dankexe.exe - ConsoleApp21.exe

info
MZ
PE
resources
imports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	dankexe.exe
size	23440 (0x5b90)
md5	565f68633a76da66bc4f3e6ce73d7e81

type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
mimetype	application/x-dosexec

clamav	scan pending
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0xc83d24c4
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x22
Magic	0x10b
LinkerVersion	48.0
SizeOfCode	0x3c00
SizeOfInitializedData	0x800
SizeOfUninitializedData	0
AddressOfEntryPoint	0x5b3e
BaseOfCode	0x2000
BaseOfData	0x6000
ImageBase	0x400000
SectionAlignment	0x2000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0xa000
SizeOfHeaders	0x200
CheckSum	0x153b0
Subsystem	2
DllCharacteristics	0x8540
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C# / Basic .NET

Sections

name	va	vsize	raw size	flags
.text	0x2000	0x3b44	0x3c00	R-X CODE
.rsrc	0x6000	0x5e8	0x600	R-- IDATA
.reloc	0x8000	0xc	0x200	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x5ae4	0x57
RESOURCE	0x6000	0x5e8
EXCEPTION	0	0
SECURITY	0x4600	0x1590
BASERELOC	0x8000	0xc
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x2000	8
Delay_IAT	0	0
CLR_Header	0x2008	0x48

show previews

type	name	size	cp
VERSION	#1	860	0
MANIFEST	#1	490	0

module_name	hint	ord	function_name
mscoree.dll			_CorExeMain

StringTable 000004b0

Comments	System_31
CompanyName	System_31
FileDescription	System_31
FileVersion	2.0.0.0
InternalName	ConsoleApp21.exe
LegalCopyright	Copyright © 2021
LegalTrademarks	System_31
OriginalFilename	ConsoleApp21.exe
ProductName	System_31
ProductVersion	2.0.0.0
Assembly Version	2.0.0.0

VS_FIXEDFILEINFO

FileVersion	2.0.0.0
ProductVersion	2.0.0.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /CN=\xC5\x81\xC7\xAB\xC9\xAA\xE1\xB4\x8B\xCE\x94\xCE\x9C\xE1\xB4\xA2\xCA\x99s\xCA\x8F\xC3\x98\xE1\xB4\x8B\xE1\xB4\x8D\xE1\xB4\x8B\xC5\x87\xC7\xAB\xCE\x9Cs\xC6\x97/O=\xC9\xAA\xCA\x8F\xE1\xB4\x98\xD2\x930\xC9\xAA\xC9\xB4\xCA\x9F\xD2\x9C\xC5\xA6AV\xE1\xB4\x8D\xCE\xA9A\xE1\xBB\xAE\xE1\xB4\xA1\xCE\xA9\xE1\xB4\xA1\xC4\xA6\xE1\xB4\x80\xE1\xB4\x8B\xCE\x9Cx\xE1\xB4\x8F\xC9\xAA\xC5\x9E/OU=\xE1\xB4\xA0A\xE1\xB4\x9B\xE1\xB4\x8A\xC9\xAA\xCA\x803\xCA\x9F\xE1\xB4\xA1\xE1\xB4\x8B\xCE\x94\xCA\x99/emailAddress=????????/title=\xC4\x90\xCA\x9F\xCA\x80\xE1\xB4\xA0\xC7\xAB\xC7\xA4\xC6\x97\xE1\xBB\xAE\xC4\xA6\xC5\x87\xE1\xB4\xA1\xCA\x9F\xC5\x87\xC4\x86\xCA\x80\xC4\xB4\xE1\xB4\xA1A\xC4\x863\xE1\xB4\x9B\xCA\x8F\xE1\xB4\x8D\xC7\xAB\xE1\xB4\xA0\xE1\xB4\xA1\xC6\x97\xC4\xB4/L=\xC5\x81\xC4\x86\xC4\x90\xC5\x87\xE1\xB4\x9C\xCA\x99\xC4\xB4\xC3\x983\xC5\xA6\xC9\xB4\xCE\x94A\xE1\xB4\x9B\xE1\xB4\x87\xC5\x81\xE1\xB4\x9CV\xE1\xB4\x9B\xC7\xAB\xE1\xB4\x8D\xC3\x98\xE1\xB4\x803\xE1\xB4\x8B/ST=\xC6\x97\xD2\x93\xE1\xB4\x87\xC5\x98\xCA\x9F\xC9\xB4\xCA\x8FV\xE1\xB4\x85\xCA\x99\xCE\xA90\xE1\xB4\x80\xC9\xAA\xC7\xABV0V/C=0???A????x???

serial: 2499187D3BCBC73E2A6D0691E9D5DEF6

Certificates (1)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:99:18:7d:3b:cb:c7:3e:2a:6d:06:91:e9:d5:de:f6
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=\xC5\x81\xC7\xAB\xC9\xAA\xE1\xB4\x8B\xCE\x94\xCE\x9C\xE1\xB4\xA2\xCA\x99s\xCA\x8F\xC3\x98\xE1\xB4\x8B\xE1\xB4\x8D\xE1\xB4\x8B\xC5\x87\xC7\xAB\xCE\x9Cs\xC6\x97, O=\xC9\xAA\xCA\x8F\xE1\xB4\x98\xD2\x930\xC9\xAA\xC9\xB4\xCA\x9F\xD2\x9C\xC5\xA6AV\xE1\xB4\x8D\xCE\xA9A\xE1\xBB\xAE\xE1\xB4\xA1\xCE\xA9\xE1\xB4\xA1\xC4\xA6\xE1\xB4\x80\xE1\xB4\x8B\xCE\x9Cx\xE1\xB4\x8F\xC9\xAA\xC5\x9E, OU=\xE1\xB4\xA0A\xE1\xB4\x9B\xE1\xB4\x8A\xC9\xAA\xCA\x803\xCA\x9F\xE1\xB4\xA1\xE1\xB4\x8B\xCE\x94\xCA\x99/emailAddress=????????/title=\xC4\x90\xCA\x9F\xCA\x80\xE1\xB4\xA0\xC7\xAB\xC7\xA4\xC6\x97\xE1\xBB\xAE\xC4\xA6\xC5\x87\xE1\xB4\xA1\xCA\x9F\xC5\x87\xC4\x86\xCA\x80\xC4\xB4\xE1\xB4\xA1A\xC4\x863\xE1\xB4\x9B\xCA\x8F\xE1\xB4\x8D\xC7\xAB\xE1\xB4\xA0\xE1\xB4\xA1\xC6\x97\xC4\xB4, L=\xC5\x81\xC4\x86\xC4\x90\xC5\x87\xE1\xB4\x9C\xCA\x99\xC4\xB4\xC3\x983\xC5\xA6\xC9\xB4\xCE\x94A\xE1\xB4\x9B\xE1\xB4\x87\xC5\x81\xE1\xB4\x9CV\xE1\xB4\x9B\xC7\xAB\xE1\xB4\x8D\xC3\x98\xE1\xB4\x803\xE1\xB4\x8B, ST=\xC6\x97\xD2\x93\xE1\xB4\x87\xC5\x98\xCA\x9F\xC9\xB4\xCA\x8FV\xE1\xB4\x85\xCA\x99\xCE\xA90\xE1\xB4\x80\xC9\xAA\xC7\xABV0V, C=0???A????x???
        Validity
            Not Before: Feb 16 11:35:06 2021 GMT
            Not After : Feb 16 11:35:06 2022 GMT
        Subject: CN=\xC5\x81\xC7\xAB\xC9\xAA\xE1\xB4\x8B\xCE\x94\xCE\x9C\xE1\xB4\xA2\xCA\x99s\xCA\x8F\xC3\x98\xE1\xB4\x8B\xE1\xB4\x8D\xE1\xB4\x8B\xC5\x87\xC7\xAB\xCE\x9Cs\xC6\x97, O=\xC9\xAA\xCA\x8F\xE1\xB4\x98\xD2\x930\xC9\xAA\xC9\xB4\xCA\x9F\xD2\x9C\xC5\xA6AV\xE1\xB4\x8D\xCE\xA9A\xE1\xBB\xAE\xE1\xB4\xA1\xCE\xA9\xE1\xB4\xA1\xC4\xA6\xE1\xB4\x80\xE1\xB4\x8B\xCE\x9Cx\xE1\xB4\x8F\xC9\xAA\xC5\x9E, OU=\xE1\xB4\xA0A\xE1\xB4\x9B\xE1\xB4\x8A\xC9\xAA\xCA\x803\xCA\x9F\xE1\xB4\xA1\xE1\xB4\x8B\xCE\x94\xCA\x99/emailAddress=????????/title=\xC4\x90\xCA\x9F\xCA\x80\xE1\xB4\xA0\xC7\xAB\xC7\xA4\xC6\x97\xE1\xBB\xAE\xC4\xA6\xC5\x87\xE1\xB4\xA1\xCA\x9F\xC5\x87\xC4\x86\xCA\x80\xC4\xB4\xE1\xB4\xA1A\xC4\x863\xE1\xB4\x9B\xCA\x8F\xE1\xB4\x8D\xC7\xAB\xE1\xB4\xA0\xE1\xB4\xA1\xC6\x97\xC4\xB4, L=\xC5\x81\xC4\x86\xC4\x90\xC5\x87\xE1\xB4\x9C\xCA\x99\xC4\xB4\xC3\x983\xC5\xA6\xC9\xB4\xCE\x94A\xE1\xB4\x9B\xE1\xB4\x87\xC5\x81\xE1\xB4\x9CV\xE1\xB4\x9B\xC7\xAB\xE1\xB4\x8D\xC3\x98\xE1\xB4\x803\xE1\xB4\x8B, ST=\xC6\x97\xD2\x93\xE1\xB4\x87\xC5\x98\xCA\x9F\xC9\xB4\xCA\x8FV\xE1\xB4\x85\xCA\x99\xCE\xA90\xE1\xB4\x80\xC9\xAA\xC7\xABV0V, C=0???A????x???
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (1024 bit)
                Modulus:
                    00:94:ef:56:d9:f5:6b:46:b2:fe:be:5f:76:a3:22:
                    27:93:ec:82:40:f8:ab:82:65:b4:f9:32:08:f4:31:
                    81:97:0c:c5:d9:c0:7d:1e:79:ce:f1:8a:28:5b:9e:
                    0d:5e:a7:3a:d0:ec:a3:f8:a8:b9:bf:88:e2:ff:f9:
                    d6:c1:d2:01:53:20:75:eb:ea:b0:f7:0b:e3:98:0c:
                    7a:0a:ed:ad:04:a3:75:db:e3:ee:8c:bc:9e:2e:c1:
                    1b:3a:bc:8c:2e:26:46:81:a7:3e:60:b1:83:34:4d:
                    ca:87:c2:65:15:f5:e9:e8:cb:1d:e5:fc:05:72:d6:
                    3b:51:f5:95:9d:08:20:9e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: 
                Digital Signature
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Subject Key Identifier: 
                CF:AB:68:F2:77:33:FC:6A:04:CC:19:B0:E6:0F:8A:43:25:EB:86:38
    Signature Algorithm: sha256WithRSAEncryption
         58:73:13:58:ab:fd:0f:b6:84:58:c7:fd:03:db:f2:0a:3a:29:
         13:29:76:81:00:19:32:55:b5:ca:14:49:d4:d6:38:12:29:0b:
         e4:c7:23:d4:d1:a7:73:c8:5c:83:26:a7:b8:af:26:6b:ec:ca:
         af:0f:ed:27:4d:89:fe:5b:16:ca:4b:46:c7:d6:4e:e6:d6:9b:
         12:b8:be:de:2b:8c:a3:d7:1b:30:37:ff:ef:a6:5c:7d:00:37:
         e8:3a:00:2b:8a:3f:cb:af:76:b1:20:4a:ea:91:cf:2c:3c:99:
         9b:19:54:9a:a0:b1:1c:9d:ab:0e:4a:a8:96:70:8b:7e:a6:17:
         d7:f4

pkcs7-signedData

SHA256: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA256

ba 74 31 fd 83 f9 7c 00 6f 28 d9 e9 a0 10 89 09 |.t1...|.o(......| 0a 17 0f 22 f3 0c 9e 18 8c 9e c7 28 a6 47 75 8f |...".......(.Gu.|

24:99:18:7D:3B:CB:C7:3E:2A:6D:06:91:E9:D5:DE:F6
RSA-SHA256: nil

CN:

c5 81 c7 ab c9 aa e1 b4  8b ce 94 ce 9c e1 b4 a2  |................|
ca 99 73 ca 8f c3 98 e1  b4 8b e1 b4 8d e1 b4 8b  |..s.............|
c5 87 c7 ab ce 9c 73 c6  97                       |......s..       |

c9 aa ca 8f e1 b4 98 d2  93 30 c9 aa c9 b4 ca 9f  |.........0......|
d2 9c c5 a6 41 56 e1 b4  8d ce a9 41 e1 bb ae e1  |....AV.....A....|
b4 a1 ce a9 e1 b4 a1 c4  a6 e1 b4 80 e1 b4 8b ce  |................|
9c 78 e1 b4 8f c9 aa c5  9e                       |.x.......       |

OU:

e1 b4 a0 41 e1 b4 9b e1  b4 8a c9 aa ca 80 33 ca  |...A..........3.|
9f e1 b4 a1 e1 b4 8b ce  94 ca 99                 |...........     |

emailAddress: ????????

