iexplore.exe - Internet Explorer

info
MZ
PE
resources
imports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	iexplore.exe
size	816280 (0xc7498)
md5	2ee1c17ba0344e6e58c572f52660d1f3

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf0

Rich Header

lib id	version	times used
147	30729	8
259	26715	3
260	26715	22
261	26715	5
257	26715	13
1	0	160
270	26715	15
255	26715	1
258	26715	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	6
TimeDateStamp	0x9a0cc333
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	14.15
SizeOfCode	0x6200
SizeOfInitializedData	0xbf200
SizeOfUninitializedData	0
AddressOfEntryPoint	0x37b0
BaseOfCode	0x1000
BaseOfData	0x8000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	10.0
ImageVersion	10.0
SubsystemVersion	10.0
Reserved1	0
SizeOfImage	0xca000
SizeOfHeaders	0x400
CheckSum	0xcb6f6
Subsystem	2
DllCharacteristics	0xc040
SizeOfStackReserve	0x100000
SizeOfStackCommit	0xe000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x6170	0x6200	R-X CODE
.data	0x8000	0x630	0x200	RW- IDATA
.idata	0x9000	0xbbe	0xc00	R-- IDATA
.didat	0xa000	0x2c	0x200	RW- IDATA
.rsrc	0xb000	0xbd440	0xbd600	R-- IDATA
.reloc	0xc9000	0x564	0x600	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x91d0	0xb4
RESOURCE	0xb000	0xbd440
EXCEPTION	0	0
SECURITY	0xc5200	0x2298
BASERELOC	0xc9000	0x564
DEBUG	0x1860	0x54
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x10b8	0x18
LOAD_CONFIG	0x1008	0xa4
Bound_IAT	0	0
IAT	0x9000	0x1cc
Delay_IAT	0x7034	0xa0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x406f95	0x406f97	0x4083fc	0x401100	0	0x100000

