WebBrowserPassView.exe - WebBrowserPassView

info
MZ
PE
resources
strings
imports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	WebBrowserPassView.exe
size	370384 (0x5a6d0)
md5	09078828931a04c2a3f95db7641ce805

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe8

Rich Header

lib id	version	times used
95	4035	2
93	4035	22
64	9210	11
28	9178	11
1	0	334
25	9210	3
114	50727	52
124	50727	1
120	50727	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x5957eb37
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x103
Magic	0x10b
LinkerVersion	8.0
SizeOfCode	0x43a00
SizeOfInitializedData	0x13a00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x44144
BaseOfCode	0x1000
BaseOfData	0x45000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x5b000
SizeOfHeaders	0x400
CheckSum	0x6980b
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v7.1 EXE / v7.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x438dd	0x43a00	R-X CODE
.rdata	0x45000	0xb952	0xba00	R-- IDATA
.data	0x51000	0x2d84	0x1600	RW- IDATA
.rsrc	0x54000	0x6924	0x6a00	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x4f1d4	0xf0
RESOURCE	0x54000	0x6924
EXCEPTION	0	0
SECURITY	0x57800	0x2ed0
BASERELOC	0	0
DEBUG	0x454a0	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x45000	0x46c
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
CURSOR	#1	308	1252
BITMAP	#104	1000	1252
BITMAP	#133	216	1252
BITMAP	#134	216	1252
ICON	#2	4264	1252
ICON	#3	1128	1252
ICON	#4	1128	1252
ICON	#5	1128	1252
ICON	#6	1128	1252
ICON	#7	1128	1252
ICON	#8	1128	1252
ICON	#9	1128	1252
ICON	#10	1128	1252
MENU	#102	1118	1252
MENU	#104	500	1252
DIALOG	#105	162	1252
DIALOG	#107	662	1252
DIALOG	#110	1470	1252
DIALOG	#112	250	1252
DIALOG	#114	216	1252
DIALOG	#1096	822	1252
STRING	#1	564	1252
STRING	#32	312	1252
STRING	#35	88	1252
STRING	#38	246	1252
STRING	#39	164	1252
STRING	#47	68	1252
STRING	#48	288	1252
STRING	#63	186	1252
STRING	#64	98	1252
STRING	#82	104	1252
ACCELERATORS	#103	88	1252
GROUP_CURSOR	#103	20	1252
GROUP_ICON	#101	20	1252
GROUP_ICON	#111	20	1252
GROUP_ICON	#112	20	1252
GROUP_ICON	#114	20	1252
GROUP_ICON	#115	20	1252
GROUP_ICON	#116	20	1252
GROUP_ICON	#117	20	1252
GROUP_ICON	#118	20	1252
GROUP_ICON	#119	20	1252
VERSION	#1	776	1252
MANIFEST	#1	1093	1252

id	lang	string
4	1033	%d Passwords
5	1033	, %d Selected
6	1033	Created by using
7	1033	Select a filename to save
8	1033	Web Browser Passwords
9	1033	Choose another Firefox profile folder
10	1033	Choose the installation folder of Firefox
11	1033	Choose another profile of Chrome Web browser
12	1033	Choose the password file of Opera (wand.dat)
14	1033	Loading... %d
501	1033	Text File
502	1033	Tab Delimited Text File
503	1033	Tabular Text File
504	1033	HTML File - Horizontal
505	1033	HTML File - Vertical
506	1033	XML File
507	1033	Comma Delimited Text File
508	1033	KeePass csv file
551	1033	Opera Password File
552	1033	All Files
601	1033	Internet Explorer 4.0 - 6.0
602	1033	Internet Explorer 7.0 - 9.0
603	1033	Firefox 1.x
604	1033	Firefox 2.x
605	1033	Firefox 3.0
606	1033	Firefox 3.5-31
607	1033	Chrome
608	1033	Opera
609	1033	Safari
610	1033	Internet Explorer 10.0
611	1033	SeaMonkey
612	1033	Firefox 32+
613	1033	Yandex
614	1033	Vivaldi
751	1033	Search all columns
752	1033	Search only visible columns
761	1033	Find one string
762	1033	Find multiple words (space-delimited list)
763	1033	Find multiple strings (comma-delimited list)
1001	1033	URL
1002	1033	Web Browser
1003	1033	User Name
1004	1033	Password
1005	1033	Password Strength
1006	1033	User Name Field
1007	1033	Password Field
1008	1033	Created Time
1009	1033	Modified Time
1010	1033	Filename
1301	1033	Very Weak
1302	1033	Weak
1303	1033	Medium
1304	1033	Strong
1305	1033	Very Strong

