filenameWebBrowserPassView.exe
size370384 (0x5a6d0)
md509078828931a04c2a3f95db7641ce805
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
9540352
93403522
64921011
28917811
10334
2592103
1145072752
124507271
120507271

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x5957eb37
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x103
Magic0x10b
LinkerVersion8.0
SizeOfCode0x43a00
SizeOfInitializedData0x13a00
SizeOfUninitializedData0
AddressOfEntryPoint0x44144
BaseOfCode0x1000
BaseOfData0x45000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x5b000
SizeOfHeaders0x400
CheckSum0x6980b
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.1 EXE / v7.0

Sections

namevavsizeraw sizeflags
.text0x10000x438dd0x43a00R-X CODE
.rdata0x450000xb9520xba00R-- IDATA
.data0x510000x2d840x1600RW- IDATA
.rsrc0x540000x69240x6a00R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x4f1d40xf0
RESOURCE0x540000x6924
EXCEPTION00
SECURITY0x578000x2ed0
BASERELOC00
DEBUG0x454a00x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x450000x46c
Delay_IAT00
CLR_Header00
typenamesizecp
CURSOR#13081252
BITMAP#10410001252
BITMAP#1332161252
BITMAP#1342161252
ICON#242641252
ICON#311281252
ICON#411281252
ICON#511281252
ICON#611281252
ICON#711281252
ICON#811281252
ICON#911281252
ICON#1011281252
MENU#10211181252
MENU#1045001252
DIALOG#1051621252
DIALOG#1076621252
DIALOG#11014701252
DIALOG#1122501252
DIALOG#1142161252
DIALOG#10968221252
STRING#15641252
STRING#323121252
STRING#35881252
STRING#382461252
STRING#391641252
STRING#47681252
STRING#482881252
STRING#631861252
STRING#64981252
STRING#821041252
ACCELERATORS#103881252
GROUP_CURSOR#103201252
GROUP_ICON#101201252
GROUP_ICON#111201252
GROUP_ICON#112201252
GROUP_ICON#114201252
GROUP_ICON#115201252
GROUP_ICON#116201252
GROUP_ICON#117201252
GROUP_ICON#118201252
GROUP_ICON#119201252
VERSION#17761252
MANIFEST#110931252
idlangstring
41033%d Passwords
51033, %d Selected
61033Created by using
71033Select a filename to save
81033Web Browser Passwords
91033Choose another Firefox profile folder
101033Choose the installation folder of Firefox
111033Choose another profile of Chrome Web browser
121033Choose the password file of Opera (wand.dat)
141033Loading... %d
5011033Text File
5021033Tab Delimited Text File
5031033Tabular Text File
5041033HTML File - Horizontal
5051033HTML File - Vertical
5061033XML File
5071033Comma Delimited Text File
5081033KeePass csv file
5511033Opera Password File
5521033All Files
6011033Internet Explorer 4.0 - 6.0
6021033Internet Explorer 7.0 - 9.0
6031033Firefox 1.x
6041033Firefox 2.x
6051033Firefox 3.0
6061033Firefox 3.5-31
6071033Chrome
6081033Opera
6091033Safari
6101033Internet Explorer 10.0
6111033SeaMonkey
6121033Firefox 32+
6131033Yandex
6141033Vivaldi
7511033Search all columns
7521033Search only visible columns
7611033Find one string
7621033Find multiple words (space-delimited list)
7631033Find multiple strings (comma-delimited list)
10011033URL
10021033Web Browser
10031033User Name
10041033Password
10051033Password Strength
10061033User Name Field
10071033Password Field
10081033Created Time
10091033Modified Time
10101033Filename
13011033Very Weak
13021033Weak
13031033Medium
13041033Strong
13051033Very Strong
module_namehintordfunction_name
msvcrt.dll154__setusermatherr
msvcrt.dll182_adjust_fdiv
msvcrt.dll128__p__commode
msvcrt.dll133__p__fmode
msvcrt.dll805wcscat
msvcrt.dll152__set_app_type
msvcrt.dll214_controlfp
msvcrt.dll304_gmtime64
msvcrt.dll352_itow
msvcrt.dll554_wcslwr
msvcrt.dll765strchr
msvcrt.dll505_strlwr
msvcrt.dll314_initterm
msvcrt.dll814wcsncmp
msvcrt.dll734memmove
msvcrt.dll676free
msvcrt.dll737modf
msvcrt.dll429_memicmp
msvcrt.dll824wcstoul
msvcrt.dll727malloc
msvcrt.dll78_XcptFilter
msvcrt.dll626_wtoi64
msvcrt.dll766strcmp
msvcrt.dll768strcpy
msvcrt.dll817wcsrchr
msvcrt.dll164__wgetmainargs
msvcrt.dll548_wcmdln
msvcrt.dll655exit
msvcrt.dll563_wcsupr
msvcrt.dll200_cexit
msvcrt.dll556_wcsnicmp
msvcrt.dll17void * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