show previews

type	name	size
EDPENLIGHTENEDAPPINFOID	MICROSOFTEDPENLIGHTENEDAPPINFO	2
EDPPERMISSIVEAPPINFOID	MICROSOFTEDPPERMISSIVEAPPINFO	2
MUI	#1	344
WEVT_TEMPLATE	#1	103274
ICON	#1	1640
ICON	#2	744
ICON	#3	488
ICON	#4	296
ICON	#5	3752
ICON	#6	2216
ICON	#7	1736
ICON	#8	1384
ICON	#9	52209
ICON	#10	9640
ICON	#11	4264
ICON	#12	2440
ICON	#13	1128
ICON	#14	1640
ICON	#15	744
ICON	#16	488
ICON	#17	296
ICON	#18	3752
ICON	#19	2216
ICON	#20	1736
ICON	#21	1384
ICON	#22	38866
ICON	#23	9640
ICON	#24	4264
ICON	#25	2440
ICON	#26	1128
ICON	#27	744
ICON	#28	2216
ICON	#29	4264
ICON	#30	744
ICON	#31	744
ICON	#32	296
ICON	#33	2216
ICON	#34	1384
ICON	#35	4264
ICON	#36	1128
ICON	#37	744
ICON	#38	296
ICON	#39	2216
ICON	#40	1384
ICON	#41	4264
ICON	#42	1128
ICON	#43	744
ICON	#44	2216
ICON	#45	4264
ICON	#46	744
ICON	#47	2216
ICON	#48	4264
ICON	#49	744
ICON	#50	296
ICON	#51	2216
ICON	#52	1384
ICON	#53	4264
ICON	#54	1128
ICON	#55	744
ICON	#56	296
ICON	#57	296
ICON	#58	1384
ICON	#59	1128
ICON	#60	296
ICON	#61	1384
ICON	#62	1128
ICON	#63	296
ICON	#64	1384
ICON	#65	1128
ICON	#66	1640
ICON	#67	744
ICON	#68	296
ICON	#69	3752
ICON	#70	2216
ICON	#71	1384
ICON	#72	9640
ICON	#73	4264
ICON	#74	1128
ICON	#75	744
ICON	#76	296
ICON	#77	2216
ICON	#78	1384
ICON	#79	4264
ICON	#80	1128
ICON	#81	744
ICON	#82	296
ICON	#83	2216
ICON	#84	1384
ICON	#85	4264
ICON	#86	1128
ICON	#87	744
ICON	#88	296
ICON	#89	2216
ICON	#90	1384
ICON	#91	4264
ICON	#92	1128
ICON	#93	744
ICON	#94	296
ICON	#95	2216
ICON	#96	1384
ICON	#97	4264
ICON	#98	1128
ICON	#99	744
ICON	#100	296
ICON	#101	2216
ICON	#102	1384
ICON	#103	4264
ICON	#104	1128
ICON	#105	744
ICON	#106	296
ICON	#107	2216
ICON	#108	1384
ICON	#109	4264
ICON	#110	1128
ICON	#111	744
ICON	#112	2216
ICON	#113	4264
ICON	#114	744
ICON	#115	2216
ICON	#116	4264
ICON	#117	1640
ICON	#118	744
ICON	#119	296
ICON	#120	3752
ICON	#121	2216
ICON	#122	1384
ICON	#123	16716
ICON	#124	9640
ICON	#125	4264
ICON	#126	1128
ICON	#127	1640
ICON	#128	744
ICON	#129	488
ICON	#130	296
ICON	#131	3752
ICON	#132	2216
ICON	#133	1736
ICON	#134	1384
ICON	#135	52209
ICON	#136	9640
ICON	#137	4264
ICON	#138	2440
ICON	#139	1128
ICON	#140	1640
ICON	#141	744
ICON	#142	488
ICON	#143	296
ICON	#144	3752
ICON	#145	2216
ICON	#146	1736
ICON	#147	1384
ICON	#148	38866
ICON	#149	9640
ICON	#150	4264
ICON	#151	2440
ICON	#152	1128
ICON	#153	1640
ICON	#154	744
ICON	#155	488
ICON	#156	296
ICON	#157	3752
ICON	#158	2216
ICON	#159	1736
ICON	#160	1384
ICON	#161	52209
ICON	#162	9640
ICON	#163	4264
ICON	#164	2440
ICON	#165	1128
ICON	#166	1640
ICON	#167	744
ICON	#168	488
ICON	#169	296
ICON	#170	3752
ICON	#171	2216
ICON	#172	1736
ICON	#173	1384
ICON	#174	38866
ICON	#175	9640
ICON	#176	4264
ICON	#177	2440
ICON	#178	1128
GROUP_ICON	#7	188
GROUP_ICON	#9	188
GROUP_ICON	#17	188
GROUP_ICON	#19	188
GROUP_ICON	#32528	188
GROUP_ICON	#32529	188
GROUP_ICON	#32534	48
GROUP_ICON	#32535	20
GROUP_ICON	#32536	90
GROUP_ICON	#32537	90
GROUP_ICON	#32538	48
GROUP_ICON	#32539	48
GROUP_ICON	#32540	34
GROUP_ICON	#32541	90
GROUP_ICON	#32542	90
GROUP_ICON	#32543	48
GROUP_ICON	#32544	48
GROUP_ICON	#32545	48
GROUP_ICON	#32546	90
GROUP_ICON	#32547	132
GROUP_ICON	#32548	90
GROUP_ICON	#32549	90
GROUP_ICON	#32550	90
GROUP_ICON	#32551	90
GROUP_ICON	#32552	48
GROUP_ICON	#32553	48
GROUP_ICON	#32554	146
VERSION	#1	1476
MANIFEST	#1	1672