title:

c4 90 ca 9f ca 80 e1 b4  a0 c7 ab c7 a4 c6 97 e1  |................|
bb ae c4 a6 c5 87 e1 b4  a1 ca 9f c5 87 c4 86 ca  |................|
80 c4 b4 e1 b4 a1 41 c4  86 33 e1 b4 9b ca 8f e1  |......A..3......|
b4 8d c7 ab e1 b4 a0 e1  b4 a1 c6 97 c4 b4        |..............  |

c5 81 c4 86 c4 90 c5 87  e1 b4 9c ca 99 c4 b4 c3  |................|
98 33 c5 a6 c9 b4 ce 94  41 e1 b4 9b e1 b4 87 c5  |.3......A.......|
81 e1 b4 9c 56 e1 b4 9b  c7 ab e1 b4 8d c3 98 e1  |....V...........|
b4 80 33 e1 b4 8b                                 |..3...          |

ST:

c6 97 d2 93 e1 b4 87 c5  98 ca 9f c9 b4 ca 8f 56  |...............V|
e1 b4 85 ca 99 ce a9 30  e1 b4 80 c9 aa c7 ab 56  |.......0.......V|
30 56                                             |0V              |

C: 0???A????x???

2021-02-16 11:35:06 UTC: 2022-02-16 11:35:06 UTC

CN:

c5 81 c7 ab c9 aa e1 b4  8b ce 94 ce 9c e1 b4 a2  |................|
ca 99 73 ca 8f c3 98 e1  b4 8b e1 b4 8d e1 b4 8b  |..s.............|
c5 87 c7 ab ce 9c 73 c6  97                       |......s..       |

c9 aa ca 8f e1 b4 98 d2  93 30 c9 aa c9 b4 ca 9f  |.........0......|
d2 9c c5 a6 41 56 e1 b4  8d ce a9 41 e1 bb ae e1  |....AV.....A....|
b4 a1 ce a9 e1 b4 a1 c4  a6 e1 b4 80 e1 b4 8b ce  |................|
9c 78 e1 b4 8f c9 aa c5  9e                       |.x.......       |

OU:

e1 b4 a0 41 e1 b4 9b e1  b4 8a c9 aa ca 80 33 ca  |...A..........3.|
9f e1 b4 a1 e1 b4 8b ce  94 ca 99                 |...........     |

emailAddress: ????????

title:

c4 90 ca 9f ca 80 e1 b4  a0 c7 ab c7 a4 c6 97 e1  |................|
bb ae c4 a6 c5 87 e1 b4  a1 ca 9f c5 87 c4 86 ca  |................|
80 c4 b4 e1 b4 a1 41 c4  86 33 e1 b4 9b ca 8f e1  |......A..3......|
b4 8d c7 ab e1 b4 a0 e1  b4 a1 c6 97 c4 b4        |..............  |

c5 81 c4 86 c4 90 c5 87  e1 b4 9c ca 99 c4 b4 c3  |................|
98 33 c5 a6 c9 b4 ce 94  41 e1 b4 9b e1 b4 87 c5  |.3......A.......|
81 e1 b4 9c 56 e1 b4 9b  c7 ab e1 b4 8d c3 98 e1  |....V...........|
b4 80 33 e1 b4 8b                                 |..3...          |

ST:

c6 97 d2 93 e1 b4 87 c5  98 ca 9f c9 b4 ca 8f 56  |...............V|
e1 b4 85 ca 99 ce a9 30  e1 b4 80 c9 aa c7 ab 56  |.......0.......V|
30 56                                             |0V              |

C: 0???A????x???

#5
- rsaEncryption: nil
- 94:EF:56:D9:F5:6B:46:B2:FE:BE:5F:76:A3:22:27:93:
  EC:82:40:F8:AB:82:65:B4:F9:32:08:F4:31:81:97:0C:
  C5:D9:C0:7D:1E:79:CE:F1:8A:28:5B:9E:0D:5E:A7:3A:
  D0:EC:A3:F8:A8:B9:BF:88:E2:FF:F9:D6:C1:D2:01:53:
  20:75:EB:EA:B0:F7:0B:E3:98:0C:7A:0A:ED:AD:04:A3:
  75:DB:E3:EE:8C:BC:9E:2E:C1:1B:3A:BC:8C:2E:26:46:
  81:A7:3E:60:B1:83:34:4D:CA:87:C2:65:15:F5:E9:E8:
  CB:1D:E5:FC:05:72:D6:3B:51:F5:95:9D:08:20:9E:71: 0x010001

keyUsage: 0x80
extendedKeyUsage: codeSigning

subjectKeyIdentifier:

cf ab 68 f2 77 33 fc 6a  04 cc 19 b0 e6 0f 8a 43  |..h.w3.j.......C|
25 eb 86 38                                       |%..8            |

RSA-SHA256:

58 73 13 58 ab fd 0f b6  84 58 c7 fd 03 db f2 0a  |Xs.X.....X......|
3a 29 13 29 76 81 00 19  32 55 b5 ca 14 49 d4 d6  |:).)v...2U...I..|
38 12 29 0b e4 c7 23 d4  d1 a7 73 c8 5c 83 26 a7  |8.)...#...s.\.&.|
b8 af 26 6b ec ca af 0f  ed 27 4d 89 fe 5b 16 ca  |..&k.....'M..[..|
4b 46 c7 d6 4e e6 d6 9b  12 b8 be de 2b 8c a3 d7  |KF..N.......+...|
1b 30 37 ff ef a6 5c 7d  00 37 e8 3a 00 2b 8a 3f  |.07...\}.7.:.+.?|
cb af 76 b1 20 4a ea 91  cf 2c 3c 99 9b 19 54 9a  |..v. J...,<...T.|
a0 b1 1c 9d ab 0e 4a a8  96 70 8b 7e a6 17 d7 f4  |......J..p.~....|

unnamed

CN:

c5 81 c7 ab c9 aa e1 b4  8b ce 94 ce 9c e1 b4 a2  |................|
ca 99 73 ca 8f c3 98 e1  b4 8b e1 b4 8d e1 b4 8b  |..s.............|
c5 87 c7 ab ce 9c 73 c6  97                       |......s..       |

c9 aa ca 8f e1 b4 98 d2  93 30 c9 aa c9 b4 ca 9f  |.........0......|
d2 9c c5 a6 41 56 e1 b4  8d ce a9 41 e1 bb ae e1  |....AV.....A....|
b4 a1 ce a9 e1 b4 a1 c4  a6 e1 b4 80 e1 b4 8b ce  |................|
9c 78 e1 b4 8f c9 aa c5  9e                       |.x.......       |

OU:

e1 b4 a0 41 e1 b4 9b e1  b4 8a c9 aa ca 80 33 ca  |...A..........3.|
9f e1 b4 a1 e1 b4 8b ce  94 ca 99                 |...........     |

emailAddress: ????????

title:

c4 90 ca 9f ca 80 e1 b4  a0 c7 ab c7 a4 c6 97 e1  |................|
bb ae c4 a6 c5 87 e1 b4  a1 ca 9f c5 87 c4 86 ca  |................|
80 c4 b4 e1 b4 a1 41 c4  86 33 e1 b4 9b ca 8f e1  |......A..3......|
b4 8d c7 ab e1 b4 a0 e1  b4 a1 c6 97 c4 b4        |..............  |

c5 81 c4 86 c4 90 c5 87  e1 b4 9c ca 99 c4 b4 c3  |................|
98 33 c5 a6 c9 b4 ce 94  41 e1 b4 9b e1 b4 87 c5  |.3......A.......|
81 e1 b4 9c 56 e1 b4 9b  c7 ab e1 b4 8d c3 98 e1  |....V...........|
b4 80 33 e1 b4 8b                                 |..3...          |

ST:

c6 97 d2 93 e1 b4 87 c5  98 ca 9f c9 b4 ca 8f 56  |...............V|
e1 b4 85 ca 99 ce a9 30  e1 b4 80 c9 aa c7 ab 56  |.......0.......V|
30 56                                             |0V              |

C: 0???A????x???

24:99:18:7D:3B:CB:C7:3E:2A:6D:06:91:E9:D5:DE:F6

SHA256: nil

contentType: 1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.12:

00 2f 00 64 00 75                                 |./.d.u          |

1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

0a b9 14 77 05 10 2e 4f  92 48 ae c6 32 76 55 0b  |...w...O.H..2vU.|
9a 37 ad 76 c2 5b f7 4d  53 80 8e 80 8e 9b f8 55  |.7.v.[.MS......U|

rsaEncryption:

64 46 09 4a 20 8a 1a 60  bc 80 e7 27 bf ed 4b b9  |dF.J ..`...'..K.|
3b 41 73 55 84 50 6c 10  1a a3 fc 1c a7 49 ba 78  |;AsU.Pl......I.x|
9a 3e 59 1a 95 b0 df 43  44 e0 d0 3c 3c df 59 f7  |.>Y....CD..<<.Y.|
3c 92 5a a1 63 8f 49 dd  c9 49 e3 27 d0 f2 25 46  |<.Z.c.I..I.'..%F|
80 73 63 af 06 c1 89 18  3b 60 5b 17 28 87 c2 66  |.sc.....;`[.(..f|
f0 62 8b f3 0b 22 b2 6e  f6 bb 90 a8 13 3e 73 3d  |.b...".n.....>s=|
ae a8 45 13 d8 c0 1c a6  4d eb 3c 07 bb 5b ac f0  |..E.....M.<..[..|
8e 0b d1 76 61 3e c7 cb  e8 1d 16 bb dc 08 25 3a  |...va>........%:|

1.3.6.1.4.1.311.3.3.1

pkcs7-signedData

SHA256: nil

id-smime-ct-TSTInfo

2.16.840.1.114412.7.1

SHA256

05 17 a8 fd 18 63 8a 9b 33 9a d3 b1 bf 33 a6 56 |.....c..3....3.V| e3 26 85 55 c7 6d bb 78 48 5e 02 f4 f4 00 8c eb |.&.U.m.xH^......|

71:58:4A:9D:F3:B5:0D:8F:77:96:D8:BE:22:9E:3F:3B
2021-02-16 11:35:07 UTC

Certificates
- Certificate #0
  - 2
    - 0D:42:4A:E0:BE:3A:88:FF:60:40:21:CE:14:00:F0:DD
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: DigiCert Inc
      - OU: www.digicert.com
      - CN: DigiCert SHA2 Assured ID Timestamping CA
    - 2021-01-01 00:00:00 UTC: 2031-01-06 00:00:00 UTC
    - Subject
      - C: US
      - O: DigiCert, Inc.
      - CN: DigiCert Timestamp 2021
    - #5
      - rsaEncryption: nil
      - C2:E6:61:84:67:C5:8A:F5:0D:08:A4:45:CA:63:6B:51:
        D7:3A:11:42:BD:0A:75:75:4D:94:B4:0C:50:B5:26:10:
        FE:1D:C8:6F:91:6B:0C:96:E7:1A:5C:48:EF:44:E5:BF:
        9B:61:CD:15:91:62:5A:B8:FF:67:0B:9C:63:FD:36:6A:
        81:FA:29:F8:DD:2B:70:85:DE:02:18:F3:78:6D:BC:7D:
        F9:C7:6D:09:3D:BE:6A:76:87:E9:8A:BD:F8:84:5D:1E:
        76:C9:E4:C6:76:76:3A:53:D1:D1:D3:5A:36:8F:C6:A3:
        E1:2F:1B:3A:B7:61:D6:73:EC:4E:6D:33:8A:7C:5D:45:
        2D:4B:B1:50:E6:41:3A:37:56:86:DC:93:23:8D:F7:50:
        25:E8:64:E6:DD:D3:8F:2F:57:B5:87:20:EB:0E:8E:2C:
        D5:23:DA:F4:4D:78:46:E3:03:83:31:29:4A:5C:0C:31:
        8A:4A:8C:88:C5:F7:30:5A:F9:14:AF:15:5F:6C:43:49:
        09:FD:26:23:53:F6:8D:63:E8:1A:AB:5B:B1:1D:30:C2:
        9B:69:82:B4:DB:FC:56:54:BC:1F:A1:87:AB:BE:7A:5B:
        0A:20:2F:4B:09:C9:95:A7:8D:B2:FA:D6:63:8B:4E:A5:
        72:1C:EE:9F:7A:01:73:F8:19:D6:FE:0D:49:84:BD:01: 0x010001
    - #6
      - keyUsage: true, 0x80
      - basicConstraints
        true
        nil
      - extendedKeyUsage: true, timeStamping
      - certificatePolicies
        2.16.840.1.114412.7.1
        id-qt-cps: http://www.digicert.com/CPS
      - authorityKeyIdentifier:
        f4 b6 e1 20 1d fe 29 ae d2 e4 61 a5 b2 a2 25 b2 |... ..)...a...%.| c8 17 35 6e |..5n |
      - subjectKeyIdentifier:
        36 44 86 8e a4 ba b0 66 be bc 28 2d 1d 44 36 dd |6D.....f..(-.D6.| e3 6a 7a bc |.jz. |
      - crlDistributionPoints
        http://crl3.digicert.com/sha2-assured-ts.crl: http://crl4.digicert.com/sha2-assured-ts.crl
      - authorityInfoAccess
        #0
        OCSP: http://ocsp.digicert.com
        caIssuers: http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt
  - RSA-SHA256:
```
48 1c dc b5 e9 9a 23 bc  e7 1a e7 20 0e 8e 67 46  |H.....#.... ..gF|
fd 42 72 51 74 0a 23 47  a3 ab 92 d2 25 c4 70 59  |.BrQt.#G....%.pY|
be 14 a0 e5 27 81 a5 4d  14 15 19 07 79 f0 d1 04  |....'..M....y...|
c3 86 d9 3b bd fe 44 02  66 4d ed 69 a4 0f f6 b8  |...;..D.fM.i....|
70 cf 62 e8 f5 51 4a 78  79 36 7a 27 b7 f3 e7 52  |p.b..QJxy6z'...R|
9f 93 a7 ed 43 9e 7b e7  b4 dd 41 22 89 fb 87 a2  |....C.{...A"....|
46 03 4e fc f4 fe b7 64  77 63 5f 23 52 69 83 82  |F.N....dwc_#Ri..|
fa 1a 53 ed 90 cc 8d a1  17 73 0d f4 f3 65 39 70  |..S......s...e9p|
4b f3 9c d6 7a 7b da 0c  bc 3d 32 d0 1b cb f5 61  |K...z{...=2....a|
fc 75 08 00 76 bc 81 0e  f8 c0 e1 5c cf c4 11 72  |.u..v......\...r|
e7 1b 64 49 d8 22 9a 75  15 42 f5 2d 32 38 81 da  |..dI.".u.B.-28..|
f4 60 a2 ba b4 52 fb 5c  e0 61 24 25 4f b2 df c9  |.`...R.\.a$%O...|
29 a8 73 43 51 da bd 63  d6 1f 5b 9b f7 2e 1b 4f  |).sCQ..c..[....O|
13 1d f7 4a 0d 71 7e 97  b7 f4 3f 84 eb c1 e3 a3  |...J.q~...?.....|
49 a1 fa ce a7 bf 56 cf  ba 59 76 61 89 5f 7e a7  |I.....V..Yva._~.|
b4 8e 67 78 f9 36 98 e1  cb 28 da 5b 87 a6 8a 2f  |..gx.6...(.[.../|
```
- Certificate #1
  - 2
    - 0A:A1:25:D6:D6:32:1B:7E:41:E4:05:DA:36:97:C2:15
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: DigiCert Inc
      - OU: www.digicert.com
      - CN: DigiCert Assured ID Root CA
    - 2016-01-07 12:00:00 UTC: 2031-01-07 12:00:00 UTC
    - Subject
      - C: US
      - O: DigiCert Inc
      - OU: www.digicert.com
      - CN: DigiCert SHA2 Assured ID Timestamping CA
    - #5
      - rsaEncryption: nil
      - BD:D0:32:EE:4B:CD:8F:7F:DD:A9:BA:82:99:C5:39:54:
        28:57:B6:23:4A:C4:0E:07:45:33:51:10:7D:D0:F9:7D:
        4D:68:7E:E7:B6:A0:F4:8D:B3:88:E4:97:BF:63:21:90:
        98:BF:13:BC:57:D3:C3:E1:7E:08:D6:6A:14:00:38:F7:
        2E:1E:3B:EE:CC:A6:F6:32:59:FE:5F:65:3F:E0:9B:EB:
        E3:46:47:06:1A:55:7E:0B:27:7E:C0:A2:F5:A0:E0:DE:
        22:3F:0E:FF:7E:95:FB:F3:A3:BA:22:3E:18:AC:11:E4:
        F0:99:03:6D:3B:85:7C:09:D3:EE:5D:C8:9A:0B:54:E3:
        A8:09:71:6B:E0:CF:22:10:0F:75:CF:71:72:4E:0A:AD:
        DF:40:3A:5C:B7:51:E1:A1:79:14:C6:4D:24:23:30:5D:
        BC:EC:3C:60:6A:AC:2F:07:CC:FD:F0:EA:47:D9:88:50:
        5E:FD:66:6E:56:61:27:29:89:84:51:E6:82:E7:46:50:
        FD:94:2A:2C:A7:E4:75:3E:BA:98:0F:84:7F:9F:31:14:
        D6:AD:D5:F2:64:CB:7B:1E:05:D0:84:19:72:17:F1:17:
        06:EF:3D:CD:D6:4D:EF:06:42:FD:A2:53:2A:4F:85:1D:
        C4:1D:3C:AF:CF:DA:AC:10:F5:DD:AC:AC:E9:56:FF:93: 0x010001
    - #6
      - subjectKeyIdentifier:
        f4 b6 e1 20 1d fe 29 ae d2 e4 61 a5 b2 a2 25 b2 |... ..)...a...%.| c8 17 35 6e |..5n |
      - authorityKeyIdentifier:
        45 eb a2 af f4 92 cb 82 31 2d 51 8b a7 a7 21 9d |E.......1-Q...!.| f3 6d c8 0f |.m.. |
      - basicConstraints
        true
        true: 0
      - keyUsage: true, 0x86
      - extendedKeyUsage: timeStamping
      - authorityInfoAccess
        #0
        OCSP: http://ocsp.digicert.com
        caIssuers: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt
      - crlDistributionPoints
        http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl
      - certificatePolicies
        #0
        2.16.840.1.114412.0.2.4
        id-qt-cps: https://www.digicert.com/CPS
        2.16.840.1.114412.7.1
  - RSA-SHA256:
```
71 95 12 e9 51 87 56 69  cd ef dd da 7c aa 63 7a  |q...Q.Vi....|.cz|
b3 78 cf 06 37 40 84 ef  4b 84 bf ca cf 03 02 fd  |.x..7@..K.......|
c5 a7 c3 0e 20 42 2c af  77 f3 2b 1f 0c 21 5a 2a  |.... B,.w.+..!Z*|
b7 05 34 1d 6a ae 99 f8  27 a2 66 bf 09 aa 60 df  |..4.j...'.f...`.|
76 a4 3a 93 0f f8 b2 d1  d8 7c 19 62 e8 5e 82 25  |v.:......|.b.^.%|
1e c4 ba 1c 7b 2c 21 e2  d6 5b 2c 14 35 43 04 68  |....{,!..[,.5C.h|
b2 db 75 02 e0 72 c7 98  d6 3c 64 e5 1f 48 10 18  |..u..r...
```