module_name	hint	ord	function_name
msvcrt.dll	154		__setusermatherr
msvcrt.dll	182		_adjust_fdiv
msvcrt.dll	128		__p__commode
msvcrt.dll	133		__p__fmode
msvcrt.dll	805		wcscat
msvcrt.dll	152		__set_app_type
msvcrt.dll	214		_controlfp
msvcrt.dll	304		_gmtime64
msvcrt.dll	352		_itow
msvcrt.dll	554		_wcslwr
msvcrt.dll	765		strchr
msvcrt.dll	505		_strlwr
msvcrt.dll	314		_initterm
msvcrt.dll	814		wcsncmp
msvcrt.dll	734		memmove
msvcrt.dll	676		free
msvcrt.dll	737		modf
msvcrt.dll	429		_memicmp
msvcrt.dll	824		wcstoul
msvcrt.dll	727		malloc
msvcrt.dll	78		_XcptFilter
msvcrt.dll	626		_wtoi64
msvcrt.dll	766		strcmp
msvcrt.dll	768		strcpy
msvcrt.dll	817		wcsrchr
msvcrt.dll	164		__wgetmainargs
msvcrt.dll	548		_wcmdln
msvcrt.dll	655		exit
msvcrt.dll	563		_wcsupr
msvcrt.dll	200		_cexit
msvcrt.dll	556		_wcsnicmp
msvcrt.dll	17		void * __cdecl operator new(unsigned int) ??2@YAPAXI@Z
msvcrt.dll	18		void __cdecl operator delete(void *) ??3@YAXPAX@Z
msvcrt.dll	732		memcmp
msvcrt.dll	448		_purecall
msvcrt.dll	812		wcslen
msvcrt.dll	807		wcscmp
msvcrt.dll	635		abs
msvcrt.dll	724		log
msvcrt.dll	625		_wtoi
msvcrt.dll	552		_wcsicmp
msvcrt.dll	806		wcschr
msvcrt.dll	733		memcpy
msvcrt.dll	809		wcscpy
msvcrt.dll	735		memset
msvcrt.dll	772		strlen
msvcrt.dll	813		wcsncat
msvcrt.dll	483		_snwprintf
msvcrt.dll	237		_except_handler3
msvcrt.dll	246		_exit
msvcrt.dll	197		_c_exit
msvcrt.dll	435		_onexit
msvcrt.dll	106		__dllonexit
msvcrt.dll	731		memchr
msvcrt.dll	771		strftime
msvcrt.dll	749		realloc
COMCTL32.dll		17
COMCTL32.dll	55		ImageList_Create
COMCTL32.dll	52		ImageList_AddMasked
COMCTL32.dll	88		ImageList_SetImageCount
COMCTL32.dll	82		ImageList_ReplaceIcon
COMCTL32.dll	10		CreateToolbarEx
COMCTL32.dll	8		CreateStatusWindowW
VERSION.dll	13		VerQueryValueW
VERSION.dll	2		GetFileVersionInfoSizeW
VERSION.dll	3		GetFileVersionInfoW
WININET.dll	23		FindFirstUrlCacheEntryW
WININET.dll	17		FindCloseUrlCache
WININET.dll	30		FindNextUrlCacheEntryW
KERNEL32.dll	362		GetFullPathNameW
KERNEL32.dll	12		AreFileApisANSI
KERNEL32.dll	152		EnterCriticalSection
KERNEL32.dll	456		GetSystemTime
KERNEL32.dll	612		LockFileEx
KERNEL32.dll	243		FormatMessageA
KERNEL32.dll	458		GetSystemTimeAsFileTime
KERNEL32.dll	469		GetTempPathA
KERNEL32.dll	880		UnlockFileEx
KERNEL32.dll	611		LockFile
KERNEL32.dll	879		UnlockFile
KERNEL32.dll	550		InterlockedCompareExchange
KERNEL32.dll	129		DeleteCriticalSection
KERNEL32.dll	352		GetFileAttributesExW
KERNEL32.dll	336		GetDiskFreeSpaceW
KERNEL32.dll	131		DeleteFileA
KERNEL32.dll	361		GetFullPathNameA
KERNEL32.dll	547		InitializeCriticalSection
KERNEL32.dll	383		GetModuleHandleA
KERNEL32.dll	440		GetStartupInfoW
KERNEL32.dll	238		FlushFileBuffers
KERNEL32.dll	675		QueryPerformanceCounter
KERNEL32.dll	350		GetFileAttributesA
KERNEL32.dll	593		LeaveCriticalSection
KERNEL32.dll	784		SetEndOfFile
KERNEL32.dll	453		GetSystemInfo
KERNEL32.dll	854		Sleep
KERNEL32.dll	333		GetDiskFreeSpaceA
KERNEL32.dll	83		CreateFileA
KERNEL32.dll	168		EnumResourceTypesW
KERNEL32.dll	114		CreateToolhelp32Snapshot
KERNEL32.dll	604		LocalFree
KERNEL32.dll	355		GetFileSize
KERNEL32.dll	859		SystemTimeToFileTime
KERNEL32.dll	52		CloseHandle
KERNEL32.dll	196		FileTimeToLocalFileTime
KERNEL32.dll	132		DeleteFileW
KERNEL32.dll	70		CopyFileW
KERNEL32.dll	86		CreateFileW
KERNEL32.dll	57		CompareFileTime
KERNEL32.dll	597		LoadLibraryW
KERNEL32.dll	416		GetProcAddress
KERNEL32.dll	248		FreeLibrary
KERNEL32.dll	369		GetLastError
KERNEL32.dll	197		FileTimeToSystemTime
KERNEL32.dll	479		GetTickCount
KERNEL32.dll	796		SetFilePointerEx
KERNEL32.dll	321		GetCurrentDirectoryW
KERNEL32.dll	189		ExpandEnvironmentStringsW
KERNEL32.dll	916		WideCharToMultiByte
KERNEL32.dll	629		MultiByteToWideChar
KERNEL32.dll	515		GlobalLock
KERNEL32.dll	357		GetFileTime
KERNEL32.dll	328		GetDateFormatW
KERNEL32.dll	244		FormatMessageW
KERNEL32.dll	468		GetTempFileNameW
KERNEL32.dll	490		GetVersionExW
KERNEL32.dll	206		FindClose
KERNEL32.dll	213		FindFirstFileW
KERNEL32.dll	386		GetModuleHandleW
KERNEL32.dll	481		GetTimeFormatW
KERNEL32.dll	795		SetFilePointer
KERNEL32.dll	500		GetWindowsDirectoryW
KERNEL32.dll	353		GetFileAttributesW
KERNEL32.dll	693		ReadFile
KERNEL32.dll	382		GetModuleFileNameW
KERNEL32.dll	932		WriteFile
KERNEL32.dll	613		LockResource
KERNEL32.dll	967		lstrcpyW
KERNEL32.dll	230		FindResourceW
KERNEL32.dll	973		lstrlenW
KERNEL32.dll	599		LoadResource
KERNEL32.dll	860		SystemTimeToTzSpecificLocalTime
KERNEL32.dll	596		LoadLibraryExW
KERNEL32.dll	504		GlobalAlloc
KERNEL32.dll	522		GlobalUnlock
KERNEL32.dll	470		GetTempPathW
KERNEL32.dll	221		FindNextFileW
KERNEL32.dll	853		SizeofResource
KERNEL32.dll	85		CreateFileMappingW
KERNEL32.dll	616		MapViewOfFile
KERNEL32.dll	881		UnmapViewOfFile
KERNEL32.dll	322		GetCurrentProcess
KERNEL32.dll	147		DuplicateHandle
KERNEL32.dll	323		GetCurrentProcessId
KERNEL32.dll	646		OpenProcess
KERNEL32.dll	413		GetPrivateProfileStringW
KERNEL32.dll	938		WritePrivateProfileStringW
KERNEL32.dll	407		GetPrivateProfileIntW
KERNEL32.dll	166		EnumResourceNamesW
KERNEL32.dll	441		GetStdHandle
KERNEL32.dll	789		SetErrorMode
KERNEL32.dll	696		ReadProcessMemory
KERNEL32.dll	185		ExitProcess
KERNEL32.dll	779		SetCurrentDirectoryW
KERNEL32.dll	663		Process32FirstW
KERNEL32.dll	665		Process32NextW
USER32.dll	190		DrawTextExW
USER32.dll	318		GetMessageW
USER32.dll	516		PostQuitMessage
USER32.dll	676		TrackPopupMenu
USER32.dll	552		RegisterWindowMessageW
USER32.dll	289		GetKeyState
USER32.dll	162		DispatchMessageW
USER32.dll	682		TranslateMessage
USER32.dll	418		IsDialogMessageW
USER32.dll	151		DestroyMenu
USER32.dll	272		GetDlgCtrlID
USER32.dll	309		GetMenuItemInfoW
USER32.dll	488		ModifyMenuW
USER32.dll	457		LoadMenuW
USER32.dll	60		ChildWindowFromPoint
USER32.dll	445		LoadCursorW
USER32.dll	589		SetCursor
USER32.dll	347		GetSysColorBrush
USER32.dll	658		ShowWindow
USER32.dll	647		SetWindowTextW
USER32.dll	594		SetDlgItemInt
USER32.dll	700		UpdateWindow
USER32.dll	596		SetDlgItemTextW
USER32.dll	276		GetDlgItemTextW
USER32.dll	255		GetClientRect
USER32.dll	349		GetSystemMetrics
USER32.dll	144		DeferWindowPos
USER32.dll	97		CreateWindowExW
USER32.dll	372		GetWindowRect
USER32.dll	567		SendDlgItemMessageW
USER32.dll	274		GetDlgItemInt
USER32.dll	198		EndDialog
USER32.dll	641		SetWindowLongW
USER32.dll	273		GetDlgItem
USER32.dll	362		GetWindow
USER32.dll	403		InvalidateRect
USER32.dll	371		GetWindowPlacement
USER32.dll	439		LoadAcceleratorsW
USER32.dll	143		DefWindowProcW
USER32.dll	576		SendMessageW
USER32.dll	515		PostMessageW
USER32.dll	537		RegisterClassW
USER32.dll	486		MessageBoxW
USER32.dll	680		TranslateAcceleratorW
USER32.dll	605		SetMenu
USER32.dll	642		SetWindowPlacement
USER32.dll	449		LoadImageW
USER32.dll	447		LoadIconW
USER32.dll	367		GetWindowLongW
USER32.dll	598		SetFocus
USER32.dll	437		KillTimer
USER32.dll	325		GetParent
USER32.dll	634		SetTimer
USER32.dll	12		BeginDeferWindowPos
USER32.dll	197		EndDeferWindowPos
USER32.dll	313		GetMenuStringW
USER32.dll	57		CheckMenuItem
USER32.dll	306		GetMenuItemCount
USER32.dll	66		CloseClipboard
USER32.dll	58		CheckMenuRadioItem
USER32.dll	267		GetCursorPos
USER32.dll	586		SetClipboardData
USER32.dll	196		EnableWindow
USER32.dll	346		GetSysColor
USER32.dll	474		MapWindowPoints
USER32.dll	300		GetMenu
USER32.dll	268		GetDC
USER32.dll	345		GetSubMenu
USER32.dll	193		EmptyClipboard
USER32.dll	194		EnableMenuItem
USER32.dll	554		ReleaseDC
USER32.dll	253		GetClassNameW
USER32.dll	502		OpenClipboard
USER32.dll	492		MoveWindow
USER32.dll	159		DialogBoxParamW
USER32.dll	86		CreateDialogParamW
USER32.dll	203		EnumChildWindows
USER32.dll	460		LoadStringW
USER32.dll	153		DestroyWindow
USER32.dll	643		SetWindowPos
USER32.dll	378		GetWindowTextW
GDI32.dll	533		SetBkColor
GDI32.dll	526		SelectObject
GDI32.dll	363		GetDeviceCaps
GDI32.dll	534		SetBkMode
GDI32.dll	572		SetTextColor
GDI32.dll	143		DeleteObject
GDI32.dll	61		CreateFontIndirectW
GDI32.dll	437		GetTextExtentPoint32W
GDI32.dll	421		GetStockObject
comdlg32.dll	12		GetSaveFileNameW
comdlg32.dll	10		GetOpenFileNameW
comdlg32.dll	6		FindTextW
ADVAPI32.dll	479		RegEnumKeyExW
ADVAPI32.dll	493		RegOpenKeyExW
ADVAPI32.dll	504		RegQueryValueExW
ADVAPI32.dll	482		RegEnumValueW
ADVAPI32.dll	459		RegCloseKey
SHELL32.dll	183		SHGetMalloc
SHELL32.dll	189		SHGetPathFromIDListW
SHELL32.dll	122		SHBrowseForFolderW
SHELL32.dll	173		SHGetFileInfoW
SHELL32.dll	267		ShellExecuteW
ole32.dll	105		CoUninitialize
ole32.dll	59		CoInitialize
ole32.dll	101		CoTaskMemFree

StringTable 040904b0

CompanyName	NirSoft
FileDescription	WebBrowserPassView
FileVersion	1.86
InternalName	WebBrowserPassView
LegalCopyright	Copyright © 2011 - 2017 Nir Sofer
OriginalFilename	WebBrowserPassView.exe
ProductName	WebBrowserPassView
ProductVersion	1.86

VS_FIXEDFILEINFO

FileVersion	1.8.6.0
ProductVersion	1.8.6.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO Code Signing CA 2

serial: 1AF0660E837A35A2CD92EC613FC15DB8

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
        Validity
            Not Before: Jun  7 08:09:10 2005 GMT
            Not After : May 30 10:48:38 2020 GMT
        Subject: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http:\/\/www.usertrust.com, CN=UTN-USERFirst-Object
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ce:aa:81:3f:a3:a3:61:78:aa:31:00:55:95:11:
                    9e:27:0f:1f:1c:df:3a:9b:82:68:30:c0:4a:61:1d:
                    f1:2f:0e:fa:be:79:f7:a5:23:ef:55:51:96:84:cd:
                    db:e3:b9:6e:3e:31:d8:0a:20:67:c7:f4:d9:bf:94:
                    eb:47:04:3e:02:ce:2a:a2:5d:87:04:09:f6:30:9d:
                    18:8a:97:b2:aa:1c:fc:41:d2:a1:36:cb:fb:3d:91:
                    ba:e7:d9:70:35:fa:e4:e7:90:c3:9b:a3:9b:d3:3c:
                    f5:12:99:77:b1:b7:09:e0:68:e6:1c:b8:f3:94:63:
                    88:6a:6a:fe:0b:76:c9:be:f4:22:e4:67:b9:ab:1a:
                    5e:77:c1:85:07:dd:0d:6c:bf:ee:06:c7:77:6a:41:
                    9e:a7:0f:d7:fb:ee:94:17:b7:fc:85:be:a4:ab:c4:
                    1c:31:dd:d7:b6:d1:e4:f0:ef:df:16:8f:b2:52:93:
                    d7:a1:d4:89:a1:07:2e:bf:e1:01:12:42:1e:1a:e1:
                    d8:95:34:db:64:79:28:ff:ba:2e:11:c2:e5:e8:5b:
                    92:48:fb:47:0b:c2:6c:da:ad:32:83:41:f3:a5:e5:
                    41:70:fd:65:90:6d:fa:fa:51:c4:f9:bd:96:2b:19:
                    04:2c:d3:6d:a7:dc:f0:7f:6f:83:65:e2:6a:ab:87:
                    86:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                AD:BD:98:7A:34:B4:26:F7:FA:C4:26:54:EF:03:BD:E0:24:CB:54:1A
            X509v3 Subject Key Identifier: 
                DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.usertrust.com/AddTrustExternalCARoot.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.usertrust.com
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        4d:42:2f:a6:c1:8a:eb:07:80:90:58:46:8c:f8:19:39:66:2a:
        3c:5a:2c:6d:cf:d4:d9:87:55:8d:79:0b:12:88:7b:40:8f:d5:
        c7:f8:4b:8d:55:16:63:ad:b7:57:dc:3b:2b:bd:d3:c1:4f:1e:
        03:87:4b:44:9b:e3:e2:40:45:26:f3:26:49:2b:6a:84:f1:54:
        7a:d4:42:da:fc:d3:6a:bb:66:7e:ca:9e:ea:e9:bb:dc:07:c7:
        c3:92:4e:83:3c:81:49:9f:92:d5:32:09:ea:49:2e:a1:11:71:
        9a:36:d2:c5:4e:68:b6:cb:0e:1b:25:16:af:6c:de:5d:76:d8:
        1f:72:b1:93:26:86:17:db:18:de:af:45:e9:df:fb:98:af:14:
        18:ed:a4:5e:f6:89:94:45:f0:55:04:4a:dd:ff:27:dd:06:4a:
        40:f6:b4:bc:f1:e4:0f:99:02:bb:fd:5d:0e:2e:28:c1:be:3b:
        5f:1a:3f:97:10:84:bc:16:3e:d8:a3:9c:63:1d:66:cb:5c:5f:
        da:3e:f3:0f:0a:09:35:22:db:db:c0:3f:00:f9:e6:0d:5d:67:
        d1:fd:a0:1e:03:2b:d9:40:f7:be:cc:87:66:54:80:a6:a3:b8:
        f5:19:62:d5:d2:26:b1:98:26:ee:9a:cb:44:a7:45:5a:81:95:
        15:1a:f5:51