module_name	hint	ord	function_name
USER32.dll	499		GetWindowThreadProcessId
USER32.dll	8		AllowSetForegroundWindow
USER32.dll	841		SetProcessDpiAwarenessContext
USER32.dll	275		FindWindowExW
USER32.dll	784		SendMessageTimeoutW
USER32.dll	583		IsWindowVisible
USER32.dll	867		SetUserObjectInformationW
USER32.dll	975		WaitForInputIdle
USER32.dll	579		IsWindowEnabled
msvcrt.dll	1290		memcpy_s
msvcrt.dll	1265		iswspace
msvcrt.dll	1402		wcsncmp
msvcrt.dll	1221		free
msvcrt.dll	1277		malloc
msvcrt.dll	290		_callnewh
msvcrt.dll	111		_XcptFilter
msvcrt.dll	201		__p__commode
msvcrt.dll	273		_amsg_exit
msvcrt.dll	241		__wgetmainargs
msvcrt.dll	226		__set_app_type
msvcrt.dll	1198		exit
msvcrt.dll	371		_exit
msvcrt.dll	292		_cexit
msvcrt.dll	206		__p__fmode
msvcrt.dll	1256		iswalpha
msvcrt.dll	1309		rand_s
msvcrt.dll	1392		wcschr
msvcrt.dll	228		__setusermatherr
msvcrt.dll	488		_initterm
msvcrt.dll	1004		_vsnwprintf
msvcrt.dll	1029		_wcmdln
msvcrt.dll	362		_except_handler4_common
msvcrt.dll	608		_lock
msvcrt.dll	964		_unlock
msvcrt.dll	157		__dllonexit
msvcrt.dll	777		_onexit
msvcrt.dll	53		void __cdecl terminate(void) ?terminate@@YAXXZ
msvcrt.dll	311		_controlfp
msvcrt.dll	1293		memset
KERNEL32.dll	272		DeleteCriticalSection
KERNEL32.dll	975		LocalFree
KERNEL32.dll	217		CreateMutexExW
KERNEL32.dll	632		GetModuleHandleW
KERNEL32.dll	262		DebugBreak
KERNEL32.dll	1294		SetDllDirectoryW
KERNEL32.dll	895		IsDebuggerPresent
KERNEL32.dll	1405		Sleep
KERNEL32.dll	269		DelayLoadFailureHook
KERNEL32.dll	692		GetProcessHeap
KERNEL32.dll	1478		VirtualAlloc
KERNEL32.dll	1343		SetProcessDEPPolicy
KERNEL32.dll	857		InitOnceExecuteOnce
KERNEL32.dll	794		GetVersionExA
KERNEL32.dll	354		ExpandEnvironmentStringsW
KERNEL32.dll	913		IsWow64Process
KERNEL32.dll	536		GetCurrentProcessId
KERNEL32.dll	1225		ResolveDelayLoadedAPI
KERNEL32.dll	229		CreateProcessW
KERNEL32.dll	775		GetTickCount
KERNEL32.dll	686		GetProcAddress
KERNEL32.dll	837		HeapAlloc
KERNEL32.dll	745		GetSystemTimeAsFileTime
KERNEL32.dll	1101		QueryPerformanceCounter
KERNEL32.dll	1389		SetUnhandledExceptionFilter
KERNEL32.dll	1453		UnhandledExceptionFilter
KERNEL32.dll	627		GetModuleFileNameA
KERNEL32.dll	235		CreateSemaphoreExW
KERNEL32.dll	841		HeapFree
KERNEL32.dll	1330		SetLastError
KERNEL32.dll	471		GetCommandLineW
KERNEL32.dll	535		GetCurrentProcess
KERNEL32.dll	1204		ReleaseSemaphore
KERNEL32.dll	631		GetModuleHandleExW
KERNEL32.dll	1420		TerminateProcess
KERNEL32.dll	862		InitializeCriticalSection
KERNEL32.dll	1301		SetErrorMode
KERNEL32.dll	1495		WaitForSingleObject
KERNEL32.dll	970		LocalAlloc
KERNEL32.dll	540		GetCurrentThreadId
KERNEL32.dll	1200		ReleaseMutex
KERNEL32.dll	423		FormatMessageW
KERNEL32.dll	609		GetLastError
KERNEL32.dll	1049		OutputDebugStringW
KERNEL32.dll	1496		WaitForSingleObjectEx
KERNEL32.dll	1041		OpenSemaphoreW
KERNEL32.dll	134		CloseHandle
KERNEL32.dll	645		GetNativeSystemInfo
KERNEL32.dll	845		HeapSetInformation
KERNEL32.dll	720		GetStartupInfoW
api-ms-win-downlevel-advapi32-l1-1-0.dll	43		EventRegister
api-ms-win-downlevel-advapi32-l1-1-0.dll	103		RegGetValueW
api-ms-win-downlevel-advapi32-l1-1-0.dll	44		EventUnregister
api-ms-win-downlevel-advapi32-l1-1-0.dll	47		EventWriteTransfer
ADVAPI32.dll	290		EventSetInformation
ADVAPI32.dll	294		EventWriteEx
iertutil.dll		797
iertutil.dll		798
iertutil.dll		701
iertutil.dll		796
iertutil.dll		650
iertutil.dll		791
iertutil.dll		597
iertutil.dll		398
iertutil.dll		793
iertutil.dll		594
api-ms-win-downlevel-shlwapi-l1-1-0.dll	131		StrStrIW
api-ms-win-downlevel-ole32-l1-1-0.dll	4		CoCreateGuid

StringTable 040904B0

CompanyName	Microsoft Corporation
FileDescription	Internet Explorer
FileVersion	11.00.18362.1 (WinBuild.160101.0800)
InternalName	iexplore
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	IEXPLORE.EXE
ProductName	Internet Explorer
ProductVersion	11.00.18362.1

StringTable 0c0904E4

CompanyName	Microsoft Corporation
FileDescription	Internet Explorer
FileVersion	11.00.18362.1
InternalName	iexplore
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	IEXPLORE.EXE
ProductName	Internet Explorer
ProductVersion	11.00.18362.1

VS_FIXEDFILEINFO

FileVersion	11.0.18362.1
ProductVersion	11.0.18362.1
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Code Signing PCA 2010

serial: 3300000239B2B4E82A2234492F000000000239

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:00:02:39:b2:b4:e8:2a:22:34:49:2f:00:00:00:00:02:39
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA 2010
        Validity
            Not Before: Jul 12 20:07:51 2018 GMT
            Not After : Aug  8 20:07:51 2019 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Corporation
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7d:ce:0a:9c:7b:90:52:8b:77:54:b2:e4:2c:
                    65:60:68:c5:ce:2a:c8:84:c6:d4:bd:8b:78:c5:47:
                    3e:95:03:8b:25:e2:eb:b9:13:bc:2c:6c:9c:ef:a5:
                    9a:43:98:d7:a6:d2:7e:33:80:d0:39:b5:1f:19:78:
                    98:5e:13:0b:f0:cc:29:8e:a8:6e:13:49:f7:47:02:
                    27:da:4f:ba:be:55:f0:73:24:05:36:76:a4:27:23:
                    f9:d2:94:41:38:cb:ea:2d:cc:98:b1:41:5f:25:f8:
                    a4:45:6c:2f:53:55:c6:09:04:0e:94:5f:e6:88:66:
                    80:a4:c5:9e:02:c8:90:e2:ed:14:cb:7d:89:63:85:
                    9e:3c:ab:7c:13:09:39:03:49:27:b1:5c:d5:ec:1f:
                    b4:92:e3:ce:04:05:16:f7:9f:84:54:ec:57:47:3f:
                    66:d7:93:6a:36:60:4a:25:91:ef:d8:a0:20:ab:3d:
                    d2:cc:a2:d3:69:d2:2c:3e:a2:1b:79:1c:64:aa:87:
                    c8:46:9f:9a:cd:f7:65:17:a9:ff:7c:8a:02:ee:e5:
                    d3:11:4e:8f:ce:3a:23:06:bf:c5:b1:54:08:2c:f2:
                    9d:5c:fe:10:03:b8:95:86:70:f8:5d:d1:91:46:7b:
                    07:69:d6:00:ef:f9:52:5a:f0:33:0c:cf:05:56:6c:
                    d0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                1.3.6.1.4.1.311.61.6.1, Code Signing
            X509v3 Subject Key Identifier: 
                FE:46:3B:D5:D1:5F:0D:6B:3B:C0:1D:0B:69:B0:20:D7:E5:5C:34:C3
            X509v3 Subject Alternative Name: 
                DirName:/OU=Microsoft Ireland Operations Limited/serialNumber=230865+440983
            X509v3 Authority Key Identifier: 
                keyid:E6:FC:5F:7B:BB:22:00:58:E4:72:4E:B5:F4:21:74:23:32:E6:EF:AC

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_2010-07-06.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicCodSigPCA_2010-07-06.crt

