filename | RegScanner.exe | |
---|---|---|
size | 57856 (0xe200) | |
md5 | 58e724c4d5fd96533e8b7728255a9398 | |
type | PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0xf0 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
UPX Modified >> *$igBy Ahmed18 This file is packed with UPX. Analysis will be incomplete without unpacking. |
Sections
name | va | vsize | raw size | flags | |
---|---|---|---|---|---|
UPX0 | 0x1000 | 0xf000 | 0 | RWX UDATA | |
UPX1 | 0x10000 | 0xb000 | 0xa600 | RWX IDATA | |
.rsrc | 0x1b000 | 0x2000 | 0x1600 | RW- IDATA |
Data Directory
type | va | size | |
---|---|---|---|
EXPORT | 0 | 0 | |
IMPORT | 0x1c318 | 0x204 | |
RESOURCE | 0x1b000 | 0x1318 | |
EXCEPTION | 0 | 0 | |
SECURITY | 0xc000 | 0x2200 | |
BASERELOC | 0 | 0 | |
DEBUG | 0 | 0 | |
ARCHITECTURE | 0 | 0 | |
GLOBALPTR | 0 | 0 | |
TLS | 0 | 0 | |
LOAD_CONFIG | 0 | 0 | |
Bound_IAT | 0 | 0 | |
IAT | 0 | 0 | |
Delay_IAT | 0 | 0 | |
CLR_Header | 0 | 0 |
id | lang | string |
---|---|---|
0 | 1033 | 8c 06 94 ee 45 c3 3d 01 2b 3e 92 08 09 00 74 74 |....E.=.+>....tt| d4 60 68 a7 03 5e 03 dc b9 56 7c d3 08 8f 08 19 |.`h..^...V|.....| 64 40 50 91 e4 3b 54 2a 4f d7 8b 45 77 f7 8d 3c |d@P..;T*O..Ew..<| 45 44 2b c8 23 44 5e 2c ba b1 6d f7 41 51 14 48 |ED+.#D^,..m.AQ.H| 2b 03 40 09 74 49 fb 01 d0 9c fb f6 48 a4 05 41 |+.@.tI......H..A| 04 21 a2 21 70 66 f0 8d 02 5c 78 89 e8 28 75 4c |.!.!pf...\x..(uL| a2 a6 ea 08 80 39 de ad 3f 0c 44 01 0b 3a f2 97 |.....9..?.D..:..| 92 2f 88 48 78 fb 72 23 88 5d 70 07 eb 1e 06 ce |./.Hx.r#.]p.....| a1 09 91 b2 18 38 9f 16 51 2c a2 b8 a0 ed 09 80 |.....8..Q,......| 14 2b 14 1a 15 10 02 9e 00 0a fa 00 94 07 e8 a5 |.+..............| 7d 6c 70 a8 c8 09 a3 20 1b e0 01 b7 2f 4f 88 85 |}lp.... ..../O..| fc df 35 74 39 26 bd 9f 80 6b 02 fd 0d 21 ff 37 |..5t9&...k...!.7| 8d 9d 1b 10 34 d7 ce 5a 0f 3f 8c fd 0a 01 fc 62 |....4..Z.?.....b| af e8 5f ca 53 eb 45 63 09 2b 1b 7f 20 3a 90 18 |.._.S.Ec.+.. :..| f6 0a 68 b1 8d 5a 19 35 34 0b 62 cf 1c 68 ac 5a |..h..Z.54.b..h.Z| 08 15 c4 02 e2 05 43 2d 45 b9 19 35 37 62 36 85 |......C-E..57b6.| 46 b1 9b 2e 1e d2 8d f3 7b 10 5d 46 05 36 74 07 |F.......{.]F.6t.| a9 88 58 04 dc 14 6a 30 5c 02 10 01 24 55 06 72 |..X...j0\...$U.r| c3 20 4d f8 34 90 a2 b3 8d 3f 92 00 83 50 60 06 |. M.4....?...P`.| 9b 51 19 28 4a 2c 10 0a 71 68 2a fb 6a a5 97 5c |.Q.(J,..qh*.j..\| 36 82 8b f7 38 40 26 89 20 59 b2 af 29 56 27 20 |6...8@&. Y..)V' | 9b 7d 09 68 e9 07 8d 88 44 31 ff 2b e1 62 43 e6 |.}.h....D1.+.bC.| da 2a 53 28 c9 b5 6b 9c 1a b3 9d a2 60 32 bf 19 |.*S(..k.....`2..| 26 db 1b 18 03 bf 30 09 ba b6 14 1d ff 1d cd 04 |&.....0.........| 74 49 14 8c ed 2d db 46 04 48 24 fe 56 28 47 63 |tI...-.F.H$.V(Gc| 11 9c d3 eb f8 07 89 93 80 68 05 18 f2 81 0a 68 |.........h.....h| 85 8a 38 79 0c 00 17 08 ee f0 c6 45 cc f6 cd 59 |..8y.......E...Y| 43 8f ed 53 46 74 29 4f cc 17 5c 45 84 6e 64 44 |C..SFt)O..\E.ndD| d7 46 68 1f 21 3e 83 c8 45 6b 03 10 eb 31 90 bb |.Fh.!>..Ek...1..| 9d c0 16 80 7d 4c 75 1b 6a aa 09 82 07 c1 3a 89 |....}Lu.j.....:.| 8f 16 68 5b 02 40 a7 41 b4 5f e8 22 ba 6f 73 5e |..h[.@.A._.".os^| 6c ec 5d 36 22 ea 88 9e 05 a7 57 f3 eb de 88 c8 |l.]6".....W.....| 54 9a 0b 08 40 bb 19 02 5a 71 10 58 07 07 51 60 |T...@...Zq.X..Q`| bc 13 68 67 0c ec 18 10 b5 44 9c de 2d 52 66 5c |..hg.....D..-Rf\| 66 89 0f 5f 07 28 4c b7 c1 7e 66 01 c3 4a 00 96 |f.._.(L..~f..J..| 0e 1d 65 3f 40 40 51 da 71 05 d1 a4 80 67 78 35 |..e?@@Q.q....gx5| 68 83 70 56 11 ee bf 98 d9 e1 ce 1a 10 20 4c d4 |h.pV......... L.| 7f 22 b6 00 67 c5 5e f9 79 2a 55 c4 04 6d d0 da |."..g.^.y*U..m..| 41 7a 05 1b 52 68 c2 13 d4 ac 03 ae |Az..Rh...... | |
16 | 1033 | 50 67 ef 99 a0 e6 89 a5 31 12 41 2a 38 40 98 3e |Pg......1.A*8@.>| 53 c0 76 cb ba 87 5d 45 42 74 11 27 d1 0e bb 6a |S.v...]EBt.'...j| 5c 09 24 56 35 14 23 42 7d 0b ac 14 14 12 6b 17 |\.$V5.#B}.....k.| 82 68 42 81 c5 26 04 03 e6 73 4d 10 ba d8 40 a5 |.hB..&...sM...@.| 16 13 b7 04 8d 8b 49 a5 6b d0 76 13 0d 45 76 4a |......I.k.v..EvJ| 8d 78 6c c5 b0 51 c6 f9 0b 77 33 17 c1 4e 24 0b |.xl..Q...w3..N$.| 45 63 96 20 d8 8b 0f 15 05 0d 4d 69 7b 8c 76 02 |Ec. ......Mi{.v.| 59 9b 6d 0c 81 c1 1a 60 41 31 e9 51 c3 c5 ef 0b |Y.m....`A1.Q....| e8 b9 17 21 b1 81 1f 34 9b 0c 0f 38 50 48 fe d3 |...!...4...8PH..| 75 33 68 c9 60 27 37 57 25 10 e1 e4 60 ae 0c 29 |u3h.`'7W%...`..)| d2 d9 5f 1b 28 15 db 2d 2f 8d 91 8b c7 df 69 b0 |.._.(..-/.....i.| 4e 22 52 3d 13 d7 11 10 04 10 66 67 14 68 8e 09 |N"R=......fg.h..| 60 87 c3 33 06 76 0a 09 c0 06 c3 30 c3 57 11 9d |`..3.v.....0.W..| 10 0c 42 ac 00 9a 45 03 71 9d ef 22 96 0e 8a 06 |..B...E.q.."....| 0b 44 b6 eb 08 3c 5c 02 50 a0 e0 74 0b 47 95 5c |.D...<\.P..t.G.\| 20 dc 2f f4 f4 83 cf cf ff 40 0f 8d 48 47 81 0f | ./......@..HG..| 2a 1a 7b bd 5f bc 51 93 2a ba 26 83 f8 16 27 f6 |*.{._.Q.*.&...'.| 08 b7 b6 d8 1e bc c7 03 de 4a eb 14 57 0e 5c 7b |.........J..W.\{| 84 3e 8d 5c 37 01 9a c6 44 3d 36 31 04 02 0e e4 |.>.\7...D=61....| 15 12 0a c8 cf 6c 91 ba dc 17 d4 07 32 64 83 5c |.....l......2d.\| c4 80 2f a5 32 c8 90 0c dc 8d 94 77 42 be 13 74 |../.2......wB..t| 72 2b e4 74 5e 27 17 f2 5c c8 a8 43 ec 2f 21 cf |r+.t^'..\..C./!.| 85 3c b4 14 f0 ef 2e 80 3e 75 2a b8 05 06 1a b8 |.<......>u*.....| 03 06 55 e6 e7 e7 13 b8 00 0c b8 01 05 b8 02 81 |..U.............| 03 c5 08 5f c3 82 c9 f3 f3 f7 af 3d 21 74 38 3d |..._.......=!t8=| 01 06 2a 3d 02 1c 3d 03 8b b5 d8 ef 0e 3d 4b 75 |..*=..=......=Ku| 29 77 52 a6 52 b5 08 2d 42 35 52 0c 52 82 16 43 |)wR.R..-B5R.R..C| 8a e3 1f d5 8c 27 05 23 ee f6 83 26 bf 04 2d a3 |.....'.#...&..-.| 62 56 db a5 16 18 4e 83 ea 92 82 88 d6 76 41 bb |bV....N......vA.| 74 09 04 09 24 51 05 0b 12 7a 62 91 04 c4 57 ef |t...$Q...zb...W.| 01 27 51 95 a1 4b 56 57 92 07 06 de d4 0c af ac |.'Q..KVW........| 55 98 2a 54 bd 1c 0f cc 96 1c 14 14 19 07 40 91 |U.*T..........@.| 4d 58 50 73 56 79 41 d0 85 0d 24 5c 23 18 04 dc |MXPsVyA...$\#...| fe dd 68 d1 e9 40 4b 89 37 4c 0c 04 9f 80 39 d9 |..h..@K.7L....9.| b6 8a f6 6d 36 a9 35 7b 07 56 68 4c ea 28 73 3b |...m6.5{.VhL.(s;| 81 82 6b 08 2d 8c 01 20 68 00 67 c6 e9 bb 04 b3 |..k.-.. h.g.....| 88 be bd 2d 20 b1 a8 37 02 82 68 aa 0c 15 3f c9 |...- ..7..h...?.| 60 10 01 4f 75 db 5e 5f cc e0 93 73 4d 3a 19 09 |`..Ou.^_...sM:..| 53 c4 ff d2 49 50 dd 29 54 1e 8a c8 80 e9 61 80 |S...IP.)T.....a.| fb a2 a0 fd f9 19 77 02 04 e0 3f f5 02 3f 0b 8a |......w...?..?..| 47 0c d2 72 50 0c 88 d3 9a 77 f6 a8 60 b2 0b bc |G..rP....w..`...| bb 9f 45 10 d9 cc 90 8e e4 44 11 be a0 47 3c 74 |..E......D...G |