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http:\/\/www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: Dec 31 00:00:00 2015 GMT
            Not After : Jul  9 18:40:36 2019 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO SHA-1 Time Stamping Signer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e9:e9:3d:df:d7:37:08:c9:1e:38:b2:52:53:42:
                    6d:22:f1:b1:c4:06:04:6b:9e:fd:82:74:50:43:7d:
                    c6:a0:bb:1f:4e:f9:02:71:26:b1:ef:43:d8:83:8c:
                    48:fc:e7:0f:97:7a:9a:eb:9c:de:a6:a3:0e:3b:1c:
                    44:18:75:8e:78:a5:17:69:fe:49:18:a4:e2:bb:5c:
                    4e:fe:8e:2a:54:7a:50:f0:d5:f6:cc:91:e7:99:79:
                    d7:de:79:94:d7:96:33:fe:0e:83:be:22:bf:63:16:
                    2c:a3:dd:28:1b:af:3d:ab:ea:97:d2:f1:bf:04:10:
                    e7:3d:48:45:fd:1f:68:65:c1:7f:59:99:69:c0:22:
                    31:0c:62:6e:a7:5c:65:01:21:b0:63:c4:22:18:27:
                    ee:e6:fc:d2:00:3d:47:2e:a8:b8:86:56:5d:04:dc:
                    13:17:25:6e:1c:df:44:0f:15:cd:b7:db:a5:57:76:
                    42:6f:00:68:82:99:d2:e3:c1:de:f0:8b:94:57:4c:
                    ec:08:90:22:21:ce:22:2b:98:0c:42:e6:42:93:94:
                    98:93:ef:fd:06:d9:3f:bc:5b:9b:54:3c:20:b1:ee:
                    6a:d6:47:7a:c5:ab:80:e9:30:9a:de:f1:a4:3f:55:
                    4d:0a:09:34:8a:75:29:d2:69:ad:97:0f:50:bf:f8:
                    ca:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8
            X509v3 Subject Key Identifier: 
                8E:6B:2D:33:6B:F4:33:A7:93:B3:13:9A:A5:E0:0A:F7:12:35:6A:88
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.usertrust.com
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        ba:33:24:40:40:8c:7c:db:58:9f:b3:60:98:b2:f5:c0:31:fe:
        eb:1f:6e:50:f6:0a:e0:e4:e6:81:ad:26:87:a2:df:fd:b3:da:
        f4:73:f3:00:fb:29:1b:89:1b:15:3e:db:6b:52:93:2b:c4:ac:
        39:81:d7:3c:67:57:9a:39:36:e0:28:08:9a:e3:39:4f:9b:89:
        09:7f:7b:c5:61:7f:59:89:32:25:0a:6a:ae:1a:3e:f0:a2:27:
        a8:b6:c3:b8:87:f7:16:04:48:41:3d:5c:d8:ec:9f:4d:20:31:
        04:d9:65:a1:ed:cd:69:07:53:16:3d:dd:36:02:0a:88:eb:40:
        e5:06:30:0b:b8:16:4b:dc:ef:bc:55:09:ff:c6:3e:12:2e:76:
        b3:dc:ce:42:ef:f9:76:57:e1:b7:0a:05:40:98:58:9a:5d:71:
        16:93:71:8c:65:81:ea:6f:f3:89:f7:fb:73:ad:b4:e7:bf:d9:
        8e:6f:aa:0b:4f:25:f3:b8:e1:d5:dd:75:98:68:81:f8:aa:c0:
        d1:80:c2:c4:c4:39:89:c1:f6:c9:9e:6c:d7:74:f9:d9:97:f8:
        4f:c2:9a:0a:cd:5e:8f:f8:19:e9:e0:a5:9f:c4:f0:92:21:e6:
        2d:79:25:c9:22:f9:c3:f0:3a:84:57:ad:3a:16:f4:63:94:10:
        1d:5d:d0:c6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http:\/\/www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: Aug 24 00:00:00 2011 GMT
            Not After : May 30 10:48:38 2020 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Code Signing CA 2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cb:f8:e7:a7:e8:f1:97:28:40:68:80:37:d2:c8:
                    3f:8e:92:8a:92:37:87:47:80:ea:4c:99:cf:6e:f9:
                    15:47:bd:ee:75:f4:44:ac:d0:c3:d4:4d:f7:19:c0:
                    d3:3c:4d:c1:47:b9:59:65:16:93:8c:d9:0a:84:9b:
                    9f:e8:f6:6a:63:58:fe:5f:dc:d1:7f:4b:51:9f:00:
                    1c:00:87:54:20:07:57:a0:82:c9:2f:98:af:33:8a:
                    bb:7b:80:22:25:6a:6c:af:c2:2c:6c:79:13:bd:a3:
                    2a:48:d6:b5:8e:61:55:e9:6b:e8:3d:80:bf:14:03:
                    85:18:8e:7e:4c:e9:c2:19:88:73:92:72:cd:fa:ff:
                    50:4d:cb:2c:a6:7b:1a:73:b1:00:90:2c:d9:32:e2:
                    fb:fd:ac:95:42:36:ec:34:c5:13:53:68:b2:c1:9f:
                    40:9f:da:7b:c8:9d:62:6c:93:a2:42:d7:79:9f:97:
                    4f:31:5b:50:21:a1:ab:af:d9:1c:b2:ce:75:be:5b:
                    2c:56:00:24:8d:11:c1:75:1f:f0:fe:d2:95:fe:f0:
                    e1:31:23:18:67:c0:5b:13:fd:5a:98:94:94:ff:ff:
                    59:02:1f:00:ac:e6:f1:f2:fa:3a:73:b3:1d:42:fc:
                    54:75:cf:51:31:2f:e3:db:81:d9:77:23:2a:4f:59:
                    ce:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8
            X509v3 Subject Key Identifier: 
                1E:C5:B1:2C:7D:87:DA:02:68:7C:25:BC:0C:07:84:3F:B6:CF:DE:F1
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl
            Authority Information Access: 
                CA Issuers - URI:http://crt.usertrust.com/UTNAddTrustObject_CA.crt
                OCSP - URI:http://ocsp.usertrust.com
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        95:89:77:93:68:01:5e:7c:d9:2d:37:07:90:5d:5a:42:5e:0c:
        64:b4:36:b5:0f:f6:ab:d5:39:27:de:22:46:a4:49:1c:66:4b:
        46:19:59:2e:79:49:03:f6:9c:92:df:6d:50:35:5c:0c:91:2e:
        60:03:59:d0:f1:64:f7:69:09:f6:7e:fe:eb:34:b3:6d:b1:bf:
        66:9c:a3:ba:31:78:b9:87:35:61:3d:92:31:1b:ef:f4:e8:9e:
        d6:ac:45:fa:0c:36:3c:80:67:bb:bd:ef:2e:c2:90:e1:3d:71:
        2f:3b:c1:b0:58:7e:45:c3:52:71:03:07:f6:f3:39:4d:8b:36:
        21:1b:01:df:d9:da:5e:2b:eb:0e:97:80:1e:44:1c:50:88:f5:
        c6:12:33:4a:a8:4d:a5:8d:2f:94:0c:7b:c6:bf:9a:2c:c3:32:
        cd:bd:8c:27:26:f0:e1:30:03:50:06:82:bc:f4:3b:b3:83:75:
        06:c6:ef:ba:ee:d3:80:f8:52:c6:ac:cb:79:f2:38:9e:7b:b0:
        92:58:42:91:05:c8:96:21:ad:b9:4b:16:81:14:69:f1:37:b0:
        fe:34:f7:dc:b0:df:97:f5:43:10:9b:76:8f:b4:65:f5:e8:9f:
        13:b7:1e:ac:6f:c4:69:8a:5f:ba:3c:61:7e:5e:49:86:23:13:
        2e:af:15:48

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f0:66:0e:83:7a:35:a2:cd:92:ec:61:3f:c1:5d:b8
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Code Signing CA 2
        Validity
            Not Before: Sep 12 00:00:00 2014 GMT
            Not After : Sep 12 23:59:59 2019 GMT
        Subject: C=IL/postalCode=52583, ST=Gush Dan, L=Ramat Gan/street=5 Hashoshanim st., O=Nir Sofer, CN=Nir Sofer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a1:c6:1b:2b:fd:f7:76:8d:73:a2:b1:ba:a7:80:
                    d7:67:f6:ea:f5:26:31:15:35:b8:c4:22:89:8e:19:
                    19:2d:57:a0:d3:3e:58:c0:02:f3:28:4a:34:c9:bd:
                    ee:42:a0:5d:33:28:23:0e:e6:84:42:4f:a6:16:d8:
                    fb:1a:0a:52:5f:a1:d4:83:4a:55:a9:52:84:34:cc:
                    89:f0:e4:d4:ed:9e:0f:56:8d:94:e5:9f:4c:80:38:
                    aa:21:f4:fc:09:ec:7c:fb:e7:95:69:ce:ed:80:f5:
                    ec:34:7d:57:72:a4:60:b9:14:ac:74:b3:f7:b9:e5:
                    b2:ee:2f:cc:c5:2d:ab:5e:f9:66:e4:0a:fd:39:69:
                    c9:66:84:d4:18:03:c5:00:b5:4e:af:23:62:b4:b1:
                    11:df:af:7a:3c:25:28:29:53:98:1b:f5:63:c4:39:
                    21:3f:12:81:18:bf:3d:f2:8f:c2:48:a2:c4:f1:0a:
                    49:b9:1a:4a:65:5b:65:b9:74:e2:df:04:c3:19:da:
                    c6:b8:d7:ee:10:05:69:5d:3f:20:b2:35:a7:f8:ea:
                    ce:ee:a4:a7:98:43:ae:cc:9d:26:b9:c5:32:da:63:
                    50:99:fa:de:0d:3f:06:fb:1f:29:9b:2d:53:d5:49:
                    63:7a:b6:00:c8:ab:c6:b2:3c:c5:1c:8f:0b:c3:39:
                    3a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                1E:C5:B1:2C:7D:87:DA:02:68:7C:25:BC:0C:07:84:3F:B6:CF:DE:F1
            X509v3 Subject Key Identifier: 
                29:EA:59:80:5A:26:16:EF:C6:30:7A:53:E1:F7:2A:AD:BF:ED:67:50
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                Code Signing
            Netscape Cert Type: 
                Object Signing
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.1.3.2
                  CPS: https://secure.comodo.net/CPS
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.comodoca.com/COMODOCodeSigningCA2.crl
            Authority Information Access: 
                CA Issuers - URI:http://crt.comodoca.com/COMODOCodeSigningCA2.crt
                OCSP - URI:http://ocsp.comodoca.com
            X509v3 Subject Alternative Name: 
                email:support@nirsoft.net
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        89:96:bf:1d:98:7b:0f:64:84:06:37:df:42:cf:85:6a:44:ce:
        64:bc:d9:f4:73:04:be:35:82:0c:f9:51:68:e3:cb:d8:d8:10:
        87:46:4f:6e:30:d2:81:1d:c3:11:01:68:7f:d4:6b:50:6d:26:
        6f:aa:c8:55:4f:44:c9:b9:89:72:1b:c4:60:52:c9:93:6f:7e:
        86:08:36:d0:bd:8e:fe:36:0a:ca:a4:19:44:07:6d:af:f4:90:
        ca:6e:d7:98:f6:aa:6d:1c:4e:96:1a:fc:c1:83:39:b8:92:72:
        27:22:c6:de:6e:af:7f:00:39:10:55:3e:6d:9e:0c:e3:e4:5d:
        ae:d3:f1:3a:6f:b6:f1:41:bc:7c:ce:af:71:4b:b7:27:4c:b4:
        33:29:76:35:38:bc:95:d4:7a:3e:0c:b4:63:5d:1d:ad:9b:cb:
        76:ad:ee:ca:7e:c2:ec:3c:3c:94:8d:72:85:22:ac:6d:74:8f:
        a6:4e:b2:e7:96:90:8d:39:5c:86:8e:2f:b6:24:4d:3f:6e:a1:
        4e:15:c6:9c:de:7c:21:1a:39:61:85:38:60:3c:5e:6a:b7:a9:
        b4:4a:45:69:97:06:51:5e:82:30:9c:65:7e:2a:d7:52:a3:8a:
        8a:bb:3e:44:86:7c:0a:01:71:d7:ae:80:01:ea:47:86:9d:b7:
        cd:5f:fa:7b

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA1

bd f0 16 10 fc 87 d0 8b 99 d6 8d b4 4a ce 52 a8 |............J.R.| 80 fe 27 90 |..'. |