            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
         73:a0:0a:a8:f9:3e:a1:a5:42:06:75:ae:06:91:b8:ed:2b:f9:
         72:33:88:80:cb:dc:46:82:ff:c8:d7:67:9e:2d:c8:4c:4c:49:
         e8:d9:2a:c8:3b:33:95:f0:08:4f:37:eb:1f:2b:ed:63:d8:ae:
         c6:b8:93:ce:ff:63:5f:77:6a:d0:34:d6:ca:e2:e1:29:83:ff:
         be:85:c9:45:ad:2a:e3:dc:6c:65:f6:21:a3:e9:f3:ae:c4:bf:
         50:a1:e6:ff:97:96:dc:c2:a1:68:a4:70:93:fb:8b:34:36:fb:
         32:53:6d:69:b4:f6:2b:c7:e8:1a:53:d3:08:ea:37:94:c9:a0:
         d8:c5:2c:ef:5f:c8:35:6c:aa:8f:25:40:cc:d2:9d:00:10:7e:
         27:e0:15:5a:2d:ce:17:a0:37:27:ac:c6:38:99:75:12:18:20:
         2a:e2:34:67:5b:53:3a:2b:dc:a5:03:95:5f:cd:cb:26:dc:d7:
         97:b6:27:dd:e5:49:ba:31:65:dc:a4:2f:aa:c6:bc:11:b5:a0:
         77:b0:b5:26:55:ab:ea:e5:20:25:38:93:d6:2c:c7:cd:68:90:
         41:4c:32:29:0a:cf:84:8c:fe:93:2e:04:fd:9b:23:e9:5d:6a:
         49:ca:c5:80:76:45:1a:39:0e:31:64:05:a9:ae:93:cd:dd:ec:
         32:52:44:fe

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0c:52:4c:00:00:00:00:00:03
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
        Validity
            Not Before: Jul  6 20:40:17 2010 GMT
            Not After : Jul  6 20:50:17 2025 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA 2010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0e:64:50:79:67:b5:c4:e3:fd:09:00:4c:9e:
                    94:ac:f7:56:68:ea:44:d8:cf:c5:58:4f:a9:a5:76:
                    7c:6d:45:ba:d3:39:92:b4:a4:1e:f9:f9:65:82:e4:
                    17:d2:8f:fd:44:9c:08:e8:65:93:ce:2c:55:84:bf:
                    7d:08:e3:2e:2b:a8:41:2b:18:b7:a2:4b:6e:49:4c:
                    6b:15:07:de:d1:d2:c2:89:1e:71:94:cd:b5:7f:4b:
                    b4:af:08:d8:cc:88:d6:6b:17:94:3a:93:ce:26:3f:
                    ec:e6:fe:34:98:57:d5:1d:5d:49:f6:b2:2a:2e:d5:
                    85:bb:59:3f:f8:90:b4:2b:83:74:ca:2b:b3:3b:46:
                    e3:f0:46:49:c1:17:66:54:c9:1c:bd:1d:c4:55:62:
                    57:72:f8:67:b9:25:20:34:de:5d:a6:a5:95:5e:ab:
                    28:80:cd:d5:b2:9e:e5:03:b5:63:d3:b2:14:c8:c1:
                    c8:8a:26:0a:59:7f:07:ec:ff:0e:ed:80:12:35:4c:
                    12:a6:be:52:5b:f5:a6:da:e0:8b:0b:48:77:d6:85:
                    47:d5:10:b9:c6:e8:aa:ee:8b:6a:2d:05:5c:60:c6:
                    b4:2a:5b:9c:23:1c:5f:45:e3:1a:14:1e:6f:37:cb:
                    19:33:80:6a:89:4d:a3:6a:66:63:78:93:d5:30:cf:
                    95:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Subject Key Identifier: 
                E6:FC:5F:7B:BB:22:00:58:E4:72:4E:B5:F4:21:74:23:32:E6:EF:AC
            1.3.6.1.4.1.311.20.2: 
                .
.S.u.b.C.A
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                keyid:D5:F6:56:CB:8F:E8:A2:5C:62:68:D1:3D:94:90:5B:D7:CE:9A:18:C4

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl

            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt

            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.311.46.3
                  CPS: http://www.microsoft.com/PKI/docs/CPS/default.htm
                  User Notice:
                    Explicit Text:  