msvcrt.dll18void __cdecl operator delete(void *)

??3@YAXPAX@Z

msvcrt.dll732memcmp
msvcrt.dll448_purecall
msvcrt.dll812wcslen
msvcrt.dll807wcscmp
msvcrt.dll635abs
msvcrt.dll724log
msvcrt.dll625_wtoi
msvcrt.dll552_wcsicmp
msvcrt.dll806wcschr
msvcrt.dll733memcpy
msvcrt.dll809wcscpy
msvcrt.dll735memset
msvcrt.dll772strlen
msvcrt.dll813wcsncat
msvcrt.dll483_snwprintf
msvcrt.dll237_except_handler3
msvcrt.dll246_exit
msvcrt.dll197_c_exit
msvcrt.dll435_onexit
msvcrt.dll106__dllonexit
msvcrt.dll731memchr
msvcrt.dll771strftime
msvcrt.dll749realloc
COMCTL32.dll17
COMCTL32.dll55ImageList_Create
COMCTL32.dll52ImageList_AddMasked
COMCTL32.dll88ImageList_SetImageCount
COMCTL32.dll82ImageList_ReplaceIcon
COMCTL32.dll10CreateToolbarEx
COMCTL32.dll8CreateStatusWindowW
VERSION.dll13VerQueryValueW
VERSION.dll2GetFileVersionInfoSizeW
VERSION.dll3GetFileVersionInfoW
WININET.dll23FindFirstUrlCacheEntryW
WININET.dll17FindCloseUrlCache
WININET.dll30FindNextUrlCacheEntryW
KERNEL32.dll362GetFullPathNameW
KERNEL32.dll12AreFileApisANSI
KERNEL32.dll152EnterCriticalSection
KERNEL32.dll456GetSystemTime
KERNEL32.dll612LockFileEx
KERNEL32.dll243FormatMessageA
KERNEL32.dll458GetSystemTimeAsFileTime
KERNEL32.dll469GetTempPathA
KERNEL32.dll880UnlockFileEx
KERNEL32.dll611LockFile
KERNEL32.dll879UnlockFile
KERNEL32.dll550InterlockedCompareExchange
KERNEL32.dll129DeleteCriticalSection
KERNEL32.dll352GetFileAttributesExW
KERNEL32.dll336GetDiskFreeSpaceW
KERNEL32.dll131DeleteFileA
KERNEL32.dll361GetFullPathNameA
KERNEL32.dll547InitializeCriticalSection
KERNEL32.dll383GetModuleHandleA
KERNEL32.dll440GetStartupInfoW
KERNEL32.dll238FlushFileBuffers
KERNEL32.dll675QueryPerformanceCounter
KERNEL32.dll350GetFileAttributesA
KERNEL32.dll593LeaveCriticalSection
KERNEL32.dll784SetEndOfFile
KERNEL32.dll453GetSystemInfo
KERNEL32.dll854Sleep
KERNEL32.dll333GetDiskFreeSpaceA
KERNEL32.dll83CreateFileA
KERNEL32.dll168EnumResourceTypesW
KERNEL32.dll114CreateToolhelp32Snapshot
KERNEL32.dll604LocalFree
KERNEL32.dll355GetFileSize
KERNEL32.dll859SystemTimeToFileTime
KERNEL32.dll52CloseHandle
KERNEL32.dll196FileTimeToLocalFileTime
KERNEL32.dll132DeleteFileW
KERNEL32.dll70CopyFileW
KERNEL32.dll86CreateFileW
KERNEL32.dll57CompareFileTime
KERNEL32.dll597LoadLibraryW
KERNEL32.dll416GetProcAddress
KERNEL32.dll248FreeLibrary
KERNEL32.dll369GetLastError
KERNEL32.dll197FileTimeToSystemTime
KERNEL32.dll479GetTickCount
KERNEL32.dll796SetFilePointerEx
KERNEL32.dll321GetCurrentDirectoryW
KERNEL32.dll189ExpandEnvironmentStringsW
KERNEL32.dll916WideCharToMultiByte
KERNEL32.dll629MultiByteToWideChar
KERNEL32.dll515GlobalLock
KERNEL32.dll357GetFileTime
KERNEL32.dll328GetDateFormatW
KERNEL32.dll244FormatMessageW
KERNEL32.dll468GetTempFileNameW
KERNEL32.dll490GetVersionExW
KERNEL32.dll206FindClose
KERNEL32.dll213FindFirstFileW
KERNEL32.dll386GetModuleHandleW
KERNEL32.dll481GetTimeFormatW
KERNEL32.dll795SetFilePointer
KERNEL32.dll500GetWindowsDirectoryW
KERNEL32.dll353GetFileAttributesW
KERNEL32.dll693ReadFile
KERNEL32.dll382GetModuleFileNameW
KERNEL32.dll932WriteFile
KERNEL32.dll613LockResource
KERNEL32.dll967lstrcpyW
KERNEL32.dll230FindResourceW
KERNEL32.dll973lstrlenW
KERNEL32.dll599LoadResource
KERNEL32.dll860SystemTimeToTzSpecificLocalTime
KERNEL32.dll596LoadLibraryExW
KERNEL32.dll504GlobalAlloc
KERNEL32.dll522GlobalUnlock
KERNEL32.dll470GetTempPathW
KERNEL32.dll221FindNextFileW
KERNEL32.dll853SizeofResource
KERNEL32.dll85CreateFileMappingW
KERNEL32.dll616MapViewOfFile
KERNEL32.dll881UnmapViewOfFile
KERNEL32.dll322GetCurrentProcess
KERNEL32.dll147DuplicateHandle
KERNEL32.dll323GetCurrentProcessId
KERNEL32.dll646OpenProcess
KERNEL32.dll413GetPrivateProfileStringW
KERNEL32.dll938WritePrivateProfileStringW
KERNEL32.dll407GetPrivateProfileIntW
KERNEL32.dll166EnumResourceNamesW
KERNEL32.dll441GetStdHandle
KERNEL32.dll789SetErrorMode
KERNEL32.dll696ReadProcessMemory
KERNEL32.dll185ExitProcess
KERNEL32.dll779SetCurrentDirectoryW
KERNEL32.dll663Process32FirstW
KERNEL32.dll665Process32NextW
USER32.dll190DrawTextExW
USER32.dll318GetMessageW
USER32.dll516PostQuitMessage
USER32.dll676TrackPopupMenu
USER32.dll552RegisterWindowMessageW
USER32.dll289GetKeyState
USER32.dll162DispatchMessageW
USER32.dll682TranslateMessage
USER32.dll418IsDialogMessageW
USER32.dll151DestroyMenu
USER32.dll272GetDlgCtrlID
USER32.dll309GetMenuItemInfoW
USER32.dll488ModifyMenuW
USER32.dll457LoadMenuW
USER32.dll60ChildWindowFromPoint
USER32.dll445LoadCursorW
USER32.dll589SetCursor
USER32.dll347GetSysColorBrush
USER32.dll658ShowWindow
USER32.dll647SetWindowTextW
USER32.dll594SetDlgItemInt
USER32.dll700UpdateWindow
USER32.dll596SetDlgItemTextW
USER32.dll276GetDlgItemTextW
USER32.dll255GetClientRect
USER32.dll349GetSystemMetrics
USER32.dll144DeferWindowPos
USER32.dll97CreateWindowExW
USER32.dll372GetWindowRect
USER32.dll567SendDlgItemMessageW
USER32.dll274GetDlgItemInt
USER32.dll198EndDialog
USER32.dll641SetWindowLongW
USER32.dll273GetDlgItem
USER32.dll362GetWindow
USER32.dll403InvalidateRect
USER32.dll371GetWindowPlacement
USER32.dll439LoadAcceleratorsW
USER32.dll143DefWindowProcW
USER32.dll576SendMessageW
USER32.dll515PostMessageW
USER32.dll537RegisterClassW
USER32.dll486MessageBoxW
USER32.dll680TranslateAcceleratorW
USER32.dll605SetMenu
USER32.dll642SetWindowPlacement
USER32.dll449LoadImageW
USER32.dll447LoadIconW
USER32.dll367GetWindowLongW
USER32.dll598SetFocus
USER32.dll437KillTimer
USER32.dll325GetParent
USER32.dll634SetTimer
USER32.dll12BeginDeferWindowPos
USER32.dll197EndDeferWindowPos
USER32.dll313GetMenuStringW
USER32.dll57CheckMenuItem
USER32.dll306GetMenuItemCount
USER32.dll66CloseClipboard
USER32.dll58CheckMenuRadioItem
USER32.dll267GetCursorPos
USER32.dll586SetClipboardData
USER32.dll196EnableWindow
USER32.dll346GetSysColor
USER32.dll474MapWindowPoints
USER32.dll300GetMenu
USER32.dll268GetDC
USER32.dll345GetSubMenu
USER32.dll193EmptyClipboard
USER32.dll194EnableMenuItem
USER32.dll554ReleaseDC
USER32.dll253GetClassNameW
USER32.dll502OpenClipboard
USER32.dll492MoveWindow
USER32.dll159DialogBoxParamW
USER32.dll86CreateDialogParamW
USER32.dll203EnumChildWindows
USER32.dll460LoadStringW
USER32.dll153DestroyWindow
USER32.dll643SetWindowPos
USER32.dll378GetWindowTextW
GDI32.dll533SetBkColor
GDI32.dll526SelectObject
GDI32.dll363GetDeviceCaps
GDI32.dll534SetBkMode
GDI32.dll572SetTextColor
GDI32.dll143DeleteObject
GDI32.dll61CreateFontIndirectW
GDI32.dll437GetTextExtentPoint32W
GDI32.dll421GetStockObject
comdlg32.dll12GetSaveFileNameW
comdlg32.dll10GetOpenFileNameW
comdlg32.dll6FindTextW
ADVAPI32.dll479RegEnumKeyExW
ADVAPI32.dll493RegOpenKeyExW
ADVAPI32.dll504RegQueryValueExW
ADVAPI32.dll482RegEnumValueW
ADVAPI32.dll459RegCloseKey
SHELL32.dll183SHGetMalloc
SHELL32.dll189SHGetPathFromIDListW
SHELL32.dll122SHBrowseForFolderW
SHELL32.dll173SHGetFileInfoW
SHELL32.dll267ShellExecuteW
ole32.dll105CoUninitialize
ole32.dll59CoInitialize
ole32.dll101CoTaskMemFree

StringTable 040904b0

CompanyNameNirSoft
FileDescriptionWebBrowserPassView
FileVersion1.86
InternalNameWebBrowserPassView
LegalCopyrightCopyright © 2011 - 2017 Nir Sofer
OriginalFilenameWebBrowserPassView.exe
ProductNameWebBrowserPassView
ProductVersion1.86

VS_FIXEDFILEINFO

FileVersion1.8.6.0
ProductVersion1.8.6.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0

Signers (1)

issuer: /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO Code Signing CA 2
serial: 1AF0660E837A35A2CD92EC613FC15DB8

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
        Validity
            Not Before: Jun  7 08:09:10 2005 GMT
            Not After : May 30 10:48:38 2020 GMT
        Subject: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ce:aa:81:3f:a3:a3:61:78:aa:31:00:55:95:11:
                    9e:27:0f:1f:1c:df:3a:9b:82:68:30:c0:4a:61:1d:
                    f1:2f:0e:fa:be:79:f7:a5:23:ef:55:51:96:84:cd:
                    db:e3:b9:6e:3e:31:d8:0a:20:67:c7:f4:d9:bf:94:
                    eb:47:04:3e:02:ce:2a:a2:5d:87:04:09:f6:30:9d:
                    18:8a:97:b2:aa:1c:fc:41:d2:a1:36:cb:fb:3d:91:
                    ba:e7:d9:70:35:fa:e4:e7:90:c3:9b:a3:9b:d3:3c:
                    f5:12:99:77:b1:b7:09:e0:68:e6:1c:b8:f3:94:63:
                    88:6a:6a:fe:0b:76:c9:be:f4:22:e4:67:b9:ab:1a:
                    5e:77:c1:85:07:dd:0d:6c:bf:ee:06:c7:77:6a:41:
                    9e:a7:0f:d7:fb:ee:94:17:b7:fc:85:be:a4:ab:c4:
                    1c:31:dd:d7:b6:d1:e4:f0:ef:df:16:8f:b2:52:93:
                    d7:a1:d4:89:a1:07:2e:bf:e1:01:12:42:1e:1a:e1:
                    d8:95:34:db:64:79:28:ff:ba:2e:11:c2:e5:e8:5b:
                    92:48:fb:47:0b:c2:6c:da:ad:32:83:41:f3:a5:e5:
                    41:70:fd:65:90:6d:fa:fa:51:c4:f9:bd:96:2b:19:
                    04:2c:d3:6d:a7:dc:f0:7f:6f:83:65:e2:6a:ab:87:
                    86:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:AD:BD:98:7A:34:B4:26:F7:FA:C4:26:54:EF:03:BD:E0:24:CB:54:1A

            X509v3 Subject Key Identifier: 
                DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.usertrust.com/AddTrustExternalCARoot.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.usertrust.com

    Signature Algorithm: sha1WithRSAEncryption
         4d:42:2f:a6:c1:8a:eb:07:80:90:58:46:8c:f8:19:39:66:2a:
         3c:5a:2c:6d:cf:d4:d9:87:55:8d:79:0b:12:88:7b:40:8f:d5:
         c7:f8:4b:8d:55:16:63:ad:b7:57:dc:3b:2b:bd:d3:c1:4f:1e:
         03:87:4b:44:9b:e3:e2:40:45:26:f3:26:49:2b:6a:84:f1:54:
         7a:d4:42:da:fc:d3:6a:bb:66:7e:ca:9e:ea:e9:bb:dc:07:c7:
         c3:92:4e:83:3c:81:49:9f:92:d5:32:09:ea:49:2e:a1:11:71:
         9a:36:d2:c5:4e:68:b6:cb:0e:1b:25:16:af:6c:de:5d:76:d8:
         1f:72:b1:93:26:86:17:db:18:de:af:45:e9:df:fb:98:af:14:
         18:ed:a4:5e:f6:89:94:45:f0:55:04:4a:dd:ff:27:dd:06:4a:
         40:f6:b4:bc:f1:e4:0f:99:02:bb:fd:5d:0e:2e:28:c1:be:3b:
         5f:1a:3f:97:10:84:bc:16:3e:d8:a3:9c:63:1d:66:cb:5c:5f:
         da:3e:f3:0f:0a:09:35:22:db:db:c0:3f:00:f9:e6:0d:5d:67:
         d1:fd:a0:1e:03:2b:d9:40:f7:be:cc:87:66:54:80:a6:a3:b8:
         f5:19:62:d5:d2:26:b1:98:26:ee:9a:cb:44:a7:45:5a:81:95:
         15:1a:f5:51
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: Dec 31 00:00:00 2015 GMT
            Not After : Jul  9 18:40:36 2019 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO SHA-1 Time Stamping Signer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e9:e9:3d:df:d7:37:08:c9:1e:38:b2:52:53:42:
                    6d:22:f1:b1:c4:06:04:6b:9e:fd:82:74:50:43:7d:
                    c6:a0:bb:1f:4e:f9:02:71:26:b1:ef:43:d8:83:8c:
                    48:fc:e7:0f:97:7a:9a:eb:9c:de:a6:a3:0e:3b:1c:
                    44:18:75:8e:78:a5:17:69:fe:49:18:a4:e2:bb:5c:
                    4e:fe:8e:2a:54:7a:50:f0:d5:f6:cc:91:e7:99:79:
                    d7:de:79:94:d7:96:33:fe:0e:83:be:22:bf:63:16:
                    2c:a3:dd:28:1b:af:3d:ab:ea:97:d2:f1:bf:04:10:
                    e7:3d:48:45:fd:1f:68:65:c1:7f:59:99:69:c0:22:
                    31:0c:62:6e:a7:5c:65:01:21:b0:63:c4:22:18:27:
                    ee:e6:fc:d2:00:3d:47:2e:a8:b8:86:56:5d:04:dc:
                    13:17:25:6e:1c:df:44:0f:15:cd:b7:db:a5:57:76:
                    42:6f:00:68:82:99:d2:e3:c1:de:f0:8b:94:57:4c:
                    ec:08:90:22:21:ce:22:2b:98:0c:42:e6:42:93:94:
                    98:93:ef:fd:06:d9:3f:bc:5b:9b:54:3c:20:b1:ee:
                    6a:d6:47:7a:c5:ab:80:e9:30:9a:de:f1:a4:3f:55:
                    4d:0a:09:34:8a:75:29:d2:69:ad:97:0f:50:bf:f8:
                    ca:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8

            X509v3 Subject Key Identifier: 
                8E:6B:2D:33:6B:F4:33:A7:93:B3:13:9A:A5:E0:0A:F7:12:35:6A:88
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.usertrust.com

    Signature Algorithm: sha1WithRSAEncryption
         ba:33:24:40:40:8c:7c:db:58:9f:b3:60:98:b2:f5:c0:31:fe:
         eb:1f:6e:50:f6:0a:e0:e4:e6:81:ad:26:87:a2:df:fd:b3:da:
         f4:73:f3:00:fb:29:1b:89:1b:15:3e:db:6b:52:93:2b:c4:ac:
         39:81:d7:3c:67:57:9a:39:36:e0:28:08:9a:e3:39:4f:9b:89:
         09:7f:7b:c5:61:7f:59:89:32:25:0a:6a:ae:1a:3e:f0:a2:27:
         a8:b6:c3:b8:87:f7:16:04:48:41:3d:5c:d8:ec:9f:4d:20:31:
         04:d9:65:a1:ed:cd:69:07:53:16:3d:dd:36:02:0a:88:eb:40:
         e5:06:30:0b:b8:16:4b:dc:ef:bc:55:09:ff:c6:3e:12:2e:76:
         b3:dc:ce:42:ef:f9:76:57:e1:b7:0a:05:40:98:58:9a:5d:71:
         16:93:71:8c:65:81:ea:6f:f3:89:f7:fb:73:ad:b4:e7:bf:d9:
         8e:6f:aa:0b:4f:25:f3:b8:e1:d5:dd:75:98:68:81:f8:aa:c0:
         d1:80:c2:c4:c4:39:89:c1:f6:c9:9e:6c:d7:74:f9:d9:97:f8:
         4f:c2:9a:0a:cd:5e:8f:f8:19:e9:e0:a5:9f:c4:f0:92:21:e6:
         2d:79:25:c9:22:f9:c3:f0:3a:84:57:ad:3a:16:f4:63:94:10:
         1d:5d:d0:c6
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: Aug 24 00:00:00 2011 GMT
            Not After : May 30 10:48:38 2020 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Code Signing CA 2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cb:f8:e7:a7:e8:f1:97:28:40:68:80:37:d2:c8:
                    3f:8e:92:8a:92:37:87:47:80:ea:4c:99:cf:6e:f9:
                    15:47:bd:ee:75:f4:44:ac:d0:c3:d4:4d:f7:19:c0:
                    d3:3c:4d:c1:47:b9:59:65:16:93:8c:d9:0a:84:9b:
                    9f:e8:f6:6a:63:58:fe:5f:dc:d1:7f:4b:51:9f:00:
                    1c:00:87:54:20:07:57:a0:82:c9:2f:98:af:33:8a:
                    bb:7b:80:22:25:6a:6c:af:c2:2c:6c:79:13:bd:a3:
                    2a:48:d6:b5:8e:61:55:e9:6b:e8:3d:80:bf:14:03:
                    85:18:8e:7e:4c:e9:c2:19:88:73:92:72:cd:fa:ff:
                    50:4d:cb:2c:a6:7b:1a:73:b1:00:90:2c:d9:32:e2:
                    fb:fd:ac:95:42:36:ec:34:c5:13:53:68:b2:c1:9f:
                    40:9f:da:7b:c8:9d:62:6c:93:a2:42:d7:79:9f:97:
                    4f:31:5b:50:21:a1:ab:af:d9:1c:b2:ce:75:be:5b:
                    2c:56:00:24:8d:11:c1:75:1f:f0:fe:d2:95:fe:f0:
                    e1:31:23:18:67:c0:5b:13:fd:5a:98:94:94:ff:ff:
                    59:02:1f:00:ac:e6:f1:f2:fa:3a:73:b3:1d:42:fc:
                    54:75:cf:51:31:2f:e3:db:81:d9:77:23:2a:4f:59:
                    ce:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8