Certificates
- Certificate #0
  - 2
    - 42:1A:F2:94:09:84:19:1F:52:0A:4B:C6:24:26:A7:4B
    - RSA-SHA1: nil
    - Issuer
      - C: SE
      - O: AddTrust AB
      - OU: AddTrust External TTP Network
      - CN: AddTrust External CA Root
    - 2005-06-07 08:09:10 UTC: 2020-05-30 10:48:38 UTC
    - Subject
      - C: US
      - ST: UT
      - L: Salt Lake City
      - O: The USERTRUST Network
      - OU: http://www.usertrust.com
      - CN: UTN-USERFirst-Object
    - #5
      - rsaEncryption: nil
      - CE:AA:81:3F:A3:A3:61:78:AA:31:00:55:95:11:9E:27:
        0F:1F:1C:DF:3A:9B:82:68:30:C0:4A:61:1D:F1:2F:0E:
        FA:BE:79:F7:A5:23:EF:55:51:96:84:CD:DB:E3:B9:6E:
        3E:31:D8:0A:20:67:C7:F4:D9:BF:94:EB:47:04:3E:02:
        CE:2A:A2:5D:87:04:09:F6:30:9D:18:8A:97:B2:AA:1C:
        FC:41:D2:A1:36:CB:FB:3D:91:BA:E7:D9:70:35:FA:E4:
        E7:90:C3:9B:A3:9B:D3:3C:F5:12:99:77:B1:B7:09:E0:
        68:E6:1C:B8:F3:94:63:88:6A:6A:FE:0B:76:C9:BE:F4:
        22:E4:67:B9:AB:1A:5E:77:C1:85:07:DD:0D:6C:BF:EE:
        06:C7:77:6A:41:9E:A7:0F:D7:FB:EE:94:17:B7:FC:85:
        BE:A4:AB:C4:1C:31:DD:D7:B6:D1:E4:F0:EF:DF:16:8F:
        B2:52:93:D7:A1:D4:89:A1:07:2E:BF:E1:01:12:42:1E:
        1A:E1:D8:95:34:DB:64:79:28:FF:BA:2E:11:C2:E5:E8:
        5B:92:48:FB:47:0B:C2:6C:DA:AD:32:83:41:F3:A5:E5:
        41:70:FD:65:90:6D:FA:FA:51:C4:F9:BD:96:2B:19:04:
        2C:D3:6D:A7:DC:F0:7F:6F:83:65:E2:6A:AB:87:86:75: 0x010001
    - #6
      - authorityKeyIdentifier:
        ad bd 98 7a 34 b4 26 f7 fa c4 26 54 ef 03 bd e0 |...z4.&...&T....| 24 cb 54 1a |$.T. |
      - subjectKeyIdentifier:
        da ed 64 74 14 9c 14 3c ab dd 99 a9 bd 5b 28 4d |..dt...<.....[(M| 8b 3c c9 d8 |.<.. |
      - keyUsage: true, 6
      - basicConstraints: true, true
      - certificatePolicies: anyPolicy
      - crlDistributionPoints: http://crl.usertrust.com/AddTrustExternalCARoot.crl
      - authorityInfoAccess
        OCSP: http://ocsp.usertrust.com
  - RSA-SHA1:
```
4d 42 2f a6 c1 8a eb 07  80 90 58 46 8c f8 19 39  |MB/.......XF...9|
66 2a 3c 5a 2c 6d cf d4  d9 87 55 8d 79 0b 12 88  |f*...|
63 1d 66 cb 5c 5f da 3e  f3 0f 0a 09 35 22 db db  |c.f.\_.>....5"..|
c0 3f 00 f9 e6 0d 5d 67  d1 fd a0 1e 03 2b d9 40  |.?....]g.....+.@|
f7 be cc 87 66 54 80 a6  a3 b8 f5 19 62 d5 d2 26  |....fT......b..&|
b1 98 26 ee 9a cb 44 a7  45 5a 81 95 15 1a f5 51  |..&...D.EZ.....Q|
```
- Certificate #1
  - 2
    - 16:88:F0:39:25:5E:63:8E:69:14:39:07:E6:33:0B
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - ST: UT
      - L: Salt Lake City
      - O: The USERTRUST Network
      - OU: http://www.usertrust.com
      - CN: UTN-USERFirst-Object
    - 2015-12-31 00:00:00 UTC: 2019-07-09 18:40:36 UTC
    - Subject
      - C: GB
      - ST: Greater Manchester
      - L: Salford
      - O: COMODO CA Limited
      - CN: COMODO SHA-1 Time Stamping Signer
    - #5
      - rsaEncryption: nil
      - E9:E9:3D:DF:D7:37:08:C9:1E:38:B2:52:53:42:6D:22:
        F1:B1:C4:06:04:6B:9E:FD:82:74:50:43:7D:C6:A0:BB:
        1F:4E:F9:02:71:26:B1:EF:43:D8:83:8C:48:FC:E7:0F:
        97:7A:9A:EB:9C:DE:A6:A3:0E:3B:1C:44:18:75:8E:78:
        A5:17:69:FE:49:18:A4:E2:BB:5C:4E:FE:8E:2A:54:7A:
        50:F0:D5:F6:CC:91:E7:99:79:D7:DE:79:94:D7:96:33:
        FE:0E:83:BE:22:BF:63:16:2C:A3:DD:28:1B:AF:3D:AB:
        EA:97:D2:F1:BF:04:10:E7:3D:48:45:FD:1F:68:65:C1:
        7F:59:99:69:C0:22:31:0C:62:6E:A7:5C:65:01:21:B0:
        63:C4:22:18:27:EE:E6:FC:D2:00:3D:47:2E:A8:B8:86:
        56:5D:04:DC:13:17:25:6E:1C:DF:44:0F:15:CD:B7:DB:
        A5:57:76:42:6F:00:68:82:99:D2:E3:C1:DE:F0:8B:94:
        57:4C:EC:08:90:22:21:CE:22:2B:98:0C:42:E6:42:93:
        94:98:93:EF:FD:06:D9:3F:BC:5B:9B:54:3C:20:B1:EE:
        6A:D6:47:7A:C5:AB:80:E9:30:9A:DE:F1:A4:3F:55:4D:
        0A:09:34:8A:75:29:D2:69:AD:97:0F:50:BF:F8:CA:09: 0x010001
    - #6
      - authorityKeyIdentifier:
        da ed 64 74 14 9c 14 3c ab dd 99 a9 bd 5b 28 4d |..dt...<.....[(M| 8b 3c c9 d8 |.<.. |
      - subjectKeyIdentifier:
        8e 6b 2d 33 6b f4 33 a7 93 b3 13 9a a5 e0 0a f7 |.k-3k.3.........| 12 35 6a 88 |.5j. |
      - keyUsage: true, 0xc0
      - basicConstraints
        true
        nil
      - extendedKeyUsage: true, timeStamping
      - crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
      - authorityInfoAccess
        OCSP: http://ocsp.usertrust.com
  - RSA-SHA1:
```
ba 33 24 40 40 8c 7c db  58 9f b3 60 98 b2 f5 c0  |.3$@@.|.X..`....|
31 fe eb 1f 6e 50 f6 0a  e0 e4 e6 81 ad 26 87 a2  |1...nP.......&..|
df fd b3 da f4 73 f3 00  fb 29 1b 89 1b 15 3e db  |.....s...)....>.|
6b 52 93 2b c4 ac 39 81  d7 3c 67 57 9a 39 36 e0  |kR.+..9....'......|
16 04 48 41 3d 5c d8 ec  9f 4d 20 31 04 d9 65 a1  |..HA=\...M 1..e.|
ed cd 69 07 53 16 3d dd  36 02 0a 88 eb 40 e5 06  |..i.S.=.6....@..|
30 0b b8 16 4b dc ef bc  55 09 ff c6 3e 12 2e 76  |0...K...U...>..v|
b3 dc ce 42 ef f9 76 57  e1 b7 0a 05 40 98 58 9a  |...B..vW....@.X.|
5d 71 16 93 71 8c 65 81  ea 6f f3 89 f7 fb 73 ad  |]q..q.e..o....s.|
b4 e7 bf d9 8e 6f aa 0b  4f 25 f3 b8 e1 d5 dd 75  |.....o..O%.....u|
98 68 81 f8 aa c0 d1 80  c2 c4 c4 39 89 c1 f6 c9  |.h.........9....|
9e 6c d7 74 f9 d9 97 f8  4f c2 9a 0a cd 5e 8f f8  |.l.t....O....^..|
19 e9 e0 a5 9f c4 f0 92  21 e6 2d 79 25 c9 22 f9  |........!.-y%.".|
c3 f0 3a 84 57 ad 3a 16  f4 63 94 10 1d 5d d0 c6  |..:.W.:..c...]..|
```
- Certificate #2
  - 2
    - 10:70:9D:4F:F5:54:08:D7:30:60:01:D8:EA:91:75:BB
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - ST: UT
      - L: Salt Lake City
      - O: The USERTRUST Network
      - OU: http://www.usertrust.com
      - CN: UTN-USERFirst-Object
    - 2011-08-24 00:00:00 UTC: 2020-05-30 10:48:38 UTC
    - Subject
      - C: GB
      - ST: Greater Manchester
      - L: Salford
      - O: COMODO CA Limited
      - CN: COMODO Code Signing CA 2
    - #5
      - rsaEncryption: nil
      - CB:F8:E7:A7:E8:F1:97:28:40:68:80:37:D2:C8:3F:8E:
        92:8A:92:37:87:47:80:EA:4C:99:CF:6E:F9:15:47:BD:
        EE:75:F4:44:AC:D0:C3:D4:4D:F7:19:C0:D3:3C:4D:C1:
        47:B9:59:65:16:93:8C:D9:0A:84:9B:9F:E8:F6:6A:63:
        58:FE:5F:DC:D1:7F:4B:51:9F:00:1C:00:87:54:20:07:
        57:A0:82:C9:2F:98:AF:33:8A:BB:7B:80:22:25:6A:6C:
        AF:C2:2C:6C:79:13:BD:A3:2A:48:D6:B5:8E:61:55:E9:
        6B:E8:3D:80:BF:14:03:85:18:8E:7E:4C:E9:C2:19:88:
        73:92:72:CD:FA:FF:50:4D:CB:2C:A6:7B:1A:73:B1:00:
        90:2C:D9:32:E2:FB:FD:AC:95:42:36:EC:34:C5:13:53:
        68:B2:C1:9F:40:9F:DA:7B:C8:9D:62:6C:93:A2:42:D7:
        79:9F:97:4F:31:5B:50:21:A1:AB:AF:D9:1C:B2:CE:75:
        BE:5B:2C:56:00:24:8D:11:C1:75:1F:F0:FE:D2:95:FE:
        F0:E1:31:23:18:67:C0:5B:13:FD:5A:98:94:94:FF:FF:
        59:02:1F:00:AC:E6:F1:F2:FA:3A:73:B3:1D:42:FC:54:
        75:CF:51:31:2F:E3:DB:81:D9:77:23:2A:4F:59:CE:23: 0x010001
    - #6
      - authorityKeyIdentifier:
        da ed 64 74 14 9c 14 3c ab dd 99 a9 bd 5b 28 4d |..dt...<.....[(M| 8b 3c c9 d8 |.<.. |
      - subjectKeyIdentifier:
        1e c5 b1 2c 7d 87 da 02 68 7c 25 bc 0c 07 84 3f |...,}...h|%....?| b6 cf de f1 |.... |
      - keyUsage: true, 6
      - basicConstraints
        true
        true: 0
      - extendedKeyUsage: codeSigning
      - certificatePolicies: anyPolicy
      - crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
      - authorityInfoAccess
        #0
        caIssuers: http://crt.usertrust.com/UTNAddTrustObject_CA.crt
        OCSP: http://ocsp.usertrust.com
  - RSA-SHA1:
```
95 89 77 93 68 01 5e 7c  d9 2d 37 07 90 5d 5a 42  |..w.h.^|.-7..]ZB|
5e 0c 64 b4 36 b5 0f f6  ab d5 39 27 de 22 46 a4  |^.d.6.....9'."F.|
49 1c 66 4b 46 19 59 2e  79 49 03 f6 9c 92 df 6d  |I.fKF.Y.yI.....m|
50 35 5c 0c 91 2e 60 03  59 d0 f1 64 f7 69 09 f6  |P5\...`.Y..d.i..|
7e fe eb 34 b3 6d b1 bf  66 9c a3 ba 31 78 b9 87  |~..4.m..f...1x..|
35 61 3d 92 31 1b ef f4  e8 9e d6 ac 45 fa 0c 36  |5a=.1.......E..6|
3c 80 67 bb bd ef 2e c2  90 e1 3d 71 2f 3b c1 b0  |<.g.......=q/;..|
58 7e 45 c3 52 71 03 07  f6 f3 39 4d 8b 36 21 1b  |X~E.Rq....9M.6!.|
01 df d9 da 5e 2b eb 0e  97 80 1e 44 1c 50 88 f5  |....^+.....D.P..|
c6 12 33 4a a8 4d a5 8d  2f 94 0c 7b c6 bf 9a 2c  |..3J.M../..{...,|
c3 32 cd bd 8c 27 26 f0  e1 30 03 50 06 82 bc f4  |.2...'&..0.P....|
3b b3 83 75 06 c6 ef ba  ee d3 80 f8 52 c6 ac cb  |;..u........R...|
79 f2 38 9e 7b b0 92 58  42 91 05 c8 96 21 ad b9  |y.8.{..XB....!..|
4b 16 81 14 69 f1 37 b0  fe 34 f7 dc b0 df 97 f5  |K...i.7..4......|
43 10 9b 76 8f b4 65 f5  e8 9f 13 b7 1e ac 6f c4  |C..v..e.......o.|
69 8a 5f ba 3c 61 7e 5e  49 86 23 13 2e af 15 48  |i._.
```
- Certificate #3
  - 2
    - 1A:F0:66:0E:83:7A:35:A2:CD:92:EC:61:3F:C1:5D:B8
    - RSA-SHA1: nil
    - Issuer
      - C: GB
      - ST: Greater Manchester
      - L: Salford
      - O: COMODO CA Limited
      - CN: COMODO Code Signing CA 2
    - 2014-09-12 00:00:00 UTC: 2019-09-12 23:59:59 UTC
    - Subject
      - C: IL
      - postalCode: 52583
      - ST: Gush Dan
      - L: Ramat Gan
      - street: 5 Hashoshanim st.
      - O: Nir Sofer
      - CN: Nir Sofer
    - #5
      - rsaEncryption: nil
      - A1:C6:1B:2B:FD:F7:76:8D:73:A2:B1:BA:A7:80:D7:67:
        F6:EA:F5:26:31:15:35:B8:C4:22:89:8E:19:19:2D:57:
        A0:D3:3E:58:C0:02:F3:28:4A:34:C9:BD:EE:42:A0:5D:
        33:28:23:0E:E6:84:42:4F:A6:16:D8:FB:1A:0A:52:5F:
        A1:D4:83:4A:55:A9:52:84:34:CC:89:F0:E4:D4:ED:9E:
        0F:56:8D:94:E5:9F:4C:80:38:AA:21:F4:FC:09:EC:7C:
        FB:E7:95:69:CE:ED:80:F5:EC:34:7D:57:72:A4:60:B9:
        14:AC:74:B3:F7:B9:E5:B2:EE:2F:CC:C5:2D:AB:5E:F9:
        66:E4:0A:FD:39:69:C9:66:84:D4:18:03:C5:00:B5:4E:
        AF:23:62:B4:B1:11:DF:AF:7A:3C:25:28:29:53:98:1B:
        F5:63:C4:39:21:3F:12:81:18:BF:3D:F2:8F:C2:48:A2:
        C4:F1:0A:49:B9:1A:4A:65:5B:65:B9:74:E2:DF:04:C3:
        19:DA:C6:B8:D7:EE:10:05:69:5D:3F:20:B2:35:A7:F8:
        EA:CE:EE:A4:A7:98:43:AE:CC:9D:26:B9:C5:32:DA:63:
        50:99:FA:DE:0D:3F:06:FB:1F:29:9B:2D:53:D5:49:63:
        7A:B6:00:C8:AB:C6:B2:3C:C5:1C:8F:0B:C3:39:3A:91: 0x010001
    - #6
      - authorityKeyIdentifier:
        1e c5 b1 2c 7d 87 da 02 68 7c 25 bc 0c 07 84 3f |...,}...h|%....?| b6 cf de f1 |.... |
      - subjectKeyIdentifier:
        29 ea 59 80 5a 26 16 ef c6 30 7a 53 e1 f7 2a ad |).Y.Z&...0zS..*.| bf ed 67 50 |..gP |
      - keyUsage: true, 0x80
      - basicConstraints
        true
        nil
      - extendedKeyUsage: codeSigning
      - nsCertType: 0x10
      - certificatePolicies
        1.3.6.1.4.1.6449.1.2.1.3.2
        id-qt-cps: https://secure.comodo.net/CPS
      - crlDistributionPoints: http://crl.comodoca.com/COMODOCodeSigningCA2.crl
      - authorityInfoAccess
        #0
        caIssuers: http://crt.comodoca.com/COMODOCodeSigningCA2.crt
        OCSP: http://ocsp.comodoca.com
      - subjectAltName: support@nirsoft.net
  - RSA-SHA1:
```
89 96 bf 1d 98 7b 0f 64  84 06 37 df 42 cf 85 6a  |.....{.d..7.B..j|
44 ce 64 bc d9 f4 73 04  be 35 82 0c f9 51 68 e3  |D.d...s..5...Qh.|
cb d8 d8 10 87 46 4f 6e  30 d2 81 1d c3 11 01 68  |.....FOn0......h|
7f d4 6b 50 6d 26 6f aa  c8 55 4f 44 c9 b9 89 72  |..kPm&o..UOD...r|
1b c4 60 52 c9 93 6f 7e  86 08 36 d0 bd 8e fe 36  |..`R..o~..6....6|
0a ca a4 19 44 07 6d af  f4 90 ca 6e d7 98 f6 aa  |....D.m....n....|
6d 1c 4e 96 1a fc c1 83  39 b8 92 72 27 22 c6 de  |m.N.....9..r'"..|
6e af 7f 00 39 10 55 3e  6d 9e 0c e3 e4 5d ae d3  |n...9.U>m....]..|
f1 3a 6f b6 f1 41 bc 7c  ce af 71 4b b7 27 4c b4  |.:o..A.|..qK.'L.|
33 29 76 35 38 bc 95 d4  7a 3e 0c b4 63 5d 1d ad  |3)v58...z>..c]..|
9b cb 76 ad ee ca 7e c2  ec 3c 3c 94 8d 72 85 22  |..v...~..<<..r."|
ac 6d 74 8f a6 4e b2 e7  96 90 8d 39 5c 86 8e 2f  |.mt..N.....9\../|
b6 24 4d 3f 6e a1 4e 15  c6 9c de 7c 21 1a 39 61  |.$M?n.N....|!.9a|
85 38 60 3c 5e 6a b7 a9  b4 4a 45 69 97 06 51 5e  |.8`<^j...JEi..Q^|
82 30 9c 65 7e 2a d7 52  a3 8a 8a bb 3e 44 86 7c  |.0.e~*.R....>D.||
0a 01 71 d7 ae 80 01 ea  47 86 9d b7 cd 5f fa 7b  |..q.....G...._.{|
```

Signer

1
unnamed
- #0
  - C: GB
  - ST: Greater Manchester
  - L: Salford
  - O: COMODO CA Limited
  - CN: COMODO Code Signing CA 2
- 1A:F0:66:0E:83:7A:35:A2:CD:92:EC:61:3F:C1:5D:B8
SHA1: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

ab 6d 04 07 56 7c 32 c8  a1 73 d9 6a 81 09 6d 04  |.m..V|2..s.j..m.|
e0 25 5a 8f                                       |.%Z.            |

rsaEncryption:

32 14 46 60 a9 3c 94 1b  6f b7 cb b5 e4 7a 34 ce  |2.F`.<..o....z4.|
a6 e3 76 ec 8a cf b0 bb  41 53 39 0c c6 38 41 da  |..v.....AS9..8A.|
88 cd d6 2d c9 8a b0 ce  a1 cf 26 2a 30 de e7 06  |...-......&*0...|
07 77 b0 e6 18 7a 51 c5  8d ba ae a5 d9 ed 83 3d  |.w...zQ........=|
42 d9 92 19 82 ea 13 a4  e7 d2 73 36 e3 ce d4 bc  |B.........s6....|
22 e6 62 dc 1d 0e fa 53  40 68 8b 2e 49 d4 99 9f  |".b....S@h..I...|
b8 33 82 b9 58 94 69 57  db ef ed 19 4b 12 ae 4a  |.3..X.iW....K..J|
50 ec b5 44 9f bc 52 ca  83 b4 87 b7 9f 3b ba 8d  |P..D..R......;..|
8e af 3a 9b 04 26 c6 14  af 5c 49 6c 1f c5 93 ea  |..:..&...\Il....|
b2 81 10 8c bd 6a 1a 8f  12 3a 4a f8 fa 8f 34 41  |.....j...:J...4A|
b3 23 1f 08 23 bc 75 a5  9e de d6 cf 4b 6e dd e9  |.#..#.u.....Kn..|
3f 49 9e 04 83 94 bf 5d  64 40 d1 33 b3 fe 16 be  |?I.....]d@.3....|
90 f2 81 27 80 e0 aa a4  f8 92 55 d4 00 8d ab ab  |...'......U.....|
98 3a dd e3 9d 19 b9 ae  b5 c4 bd 93 4e 76 3c a5  |.:..........Nv<.|
a0 a4 57 56 56 9a eb 07  9c 1b d5 77 ad 88 66 24  |..WVV......w..f$|
30 f9 3e 12 ec 16 81 d0  2b df 3d fc 10 de b0 43  |0.>.....+.=....C|

countersignature

unnamed
- #0
  - C: US
  - ST: UT
  - L: Salt Lake City
  - O: The USERTRUST Network
  - OU: http://www.usertrust.com
  - CN: UTN-USERFirst-Object
- 16:88:F0:39:25:5E:63:8E:69:14:39:07:E6:33:0B
SHA1: nil

contentType: pkcs7-data
signingTime: 2017-07-01 18:36:18 UTC

messageDigest:

64 04 5f 3f 53 53 e7 3e  f5 12 70 8a 7e e8 0d 92  |d._?SS.>..p.~...|
b2 5e 4c 3d                                       |.^L=            |

rsaEncryption:

8a 8e 3f ae d2 7d d9 ac  ea 51 02 60 10 03 8e cb  |..?..}...Q.`....|
df 92 70 0d ab 5f f6 22  29 84 f2 bb 43 d1 fa 24  |..p.._.")...C..$|
cb 39 6c 28 d4 1b b6 d4  50 03 1e e4 dc b8 d2 e2  |.9l(....P.......|
ac cb 83 69 bd 0e 05 83  d7 eb 3b fa a1 9f c2 29  |...i......;....)|
fd c8 bc f4 f3 00 19 31  6c c6 4b 3a 82 e4 77 1b  |.......1l.K:..w.|
f9 7a 99 73 0a 79 61 ee  f9 6e f9 b9 04 5d ad 96  |.z.s.ya..n...]..|
50 c0 67 94 81 16 02 8e  e1 b0 7e d2 b0 0f a9 6b  |P.g.......~....k|
0d 95 85 93 ff 87 9a 0b  3b a2 a2 38 b2 2f 0f c6  |........;..8./..|
a8 46 a4 c3 9b c2 a0 f1  18 c8 37 f1 2d 37 7e d2  |.F........7.-7~.|
69 4e 2e 82 4a 86 26 1e  f2 76 ef 55 5d 5c 97 c7  |iN..J.&..v.U]\..|
8f 00 9a b7 5e de bb 8f  05 47 ea e8 9d 5a 9f 43  |....^....G...Z.C|
b3 7e 00 1b b1 10 81 f0  5f f0 d0 04 da 8b 6f d9  |.~......_.....o.|
57 7f f6 0c e7 f2 d0 5e  b9 45 c0 f2 3d 61 1b de  |W......^.E..=a..|
7f 03 b1 a2 6e 4d 0f 97  73 cc 0f 11 6c 06 ca 7c  |....nM..s...l..||
06 60 a3 54 bd 36 4a 11  47 5d 3f de c5 af 14 55  |.`.T.6J.G]?....U|
27 1f bf e8 82 2a 14 d1  e0 8e 1c b3 89 d9 77 af  |'....*........w.|

1.3.6.1.4.1.311.2.4.1

pkcs7-signedData

SHA256: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA256

f6 dd f7 75 a0 10 39 c7 27 97 ae 42 9f f9 1c 09 |...u..9.'..B....| f0 de 93 0d f0 11 ee d1 8b 8a 69 25 99 9d 2b 0e |..........i%..+.|

