 61  |*[FS.<...?Y...Sa|
```

Signer

1
unnamed
- #0
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Code Signing PCA
- 61:06:27:81:00:00:00:00:00:08
SHA1: nil

contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

e1 b5 8c 0b 68 21 9a bc  f0 9e e0 6b c1 09 dd f2  |....h!.....k....|
af 60 13 c5                                       |.`..            |

1.3.6.1.4.1.311.2.1.12

00 41 00 63 00 63 00 65 00 73 00 73 00 52 00 75 |.A.c.c.e.s.s.R.u| 00 6e 00 74 00 69 00 6d 00 65 00 2e 00 65 00 78 |.n.t.i.m.e...e.x| 00 65 |.e |
: http://office.microsoft.com

rsaEncryption:

08 af 27 27 8d 1e 61 b7  cc 0f 4e 89 db e6 da c7  |..''..a...N.....|
f2 1c 4f dd e1 ad 93 86  d7 98 92 29 26 b5 a3 a1  |..O........)&...|
ea f2 90 15 f5 88 63 63  28 7a 0a e0 1e 7b 7c ee  |......cc(z...{|.|
b0 2e e1 ae e5 14 cc 8d  ae 86 4e 85 10 65 c8 88  |..........N..e..|
fc fc 9e fc 74 85 bd 48  4c 3f e5 82 6f 89 71 e7  |....t..HL?..o.q.|
5d d9 93 38 f4 0c 12 d6  e3 22 2f 2f b1 1a ad 67  |]..8....."//...g|
35 9d ea 9e 75 14 60 cd  6f 6b 79 6c e7 f2 eb a7  |5...u.`.okyl....|
3e 10 a7 19 61 45 ca f9  6f 9c 7b 75 d9 60 1a 19  |>...aE..o.{u.`..|
c7 09 ce a2 dd 17 f7 9f  93 d1 17 4b 25 74 0b 06  |...........K%t..|
11 42 2a d1 80 23 79 74  35 15 dd 2f 5a 25 1c 52  |.B*..#yt5../Z%.R|
82 e5 76 ba 17 cd 68 0a  a1 fe d7 9b b4 57 9b 6d  |..v...h......W.m|
cf a0 38 5b 93 bc 0d a5  6b 22 f0 a1 39 19 22 41  |..8[....k"..9."A|
0c b4 de 1c ff dd 17 c4  7e 08 aa ea 24 59 82 8b  |........~...$Y..|
02 54 6a 66 1d a9 f3 d7  39 ac 66 8c b4 dc 5d 17  |.Tjf....9.f...].|
80 a9 be 79 f4 66 06 57  8d 71 cf 70 31 e9 2d 81  |...y.f.W.q.p1.-.|
2d d8 7e e8 18 bf 1d 78  a3 f9 34 8a 0e 0a 5b 90  |-.~....x..4...[.|

countersignature

unnamed
- #0
  - C: US
  - ST: Washington
  - L: Redmond
  - O: Microsoft Corporation
  - CN: Microsoft Timestamping PCA
- 61:05:A2:30:00:00:00:00:00:08
SHA1

contentType: pkcs7-data
signingTime: 2009-04-09 23:30:22 UTC

messageDigest:

b4 3d 71 9c 93 e3 09 bd  3c ca 11 9b 81 42 88 ee  |.=q.....<....B..|
64 d9 ec 82                                       |d...            |

RSA-SHA1:

cc 9b 92 9c 75 48 46 84  9e a5 8d 12 f2 73 bd c0  |....uHF......s..|
ab 79 c0 53 48 54 19 07  92 9e 75 69 c6 1f 6e ff  |.y.SHT....ui..n.|
c2 f9 0c 09 9f 99 a7 05  c9 34 20 79 ce 96 70 16  |.........4 y..p.|
71 1b 20 24 37 6a 2f 06  98 fe 86 6b 66 bf 75 c0  |q. $7j/....kf.u.|
e0 20 43 58 eb 62 59 d6  e7 39 2c 12 de 87 6a 9a  |. CX.bY..9,...j.|
65 18 1b d7 e3 8f 3a d3  a9 e7 62 8b 0d 87 8c 29  |e.....:...b....)|
2e ad 2a 1c 30 35 2b 63  55 f4 a2 c7 12 20 75 69  |..*.05+cU.... ui|
71 51 e5 15 61 9d 48 98  21 20 12 e0 e5 2c 32 d2  |qQ..a.H.! ...,2.|
e0 cb 4f 0e a8 7b e8 33  04 2d f7 7c 3c 6d 40 2a  |..O..{.3.-.|

show previews

offset	size	type	comment
0	600064	EXE	04/02/2009 11:10:33	#
15c1	15	HTM		#
1aae2da	4691	GIF	(780 x 59)	#
21bc3d1	18077	GIF	(780 x 59)	#
21c0a6e	23545338	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 58937448 bytes (57 MiB)


--
Type = PE
Physical Size = 58937448
CPU = x86
Characteristics = Executable 32-bit
Created = 2009-04-02 11:10:33
Headers Size = 1024
Checksum = 58939086
Image Size = 634880
Section Alignment = 4096
File Alignment = 512
Code Size = 528896
Initialized Data Size = 70144
Uninitialized Data Size = 0
Linker Version = 8.0
OS Version = 4.0
Image Version = 0.0
Subsystem Version = 4.0
Subsystem = Windows GUI
DLL Characteristics = Relocated
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 805306368
Comment = FileVersion: 12.0.6425.1000
ProductVersion: 12.0.6425.0
ProductVersion: 12.0.6425.1000
CompanyName: Microsoft Corporation
FileDescription: 
InternalName: 
LegalCopyright: © 2006 Microsoft Corporation.  All rights reserved.
LegalTrademarks1: Microsoft® is a registered trademark of Microsoft Corporation.
LegalTrademarks2: Windows® is a registered trademark of Microsoft Corporation.
OriginalFilename: 
ProductName: 
----
Path = [0]
Size = 58331400
Packed Size = 58331400
Virtual Size = 58331400
Offset = 600064
--
Path = [0]
Type = Cab
WARNINGS:
There are data after the end of archive
Physical Size = 58331383
Tail Size = 17
Method = MSZip
Blocks = 1
Volumes = 1
Volume Index = 0
ID = 0

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2009-04-09 11:14:04 ....A        14942               EULA
2009-04-09 11:14:02 ....A     54526897               AccessRT.cab
2009-04-09 11:14:02 ....A      7415808               AccessRT.msi
2009-04-09 11:14:04 ....A         2480               README.HTM
2009-04-09 11:14:02 ....A      1431477               files12.cat
------------------- ----- ------------ ------------  ------------------------
2009-04-09 11:14:04           63391604     58937448  5 files

Warnings: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK