ipnetinfo.exe - IPNetInfo

info
MZ
PE
resources
strings
imports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	ipnetinfo.exe
size	55144 (0xd768)
md5	7390fe5b33f7b544d074934f54affe4a

type	PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf0

Rich Header

lib id	version	times used
93	4035	16
64	9210	3
28	9178	11
1	0	273
25	9210	3
114	50727	27
124	50727	1
120	50727	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x5e46c4d7
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x103
Magic	0x10b
LinkerVersion	8.0
SizeOfCode	0xa000
SizeOfInitializedData	0x2000
SizeOfUninitializedData	0xf000
AddressOfEntryPoint	0x19b70
BaseOfCode	0x10000
BaseOfData	0x1a000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x1c000
SizeOfHeaders	0x1000
CheckSum	0x1a9bc
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

UPX Modified >> *$igBy Ahmed18

This file is packed with UPX. Analysis will be incomplete without unpacking.
We can unpack it for you.

»» Analyze unpacked file

Sections

name	va	vsize	raw size	flags
UPX0	0x1000	0xf000	0	RWX UDATA
UPX1	0x10000	0xa000	0x9e00	RWX IDATA
.rsrc	0x1a000	0x2000	0x1400	RW- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x1b07c	0x204
RESOURCE	0x1a000	0x107c
EXCEPTION	0	0
SECURITY	0xb600	0x2168
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
BIN	#111	3564	1252
BIN	#112	669	1252
BIN	#118	256	1252
CURSOR	#1	308	1252
CURSOR	#2	308	1252
BITMAP	#104	1128	1252
BITMAP	#113	488	1252
BITMAP	#133	216	1252
BITMAP	#134	216	1252
ICON	#3	744	1252
ICON	#4	296	1252
MENU	#102	1454	1252
MENU	#104	722	1252
DIALOG	#105	186	1252
DIALOG	#107	662	1252
DIALOG	#109	2044	1252
DIALOG	#112	250	1252
DIALOG	#114	642	1252
DIALOG	#1096	822	1252
STRING	#1	376	1252
STRING	#32	282	1252
STRING	#33	126	1252
STRING	#34	66	1252
STRING	#35	58	1252
STRING	#36	304	1252
STRING	#47	80	1252
STRING	#48	64	1252
STRING	#63	142	1252
STRING	#64	274	1252
ACCELERATORS	#103	104	1252
GROUP_CURSOR	#103	20	1252
GROUP_CURSOR	#30981	20	1252
GROUP_ICON	#101	34	1252
VERSION	#1	696	1252
MANIFEST	#1	362	1252
#241	#113	14	1252

id	lang	string
0	1033	28 29 21 b6 65 cb 6e 32 09 2f 13 12 47 6d d6 fe \|()!.e.n2./..Gm..\| 7f d7 c2 4a 74 74 70 2d 65 71 75 69 76 3d 27 63 \|...Jttp-equiv='c\| 6f 6e ab 02 bd b5 60 ff 2d 74 79 70 65 27 20 0d \|on....`.-type' .\| 16 05 78 74 2f db 5a 6b bf 27 6d 6c 3b 63 68 bc \|..xt/.Zk.'ml;ch.\| 8c 12 6e 27 6c b6 f6 85 6d 3c 3d 62 08 20 64 69 \|..n'l...m<=b. di\| 72 8a bc 6c db bd dd d6 84 10 72 03 64 3e a4 00 \|r..l......r.d>..\| 3c 62 0e f6 2f 59 b7 68 34 9b 20 b2 6d 3a 2f 2f \|..A../.\| 5c 83 cd 72 b9 6d 5c 6a 5e 03 a6 28 d1 72 d7 de \|\..r.m\j^..(.r..\| db ae 69 96 75 42 58 db 0f 68 73 1f fa b9 3d db \|..i.uBX..hs...=.\| 35 00 2b cf 68 33 ed 78 0f 86 22 d9 36 db 66 93 \|5.+.h3.x..".6.f.\| 75 21 1f 50 1c 27 07 c6 b7 67 dd ae ce 03 e1 24 \|u!.P.'...g.....$\| 13 22 37 29 3d 13 6e 62 6d b3 5c 2e 64 67 b2 71 \|."7)=.nbm.\.dg.q\| d4 8c 1d 03 ae 33 97 cb 40 a5 25 1f bc 1e 8b 9c \|.....3..@.%.....\| 07 69 9a e5 d9 26 b6 03 65 29 92 98 c9 b4 70 61 \|.i...&..e)....pa\| b6 2b b6 4b 53 6d 63 2a 33 36 1a af b1 bd 64 78 \|.+.KSmc*36....dx\| c3 af ee 43 74 a1 5c d8 13 6d 6a 43 6f ec 6c 73 \|...Ct.\..mjCo.ls\| f4 61 db af 52 17 45 72 0b 72 07 3a 20 43 0c 17 \|.a..R.Er.r.: C..\| 4c bf e3 6e 6f 74 20 6c 2d 29 68 65 9a d1 68 ef \|L..not l-)he..h.\| f0 32 a1 33 07 cd 5e 72 69 a3 2e 31 2e a3 a8 33 \|.2.3..^ri..1...3\| 7c 3a 72 e9 9e dc 0b 3f 37 c5 39 d3 38 2d 16 b7 \|\|:r....?7.9.8-..\| 67 9b e5 4f bd d1 2f 3d \|g..O../= \|
496	1033	1b 6e 3c e7 b1 3c 9f dd f0 26 1b 90 6d 73 67 a1 \|.n<..<...&..msg.\| 55 6e 6b 0f 3b ac 6d 78 77 69 8f 5c 93 20 25 be \|Unk.;.mxwi.\. %.\| f2 2b b4 64 96 a4 c3 65 64 07 6b e8 06 ac 35 a5 \|.+.d...ed.k...5.\| 3a db 20 03 6f 5e 2c 17 db 48 6e 0b 0c b3 07 6e \|:. .o^,..Hn....n\| 5f d8 36 0f 28 03 29 0b 61 70 74 69 c1 00 6d 78 \|_.6.(.).apti..mx\| db b6 dd 22 75 5f 4e 00 46 61 e0 67 09 6d db 68 \|..."u_N.Fa.g.m.h\| 85 0f d7 05 67 5e 67 1b 04 a3 63 6b 55 16 00 5f \|....g^g...ckU.._\| 00 7c 57 db 5c 1b 0f 72 f1 f1 74 84 49 db 76 0f \|.\|W.\..r..t.I.v.\| d8 00 0f 55 52 4c 3b 5f 6c 39 2e 3d bc 77 bb 6f \|...URL;_l9.=.w.o\| 69 77 09 03 22 22 73 2d 31 38 73 b0 e1 b6 ad 75 \|iw..""s-18s....u\| 9b 25 0c 63 2e 02 73 8b dc 46 2b dc ae 20 62 67 \|.%.c..s..F+.. bg\| 47 78 c4 23 98 23 7b 8d e6 ec 4d 6f d8 1b bd f1 \|Gx.#.#{...Mo....\| 3d 62 14 e2 57 26 10 73 70 3b 46 63 99 9b 0f 27 \|=b..W&.sp;Fc...'\| 39 f4 ba 52 2c 64 2d 05 3d 3f 18 a4 67 9a 6c 16 \|9..R,d-.=?..g.l.\| 22 b9 67 47 58 ea 5a ed 62 11 0e 14 31 0c 63 74 \|".gGX.Z.b...1.ct\| 33 2c 5c 46 6c 70 ea 64 02 0f 35 22 35 6c c1 82 \|3,\Flp.d..5"5l..\| 50 62 2f 66 f6 20 48 ee c5 96 42 70 13 99 27 06 \|Pb/f. H...Bp..'.\| bb 10 69 33 96 65 6d 3b 3c 65 \|..i3.em;