Certificates

Certificate #0
- 2
  - BD:1B:1E:45:0B:BD:D5:DF:88:67:8E:7D:DA:22:3D:17
  - RSA-SHA256: nil
  - Issuer
    - C: GB
    - ST: Greater Manchester
    - L: Salford
    - O: COMODO CA Limited
    - CN: COMODO RSA Code Signing CA
  - 2016-03-30 00:00:00 UTC: 2019-06-30 23:59:59 UTC
  - Subject
    - C: IL
    - postalCode: 52583
    - ST: Gush Dan
    - L: Ramat Gan
    - street: 5 Hashoshanim st.
    - O: Nir Sofer
    - CN: Nir Sofer
  - #5
    - rsaEncryption: nil
    - B4:47:6F:72:A2:69:3E:58:FC:AC:15:E2:B5:F5:A2:B1:
      7B:EF:C6:88:81:1B:09:B7:CD:EE:5E:54:E1:66:90:E9:
      80:94:F0:93:7C:31:BA:89:67:30:CE:0E:CE:D8:03:CE:
      72:10:50:B7:FA:89:88:F3:08:9F:B6:AC:79:1D:72:04:
      C0:61:53:70:E6:27:6B:D4:F9:5D:2E:1D:84:9D:70:AC:
      E6:15:29:55:CB:25:BD:6B:6F:A3:61:70:1C:51:E8:79:
      44:9A:45:6A:A3:F3:19:F8:47:7F:70:E5:C4:C7:A6:A7:
      EF:6C:22:65:C7:8B:92:B0:69:12:66:B1:D9:BF:CB:2E:
      28:1E:C3:39:7B:47:23:B4:80:B0:24:D3:6C:C1:F2:24:
      15:B1:AC:7A:CC:4B:E6:DA:0D:B8:0D:88:65:FA:86:E6:
      94:FD:AD:53:0D:9B:E7:16:C2:C0:92:52:B5:F1:37:F5:
      93:69:6A:D2:DC:B9:E2:6C:85:16:E9:28:87:D5:DE:DA:
      9B:DF:90:67:FF:C4:55:EA:0F:F4:CA:1E:C0:50:57:CC:
      19:75:B3:AB:56:6D:9C:D6:14:52:06:1D:D5:52:EA:62:
      22:C8:5D:AE:13:ED:1D:20:0C:2D:17:4E:F7:F3:88:13:
      F7:44:BE:C8:D9:AA:CC:73:42:96:07:00:E1:FA:C4:5B: 0x010001
  - #6
    - authorityKeyIdentifier:
```
29 91 60 ff 8a 4d fa eb  f9 a6 6a b8 cf f9 e6 4b  |).`..M....j....K|
bd 49 ce 12                                       |.I..            |
```
    - subjectKeyIdentifier:
```
fb 61 31 cf 90 9c 40 7f  81 20 b6 5c 99 6d 6d e3  |.a1...@.. .\.mm.|
e4 7d d8 4a                                       |.}.J            |
```
    - keyUsage: true, 0x80
    - basicConstraints
      - true
      - nil
    - extendedKeyUsage: codeSigning
    - nsCertType: 0x10
    - certificatePolicies
      - 1.3.6.1.4.1.6449.1.2.1.3.2
        id-qt-cps: https://secure.comodo.net/CPS
    - crlDistributionPoints: http://crl.comodoca.com/COMODORSACodeSigningCA.crl
    - authorityInfoAccess
      - #0
        caIssuers: http://crt.comodoca.com/COMODORSACodeSigningCA.crt
        OCSP: http://ocsp.comodoca.com
    - subjectAltName: support@nirsoft.net
- RSA-SHA256:
```
a4 62 6f d9 e4 8d 52 e7  b0 80 20 b8 39 16 61 ec  |.bo...R... .9.a.|
56 8b 29 1a c5 ec 7c 06  81 72 42 1b d6 a3 84 e9  |V.)...|..rB.....|
d4 81 c6 40 75 22 31 8a  15 f1 ac b9 4f d1 fc fc  |...@u"1.....O...|
ae 4b 4e 68 39 61 c1 b2  b8 7b e7 78 1f 6d d0 03  |.KNh9a...{.x.m..|
4e 1c 8e 68 51 63 da 77  37 f7 d0 8b 28 6d cc 53  |N..hQc.w7...(m.S|
29 ed 30 bd 65 7b b8 c9  a9 7c da 0b a8 48 05 60  |).0.e{...|...H.`|
30 85 11 e6 c1 ca 47 ac  b7 f1 8b 92 d9 df cd 76  |0.....G........v|
53 1f 14 53 d0 c7 6c 64  f0 d4 e5 fa 8e 66 60 c3  |S..S..ld.....f`.|
d4 e7 4c cc 55 70 04 c1  08 c7 0a 45 35 a1 90 b8  |..L.Up.....E5...|
3f 7d 59 38 7b 4f a9 1a  e2 d9 0c 2f 70 eb b9 85  |?}Y8{O...../p...|
a8 9f a9 09 11 bc 29 7d  22 3c 4e 70 e7 8b 91 61  |......)}"...|
f5 ac 00 bf d6 8f f9 b8  8f 8b 30 0b 80 c1 85 41  |..........0....A|
7a 86 75 66 ff a6 b5 e8  47 85 96 cb a9 c5 4c 3a  |z.uf....G.....L:|
```

Certificate #1

2
- 2E:7C:87:CC:0E:93:4A:52:FE:94:FD:1C:B7:CD:34:AF
- RSA-SHA384: nil
- Issuer
  - C: GB
  - ST: Greater Manchester
  - L: Salford
  - O: COMODO CA Limited
  - CN: COMODO RSA Certification Authority
- 2013-05-09 00:00:00 UTC: 2028-05-08 23:59:59 UTC
- Subject
  - C: GB
  - ST: Greater Manchester
  - L: Salford
  - O: COMODO CA Limited
  - CN: COMODO RSA Code Signing CA
- #5
  - rsaEncryption: nil
  - A6:98:90:63:77:91:34:7F:8A:D1:DD:E9:67:31:11:EB:
    CC:1E:FD:31:1D:B3:B9:62:57:3F:93:BC:5B:E3:9F:1E:
    24:32:11:27:6B:BC:51:91:A7:CF:9E:9E:25:B3:5F:81:
    A8:18:0F:1D:1E:20:30:0E:FB:61:7B:86:09:B3:E3:FD:
    A2:68:9D:1C:2C:9D:BF:72:E3:E4:75:A0:E5:35:23:8E:
    C9:8A:EE:1A:0C:64:C7:D8:42:A1:7B:B5:52:03:4B:3A:
    B0:8E:23:4B:4B:63:E0:22:94:37:7B:D5:79:90:0A:14:
    18:51:2C:E6:FE:C1:12:F0:1C:3F:61:61:0A:8C:A2:DC:
    F6:C3:30:AA:CD:28:18:75:48:C1:79:5A:08:CD:BB:8C:
    55:8C:F7:D4:76:90:3A:33:46:50:73:98:5C:F4:85:4A:
    6B:0F:80:DD:5E:D6:BD:FD:A9:2F:C0:25:F5:F9:78:D7:
    8D:5F:10:C2:44:55:3C:90:3C:31:46:CB:70:AE:07:A9:
    0A:E3:AF:C1:01:6F:90:1A:23:E2:5F:38:DB:C6:08:5D:
    47:B3:83:41:F0:2E:00:37:14:B9:12:AA:79:92:52:CD:
    87:0F:7B:D8:62:29:A4:7E:30:BD:1B:B5:8C:72:B4:48:
    F2:E3:E8:21:F9:5E:4C:62:79:8B:02:06:9F:7F:D5:0B: 0x010001
- #6
  - authorityKeyIdentifier:
```
bb af 7e 02 3d fa a6 f1  3c 84 8e ad ee 38 98 ec  |..~.=...<....8..|
d9 32 32 d4                                       |.22.            |
```
  - subjectKeyIdentifier:
```
29 91 60 ff 8a 4d fa eb  f9 a6 6a b8 cf f9 e6 4b  |).`..M....j....K|
bd 49 ce 12                                       |.I..            |
```
  - keyUsage: true, 0x86
  - basicConstraints
    - true
    - true: 0
  - extendedKeyUsage: codeSigning
  - certificatePolicies: anyPolicy
  - crlDistributionPoints: http://crl.comodoca.com/COMODORSACertificationAuthority.crl
  - authorityInfoAccess
    - #0
      - caIssuers: http://crt.comodoca.com/COMODORSAAddTrustCA.crt
      - OCSP: http://ocsp.comodoca.com

RSA-SHA384:

02 3f 02 39 c3 ee f8 ca  3b 89 de 0c 6d 4d b1 f1  |.?.9....;...mM..|
4e 92 4f af c2 38 2c 04  cc c5 63 11 ab 09 63 af  |N.O..8,...c...c.|
ab a2 d7 02 3f cc 6f 19  c3 3d d6 1a 08 94 ff 25  |....?.o..=.....%|
d8 a9 88 a7 2b 10 1a e0  9b b1 07 22 1a 51 1c 3a  |....+......".Q.:|
d4 e1 e9 09 bf e6 24 74  af 1e 7b 16 31 6e 23 ef  |......$t..{.1n#.|
54 51 2d 52 02 e2 75 08  05 4c f1 b7 51 e1 51 00  |TQ-R..u..L..Q.Q.|
c6 87 f6 6c ee 10 44 76  57 6a f1 df 58 6b 21 aa  |...l..DvWj..Xk!.|
49 d4 7c 37 4e bd ff b6  75 54 40 18 36 57 67 11  |I.|7N...uT@.6Wg.|
cd 4f 02 e4 fe f3 da fc  75 17 db ec b7 f7 65 09  |.O......u.....e.|
23 49 1f 43 57 83 ea 7e  20 77 61 c8 4d f2 bb 65  |#I.CW..~ wa.M..e|
4d a8 f7 85 45 07 af 7a  69 27 65 90 29 40 8b df  |M...E..zi'e.)@..|
7b 3a 51 39 8c a8 1f 70  79 ad 6d 42 20 a2 cf 0c  |{:Q9...py.mB ...|
6c 03 8c 4c cd 73 07 94  e7 5a 8e 3a 04 ba a2 a1  |l..L.s...Z.:....|
7c 1f cb 63 3a 15 a7 d4  15 1b a7 52 47 32 a9 f4  ||..c:......RG2..|
bf 64 47 d1 aa 1f 53 4e  32 30 73 c2 6f b7 78 82  |.dG...SN20s.o.x.|
9d 5c ff 46 bb 6b 22 1d  88 0b f8 1b aa 34 a6 fc  |.\.F.k"......4..|
8c f5 dd 7f 65 8c 8c 31  57 31 d0 36 ec 47 a1 cf  |....e..1W1.6.G..|
cb 8b a8 ef 1c 18 58 c5  06 77 ca 4b 9b 51 af 4c  |......X..w.K.Q.L|
08 4a 7a 8f e2 a3 52 e2  8e 8e cc 26 e4 b2 d8 e5  |.Jz...R....&....|
38 c2 a8 ed c6 81 9c 35  6b a9 58 61 4a 0a 97 b4  |8......5k.XaJ...|
4b 42 b6 55 9d be 99 e7  70 6d 59 f8 6d 2a 0c 7f  |KB.U....pmY.m*..|
19 60 5f 0c 9a 88 6c 30  ac 52 09 90 16 1b ff 2b  |.`_...l0.R.....+|
9d db d0 20 ca 89 ea 28  7e 32 8e 19 df 7b 48 33  |... ...(~2...{H3|
1e d7 65 f8 ae c9 f8 83  14 93 76 7d 64 d0 8e ce  |..e.......v}d...|
be 35 7d ff 72 31 4d 9f  9e bd 1e 6c 2f a8 8f 0c  |.5}.r1M....l/...|
06 50 fb 8c 27 b3 76 c9  f4 e6 d7 c3 34 e2 8c 87  |.P..'.v.....4...|
21 86 61 fe bf 55 74 e1  21 77 03 0a 68 6c bb e4  |!.a..Ut.!w..hl..|
c9 a9 e6 cf 59 25 eb 7c  ec 45 0e 79 66 68 e8 22  |....Y%.|.E.yfh."|
cd b8 ef 98 85 4d 96 11  3c 09 8a d0 7f bc 28 28  |.....M..<.....((|
13 fb 6a ca 54 8d 92 5c  cd c2 65 98 06 9e ce 48  |..j.T..\..e....H|
5b d4 b5 37 93 46 41 7c  07 dd cf fa 43 ef ba 67  |[..7.FA|....C..g|
61 ff 7d 49 e0 bb 30 7d  5c 80 e3 e6 16 39 4b a7  |a.}I..0}\....9K.|