            X509v3 Subject Key Identifier: 
                1E:C5:B1:2C:7D:87:DA:02:68:7C:25:BC:0C:07:84:3F:B6:CF:DE:F1
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl

            Authority Information Access: 
                CA Issuers - URI:http://crt.usertrust.com/UTNAddTrustObject_CA.crt
                OCSP - URI:http://ocsp.usertrust.com

    Signature Algorithm: sha1WithRSAEncryption
         95:89:77:93:68:01:5e:7c:d9:2d:37:07:90:5d:5a:42:5e:0c:
         64:b4:36:b5:0f:f6:ab:d5:39:27:de:22:46:a4:49:1c:66:4b:
         46:19:59:2e:79:49:03:f6:9c:92:df:6d:50:35:5c:0c:91:2e:
         60:03:59:d0:f1:64:f7:69:09:f6:7e:fe:eb:34:b3:6d:b1:bf:
         66:9c:a3:ba:31:78:b9:87:35:61:3d:92:31:1b:ef:f4:e8:9e:
         d6:ac:45:fa:0c:36:3c:80:67:bb:bd:ef:2e:c2:90:e1:3d:71:
         2f:3b:c1:b0:58:7e:45:c3:52:71:03:07:f6:f3:39:4d:8b:36:
         21:1b:01:df:d9:da:5e:2b:eb:0e:97:80:1e:44:1c:50:88:f5:
         c6:12:33:4a:a8:4d:a5:8d:2f:94:0c:7b:c6:bf:9a:2c:c3:32:
         cd:bd:8c:27:26:f0:e1:30:03:50:06:82:bc:f4:3b:b3:83:75:
         06:c6:ef:ba:ee:d3:80:f8:52:c6:ac:cb:79:f2:38:9e:7b:b0:
         92:58:42:91:05:c8:96:21:ad:b9:4b:16:81:14:69:f1:37:b0:
         fe:34:f7:dc:b0:df:97:f5:43:10:9b:76:8f:b4:65:f5:e8:9f:
         13:b7:1e:ac:6f:c4:69:8a:5f:ba:3c:61:7e:5e:49:86:23:13:
         2e:af:15:48
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f0:66:0e:83:7a:35:a2:cd:92:ec:61:3f:c1:5d:b8
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Code Signing CA 2
        Validity
            Not Before: Sep 12 00:00:00 2014 GMT
            Not After : Sep 12 23:59:59 2019 GMT
        Subject: C=IL/postalCode=52583, ST=Gush Dan, L=Ramat Gan/street=5 Hashoshanim st., O=Nir Sofer, CN=Nir Sofer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a1:c6:1b:2b:fd:f7:76:8d:73:a2:b1:ba:a7:80:
                    d7:67:f6:ea:f5:26:31:15:35:b8:c4:22:89:8e:19:
                    19:2d:57:a0:d3:3e:58:c0:02:f3:28:4a:34:c9:bd:
                    ee:42:a0:5d:33:28:23:0e:e6:84:42:4f:a6:16:d8:
                    fb:1a:0a:52:5f:a1:d4:83:4a:55:a9:52:84:34:cc:
                    89:f0:e4:d4:ed:9e:0f:56:8d:94:e5:9f:4c:80:38:
                    aa:21:f4:fc:09:ec:7c:fb:e7:95:69:ce:ed:80:f5:
                    ec:34:7d:57:72:a4:60:b9:14:ac:74:b3:f7:b9:e5:
                    b2:ee:2f:cc:c5:2d:ab:5e:f9:66:e4:0a:fd:39:69:
                    c9:66:84:d4:18:03:c5:00:b5:4e:af:23:62:b4:b1:
                    11:df:af:7a:3c:25:28:29:53:98:1b:f5:63:c4:39:
                    21:3f:12:81:18:bf:3d:f2:8f:c2:48:a2:c4:f1:0a:
                    49:b9:1a:4a:65:5b:65:b9:74:e2:df:04:c3:19:da:
                    c6:b8:d7:ee:10:05:69:5d:3f:20:b2:35:a7:f8:ea:
                    ce:ee:a4:a7:98:43:ae:cc:9d:26:b9:c5:32:da:63:
                    50:99:fa:de:0d:3f:06:fb:1f:29:9b:2d:53:d5:49:
                    63:7a:b6:00:c8:ab:c6:b2:3c:c5:1c:8f:0b:c3:39:
                    3a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:1E:C5:B1:2C:7D:87:DA:02:68:7C:25:BC:0C:07:84:3F:B6:CF:DE:F1

            X509v3 Subject Key Identifier: 
                29:EA:59:80:5A:26:16:EF:C6:30:7A:53:E1:F7:2A:AD:BF:ED:67:50
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                Code Signing
            Netscape Cert Type: 
                Object Signing
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.1.3.2
                  CPS: https://secure.comodo.net/CPS

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.comodoca.com/COMODOCodeSigningCA2.crl

            Authority Information Access: 
                CA Issuers - URI:http://crt.comodoca.com/COMODOCodeSigningCA2.crt
                OCSP - URI:http://ocsp.comodoca.com

            X509v3 Subject Alternative Name: 
                email:support@nirsoft.net
    Signature Algorithm: sha1WithRSAEncryption
         89:96:bf:1d:98:7b:0f:64:84:06:37:df:42:cf:85:6a:44:ce:
         64:bc:d9:f4:73:04:be:35:82:0c:f9:51:68:e3:cb:d8:d8:10:
         87:46:4f:6e:30:d2:81:1d:c3:11:01:68:7f:d4:6b:50:6d:26:
         6f:aa:c8:55:4f:44:c9:b9:89:72:1b:c4:60:52:c9:93:6f:7e:
         86:08:36:d0:bd:8e:fe:36:0a:ca:a4:19:44:07:6d:af:f4:90:
         ca:6e:d7:98:f6:aa:6d:1c:4e:96:1a:fc:c1:83:39:b8:92:72:
         27:22:c6:de:6e:af:7f:00:39:10:55:3e:6d:9e:0c:e3:e4:5d:
         ae:d3:f1:3a:6f:b6:f1:41:bc:7c:ce:af:71:4b:b7:27:4c:b4:
         33:29:76:35:38:bc:95:d4:7a:3e:0c:b4:63:5d:1d:ad:9b:cb:
         76:ad:ee:ca:7e:c2:ec:3c:3c:94:8d:72:85:22:ac:6d:74:8f:
         a6:4e:b2:e7:96:90:8d:39:5c:86:8e:2f:b6:24:4d:3f:6e:a1:
         4e:15:c6:9c:de:7c:21:1a:39:61:85:38:60:3c:5e:6a:b7:a9:
         b4:4a:45:69:97:06:51:5e:82:30:9c:65:7e:2a:d7:52:a3:8a:
         8a:bb:3e:44:86:7c:0a:01:71:d7:ae:80:01:ea:47:86:9d:b7:
         cd:5f:fa:7b

Cannot convert into OpenSSL::BN

offsetsizetypecomment
0358400EXE07/01/2017 18:34:31#
5780011984PKCS7Authenticode Signature#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable
everything is OK