    Signature Algorithm: sha256WithRSAEncryption
         1a:74:ef:57:4f:29:7b:c4:16:85:78:b8:50:d3:22:fc:09:9d:
         ac:82:97:f8:34:ff:2a:2c:97:95:12:e5:e4:bf:cf:bf:93:c8:
         e3:34:a9:db:81:b8:dc:1e:00:be:d2:35:6f:af:e5:7f:79:95:
         77:e5:02:d4:f1:eb:d8:cd:4e:1e:1b:61:a2:c2:5a:23:1a:f0:
         8c:a8:62:51:45:67:08:e3:3f:3c:1e:93:f8:30:85:17:c8:39:
         40:a6:d7:0e:b3:21:29:e5:a5:a1:69:8c:22:93:cc:74:98:e7:
         a1:47:43:f2:53:ac:c0:0f:30:69:7f:fe:d2:25:20:6d:6f:61:
         d3:df:07:d5:d9:72:00:2c:69:86:76:3d:51:db:a6:39:48:c9:
         37:61:6d:07:dd:53:19:cb:a7:d6:61:c2:bf:e2:83:ab:0f:e0:
         6b:9b:95:d6:7d:28:51:b0:89:4a:51:a4:9a:6c:c8:b7:1f:4a:
         1a:0e:69:a9:d7:dc:c1:7e:d1:49:70:aa:b6:ad:bb:72:47:63:
         17:fa:a6:d6:a2:a6:86:ec:a8:10:44:9b:63:b6:b2:69:89:06:
         c7:46:86:7a:18:3f:e8:c5:1d:21:d5:7b:f9:02:23:2d:c5:41:
         cb:bf:1d:4c:c8:16:ef:b1:9c:7f:fc:22:4b:49:8a:6e:15:e3:
         a6:7f:76:5b:d1:53:79:91:85:9d:d5:d2:db:3d:73:35:f3:3c:
         ae:54:b2:52:47:6a:c0:aa:13:95:d2:8e:11:da:99:67:5e:32:
         8c:fb:37:85:d1:dc:75:85:9c:87:c6:5a:57:85:c2:bf:dd:0d:
         8f:8c:9b:2d:eb:b4:ee:cf:27:d3:b5:5e:69:fa:a4:16:04:01:
         a7:24:67:73:cf:4d:4f:b6:de:05:56:97:7a:f7:e9:52:4d:f4:
         77:05:4f:85:c6:d8:0b:f1:8e:ed:42:09:d1:0d:76:e3:23:56:
         78:22:26:36:be:ca:b1:8c:6e:aa:1d:e4:85:da:47:33:62:8f:
         a4:c9:91:33:5f:71:1e:40:af:98:65:c9:22:e8:42:21:25:8a:
         1c:2d:60:d9:37:89:41:89:2a:16:0f:d7:61:3c:94:68:60:52:
         ef:d6:47:99:a0:80:40:ee:15:81:77:3e:9c:e0:53:18:1a:50:
         1d:38:95:9b:1e:66:33:13:27:39:17:78:87:36:ce:4e:c3:5f:
         b2:f5:3d:47:53:b6:e0:e5:db:0b:61:3d:2a:d7:92:2c:ce:37:
         5a:3e:40:42:31:a4:1f:10:08:c2:56:9c:bf:24:5d:51:02:9d:
         6a:79:d2:17:d3:da:c1:94:8e:07:7b:25:71:44:ab:06:6a:e6:
         d4:c6:df:23:9a:96:75:c5

undefined method `first' for #

show previews

offset	size	type	comment
0	807424	EXE	11/25/2051 12:21:07	#
15c1	15	HTM		#
26948	52209	PNG	(256 x 256)	#
3aa20	38866	PNG	(256 x 256)	#
72b60	16716	PNG	(256 x 256)	#
7d7e0	52209	PNG	(256 x 256)	#
918b8	38866	PNG	(256 x 256)	#
a2570	52209	PNG	(256 x 256)	#
b6648	38866	PNG	(256 x 256)	#
c5200	8856	PKCS7	Authenticode Signature	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0x83fc

iexplore.exe- Internet Explorer

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

TLS

StringTable 040904B0

StringTable 0c0904E4

VS_FIXEDFILEINFO

Signers (1)

Certificates (2)

iexplore.exe
- Internet Explorer