unnamed
- #0
  - C: US
  - O: DigiCert Inc
  - OU: www.digicert.com
  - CN: DigiCert SHA2 Assured ID Timestamping CA
- 0D:42:4A:E0:BE:3A:88:FF:60:40:21:CE:14:00:F0:DD
SHA256: nil

contentType: id-smime-ct-TSTInfo
signingTime: 2021-02-16 11:35:07 UTC

id-smime-aa-signingCertificate:

e1 d7 82 a8 e1 91 be ef  6b ca 16 91 b5 aa b4 94  |........k.......|
a6 24 9b f3                                       |.$..            |

messageDigest:

82 ae 65 7f 87 2d ff c7  10 22 ab db d2 29 f0 de  |..e..-..."...)..|
2b 71 e7 dc 08 07 ab de  fa 55 d5 55 0f 05 df ce  |+q.......U.U....|

rsaEncryption:

75 b7 91 8e 90 3c db 2d  52 70 87 11 d7 45 13 e2  |u....<.-Rp...E..|
8e 2b fb a1 5f 1f bb 7b  bc 0b 81 b5 55 0c 69 7c  |.+.._..{....U.i||
15 1c c2 9d e7 01 aa ab  51 f0 6d b8 38 26 25 2b  |........Q.m.8&%+|
da 7d fc 65 3c e9 aa 7b  e5 4f ae 8b bd f1 b5 3d  |.}.e<..{.O.....=|
a1 41 c7 e7 b5 e6 80 28  1a 33 96 a5 85 d1 1e 56  |.A.....(.3.....V|
c0 0d 2a f0 de db 61 65  4a 2d 36 87 cf 2b 75 7b  |..*...aeJ-6..+u{|
15 04 b2 0e e0 f1 2b a2  80 f8 69 58 41 95 e3 a5  |......+...iXA...|
30 8d be a3 23 f7 b4 d8  9e 4e 45 26 49 d7 7d a0  |0...#....NE&I.}.|
55 2e c0 69 f3 fc 65 1a  bd 62 58 a2 ef 14 9f 70  |U..i..e..bX....p|
a4 df 25 a3 48 2f 8b 67  c5 85 98 8d ad 07 0c 71  |..%.H/.g.......q|
51 f9 2a a8 c6 61 37 df  08 69 9f 38 96 50 70 83  |Q.*..a7..i.8.Pp.|
ad 68 d5 b7 ee c2 84 95  d4 7d 14 f1 ef 06 b7 a0  |.h.......}......|
65 d3 a7 1f f0 51 be 5d  d4 95 b2 a9 95 df c5 a5  |e....Q.]........|
e9 52 f0 96 f9 28 53 08  a2 12 4a 3e f9 b2 af bd  |.R...(S...J>....|
05 7e d5 5d 66 74 42 b7  64 26 02 58 e1 10 8f 01  |.~.]ftB.d&.X....|
10 52 4e 85 c1 3f d7 7b  b1 c6 8a bc 34 f2 95 c2  |.RN..?.{....4...|

show previews

offset	size	type	comment
0	17920	EXE	06/15/2076 12:38:28	#
15c1	15	HTM		#
4600	5520	PKCS7	Authenticode Signature	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

dankexe.exe- ConsoleApp21.exe - System_31

MZ Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 000004b0

VS_FIXEDFILEINFO

Signers (1)

Certificates (1)

dankexe.exe
- ConsoleApp21.exe - System_31