496 | 1033 | 34 41 11 34 8e 8d f8 59 54 bc a8 67 73 56 30 8b |4A.4...YT..gsV0.| 8a 49 23 cb f6 50 c1 28 90 20 0b 2c 24 2c cb b2 |.I#..P.(. .,$,..| 6c 0e 3c 30 34 40 38 b2 2c cb b2 50 44 48 54 4c |l.<04@8.,..PDHTL| cb b2 2c cb 64 58 5c 68 60 78 ad cb b2 2c 6c 70 |..,.dX\h`x...,lp| 7c 74 83 4b 34 41 73 c0 89 88 96 05 48 c3 e0 13 ||t.K4As.....H...| 28 26 60 bc 8d 77 6c c8 20 db 09 8a 07 58 44 23 |(&`..wl. ....XD#| 83 0c 32 30 1c 08 5e 62 45 35 82 c3 dc ab f5 84 |..20..^bE5......| a8 87 c6 36 ed eb 2f 97 4c d4 15 ab 2a 87 ac 7e |...6../.L...*..~| 1c 56 15 a6 a3 57 4d 48 61 cc 44 c1 61 7c 3d 2e |.V...WMHa.D.a|=.| 54 f0 04 51 09 5f ec 10 0a 96 29 3c 38 96 8d 20 |T..Q._....)<8.. | 57 50 a3 49 e2 4c 56 11 82 24 aa 06 b5 3e 40 06 |WP.I.LV..$...>@.| 5f 18 81 06 b3 e8 45 34 78 8b 43 28 1c 04 9f 8a |_.....E4x.C(....| 0c 94 ee bd 5a 33 b5 72 f8 58 4e 05 ba ee 7b 91 |....Z3.r.XN...{.| a4 4a 3f 59 40 33 0d 61 ab 76 05 b2 75 17 f5 54 |.J?Y@3.a.v..u..T| 9f 2e 84 7b 36 92 68 58 0d b7 ff 04 64 93 5b 88 |...{6.hX....d.[.| 7c 84 0b 31 df 6d 0c dc 03 11 a9 06 42 d8 b0 0c ||..1.m......B...| 1a 67 d0 47 aa 5b d4 61 57 5c 8d 9f 63 80 74 4b |.g.G.[.aW\..c.tK| 1d 1a a8 26 bc 87 6b 77 |...&..kw | |
592 | 1033 | 8d 97 c5 a9 d9 47 6c fb c0 1e fc 8f ea 70 30 87 |.....Gl......p0.| 82 8c 12 44 06 82 4f 30 0c 34 21 33 72 08 d7 3d |...D..O0.4!3r..=| c1 90 20 3a 75 0c 6c 22 e8 04 10 dd 53 ff 20 72 |.. :u.l"....S. r| 49 c2 52 0a 21 03 76 30 b2 eb 16 20 08 c0 b3 99 |I.R.!.v0... ....| 8a ad 3e 80 ff 8f 84 c1 61 9a 56 dc be b7 3b a3 |..>.....a.V...;.| 82 5f 7f d0 32 81 c2 de 9c 1b a9 a0 e9 69 1c d9 |._..2........i..| b0 f1 b0 a2 f0 d9 3f 6d 94 0d 01 e8 cc 27 1d b8 |......?m.....'..| 11 14 ce f0 86 0f de 41 32 06 23 1c c1 7a 0f 83 |.......A2.#..z..| c7 0d c4 9a 6e 11 1d 80 4b b5 84 00 b6 43 ba 58 |....n...K....C.X| 07 30 1e 27 02 a6 41 b3 b3 fa 2b 00 c9 7e 31 40 |.0.'..A...+..~1@| |
608 | 1033 | 珠ဃ莄缠φ䄍绸퀲ㄢ멼漆ᒠ䇸ꐊ蠋瀀Σ⏿ýƴ↊酝칼曄尠涓塜厼Ӽ쟨摆梷峃掁 |
688 | 1033 | ab e1 e5 64 42 35 18 c3 5e 51 d8 0c cc f1 a4 6a |...dB5..^Q.....j| 6c dc 5f d5 3c 53 72 40 f0 7e 13 8b 8e ce c6 88 |l._. |
992 | 1033 | 8d 5e 44 72 2c 4f 35 18 06 0c c6 67 59 72 66 33 |.^Dr,O5....gYrf3| 6c 34 70 0d 6e 30 88 68 0b 36 98 65 20 06 50 d9 |l4p.n0.h.6.e .P.| ce cb 53 04 f8 93 e4 ac 45 bc 95 f0 6b 39 d9 6c |..S.....E...k9.l| 2a b9 2e f4 3c 39 e0 a5 0a e5 ff 01 53 5b 7d d9 |*...<9......S[}.| ab d9 76 45 38 98 9e e4 00 0d e5 8e 08 17 6c aa |..vE8.........l.| 37 64 cd 60 1a ac 8a d8 d5 70 3e 0a 85 c8 01 f4 |7d.`.....p>.....| b4 62 20 09 db 10 6d 48 d0 6c 63 a1 83 50 87 6f |.b ...mH.lc..P.o| 83 cb 3d ac 4c 82 61 ef 30 64 28 0b f8 a8 62 7b |..=.L.a.0d(...b{| 13 05 5a d0 b4 c8 1d 81 |..Z..... | |
1088 | 1033 | 68 23 a5 00 ce 75 1d 1a 4f 28 c8 a0 de 47 ef 67 |h#...u..O(...G.g| 22 7a 6c 0e 1c 1c 0c 35 52 b1 e4 9a 00 0c 35 ca |"zl....5R.....5.| 06 34 54 32 26 b9 0b 7d 35 84 6c b8 6a cb 78 38 |.4T2&..}5.l.j.x8| 06 8c 09 b7 6e 56 f4 dd f5 00 10 37 d0 56 03 7b |....nV.....7.V.{| f0 7c cc 95 c8 c4 aa 03 9a 40 9b 35 e5 0c 60 0d |.|.......@.5..`.| 34 df 14 44 d5 b0 17 4a e1 96 8b d9 34 68 bc 0d |4..D...J....4h..| 73 4b 8a 14 d5 10 66 b0 64 00 8b 49 |sK....f.d..I | |
1104 | 1033 | 43 c4 c1 cb 0e e1 5d 24 cc 16 83 65 1a b0 0b aa |C.....]$...e....| b7 78 76 44 5e e4 3b 10 e1 67 5c 6a d0 b0 ad b2 |.xvD^.;..g\j....| 0d 21 0c e9 20 c6 6a 28 5c 16 7c ff 11 14 3b e3 |.!.. .j(\.|...;.| c5 d8 08 b2 bc f0 16 ef 0a 78 41 2b b0 d6 84 78 |.........xA+...x| b0 2c 68 d8 14 9f 63 e6 53 90 1b 1c a7 7c 02 5c |.,h...c.S....|.\| 80 1e ae 1f 84 4a 08 e5 71 20 4b 8e fa 85 de c9 |.....J..q K.....| 09 1c e0 ec 29 f8 68 60 0d 41 6d d7 1e b5 05 81 |....).h`.Am.....| 6b 71 18 f3 56 b7 13 b8 88 72 da 9d 13 04 15 f0 |kq..V....r......| 05 34 7b 28 0d de f4 89 67 b3 12 c2 13 3c 75 72 |.4{(....g.... |
1184 | 1033 | 젓谽ꏰተ湌媯̨ॅᡄࠄ钂⬌耇犚༾浝 |
1200 | 1033 | bf 04 84 8b f1 5f 8a 03 3c 3c 8a 57 9b 9e ef 66 |....._..<<.W...f| 15 55 3c 3e 0b ac 49 79 15 6a 83 50 5d a3 06 e6 |.U<>..Iy.j.P]...| 0c 56 30 83 bf 86 5a fd c6 06 eb 40 3c b0 ac f7 |.V0...Z....@<...| bc 25 0b 3c ed bf 90 9b 26 05 68 c4 05 eb 1a 3c |.%.<....&.h....<| 0a 75 13 4a f4 4b 3d b0 cc 17 03 f7 0c 88 06 46 |.u.J.K=........F| 80 3b 46 00 72 dc fe 43 eb 85 aa ed 04 a0 e0 54 |.;F.r..C.......T| 75 e5 1b 32 08 45 6d bf fc 13 5e 72 52 d0 40 fc |u..2.Em...^rR.@.| 83 7f 22 26 10 2d df f1 b5 06 2e d1 e8 15 7f 03 |.."&.-..........| c5 39 02 20 18 f0 37 f1 88 1e 74 7a 68 68 16 f6 |.9. ..7...tzhh..| 76 50 d0 80 61 3f 7e 22 ce 4b 36 3b 3e fc fe 70 |vP..a?~".K6;>..p| 16 fc fe fe 62 3b ab 68 14 2a 04 45 2f 8d 8d b3 |....b;.h.*.E/...| 61 01 f0 6a 6b 36 86 2d 8d 90 7c ea 8c 6c 40 c5 |a..jk6.-..|..l@.| 8e 22 2e 5f 0c 37 33 24 b9 5c 90 16 80 0a 1a 0d |."._.73$.\......| ac e0 08 b0 95 2e 50 14 90 ae b2 11 9c 79 21 4f |......P......y!O| 78 c2 1c 00 09 01 fc 06 d9 92 3c 00 fc 13 fd fd |x.........<.....| 72 12 50 40 11 00 44 ae 02 4d 24 04 14 6f f6 a0 |r.P@..D..M$..o..| 49 c3 85 db 4b d9 12 42 00 4a 29 18 1a 26 99 64 |I...K..B.J)..&.d| 35 18 fd 05 a4 50 f1 5e 40 5e ba a4 f9 66 87 6b |5....P.^@^...f.k| 1c 4e 2b f7 b8 08 58 01 0d 74 b8 e8 82 d9 8a 10 |.N+...X..t......| 95 0f 8e a7 30 50 0b 13 87 7b 9b 41 04 90 28 29 |....0P...{.A..()| 49 9a ef 1f e4 38 18 74 17 55 ff e4 7e 6f d6 15 |I....8.t.U..~o..| 14 06 2a 8c 60 77 fc 42 26 9b cd a7 2c 89 f0 0a |..*.`w.B&...,...| b4 06 30 a7 7a 2d ff aa 85 a0 75 83 50 cc ff 25 |..0.z-....u.P..%| cc 25 33 b2 b5 03 2b 05 c8 c4 8a d7 32 db d3 08 |.%3...+.....2...| 3d 45 06 0e 28 c6 0d c8 3d 83 5e 68 12 7c ed 84 |=E..(...=.^h.|..| 87 8f 05 f1 1d 37 60 c0 eb 59 48 c3 8c 8c 8d 6c |.....7`..YH....l| 43 c0 bc 05 b8 b4 8c 8c 8c 8c b0 ac a8 a4 8c 8c |C...............| 8c 8c a0 9c 98 94 8c 8c 8c 8c 90 8c 88 84 8c 8c |................| 8c 8c 80 7c 78 74 8c 8c 8c 8c 70 6c 68 64 8c 8c |...|xt....plhd..| 8c 8c 60 4c 48 44 8c 8c 8c 8c 40 3c 38 34 a0 36 |..`LHD....@<84.6| d8 8c 30 6a 70 90 04 aa 16 c1 ac 58 fa fb df 00 |..0jp......X....| 85 cd c8 d7 66 81 38 4d 5a 75 1f 8b 48 35 0d a2 |....f.8MZu..H5..| 9a 7e c8 81 39 50 45 85 12 a9 4c 6d 57 d1 18 3d |.~..9PE...LmW..=| 28 74 1f 06 d6 b1 10 dc 82 7d 5d e4 e7 b9 40 bd |(t.......}]...@.| 50 7f a4 0e 76 f2 22 99 f8 00 91 79 b6 4f 7e 79 |P...v."....y.O~y| 74 0f e2 e8 c2 d4 a8 1a 4d 94 be db c3 dd a5 60 |t.......M......`| 15 50 73 59 83 0d 64 ff 06 08 26 20 1a 38 2c 03 |.PsY..d...& .8,.| 66 1d 79 6e cb 6c 31 08 0d fc 02 68 a1 00 c0 9f |f.yn.l1....h....| 5d e0 1a 05 00 3d a3 a8 39 1d 00 30 67 2b b4 d5 |]....=..9..0g+..| 51 0c c8 fd cf 4e 04 ef b3 0f 7f 18 96 68 f4 bc |Q....N.......h..| f0 03 27 90 a1 64 3f 11 fd 54 c1 45 e0 05 35 60 |..'..d?..T.E..5`| 31 57 94 89 19 8e bf 4c 35 70 61 36 38 0c d5 ec |1W.....L5pa68...| ff 6d 1a f2 35 d4 47 a1 10 71 30 89 75 cc 80 06 |.m..5.G..q0.u...| 7e 77 81 3e 25 3a 46 08 8a 06 3a c3 74 04 33 6d |~w.>%:F...:.t.3m| 6d 40 be f2 12 04 20 f5 d7 b4 00 dd 34 b0 51 88 |m@.... .....4.Q.| ad c4 f6 45 b4 bc 15 16 a8 9c 76 b8 04 2b 20 76 |...E......v..+ v| d8 b0 55 20 f8 eb f5 ba 4d 53 41 c4 8f 06 0d a3 |..U ....MSA.....| 9f da 26 68 b1 d5 03 84 18 e4 f2 e9 70 54 9b 0f |..&h........pT..| 8a 15 18 eb 2d 93 d4 ef 17 a0 31 89 4d 80 50 51 |....-.....1.M.PQ| 8f 8a 59 50 69 eb 40 8a f3 80 b3 10 75 64 ac ec |..YPi.@.....ud..| 2e 20 5c 03 8c 74 7c 27 8f c6 26 e5 8b 2c 1c e1 |. \..t|'..&..,..| 15 e2 8d 08 d3 54 04 ae b6 a5 30 5f 48 f6 dd cc |.....T....0_H...| 10 fe 77 57 15 16 35 64 54 3d 64 89 25 07 d8 6c |..wW..5dT=d.%..l| |
1216 | 1033 | 3b 80 02 89 6c 03 8d 2b e0 44 cd 91 a1 07 2f 73 |;...l..+.D..../s| 72 0e 82 0c 30 a1 00 a7 67 bb 99 e7 85 4d f0 2f |r...0...g....M./| 0d 59 47 25 6b c6 ba 51 71 54 6b 58 cc 00 d0 a5 |.YG%k..QqTkX....| 0f 00 30 73 0e 1f 03 c4 aa db a5 56 f4 8a 94 8b |..0s.......V....| 67 c3 51 b3 d6 fb de d3 08 81 e9 1a 2d 04 03 26 |g.Q.........-..&| 70 6d 77 fb ec 2b c8 8b c4 0c 8b e1 f3 40 04 27 |pmw..+.......@.'| 3f d0 00 da 09 ef 2d 0f d5 5d 03 03 22 8a 0f 04 |?.....-..].."...| f7 e1 01 9d 83 d6 ac 53 05 d2 1d f7 72 bb 9f 2d |.......S....r..-| 0f 03 09 e1 03 d3 5b 1a 68 c0 d3 20 03 76 7b 9a |......[.h.. .v{.| e6 e3 68 d1 0b e2 71 92 03 32 ef 30 ff a1 f0 e9 |..h...q..2.0....| 0e 8b c0 4c 2d 28 10 fc d1 03 a2 21 56 1d 76 42 |...L-(.....!V.vB| 6e 0f a8 5e 1d 7c 3a a1 84 0f 21 3b 24 43 80 88 |n..^.|:...!;$C..| 3a 5e 76 a4 20 c8 88 37 cc c3 00 00 0d 5c 10 04 |:^v. ..7.....\..| 84 2e 90 c8 4c d3 74 03 9c a8 b4 00 ef 9a 68 0e |....L.t.......h.| ff 4f a8 63 03 25 32 2e 32 df 7d fb bb 58 13 4d |.O.c.%2.2.}..X.M| 53 20 53 61 6e 73 04 65 72 69 66 0f e2 d6 d5 fe |S Sans.erif.....| cf ff ff ff ff ce c0 c7 cd d9 8a d3 96 89 92 91 |................| ad a9 e1 f2 ec e6 ec f0 ff f3 ee b5 bc f4 bf b1 |................| |
1232 | 1033 | a2 a3 a2 b9 ac ff 77 ff ff a2 ae bb b8 ba b3 a5 |......w.........| ca ee f4 a1 d3 ec e4 98 8e 60 d8 c7 c6 dd 96 80 |.........`......| 81 de df dc 84 6d f9 e5 ff cb cd d5 d5 ce c6 d7 |.....m..........| 8c f3 f9 eb 52 65 67 53 63 6e 5e 72 b9 dd 6e 0b |....RegScn^r..n.| |
1296 | 1033 | 2e 14 77 09 83 03 3f 15 23 18 dd bf ff bb 73 76 |..w...?.#.....sv| 69 63 65 73 41 63 74 69 76 65 2b 6d 6f 74 65 31 |icesActive+mote1| 69 fd 6f ff f6 73 74 72 79 0f 54 6f 6f 6c 54 69 |i.o..stry.ToolTi| 70 02 6d 65 41 75 74 6f 50 6f 70 2d 21 ff 84 13 |p.meAutoPop-!...| 49 6e 69 74 69 61 6c 3c cc dd 5c f7 73 68 6f 77 |Initial<..\.show| 8f 53 06 20 66 6f 17 0b de be ed 6d 47 de 64 4c |.S. fo.....mG.dL| 69 86 73 1b 61 6d 46 69 6c dd |i.s.amFil. | |
module_name | hint | ord | function_name |
---|---|---|---|
KERNEL32.DLL | LoadLibraryA | ||
KERNEL32.DLL | GetProcAddress | ||
KERNEL32.DLL | VirtualProtect | ||
KERNEL32.DLL | VirtualAlloc | ||
KERNEL32.DLL | VirtualFree | ||
KERNEL32.DLL | ExitProcess | ||
ADVAPI32.dll | RegCloseKey | ||
COMCTL32.dll | 17 | ||
comdlg32.dll | FindTextA | ||
GDI32.dll | SetBkMode | ||
msvcrt.dll | exit | ||
SHELL32.dll | ShellExecuteA | ||
USER32.dll | GetDC |
StringTable 040904b0
CompanyName | NirSoft |
FileDescription | Registry Scanner |
FileVersion | 2.40 |
InternalName | RegScanner |
LegalCopyright | Copyright © 2004 - 2019 Nir Sofer |
OriginalFilename | RegScanner.exe |
ProductName | RegScanner |
ProductVersion | 2.40 |
VS_FIXEDFILEINFO
FileVersion | 2.4.0.0 |
ProductVersion | 2.4.0.0 |
StrucVersion | 0x10000 |
FileFlagsMask | 0x3f |
FileFlags | 0 |
FileOS | 0x40004 |
FileType | 1 |
FileSubtype | 0 |
Signers (1)
issuer: /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO Code Signing CA 2
serial: 1AF0660E837A35A2CD92EC613FC15DB8
Certificates (6)
Certificate: Data: Version: 3 (0x2) Serial Number: 42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b Signature Algorithm: sha1WithRSAEncryption Issuer: C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root Validity Not Before: Jun 7 08:09:10 2005 GMT Not After : May 30 10:48:38 2020 GMT Subject: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http:\/\/www.usertrust.com, CN=UTN-USERFirst-Object Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:ce:aa:81:3f:a3:a3:61:78:aa:31:00:55:95:11: 9e:27:0f:1f:1c:df:3a:9b:82:68:30:c0:4a:61:1d: f1:2f:0e:fa:be:79:f7:a5:23:ef:55:51:96:84:cd: db:e3:b9:6e:3e:31:d8:0a:20:67:c7:f4:d9:bf:94: eb:47:04:3e:02:ce:2a:a2:5d:87:04:09:f6:30:9d: 18:8a:97:b2:aa:1c:fc:41:d2:a1:36:cb:fb:3d:91: ba:e7:d9:70:35:fa:e4:e7:90:c3:9b:a3:9b:d3:3c: f5:12:99:77:b1:b7:09:e0:68:e6:1c:b8:f3:94:63: 88:6a:6a:fe:0b:76:c9:be:f4:22:e4:67:b9:ab:1a: 5e:77:c1:85:07:dd:0d:6c:bf:ee:06:c7:77:6a:41: 9e:a7:0f:d7:fb:ee:94:17:b7:fc:85:be:a4:ab:c4: 1c:31:dd:d7:b6:d1:e4:f0:ef:df:16:8f:b2:52:93: d7:a1:d4:89:a1:07:2e:bf:e1:01:12:42:1e:1a:e1: d8:95:34:db:64:79:28:ff:ba:2e:11:c2:e5:e8:5b: 92:48:fb:47:0b:c2:6c:da:ad:32:83:41:f3:a5:e5: 41:70:fd:65:90:6d:fa:fa:51:c4:f9:bd:96:2b:19: 04:2c:d3:6d:a7:dc:f0:7f:6f:83:65:e2:6a:ab:87: 86:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Authority Key Identifier: AD:BD:98:7A:34:B4:26:F7:FA:C4:26:54:EF:03:BD:E0:24:CB:54:1A X509v3 Subject Key Identifier: DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 Certificate Policies: Policy: X509v3 Any Policy X509v3 CRL Distribution Points: Full Name: URI:http://crl.usertrust.com/AddTrustExternalCARoot.crl Authority Information Access: OCSP - URI:http://ocsp.usertrust.com Signature Algorithm: sha1WithRSAEncryption Signature Value: 4d:42:2f:a6:c1:8a:eb:07:80:90:58:46:8c:f8:19:39:66:2a: 3c:5a:2c:6d:cf:d4:d9:87:55:8d:79:0b:12:88:7b:40:8f:d5: c7:f8:4b:8d:55:16:63:ad:b7:57:dc:3b:2b:bd:d3:c1:4f:1e: 03:87:4b:44:9b:e3:e2:40:45:26:f3:26:49:2b:6a:84:f1:54: 7a:d4:42:da:fc:d3:6a:bb:66:7e:ca:9e:ea:e9:bb:dc:07:c7: c3:92:4e:83:3c:81:49:9f:92:d5:32:09:ea:49:2e:a1:11:71: 9a:36:d2:c5:4e:68:b6:cb:0e:1b:25:16:af:6c:de:5d:76:d8: 1f:72:b1:93:26:86:17:db:18:de:af:45:e9:df:fb:98:af:14: 18:ed:a4:5e:f6:89:94:45:f0:55:04:4a:dd:ff:27:dd:06:4a: 40:f6:b4:bc:f1:e4:0f:99:02:bb:fd:5d:0e:2e:28:c1:be:3b: 5f:1a:3f:97:10:84:bc:16:3e:d8:a3:9c:63:1d:66:cb:5c:5f: da:3e:f3:0f:0a:09:35:22:db:db:c0:3f:00:f9:e6:0d:5d:67: d1:fd:a0:1e:03:2b:d9:40:f7:be:cc:87:66:54:80:a6:a3:b8: f5:19:62:d5:d2:26:b1:98:26:ee:9a:cb:44:a7:45:5a:81:95: 15:1a:f5:51
Certificate: Data: Version: 3 (0x2) Serial Number: 42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b Signature Algorithm: sha1WithRSAEncryption Issuer: C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root Validity Not Before: Jun 7 08:09:10 2005 GMT Not After : May 30 10:48:38 2020 GMT Subject: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http:\/\/www.usertrust.com, CN=UTN-USERFirst-Object Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:ce:aa:81:3f:a3:a3:61:78:aa:31:00:55:95:11: 9e:27:0f:1f:1c:df:3a:9b:82:68:30:c0:4a:61:1d: f1:2f:0e:fa:be:79:f7:a5:23:ef:55:51:96:84:cd: db:e3:b9:6e:3e:31:d8:0a:20:67:c7:f4:d9:bf:94: eb:47:04:3e:02:ce:2a:a2:5d:87:04:09:f6:30:9d: 18:8a:97:b2:aa:1c:fc:41:d2:a1:36:cb:fb:3d:91: ba:e7:d9:70:35:fa:e4:e7:90:c3:9b:a3:9b:d3:3c: f5:12:99:77:b1:b7:09:e0:68:e6:1c:b8:f3:94:63: 88:6a:6a:fe:0b:76:c9:be:f4:22:e4:67:b9:ab:1a: 5e:77:c1:85:07:dd:0d:6c:bf:ee:06:c7:77:6a:41: 9e:a7:0f:d7:fb:ee:94:17:b7:fc:85:be:a4:ab:c4: 1c:31:dd:d7:b6:d1:e4:f0:ef:df:16:8f:b2:52:93: d7:a1:d4:89:a1:07:2e:bf:e1:01:12:42:1e:1a:e1: d8:95:34:db:64:79:28:ff:ba:2e:11:c2:e5:e8:5b: 92:48:fb:47:0b:c2:6c:da:ad:32:83:41:f3:a5:e5: 41:70:fd:65:90:6d:fa:fa:51:c4:f9:bd:96:2b:19: 04:2c:d3:6d:a7:dc:f0:7f:6f:83:65:e2:6a:ab:87: 86:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Authority Key Identifier: AD:BD:98:7A:34:B4:26:F7:FA:C4:26:54:EF:03:BD:E0:24:CB:54:1A X509v3 Subject Key Identifier: DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 Certificate Policies: Policy: X509v3 Any Policy X509v3 CRL Distribution Points: Full Name: URI:http://crl.usertrust.com/AddTrustExternalCARoot.crl Authority Information Access: OCSP - URI:http://ocsp.usertrust.com Signature Algorithm: sha1WithRSAEncryption Signature Value: 4d:42:2f:a6:c1:8a:eb:07:80:90:58:46:8c:f8:19:39:66:2a: 3c:5a:2c:6d:cf:d4:d9:87:55:8d:79:0b:12:88:7b:40:8f:d5: c7:f8:4b:8d:55:16:63:ad:b7:57:dc:3b:2b:bd:d3:c1:4f:1e: 03:87:4b:44:9b:e3:e2:40:45:26:f3:26:49:2b:6a:84:f1:54: 7a:d4:42:da:fc:d3:6a:bb:66:7e:ca:9e:ea:e9:bb:dc:07:c7: c3:92:4e:83:3c:81:49:9f:92:d5:32:09:ea:49:2e:a1:11:71: 9a:36:d2:c5:4e:68:b6:cb:0e:1b:25:16:af:6c:de:5d:76:d8: 1f:72:b1:93:26:86:17:db:18:de:af:45:e9:df:fb:98:af:14: 18:ed:a4:5e:f6:89:94:45:f0:55:04:4a:dd:ff:27:dd:06:4a: 40:f6:b4:bc:f1:e4:0f:99:02:bb:fd:5d:0e:2e:28:c1:be:3b: 5f:1a:3f:97:10:84:bc:16:3e:d8:a3:9c:63:1d:66:cb:5c:5f: da:3e:f3:0f:0a:09:35:22:db:db:c0:3f:00:f9:e6:0d:5d:67: d1:fd:a0:1e:03:2b:d9:40:f7:be:cc:87:66:54:80:a6:a3:b8: f5:19:62:d5:d2:26:b1:98:26:ee:9a:cb:44:a7:45:5a:81:95: 15:1a:f5:51
Certificate: Data: Version: 3 (0x2) Serial Number: 62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19 Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http:\/\/www.usertrust.com, CN=UTN-USERFirst-Object Validity Not Before: Apr 27 00:00:00 2011 GMT Not After : May 30 10:48:38 2020 GMT Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping CA Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:aa:82:f1:84:a9:5b:d8:71:b5:d2:5d:2b:ed:f4: 13:20:0c:f9:9b:e9:d1:8f:74:5e:6e:ee:eb:29:48: d8:c8:be:2c:eb:0a:61:60:cc:bd:92:8d:7c:dd:74: bb:0a:9e:68:4e:aa:75:24:73:27:ae:37:f3:1a:82: a5:6d:b8:c8:09:46:4c:7e:a1:83:e9:e2:03:60:a4: 21:10:27:40:9a:59:e1:6d:af:3e:82:af:21:69:59: 6d:63:cc:ce:b1:f6:16:9a:79:83:97:3a:1d:0c:af: c9:7d:d1:4e:d8:c3:46:a1:a5:98:aa:60:ce:55:d4: 12:11:f3:3b:0b:6c:c6:88:ba:95:2e:ef:a0:46:45: 39:7c:ac:e9:e3:ad:e8:57:97:5f:fe:fb:c2:09:8d: fe:8e:9a:a5:3f:59:46:fc:c7:2d:5d:84:87:f0:6f: 58:26:c3:f0:42:fc:55:de:65:be:67:38:63:b3:11: b1:a1:25:ed:a9:9b:be:48:df:4c:77:c0:aa:19:0b: b6:fd:4a:8f:2c:79:55:b1:fe:59:5a:5a:6d:55:8b: 1c:43:f6:b1:55:72:29:89:4d:40:3f:be:7f:49:01: 5d:3c:9b:5c:08:fb:ca:e2:75:15:05:93:9d:08:62: ff:ba:0d:db:aa:f8:b5:bf:10:32:ca:72:ea:08:26: cd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Authority Key Identifier: DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8 X509v3 Subject Key Identifier: 64:22:86:B6:4A:89:C9:04:0F:D0:04:58:92:2B:B3:6E:3D:1E:27:6C X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE, pathlen:0 X509v3 Extended Key Usage: Time Stamping X509v3 Certificate Policies: Policy: X509v3 Any Policy X509v3 CRL Distribution Points: Full Name: URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl Authority Information Access: CA Issuers - URI:http://crt.usertrust.com/UTNAddTrustObject_CA.crt OCSP - URI:http://ocsp.usertrust.com Signature Algorithm: sha1WithRSAEncryption Signature Value: 11:c9:3d:e1:05:e8:3b:65:ac:c9:74:31:03:b7:da:83:38:c6: 92:ba:fd:cd:f8:db:63:9b:7d:1e:90:a4:98:c8:d9:58:68:34: b5:f0:0b:21:53:9e:59:46:fd:63:85:df:fe:47:aa:70:e4:3f: 5e:08:95:28:5f:14:f1:fd:22:ae:70:e4:b7:f1:b0:b6:56:9f: b1:67:b8:68:83:5e:a8:60:db:98:39:f6:dc:49:5e:13:a7:90: 67:4b:e3:6e:e7:eb:f0:43:c7:d0:2f:7d:ff:96:5a:a7:03:d6: 9b:54:a0:23:d3:a5:c2:a0:8e:f9:4f:d1:b2:06:21:fe:21:5d: 27:8c:a0:af:d9:b0:52:ee:fc:c8:ed:b7:9c:f1:c9:26:38:d6: a5:32:ed:48:97:94:5e:3d:e0:3d:35:b4:b0:c9:58:af:c7:58: ff:62:74:16:92:64:41:da:ca:a8:eb:8b:03:bd:c1:4e:ae:1f: 91:32:b8:e1:24:3b:7b:ed:14:68:09:86:96:28:c9:3b:c9:6c: 28:c2:25:69:f5:4a:61:ad:e0:27:f8:53:a7:75:15:b0:51:31: b0:f1:41:ff:3e:5a:26:1e:60:7e:e2:e3:6a:39:9a:c4:ea:ee: 3f:e6:b2:13:3f:55:03:04:4d:0b:90:72:d4:eb:fb:bc:87:90: 51:b2:38:19
Certificate: Data: Version: 3 (0x2) Serial Number: 10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb Signature Algorithm: sha1WithRSAEncryption Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http:\/\/www.usertrust.com, CN=UTN-USERFirst-Object Validity Not Before: Aug 24 00:00:00 2011 GMT Not After : May 30 10:48:38 2020 GMT Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Code Signing CA 2 Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:cb:f8:e7:a7:e8:f1:97:28:40:68:80:37:d2:c8: 3f:8e:92:8a:92:37:87:47:80:ea:4c:99:cf:6e:f9: 15:47:bd:ee:75:f4:44:ac:d0:c3:d4:4d:f7:19:c0: d3:3c:4d:c1:47:b9:59:65:16:93:8c:d9:0a:84:9b: 9f:e8:f6:6a:63:58:fe:5f:dc:d1:7f:4b:51:9f:00: 1c:00:87:54:20:07:57:a0:82:c9:2f:98:af:33:8a: bb:7b:80:22:25:6a:6c:af:c2:2c:6c:79:13:bd:a3: 2a:48:d6:b5:8e:61:55:e9:6b:e8:3d:80:bf:14:03: 85:18:8e:7e:4c:e9:c2:19:88:73:92:72:cd:fa:ff: 50:4d:cb:2c:a6:7b:1a:73:b1:00:90:2c:d9:32:e2: fb:fd:ac:95:42:36:ec:34:c5:13:53:68:b2:c1:9f: 40:9f:da:7b:c8:9d:62:6c:93:a2:42:d7:79:9f:97: 4f:31:5b:50:21:a1:ab:af:d9:1c:b2:ce:75:be:5b: 2c:56:00:24:8d:11:c1:75:1f:f0:fe:d2:95:fe:f0: e1:31:23:18:67:c0:5b:13:fd:5a:98:94:94:ff:ff: 59:02:1f:00:ac:e6:f1:f2:fa:3a:73:b3:1d:42:fc: 54:75:cf:51:31:2f:e3:db:81:d9:77:23:2a:4f:59: ce:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Authority Key Identifier: DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8 X509v3 Subject Key Identifier: 1E:C5:B1:2C:7D:87:DA:02:68:7C:25:BC:0C:07:84:3F:B6:CF:DE:F1 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE, pathlen:0 X509v3 Extended Key Usage: Code Signing X509v3 Certificate Policies: Policy: X509v3 Any Policy X509v3 CRL Distribution Points: Full Name: URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl Authority Information Access: CA Issuers - URI:http://crt.usertrust.com/UTNAddTrustObject_CA.crt OCSP - URI:http://ocsp.usertrust.com Signature Algorithm: sha1WithRSAEncryption Signature Value: 95:89:77:93:68:01:5e:7c:d9:2d:37:07:90:5d:5a:42:5e:0c: 64:b4:36:b5:0f:f6:ab:d5:39:27:de:22:46:a4:49:1c:66:4b: 46:19:59:2e:79:49:03:f6:9c:92:df:6d:50:35:5c:0c:91:2e: 60:03:59:d0:f1:64:f7:69:09:f6:7e:fe:eb:34:b3:6d:b1:bf: 66:9c:a3:ba:31:78:b9:87:35:61:3d:92:31:1b:ef:f4:e8:9e: d6:ac:45:fa:0c:36:3c:80:67:bb:bd:ef:2e:c2:90:e1:3d:71: 2f:3b:c1:b0:58:7e:45:c3:52:71:03:07:f6:f3:39:4d:8b:36: 21:1b:01:df:d9:da:5e:2b:eb:0e:97:80:1e:44:1c:50:88:f5: c6:12:33:4a:a8:4d:a5:8d:2f:94:0c:7b:c6:bf:9a:2c:c3:32: cd:bd:8c:27:26:f0:e1:30:03:50:06:82:bc:f4:3b:b3:83:75: 06:c6:ef:ba:ee:d3:80:f8:52:c6:ac:cb:79:f2:38:9e:7b:b0: 92:58:42:91:05:c8:96:21:ad:b9:4b:16:81:14:69:f1:37:b0: fe:34:f7:dc:b0:df:97:f5:43:10:9b:76:8f:b4:65:f5:e8:9f: 13:b7:1e:ac:6f:c4:69:8a:5f:ba:3c:61:7e:5e:49:86:23:13: 2e:af:15:48
Certificate: Data: Version: 3 (0x2) Serial Number: 2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49 Signature Algorithm: sha1WithRSAEncryption Issuer: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping CA Validity Not Before: May 2 00:00:00 2019 GMT Not After : May 30 10:48:38 2020 GMT Subject: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo SHA-1 Time Stamping Signer Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:bf:52:36:82:3a:dc:74:37:0d:78:d5:7f:16:50: 19:66:ed:ba:1a:99:d1:63:38:9a:0c:66:b2:40:db: a7:80:50:bf:69:2e:36:2f:0a:67:3f:40:a1:4a:8a: 63:35:9b:d0:19:cc:74:aa:17:19:91:2b:b5:55:20: 19:fb:c0:1a:3a:6d:ca:39:9b:82:f2:ba:95:a1:1a: d8:34:c7:b8:89:7b:70:88:70:51:66:69:ec:77:fe: c6:94:72:7a:cf:25:81:ed:34:82:9a:df:08:15:37: 31:b4:6d:ae:1c:bf:18:d5:0d:cf:fe:b5:e1:c4:fb: b1:47:71:e9:fa:ee:63:91:ec:f1:ec:ce:59:04:11: 7c:ae:0b:60:53:ea:2a:f3:be:2f:02:0f:d0:4c:5d: 31:13:2f:1e:69:0f:85:9b:45:96:c2:8d:12:8b:67: ae:1f:af:69:ab:06:96:81:00:df:91:7c:95:1c:e6: 9e:19:64:df:76:c8:60:44:2f:49:e3:8f:7f:60:6a: 45:39:13:44:21:a5:ba:fb:91:fa:41:40:ed:4d:02: b4:4b:7f:df:e2:e0:3d:b8:aa:f3:1a:d8:41:83:8f: 7f:33:ed:41:06:e2:7d:9e:3f:53:84:8d:28:da:dd: 76:c6:bd:f7:8e:1e:38:cd:c0:cb:60:24:03:de:7a: 4c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Authority Key Identifier: 64:22:86:B6:4A:89:C9:04:0F:D0:04:58:92:2B:B3:6E:3D:1E:27:6C X509v3 Subject Key Identifier: AE:EE:D9:60:BA:5E:F5:2C:01:12:FD:8E:8D:B2:55:72:35:46:6F:F1 X509v3 Key Usage: critical Digital Signature, Non Repudiation X509v3 Basic Constraints: critical CA:FALSE X509v3 Extended Key Usage: critical Time Stamping X509v3 Certificate Policies: Policy: 1.3.6.1.4.1.6449.1.2.1.3.8 CPS: https://sectigo.com/CPS X509v3 CRL Distribution Points: Full Name: URI:http://crl.sectigo.com/COMODOTimeStampingCA_2.crl Authority Information Access: CA Issuers - URI:http://crt.sectigo.com/COMODOTimeStampingCA_2.crt OCSP - URI:http://ocsp.sectigo.com Signature Algorithm: sha1WithRSAEncryption Signature Value: 7a:7f:a9:4a:d2:b0:a4:1c:1d:0d:9d:2d:5c:c6:ae:5a:dd:8f: 45:1d:f0:9e:5c:90:f6:5e:ac:70:fe:d3:d9:cd:e4:19:a4:0a: 43:75:60:6a:83:a4:c3:99:84:20:31:ba:d6:fe:4c:cf:13:f8: 10:f7:54:09:7e:ea:dc:d2:2e:79:d7:07:4c:54:b7:b5:c9:9d: b2:f0:f2:1e:24:14:d0:9c:c7:c8:67:aa:0b:62:b7:b4:f1:06: e4:e7:e4:21:4b:19:32:99:34:b9:19:61:77:0a:33:90:67:6c: c0:88:4a:92:f5:a1:43:01:f3:ae:a2:6f:c9:95:bd:96:38:f7: 83:f7:ad:7c:28:1f:f3:38:df:8e:21:c8:71:68:53:2d:cb:ae: aa:e2:30:17:83:22:29:18:b5:e1:8c:89:eb:6e:f8:7e:38:bb: 90:4f:b9:5f:07:34:12:6b:97:d5:e6:3b:91:be:00:17:21:6e: e2:6d:fc:52:79:ef:81:25:ba:cf:13:d0:fb:dd:2b:cd:81:b6: 57:89:4e:f0:dd:f3:0b:4a:34:ca:85:ff:08:b9:96:5f:eb:11: 13:e0:e1:c5:03:ad:57:1c:e1:5d:92:06:be:1b:c8:3c:3f:a5: 20:9f:69:d0:69:c1:c5:c2:c9:3e:e7:c5:72:f7:ea:1b:96:e2: 94:af:86:2e
Certificate: Data: Version: 3 (0x2) Serial Number: 1a:f0:66:0e:83:7a:35:a2:cd:92:ec:61:3f:c1:5d:b8 Signature Algorithm: sha1WithRSAEncryption Issuer: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Code Signing CA 2 Validity Not Before: Sep 12 00:00:00 2014 GMT Not After : Sep 12 23:59:59 2019 GMT Subject: C=IL/postalCode=52583, ST=Gush Dan, L=Ramat Gan/street=5 Hashoshanim st., O=Nir Sofer, CN=Nir Sofer Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:a1:c6:1b:2b:fd:f7:76:8d:73:a2:b1:ba:a7:80: d7:67:f6:ea:f5:26:31:15:35:b8:c4:22:89:8e:19: 19:2d:57:a0:d3:3e:58:c0:02:f3:28:4a:34:c9:bd: ee:42:a0:5d:33:28:23:0e:e6:84:42:4f:a6:16:d8: fb:1a:0a:52:5f:a1:d4:83:4a:55:a9:52:84:34:cc: 89:f0:e4:d4:ed:9e:0f:56:8d:94:e5:9f:4c:80:38: aa:21:f4:fc:09:ec:7c:fb:e7:95:69:ce:ed:80:f5: ec:34:7d:57:72:a4:60:b9:14:ac:74:b3:f7:b9:e5: b2:ee:2f:cc:c5:2d:ab:5e:f9:66:e4:0a:fd:39:69: c9:66:84:d4:18:03:c5:00:b5:4e:af:23:62:b4:b1: 11:df:af:7a:3c:25:28:29:53:98:1b:f5:63:c4:39: 21:3f:12:81:18:bf:3d:f2:8f:c2:48:a2:c4:f1:0a: 49:b9:1a:4a:65:5b:65:b9:74:e2:df:04:c3:19:da: c6:b8:d7:ee:10:05:69:5d:3f:20:b2:35:a7:f8:ea: ce:ee:a4:a7:98:43:ae:cc:9d:26:b9:c5:32:da:63: 50:99:fa:de:0d:3f:06:fb:1f:29:9b:2d:53:d5:49: 63:7a:b6:00:c8:ab:c6:b2:3c:c5:1c:8f:0b:c3:39: 3a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Authority Key Identifier: 1E:C5:B1:2C:7D:87:DA:02:68:7C:25:BC:0C:07:84:3F:B6:CF:DE:F1 X509v3 Subject Key Identifier: 29:EA:59:80:5A:26:16:EF:C6:30:7A:53:E1:F7:2A:AD:BF:ED:67:50 X509v3 Key Usage: critical Digital Signature X509v3 Basic Constraints: critical CA:FALSE X509v3 Extended Key Usage: Code Signing Netscape Cert Type: Object Signing X509v3 Certificate Policies: Policy: 1.3.6.1.4.1.6449.1.2.1.3.2 CPS: https://secure.comodo.net/CPS X509v3 CRL Distribution Points: Full Name: URI:http://crl.comodoca.com/COMODOCodeSigningCA2.crl Authority Information Access: CA Issuers - URI:http://crt.comodoca.com/COMODOCodeSigningCA2.crt OCSP - URI:http://ocsp.comodoca.com X509v3 Subject Alternative Name: email:support@nirsoft.net Signature Algorithm: sha1WithRSAEncryption Signature Value: 89:96:bf:1d:98:7b:0f:64:84:06:37:df:42:cf:85:6a:44:ce: 64:bc:d9:f4:73:04:be:35:82:0c:f9:51:68:e3:cb:d8:d8:10: 87:46:4f:6e:30:d2:81:1d:c3:11:01:68:7f:d4:6b:50:6d:26: 6f:aa:c8:55:4f:44:c9:b9:89:72:1b:c4:60:52:c9:93:6f:7e: 86:08:36:d0:bd:8e:fe:36:0a:ca:a4:19:44:07:6d:af:f4:90: ca:6e:d7:98:f6:aa:6d:1c:4e:96:1a:fc:c1:83:39:b8:92:72: 27:22:c6:de:6e:af:7f:00:39:10:55:3e:6d:9e:0c:e3:e4:5d: ae:d3:f1:3a:6f:b6:f1:41:bc:7c:ce:af:71:4b:b7:27:4c:b4: 33:29:76:35:38:bc:95:d4:7a:3e:0c:b4:63:5d:1d:ad:9b:cb: 76:ad:ee:ca:7e:c2:ec:3c:3c:94:8d:72:85:22:ac:6d:74:8f: a6:4e:b2:e7:96:90:8d:39:5c:86:8e:2f:b6:24:4d:3f:6e:a1: 4e:15:c6:9c:de:7c:21:1a:39:61:85:38:60:3c:5e:6a:b7:a9: b4:4a:45:69:97:06:51:5e:82:30:9c:65:7e:2a:d7:52:a3:8a: 8a:bb:3e:44:86:7c:0a:01:71:d7:ae:80:01:ea:47:86:9d:b7: cd:5f:fa:7b
- 1
- SHA1: nil
- 1.3.6.1.4.1.311.2.1.4
- #0
- 1.3.6.1.4.1.311.2.1.15
- :
- SHA1
1f bd d9 e9 62 0a 94 9e ae 32 f4 98 36 23 ca 02 |....b....2..6#..| 4a f4 d9 55 |J..U |
- 1.3.6.1.4.1.311.2.1.15
- #0
- Certificates
- Certificate #0
- 2
- 42:1A:F2:94:09:84:19:1F:52:0A:4B:C6:24:26:A7:4B
- RSA-SHA1: nil
- Issuer
- C: SE
- O: AddTrust AB
- OU: AddTrust External TTP Network
- CN: AddTrust External CA Root
- 2005-06-07 08:09:10 UTC: 2020-05-30 10:48:38 UTC
- Subject
- C: US
- ST: UT
- L: Salt Lake City
- O: The USERTRUST Network
- OU: http://www.usertrust.com
- CN: UTN-USERFirst-Object
- #5
- rsaEncryption: nil
- CE:AA:81:3F:A3:A3:61:78:AA:31:00:55:95:11:9E:27:
0F:1F:1C:DF:3A:9B:82:68:30:C0:4A:61:1D:F1:2F:0E:
FA:BE:79:F7:A5:23:EF:55:51:96:84:CD:DB:E3:B9:6E:
3E:31:D8:0A:20:67:C7:F4:D9:BF:94:EB:47:04:3E:02:
CE:2A:A2:5D:87:04:09:F6:30:9D:18:8A:97:B2:AA:1C:
FC:41:D2:A1:36:CB:FB:3D:91:BA:E7:D9:70:35:FA:E4:
E7:90:C3:9B:A3:9B:D3:3C:F5:12:99:77:B1:B7:09:E0:
68:E6:1C:B8:F3:94:63:88:6A:6A:FE:0B:76:C9:BE:F4:
22:E4:67:B9:AB:1A:5E:77:C1:85:07:DD:0D:6C:BF:EE:
06:C7:77:6A:41:9E:A7:0F:D7:FB:EE:94:17:B7:FC:85:
BE:A4:AB:C4:1C:31:DD:D7:B6:D1:E4:F0:EF:DF:16:8F:
B2:52:93:D7:A1:D4:89:A1:07:2E:BF:E1:01:12:42:1E:
1A:E1:D8:95:34:DB:64:79:28:FF:BA:2E:11:C2:E5:E8:
5B:92:48:FB:47:0B:C2:6C:DA:AD:32:83:41:F3:A5:E5:
41:70:FD:65:90:6D:FA:FA:51:C4:F9:BD:96:2B:19:04:
2C:D3:6D:A7:DC:F0:7F:6F:83:65:E2:6A:AB:87:86:75: 0x010001
- #6
- authorityKeyIdentifier:
ad bd 98 7a 34 b4 26 f7 fa c4 26 54 ef 03 bd e0 |...z4.&...&T....| 24 cb 54 1a |$.T. |
- subjectKeyIdentifier:
da ed 64 74 14 9c 14 3c ab dd 99 a9 bd 5b 28 4d |..dt...<.....[(M| 8b 3c c9 d8 |.<.. |
- keyUsage: true, 6
- basicConstraints: true, true
- certificatePolicies: anyPolicy
- crlDistributionPoints: http://crl.usertrust.com/AddTrustExternalCARoot.crl
- authorityInfoAccess
- OCSP: http://ocsp.usertrust.com
- authorityKeyIdentifier:
- RSA-SHA1:
4d 42 2f a6 c1 8a eb 07 80 90 58 46 8c f8 19 39 |MB/.......XF...9| 66 2a 3c 5a 2c 6d cf d4 d9 87 55 8d 79 0b 12 88 |f*
...| 63 1d 66 cb 5c 5f da 3e f3 0f 0a 09 35 22 db db |c.f.\_.>....5"..| c0 3f 00 f9 e6 0d 5d 67 d1 fd a0 1e 03 2b d9 40 |.?....]g.....+.@| f7 be cc 87 66 54 80 a6 a3 b8 f5 19 62 d5 d2 26 |....fT......b..&| b1 98 26 ee 9a cb 44 a7 45 5a 81 95 15 1a f5 51 |..&...D.EZ.....Q|
- 2
- Certificate #1
- 2
- 42:1A:F2:94:09:84:19:1F:52:0A:4B:C6:24:26:A7:4B
- RSA-SHA1: nil
- Issuer
- C: SE
- O: AddTrust AB
- OU: AddTrust External TTP Network
- CN: AddTrust External CA Root
- 2005-06-07 08:09:10 UTC: 2020-05-30 10:48:38 UTC
- Subject
- C: US
- ST: UT
- L: Salt Lake City
- O: The USERTRUST Network
- OU: http://www.usertrust.com
- CN: UTN-USERFirst-Object
- #5
- rsaEncryption: nil
- CE:AA:81:3F:A3:A3:61:78:AA:31:00:55:95:11:9E:27:
0F:1F:1C:DF:3A:9B:82:68:30:C0:4A:61:1D:F1:2F:0E:
FA:BE:79:F7:A5:23:EF:55:51:96:84:CD:DB:E3:B9:6E:
3E:31:D8:0A:20:67:C7:F4:D9:BF:94:EB:47:04:3E:02:
CE:2A:A2:5D:87:04:09:F6:30:9D:18:8A:97:B2:AA:1C:
FC:41:D2:A1:36:CB:FB:3D:91:BA:E7:D9:70:35:FA:E4:
E7:90:C3:9B:A3:9B:D3:3C:F5:12:99:77:B1:B7:09:E0:
68:E6:1C:B8:F3:94:63:88:6A:6A:FE:0B:76:C9:BE:F4:
22:E4:67:B9:AB:1A:5E:77:C1:85:07:DD:0D:6C:BF:EE:
06:C7:77:6A:41:9E:A7:0F:D7:FB:EE:94:17:B7:FC:85:
BE:A4:AB:C4:1C:31:DD:D7:B6:D1:E4:F0:EF:DF:16:8F:
B2:52:93:D7:A1:D4:89:A1:07:2E:BF:E1:01:12:42:1E:
1A:E1:D8:95:34:DB:64:79:28:FF:BA:2E:11:C2:E5:E8:
5B:92:48:FB:47:0B:C2:6C:DA:AD:32:83:41:F3:A5:E5:
41:70:FD:65:90:6D:FA:FA:51:C4:F9:BD:96:2B:19:04:
2C:D3:6D:A7:DC:F0:7F:6F:83:65:E2:6A:AB:87:86:75: 0x010001
- #6
- authorityKeyIdentifier:
ad bd 98 7a 34 b4 26 f7 fa c4 26 54 ef 03 bd e0 |...z4.&...&T....| 24 cb 54 1a |$.T. |
- subjectKeyIdentifier:
da ed 64 74 14 9c 14 3c ab dd 99 a9 bd 5b 28 4d |..dt...<.....[(M| 8b 3c c9 d8 |.<.. |
- keyUsage: true, 6
- basicConstraints: true, true
- certificatePolicies: anyPolicy
- crlDistributionPoints: http://crl.usertrust.com/AddTrustExternalCARoot.crl
- authorityInfoAccess
- OCSP: http://ocsp.usertrust.com
- authorityKeyIdentifier:
- RSA-SHA1:
4d 42 2f a6 c1 8a eb 07 80 90 58 46 8c f8 19 39 |MB/.......XF...9| 66 2a 3c 5a 2c 6d cf d4 d9 87 55 8d 79 0b 12 88 |f*
...| 63 1d 66 cb 5c 5f da 3e f3 0f 0a 09 35 22 db db |c.f.\_.>....5"..| c0 3f 00 f9 e6 0d 5d 67 d1 fd a0 1e 03 2b d9 40 |.?....]g.....+.@| f7 be cc 87 66 54 80 a6 a3 b8 f5 19 62 d5 d2 26 |....fT......b..&| b1 98 26 ee 9a cb 44 a7 45 5a 81 95 15 1a f5 51 |..&...D.EZ.....Q|
- 2
- Certificate #2
- 2
- 62:5C:4D:90:8C:D5:42:FB:AB:2E:A5:73:3F:F1:54:19
- RSA-SHA1: nil
- Issuer
- C: US
- ST: UT
- L: Salt Lake City
- O: The USERTRUST Network
- OU: http://www.usertrust.com
- CN: UTN-USERFirst-Object
- 2011-04-27 00:00:00 UTC: 2020-05-30 10:48:38 UTC
- Subject
- C: GB
- ST: Greater Manchester
- L: Salford
- O: COMODO CA Limited
- CN: COMODO Time Stamping CA
- #5
- rsaEncryption: nil
- AA:82:F1:84:A9:5B:D8:71:B5:D2:5D:2B:ED:F4:13:20:
0C:F9:9B:E9:D1:8F:74:5E:6E:EE:EB:29:48:D8:C8:BE:
2C:EB:0A:61:60:CC:BD:92:8D:7C:DD:74:BB:0A:9E:68:
4E:AA:75:24:73:27:AE:37:F3:1A:82:A5:6D:B8:C8:09:
46:4C:7E:A1:83:E9:E2:03:60:A4:21:10:27:40:9A:59:
E1:6D:AF:3E:82:AF:21:69:59:6D:63:CC:CE:B1:F6:16:
9A:79:83:97:3A:1D:0C:AF:C9:7D:D1:4E:D8:C3:46:A1:
A5:98:AA:60:CE:55:D4:12:11:F3:3B:0B:6C:C6:88:BA:
95:2E:EF:A0:46:45:39:7C:AC:E9:E3:AD:E8:57:97:5F:
FE:FB:C2:09:8D:FE:8E:9A:A5:3F:59:46:FC:C7:2D:5D:
84:87:F0:6F:58:26:C3:F0:42:FC:55:DE:65:BE:67:38:
63:B3:11:B1:A1:25:ED:A9:9B:BE:48:DF:4C:77:C0:AA:
19:0B:B6:FD:4A:8F:2C:79:55:B1:FE:59:5A:5A:6D:55:
8B:1C:43:F6:B1:55:72:29:89:4D:40:3F:BE:7F:49:01:
5D:3C:9B:5C:08:FB:CA:E2:75:15:05:93:9D:08:62:FF:
BA:0D:DB:AA:F8:B5:BF:10:32:CA:72:EA:08:26:CD:19: 0x010001
- #6
- authorityKeyIdentifier:
da ed 64 74 14 9c 14 3c ab dd 99 a9 bd 5b 28 4d |..dt...<.....[(M| 8b 3c c9 d8 |.<.. |
- subjectKeyIdentifier:
64 22 86 b6 4a 89 c9 04 0f d0 04 58 92 2b b3 6e |d"..J......X.+.n| 3d 1e 27 6c |=.'l |
- keyUsage: true, 6
- basicConstraints
- true
- true: 0
- extendedKeyUsage: timeStamping
- certificatePolicies: anyPolicy
- crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
- authorityInfoAccess
- #0
- caIssuers: http://crt.usertrust.com/UTNAddTrustObject_CA.crt
- OCSP: http://ocsp.usertrust.com
- #0
- authorityKeyIdentifier:
- RSA-SHA1:
11 c9 3d e1 05 e8 3b 65 ac c9 74 31 03 b7 da 83 |..=...;e..t1....| 38 c6 92 ba fd cd f8 db 63 9b 7d 1e 90 a4 98 c8 |8.......c.}.....| d9 58 68 34 b5 f0 0b 21 53 9e 59 46 fd 63 85 df |.Xh4...!S.YF.c..| fe 47 aa 70 e4 3f 5e 08 95 28 5f 14 f1 fd 22 ae |.G.p.?^..(_...".| 70 e4 b7 f1 b0 b6 56 9f b1 67 b8 68 83 5e a8 60 |p.....V..g.h.^.`| db 98 39 f6 dc 49 5e 13 a7 90 67 4b e3 6e e7 eb |..9..I^...gK.n..| f0 43 c7 d0 2f 7d ff 96 5a a7 03 d6 9b 54 a0 23 |.C../}..Z....T.#| d3 a5 c2 a0 8e f9 4f d1 b2 06 21 fe 21 5d 27 8c |......O...!.!]'.| a0 af d9 b0 52 ee fc c8 ed b7 9c f1 c9 26 38 d6 |....R........&8.| a5 32 ed 48 97 94 5e 3d e0 3d 35 b4 b0 c9 58 af |.2.H..^=.=5...X.| c7 58 ff 62 74 16 92 64 41 da ca a8 eb 8b 03 bd |.X.bt..dA.......| c1 4e ae 1f 91 32 b8 e1 24 3b 7b ed 14 68 09 86 |.N...2..$;{..h..| 96 28 c9 3b c9 6c 28 c2 25 69 f5 4a 61 ad e0 27 |.(.;.l(.%i.Ja..'| f8 53 a7 75 15 b0 51 31 b0 f1 41 ff 3e 5a 26 1e |.S.u..Q1..A.>Z&.| 60 7e e2 e3 6a 39 9a c4 ea ee 3f e6 b2 13 3f 55 |`~..j9....?...?U| 03 04 4d 0b 90 72 d4 eb fb bc 87 90 51 b2 38 19 |..M..r......Q.8.|
- 2
- Certificate #3
- 2
- 10:70:9D:4F:F5:54:08:D7:30:60:01:D8:EA:91:75:BB
- RSA-SHA1: nil
- Issuer
- C: US
- ST: UT
- L: Salt Lake City
- O: The USERTRUST Network
- OU: http://www.usertrust.com
- CN: UTN-USERFirst-Object
- 2011-08-24 00:00:00 UTC: 2020-05-30 10:48:38 UTC
- Subject
- C: GB
- ST: Greater Manchester
- L: Salford
- O: COMODO CA Limited
- CN: COMODO Code Signing CA 2
- #5
- rsaEncryption: nil
- CB:F8:E7:A7:E8:F1:97:28:40:68:80:37:D2:C8:3F:8E:
92:8A:92:37:87:47:80:EA:4C:99:CF:6E:F9:15:47:BD:
EE:75:F4:44:AC:D0:C3:D4:4D:F7:19:C0:D3:3C:4D:C1:
47:B9:59:65:16:93:8C:D9:0A:84:9B:9F:E8:F6:6A:63:
58:FE:5F:DC:D1:7F:4B:51:9F:00:1C:00:87:54:20:07:
57:A0:82:C9:2F:98:AF:33:8A:BB:7B:80:22:25:6A:6C:
AF:C2:2C:6C:79:13:BD:A3:2A:48:D6:B5:8E:61:55:E9:
6B:E8:3D:80:BF:14:03:85:18:8E:7E:4C:E9:C2:19:88:
73:92:72:CD:FA:FF:50:4D:CB:2C:A6:7B:1A:73:B1:00:
90:2C:D9:32:E2:FB:FD:AC:95:42:36:EC:34:C5:13:53:
68:B2:C1:9F:40:9F:DA:7B:C8:9D:62:6C:93:A2:42:D7:
79:9F:97:4F:31:5B:50:21:A1:AB:AF:D9:1C:B2:CE:75:
BE:5B:2C:56:00:24:8D:11:C1:75:1F:F0:FE:D2:95:FE:
F0:E1:31:23:18:67:C0:5B:13:FD:5A:98:94:94:FF:FF:
59:02:1F:00:AC:E6:F1:F2:FA:3A:73:B3:1D:42:FC:54:
75:CF:51:31:2F:E3:DB:81:D9:77:23:2A:4F:59:CE:23: 0x010001
- #6
- authorityKeyIdentifier:
da ed 64 74 14 9c 14 3c ab dd 99 a9 bd 5b 28 4d |..dt...<.....[(M| 8b 3c c9 d8 |.<.. |
- subjectKeyIdentifier:
1e c5 b1 2c 7d 87 da 02 68 7c 25 bc 0c 07 84 3f |...,}...h|%....?| b6 cf de f1 |.... |
- keyUsage: true, 6
- basicConstraints
- true
- true: 0
- extendedKeyUsage: codeSigning
- certificatePolicies: anyPolicy
- crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
- authorityInfoAccess
- #0
- caIssuers: http://crt.usertrust.com/UTNAddTrustObject_CA.crt
- OCSP: http://ocsp.usertrust.com
- #0
- authorityKeyIdentifier:
- RSA-SHA1:
95 89 77 93 68 01 5e 7c d9 2d 37 07 90 5d 5a 42 |..w.h.^|.-7..]ZB| 5e 0c 64 b4 36 b5 0f f6 ab d5 39 27 de 22 46 a4 |^.d.6.....9'."F.| 49 1c 66 4b 46 19 59 2e 79 49 03 f6 9c 92 df 6d |I.fKF.Y.yI.....m| 50 35 5c 0c 91 2e 60 03 59 d0 f1 64 f7 69 09 f6 |P5\...`.Y..d.i..| 7e fe eb 34 b3 6d b1 bf 66 9c a3 ba 31 78 b9 87 |~..4.m..f...1x..| 35 61 3d 92 31 1b ef f4 e8 9e d6 ac 45 fa 0c 36 |5a=.1.......E..6| 3c 80 67 bb bd ef 2e c2 90 e1 3d 71 2f 3b c1 b0 |<.g.......=q/;..| 58 7e 45 c3 52 71 03 07 f6 f3 39 4d 8b 36 21 1b |X~E.Rq....9M.6!.| 01 df d9 da 5e 2b eb 0e 97 80 1e 44 1c 50 88 f5 |....^+.....D.P..| c6 12 33 4a a8 4d a5 8d 2f 94 0c 7b c6 bf 9a 2c |..3J.M../..{...,| c3 32 cd bd 8c 27 26 f0 e1 30 03 50 06 82 bc f4 |.2...'&..0.P....| 3b b3 83 75 06 c6 ef ba ee d3 80 f8 52 c6 ac cb |;..u........R...| 79 f2 38 9e 7b b0 92 58 42 91 05 c8 96 21 ad b9 |y.8.{..XB....!..| 4b 16 81 14 69 f1 37 b0 fe 34 f7 dc b0 df 97 f5 |K...i.7..4......| 43 10 9b 76 8f b4 65 f5 e8 9f 13 b7 1e ac 6f c4 |C..v..e.......o.| 69 8a 5f ba 3c 61 7e 5e 49 86 23 13 2e af 15 48 |i._.
- 2
- Certificate #4
- 2
- 2B:73:DB:74:63:11:4C:5A:5B:32:4A:F2:30:57:72:49
- RSA-SHA1: nil
- Issuer
- C: GB
- ST: Greater Manchester
- L: Salford
- O: COMODO CA Limited
- CN: COMODO Time Stamping CA
- 2019-05-02 00:00:00 UTC: 2020-05-30 10:48:38 UTC
- Subject
- C: GB
- ST: Greater Manchester
- L: Salford
- O: Sectigo Limited
- CN: Sectigo SHA-1 Time Stamping Signer
- #5
- rsaEncryption: nil
- BF:52:36:82:3A:DC:74:37:0D:78:D5:7F:16:50:19:66:
ED:BA:1A:99:D1:63:38:9A:0C:66:B2:40:DB:A7:80:50:
BF:69:2E:36:2F:0A:67:3F:40:A1:4A:8A:63:35:9B:D0:
19:CC:74:AA:17:19:91:2B:B5:55:20:19:FB:C0:1A:3A:
6D:CA:39:9B:82:F2:BA:95:A1:1A:D8:34:C7:B8:89:7B:
70:88:70:51:66:69:EC:77:FE:C6:94:72:7A:CF:25:81:
ED:34:82:9A:DF:08:15:37:31:B4:6D:AE:1C:BF:18:D5:
0D:CF:FE:B5:E1:C4:FB:B1:47:71:E9:FA:EE:63:91:EC:
F1:EC:CE:59:04:11:7C:AE:0B:60:53:EA:2A:F3:BE:2F:
02:0F:D0:4C:5D:31:13:2F:1E:69:0F:85:9B:45:96:C2:
8D:12:8B:67:AE:1F:AF:69:AB:06:96:81:00:DF:91:7C:
95:1C:E6:9E:19:64:DF:76:C8:60:44:2F:49:E3:8F:7F:
60:6A:45:39:13:44:21:A5:BA:FB:91:FA:41:40:ED:4D:
02:B4:4B:7F:DF:E2:E0:3D:B8:AA:F3:1A:D8:41:83:8F:
7F:33:ED:41:06:E2:7D:9E:3F:53:84:8D:28:DA:DD:76:
C6:BD:F7:8E:1E:38:CD:C0:CB:60:24:03:DE:7A:4C:AB: 0x010001
- #6
- authorityKeyIdentifier:
64 22 86 b6 4a 89 c9 04 0f d0 04 58 92 2b b3 6e |d"..J......X.+.n| 3d 1e 27 6c |=.'l |
- subjectKeyIdentifier:
ae ee d9 60 ba 5e f5 2c 01 12 fd 8e 8d b2 55 72 |...`.^.,......Ur| 35 46 6f f1 |5Fo. |
- keyUsage: true, 0xc0
- basicConstraints
- true
- nil
- extendedKeyUsage: true, timeStamping
- certificatePolicies
- 1.3.6.1.4.1.6449.1.2.1.3.8
- id-qt-cps: https://sectigo.com/CPS
- 1.3.6.1.4.1.6449.1.2.1.3.8
- crlDistributionPoints: http://crl.sectigo.com/COMODOTimeStampingCA_2.crl
- authorityInfoAccess
- #0
- caIssuers: http://crt.sectigo.com/COMODOTimeStampingCA_2.crt
- OCSP: http://ocsp.sectigo.com
- #0
- authorityKeyIdentifier:
- RSA-SHA1:
7a 7f a9 4a d2 b0 a4 1c 1d 0d 9d 2d 5c c6 ae 5a |z..J.......-\..Z| dd 8f 45 1d f0 9e 5c 90 f6 5e ac 70 fe d3 d9 cd |..E...\..^.p....| e4 19 a4 0a 43 75 60 6a 83 a4 c3 99 84 20 31 ba |....Cu`j..... 1.| d6 fe 4c cf 13 f8 10 f7 54 09 7e ea dc d2 2e 79 |..L.....T.~....y| d7 07 4c 54 b7 b5 c9 9d b2 f0 f2 1e 24 14 d0 9c |..LT........$...| c7 c8 67 aa 0b 62 b7 b4 f1 06 e4 e7 e4 21 4b 19 |..g..b.......!K.| 32 99 34 b9 19 61 77 0a 33 90 67 6c c0 88 4a 92 |2.4..aw.3.gl..J.| f5 a1 43 01 f3 ae a2 6f c9 95 bd 96 38 f7 83 f7 |..C....o....8...| ad 7c 28 1f f3 38 df 8e 21 c8 71 68 53 2d cb ae |.|(..8..!.qhS-..| aa e2 30 17 83 22 29 18 b5 e1 8c 89 eb 6e f8 7e |..0..")......n.~| 38 bb 90 4f b9 5f 07 34 12 6b 97 d5 e6 3b 91 be |8..O._.4.k...;..| 00 17 21 6e e2 6d fc 52 79 ef 81 25 ba cf 13 d0 |..!n.m.Ry..%....| fb dd 2b cd 81 b6 57 89 4e f0 dd f3 0b 4a 34 ca |..+...W.N....J4.| 85 ff 08 b9 96 5f eb 11 13 e0 e1 c5 03 ad 57 1c |....._........W.| e1 5d 92 06 be 1b c8 3c 3f a5 20 9f 69 d0 69 c1 |.]...... .i.i.| c5 c2 c9 3e e7 c5 72 f7 ea 1b 96 e2 94 af 86 2e |...>..r.........|
- 2
- Certificate #5
- 2
- 1A:F0:66:0E:83:7A:35:A2:CD:92:EC:61:3F:C1:5D:B8
- RSA-SHA1: nil
- Issuer
- C: GB
- ST: Greater Manchester
- L: Salford
- O: COMODO CA Limited
- CN: COMODO Code Signing CA 2
- 2014-09-12 00:00:00 UTC: 2019-09-12 23:59:59 UTC
- Subject
- C: IL
- postalCode: 52583
- ST: Gush Dan
- L: Ramat Gan
- street: 5 Hashoshanim st.
- O: Nir Sofer
- CN: Nir Sofer
- #5
- rsaEncryption: nil
- A1:C6:1B:2B:FD:F7:76:8D:73:A2:B1:BA:A7:80:D7:67:
F6:EA:F5:26:31:15:35:B8:C4:22:89:8E:19:19:2D:57:
A0:D3:3E:58:C0:02:F3:28:4A:34:C9:BD:EE:42:A0:5D:
33:28:23:0E:E6:84:42:4F:A6:16:D8:FB:1A:0A:52:5F:
A1:D4:83:4A:55:A9:52:84:34:CC:89:F0:E4:D4:ED:9E:
0F:56:8D:94:E5:9F:4C:80:38:AA:21:F4:FC:09:EC:7C:
FB:E7:95:69:CE:ED:80:F5:EC:34:7D:57:72:A4:60:B9:
14:AC:74:B3:F7:B9:E5:B2:EE:2F:CC:C5:2D:AB:5E:F9:
66:E4:0A:FD:39:69:C9:66:84:D4:18:03:C5:00:B5:4E:
AF:23:62:B4:B1:11:DF:AF:7A:3C:25:28:29:53:98:1B:
F5:63:C4:39:21:3F:12:81:18:BF:3D:F2:8F:C2:48:A2:
C4:F1:0A:49:B9:1A:4A:65:5B:65:B9:74:E2:DF:04:C3:
19:DA:C6:B8:D7:EE:10:05:69:5D:3F:20:B2:35:A7:F8:
EA:CE:EE:A4:A7:98:43:AE:CC:9D:26:B9:C5:32:DA:63:
50:99:FA:DE:0D:3F:06:FB:1F:29:9B:2D:53:D5:49:63:
7A:B6:00:C8:AB:C6:B2:3C:C5:1C:8F:0B:C3:39:3A:91: 0x010001
- #6
- authorityKeyIdentifier:
1e c5 b1 2c 7d 87 da 02 68 7c 25 bc 0c 07 84 3f |...,}...h|%....?| b6 cf de f1 |.... |
- subjectKeyIdentifier:
29 ea 59 80 5a 26 16 ef c6 30 7a 53 e1 f7 2a ad |).Y.Z&...0zS..*.| bf ed 67 50 |..gP |
- keyUsage: true, 0x80
- basicConstraints
- true
- nil
- extendedKeyUsage: codeSigning
- nsCertType: 0x10
- certificatePolicies
- 1.3.6.1.4.1.6449.1.2.1.3.2
- id-qt-cps: https://secure.comodo.net/CPS
- 1.3.6.1.4.1.6449.1.2.1.3.2
- crlDistributionPoints: http://crl.comodoca.com/COMODOCodeSigningCA2.crl
- authorityInfoAccess
- #0
- caIssuers: http://crt.comodoca.com/COMODOCodeSigningCA2.crt
- OCSP: http://ocsp.comodoca.com
- #0
- subjectAltName: support@nirsoft.net
- authorityKeyIdentifier:
- RSA-SHA1:
89 96 bf 1d 98 7b 0f 64 84 06 37 df 42 cf 85 6a |.....{.d..7.B..j| 44 ce 64 bc d9 f4 73 04 be 35 82 0c f9 51 68 e3 |D.d...s..5...Qh.| cb d8 d8 10 87 46 4f 6e 30 d2 81 1d c3 11 01 68 |.....FOn0......h| 7f d4 6b 50 6d 26 6f aa c8 55 4f 44 c9 b9 89 72 |..kPm&o..UOD...r| 1b c4 60 52 c9 93 6f 7e 86 08 36 d0 bd 8e fe 36 |..`R..o~..6....6| 0a ca a4 19 44 07 6d af f4 90 ca 6e d7 98 f6 aa |....D.m....n....| 6d 1c 4e 96 1a fc c1 83 39 b8 92 72 27 22 c6 de |m.N.....9..r'"..| 6e af 7f 00 39 10 55 3e 6d 9e 0c e3 e4 5d ae d3 |n...9.U>m....]..| f1 3a 6f b6 f1 41 bc 7c ce af 71 4b b7 27 4c b4 |.:o..A.|..qK.'L.| 33 29 76 35 38 bc 95 d4 7a 3e 0c b4 63 5d 1d ad |3)v58...z>..c]..| 9b cb 76 ad ee ca 7e c2 ec 3c 3c 94 8d 72 85 22 |..v...~..<<..r."| ac 6d 74 8f a6 4e b2 e7 96 90 8d 39 5c 86 8e 2f |.mt..N.....9\../| b6 24 4d 3f 6e a1 4e 15 c6 9c de 7c 21 1a 39 61 |.$M?n.N....|!.9a| 85 38 60 3c 5e 6a b7 a9 b4 4a 45 69 97 06 51 5e |.8`<^j...JEi..Q^| 82 30 9c 65 7e 2a d7 52 a3 8a 8a bb 3e 44 86 7c |.0.e~*.R....>D.|| 0a 01 71 d7 ae 80 01 ea 47 86 9d b7 cd 5f fa 7b |..q.....G...._.{|
- 2
- Certificate #0
- Signer
- 1
- unnamed
- #0
- C: GB
- ST: Greater Manchester
- L: Salford
- O: COMODO CA Limited
- CN: COMODO Code Signing CA 2
- 1A:F0:66:0E:83:7A:35:A2:CD:92:EC:61:3F:C1:5D:B8
- #0
- SHA1: nil
- #3
- 1.3.6.1.4.1.311.2.1.12
- nil
- contentType: 1.3.6.1.4.1.311.2.1.4
- 1.3.6.1.4.1.311.2.1.11: msCodeInd
- messageDigest:
c1 71 db 58 71 e8 17 bc 97 3c 19 9f 4c 38 41 7b |.q.Xq....<..L8A{| 26 e3 2a c5 |&.*. |
- 1.3.6.1.4.1.311.2.1.12
- rsaEncryption:
45 92 b0 b4 8f 21 32 70 b0 a0 d6 db d6 b7 55 27 |E....!2p......U'| fa 08 5b d8 02 98 41 6c 7e 3f 46 28 d6 71 e0 32 |..[...Al~?F(.q.2| 0c 15 97 b6 0f f5 0e ac f5 75 08 7b 46 00 7d 88 |.........u.{F.}.| 8b 2e eb 8f 50 c5 b4 fb 4e 76 a3 d0 24 00 62 24 |....P...Nv..$.b$| db 61 64 5e 12 24 95 1d 12 a4 c5 10 fa 8a f5 a0 |.ad^.$..........| 15 b3 53 37 17 2d 6f 11 8a 1c 8f 68 28 34 de 24 |..S7.-o....h(4.$| 22 7b f9 4e c0 dc 05 4b 86 08 b7 ea 3a 4c d3 53 |"{.N...K....:L.S| 1c 2a 83 bb 36 6c f9 cd 69 14 4d ba ae 66 c1 48 |.*..6l..i.M..f.H| b3 e8 e8 a2 1f 32 6b 81 48 dc d3 e4 4e 84 05 d0 |.....2k.H...N...| 0c 4b a2 93 1c 1b 34 5b b9 4f 8f b9 15 9e fb eb |.K....4[.O......| 51 8f 4d 7e 25 13 65 56 ef 81 07 6d 98 8d 6c c7 |Q.M~%.eV...m..l.| 3e 74 e8 00 41 26 45 15 5c 6c 63 a6 ed d3 9c 98 |>t..A&E.\lc.....| 19 6f ce d5 7e 12 d4 25 12 7a 40 d3 97 61 bf 93 |.o..~..%.z@..a..| 55 01 09 26 1e 37 60 d1 16 63 29 f3 43 80 1b b4 |U..&.7`..c).C...| b7 bd e2 eb 1c 07 20 61 74 fb f2 23 60 f7 b2 6e |...... at..#`..n| f5 c3 99 b3 68 69 f6 77 d0 91 39 f5 cc f4 21 af |....hi.w..9...!.|
- countersignature
- 1
- unnamed
- #0
- C: GB
- ST: Greater Manchester
- L: Salford
- O: COMODO CA Limited
- CN: COMODO Time Stamping CA
- 2B:73:DB:74:63:11:4C:5A:5B:32:4A:F2:30:57:72:49
- #0
- SHA1: nil
- #2
- contentType: pkcs7-data
- signingTime: 2019-08-29 11:10:34 UTC
- messageDigest:
a7 88 fb 6f 4f cb 93 bd 1d d1 61 c7 be 1d ef fe |...oO.....a.....| b2 e8 49 fa |..I. |
- rsaEncryption:
86 47 79 03 9d 36 6f c6 16 98 d5 43 38 57 c5 82 |.Gy..6o....C8W..| 8d 54 c2 60 37 8f 7f 31 c1 87 76 81 fb 75 f3 bd |.T.`7..1..v..u..| b8 a8 b6 6b 7f c8 d7 9f 2e 2f e6 51 5c 5c 54 c1 |...k...../.Q\\T.| 08 03 68 4f 3e 41 01 fd 7a 68 47 79 2c ad 60 e4 |..hO>A..zhGy,.`.| 4d 98 85 29 cf ce c2 b1 0b 5a 2b cf ec 85 a8 fa |M..).....Z+.....| cf 63 ac cf 9b b9 5d dc 4b a4 a3 5f 51 62 e5 01 |.c....].K.._Qb..| 5e 5d 47 7a c1 52 49 49 bc 22 20 3a 13 54 e0 ed |^]Gz.RII." :.T..| 97 1a 5d 93 fe ab a1 c2 59 fe e8 af 7d 4d 1d a2 |..].....Y...}M..| 5f 21 e5 4d e3 11 05 2c 0b a9 5c ec 09 6a 03 d5 |_!.M...,..\..j..| 2d 83 23 49 a6 56 a1 d3 ec 95 f1 c9 c5 e3 2a 9c |-.#I.V........*.| 46 61 70 07 ef 74 04 f0 fc 2e 56 8a c7 9c 95 a0 |Fap..t....V.....| cb 10 69 58 d2 93 a3 99 6d b5 1b fa bf f6 a3 b8 |..iX....m.......| 8f 5b 74 13 5e b4 ec d9 4e cd 1c 91 e0 d7 a8 dd |.[t.^...N.......| a8 89 47 be ae a9 9d 22 a1 7f ce 4e 51 04 16 92 |..G...."...NQ...| 91 3c bb c3 ca 3c 1d 7b d6 97 31 df 6e bc 1f 3b |.<...<.{..1.n..;| 28 13 ba e7 a2 e4 43 1e 99 5b 7e 41 a3 ab 36 65 |(.....C..[~A..6e|
- unnamed
- 1
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
[?] ignoring invalid PEdump::BITMAPINFOHEADER
[!] string size(3352) > stringtable size(620). truncated to 618
[!] cannot convert "\x94\xEEE\xC3=\x01+>\x92\b\t\x00tt\xD4`"... to UTF-16
[!] string size(52896) > stringtable size(1110). truncated to 1108
[!] cannot convert "\xEF\x99\xA0\xE6\x89\xA51\x12A*8@\x98>S\xC0"... to UTF-16
[!] string size(33384) > stringtable size(280). truncated to 278
[!] cannot convert "\x114\x8E\x8D\xF8YT\xBC\xA8gsV0\x8B\x8AI"... to UTF-16
[!] string size(77594) > stringtable size(160). truncated to 158
[!] cannot convert "\xC5\xA9\xD9Gl\xFB\xC0\x1E\xFC\x8F\xEAp0\x87\x82\x8C"... to UTF-16
[!] string size(4546) > stringtable size(72). truncated to 70
[!] string size(115542) > stringtable size(76). truncated to 74
[!] cannot convert "\xE5dB5\x18\xC3^Q\xD8\f\xCC\xF1\xA4jl\xDC"... to UTF-16
[!] string size(48410) > stringtable size(136). truncated to 134
[!] cannot convert "Dr,O5\x18\x06\f\xC6gYrf3l4"... to UTF-16
[!] string size(18128) > stringtable size(108). truncated to 106
[!] cannot convert "\xA5\x00\xCEu\x1D\x1AO(\xC8\xA0\xDEG\xEFg\"z"... to UTF-16
[!] string size(100486) > stringtable size(300). truncated to 298
[!] cannot convert "\xC1\xCB\x0E\xE1]$\xCC\x16\x83e\x1A\xB0\v\xAA\xB7x"... to UTF-16
[!] string size(11000) > stringtable size(38). truncated to 36
[!] string size(2430) > stringtable size(848). truncated to 846
[!] cannot convert "\x84\x8B\xF1_\x8A\x03<<\x8AW\x9B\x9E\xEFf\x15U"... to UTF-16
[!] string size(65654) > stringtable size(288). truncated to 286
[!] cannot convert "\x02\x89l\x03\x8D+\xE0D\xCD\x91\xA1\a/sr\x0E"... to UTF-16
[!] string size(83780) > stringtable size(64). truncated to 62
[!] cannot convert "\xA2\xB9\xAC\xFFw\xFF\xFF\xA2\xAE\xBB\xB8\xBA\xB3\xA5\xCA\xEE"... to UTF-16
[!] string size(10332) > stringtable size(106). truncated to 104
[!] cannot convert "w\t\x83\x03?\x15#\x18\xDD\xBF\xFF\xBBsvic"... to UTF-16
[!] refusing to read CURDIRENTRY beyond resource size