Signer

1
unnamed
- #0
  - C: GB
  - ST: Greater Manchester
  - L: Salford
  - O: COMODO CA Limited
  - CN: COMODO RSA Code Signing CA
- BD:1B:1E:45:0B:BD:D5:DF:88:67:8E:7D:DA:22:3D:17
SHA256: nil

1.3.6.1.4.1.311.2.1.12
- nil
1.2.840.113549.1.9.25.4: 1
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

4d f4 b1 36 af f9 48 70  6f d7 ba ff be 67 ed d0  |M..6..Hpo....g..|
6d d2 20 ca 45 84 0a a2  d6 6b 93 60 c2 08 61 51  |m. .E....k.`..aQ|

rsaEncryption:

b3 ed 74 21 fa 77 97 c9  95 e6 3e 45 9e 4a 1f 72  |..t!.w....>E.J.r|
ac a0 29 5f 06 62 18 7d  d7 a5 5f 75 4c da c2 72  |..)_.b.}.._uL..r|
e5 97 f6 35 fb c6 7c c1  0d b1 4a 43 b1 7a 49 ed  |...5..|...JC.zI.|
cd 47 d6 d9 25 3d 1e 73  a4 01 18 74 85 36 74 1b  |.G..%=.s...t.6t.|
ed 48 bc b0 bd dd d4 c3  a5 be 2b f8 8f a7 d0 ce  |.H........+.....|
4c 87 e7 47 7e ca fd 25  e1 d9 bf d4 25 71 74 56  |L..G~..%....%qtV|
e9 07 a2 29 6a b7 d3 e6  e1 c9 1b 2a 3e 0f a6 b5  |...)j......*>...|
79 6a ad b1 12 f1 a4 b7  b9 c2 6a 9e 97 a9 c4 20  |yj........j.... |
21 1b 70 80 be d9 5c 51  99 e2 79 3e d2 90 83 44  |!.p...\Q..y>...D|
70 32 44 eb 24 f6 f6 0e  cc 14 c1 c5 4d 22 5a ce  |p2D.$.......M"Z.|
2a 34 fe e5 8e 53 b2 25  69 99 a7 99 74 7a d1 2c  |*4...S.%i...tz.,|
bf b0 2b 28 af 58 e1 cf  f3 42 b8 07 e3 7d 2c fc  |..+(.X...B...},.|
24 9a 5b 0e c6 59 45 b1  79 d3 00 77 7d 82 70 98  |$.[..YE.y..w}.p.|
7a 37 3a 6a 9d a9 0b 92  8f 8f 23 89 40 1e 0a 57  |z7:j......#.@..W|
82 50 b1 7c 4e b1 21 84  26 7f 7e f9 23 2a 9f f2  |.P.|N.!.&.~.#*..|
6d f3 2e 0b ff 68 fa 06  5c 8b 81 2c 5a 5c 8e e0  |m....h..\..,Z\..|

1.3.6.1.4.1.311.3.3.1
- pkcs7-signedData
  - 3
    - SHA256: nil
    - id-smime-ct-TSTInfo
      - 1
        1.3.6.1.4.1.6449.2.1.1
        SHA256
        0a 93 88 b6 3d 2e a1 5d 6e 6f 0c 56 1d 3d 19 25 |....=..]no.V.=.%| 65 81 fb 82 ba a7 64 71 b0 4e 8b 24 1c 79 48 74 |e.....dq.N.$.yHt|
        A1:22:86:0F:CB:4B:E5:DB:A8:6E:A1:62:B3:01:19:A2:
        B5:F2:5A:89
        2017-07-01 18:36:21 UTC
        Subject
        C: GB
        ST: Greater Manchester
        L: Salford
        O: COMODO CA Limited
        CN: COMODO SHA-256 Time Stamping Signer
    - Certificate #2
      - 2
        4E:B0:87:8F:CC:24:35:36:B2:D8:C9:F7:BF:39:55:77
        RSA-SHA256: nil
        Issuer
        C: US
        ST: UT
        L: Salt Lake City
        O: The USERTRUST Network
        OU: http://www.usertrust.com
        CN: UTN-USERFirst-Object
        2015-12-31 00:00:00 UTC: 2019-07-09 18:40:36 UTC
        Subject
        C: GB
        ST: Greater Manchester
        L: Salford
        O: COMODO CA Limited
        CN: COMODO SHA-256 Time Stamping Signer
        #5
        rsaEncryption: nil
        CE:BC:74:B7:70:80:4F:5E:F3:3F:98:AA:2E:CB:D4:12:
        01:23:35:69:0B:22:BC:E6:FD:09:6C:28:E4:13:12:AC:
        BB:BA:2D:E5:D5:DD:22:EE:73:B6:2C:F8:D2:A4:71:E7:
        49:25:78:AB:25:B7:90:10:A0:9B:8B:77:26:DD:40:EA:
        41:A3:FD:88:CD:72:A6:89:3B:50:57:1C:7A:25:24:22:
        02:51:40:35:67:8A:31:69:0D:E5:39:73:49:39:9B:95:
        01:85:52:F2:2B:14:89:9A:4E:04:A4:BC:40:AE:39:A6:
        DD:40:02:E0:3A:75:FE:3D:7D:55:94:5B:F1:4E:24:7C:
        C8:B8:58:19:CA:C0:DA:BE:58:13:9A:E6:1C:E7:D1:C1:
        3B:F0:5D:8F:49:08:21:9E:D0:F3:BE:D6:D4:66:4F:5C:
        72:36:7B:C3:82:D3:98:08:94:AF:AB:44:4F:18:C7:14:
        DA:16:B1:1E:32:0E:12:38:C0:B5:3C:76:EC:75:50:00:
        20:04:11:19:ED:C6:FF:DF:4E:FE:08:81:27:31:4F:71:
        74:6E:03:0C:70:27:81:55:6A:9A:43:92:A4:7F:DB:FD:
        3F:C5:17:1E:41:BB:CE:E8:A7:7F:8C:95:F9:FD:7F:F8:
        61:88:89:00:3E:FF:0B:01:DB:FD:D5:B5:A4:E4:91:11: 0x010001
        #6
        authorityKeyIdentifier:
        da ed 64 74 14 9c 14 3c ab dd 99 a9 bd 5b 28 4d |..dt...<.....[(M| 8b 3c c9 d8 |.<.. |
        subjectKeyIdentifier:
        7d bf 91 d7 a7 6c 5a 47 66 44 7b 90 d4 8e 90 72 |}....lZGfD{....r| 41 8f 17 c2 |A... |
        keyUsage: true, 0xc0
        basicConstraints
        true
        nil
        extendedKeyUsage: true, timeStamping
        crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
        authorityInfoAccess
        OCSP: http://ocsp.usertrust.com
      - RSA-SHA256:
        50 b0 f5 df 5f ad 33 dc c3 53 58 58 bc c2 13 75 |P..._.3..SXX...u| 7b 20 1d 54 ca ba 3f 50 3f ba 8a f4 6b 09 63 c0 |{ .T..?P?...k.c.| 5b 5d 8b d6 75 1a 73 bd 8b ff 47 f1 15 dc 51 16 |[]..u.s...G...Q.| 23 19 32 e6 6e 92 4d d1 c6 2e 5a 1e 88 42 14 c9 |#.2.n.M...Z..B..| 72 e5 d7 08 50 8a 6a f5 64 40 56 ae 24 e3 61 97 |r...P.j.d@V.$.a.| 15 42 f0 2c 48 ae 83 e6 35 3c 8b 5b c2 8f ae 8e |.B.,H...5<.[....| cc 34 52 34 e0 fb fe ca fd b1 24 68 d1 a4 11 23 |.4R4......$h...#| 10 06 fd b2 c2 24 27 c7 d7 e9 4a 1c 8f 3f 3e cf |.....$'...J..?>.| ed eb 75 79 6c 8e 5f f7 21 b6 50 e6 25 a1 cd 66 |..uyl._.!.P.%..f| 94 12 6c bf db b3 ae 87 d8 68 03 72 20 02 c2 7e |..l......h.r ..~| da 94 f3 72 07 3c 57 e8 55 24 e7 05 a0 1d c4 81 |...r........._.[| bb 87 76 c6 9e 4c 54 61 d0 67 db 93 84 da 31 87 |..v..LTa.g....1.| 03 92 e7 9f e3 e9 cf 5a 56 c8 68 e0 52 49 94 5c |.......ZV.h.RI.\|
    - 1
      - unnamed
        #0
        C: US
        ST: UT
        L: Salt Lake City
        O: The USERTRUST Network
        OU: http://www.usertrust.com
        CN: UTN-USERFirst-Object
        4E:B0:87:8F:CC:24:35:36:B2:D8:C9:F7:BF:39:55:77
      - SHA256: nil
      - #2
        contentType: id-smime-ct-TSTInfo
        signingTime: 2017-07-01 18:36:21 UTC
        id-smime-aa-signingCertificate:
        36 52 7d 4f a2 6a 68 f9 eb 45 96 f1 d9 9a bb 2c |6R}O.jh..E.....,| 0e a7 6d fa |..m. |
        messageDigest:
        ed f3 73 f6 54 dc 9c 81 d7 17 c1 54 05 87 e3 b6 |..s.T......T....| b6 62 b3 32 82 16 79 6d 38 68 d9 81 64 ab f4 fb |.b.2..ym8h..d...|
      - rsaEncryption:
        0f f5 bb e2 70 23 15 6c 72 af 21 c1 98 0d fb d6 |....p#.lr.!.....| 3f 16 b3 74 40 26 65 7e 98 96 cc 8e 6f 3a 6c 59 |?..t@&e~....o:lY| b7 1d a2 54 ca fc 4b 05 5d e0 2a 6f a1 c5 1d 3e |...T..K.].*o...>| a1 0d 78 67 18 56 5f 3c 58 4e 49 6e fd a1 54 b9 |..xg.V_

show previews

offset	size	type	comment
0	358400	EXE	07/01/2017 18:34:31	#
15c1	15	HTM		#
57800	11984	PKCS7	Authenticode Signature	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

WebBrowserPassView.exe-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904b0

VS_FIXEDFILEINFO

Signers (1)

Certificates (4)

WebBrowserPassView.exe
-