512	1033	f7 7f 26 06 10 27 1c ce d0 b5 f4 3c 3f 78 da 20 \|..&..'.....
528	1033	3e 74 57 8c b8 8d c6 d3 eb 2e d4 93 6d b2 78 2b \|>tW.........m.x+\| 34 da 07 33 52 17 49 7e 57 66 05 de b9 63 73 76 \|4..3R.I~Wf...csv\| 22 34 28 93 1e c7 c6 0f 78 08 63 70 c7 00 d0 38 \|"4(.....x.cp...8\| 58 5f d3 73 d4 67 6f c1 b4 ad 40 b7 7e 2e 52 2f \|X_.s.go...@.~.R/\| 9d 15 \|.. \|
544	1033	棝랳㼯椋ㄽ攦묖஽祤㐽昡靧ഇ惚䜌埧ঃ؋痏匟ឝᝇ漂Иὅ褹삯矛
560	1033	5c 4e 45 0b 5c a8 da 10 02 01 63 75 f9 33 d7 2d \|\NE.\.....cu.3.-\| b4 5d f6 70 0b 69 27 d2 ed 4d 0c 61 2b 73 4a 5f \|.].p.i'..M.a+sJ_\| 6d 79 5f 2d 19 a0 9f c1 5f 61 8c 2e 70 68 70 90 \|my_-...._a..php.\| 46 a3 44 eb c1 87 7c 3e 22 93 6d 85 c2 78 28 60 \|F.D...\|>".m..x(`\| 01 00 17 72 b7 b0 32 07 ea 1c 4f 63 40 17 eb d6 \|...r..2...Oc@...\| 5a 20 0c 61 0f 20 66 47 00 58 0b 01 f2 0d 0a 2a \|Z .a. fG.X.....*\| 49 4f 34 08 6f 14 51 5a 5f 6a 7d 71 20 03 77 0b \|IO4.o.QZ_j}q .w.\| 2e 9b ad 30 ec d0 d6 27 0f dd da 86 39 66 b1 63 \|...0...'....9f.c\| 10 0f 42 10 0a cb da c9 33 61 66 35 14 61 b9 d8 \|..B.....3af5.a..\| 68 86 18 26 8a 66 4b c0 86 5a e1 0f 1d 07 25 65 \|h..&.fK..Z....%e\| 67 5c 68 34 b7 45 79 0f 2b 35 2c 32 30 f1 9e 61 \|g\h4.Ey.+5,20..a\| 08 4b b7 03 2d 06 c6 a2 e3 cb ae 73 47 fe eb 2c \|.K..-......sG..,\| 4f 36 db bc c2 03 eb ef a7 78 c3 53 98 ed 4e da \|O6.......x.S..N.\| 55 aa 23 2e 0b 4f b4 1b 7e 4b 2e 3f 0b 73 16 bd \|U.#..O..~K.?.s..\| 16 17 87 10 2c 97 db cb 1f c5 98 07 50 90 bb 93 \|....,.......P...\| 0b 83 c1 72 db f1 80 03 45 82 7b 0c 7d 45 c0 30 \|...r....E.{.}E.0\| 08 bf 45 e2 c1 8c 85 02 2f 06 38 2e 38 d9 fc 20 \|..E...../.8.8.. \| 2c d7 76 0b 16 10 ef 20 6d aa 75 db 40 33 b5 2f \|,.v.... m.u.@3./\| fa 52 db 9d e2 26 7b f6 cd 86 0c 45 41 58 3d 24 \|.R...&{....EAX=$\|
736	1033	45 42 09 43 b2 5d 90 49 44 28 53 49 14 24 0f 3b \|EB.C.].ID(SI.$.;\| 59 09 42 50 28 53 50 6c 6f 28 d9 49 0a 62 63 6b \|Y.BP(SPlo(.I.bck\| 20 44 8f 61 05 cc d0 09 f1 43 67 0e d3 a6 56 f8 \| D.a.....Cg...V.\| bb 4d 79 da 23 55 43 6c c2 c1 30 d9 89 cb 03 0d \|.My.#UCl..0.....\| 37 57 30 b9 6c c2 4f 07 f2 c9 51 6b 93 57 43 ea \|7W0.l.O...Qk.WC.\|
752	1033	53 c9 a2 e9 56 81 42 aa ae 72 53 6e f1 6d b1 d8 \|S...V.B..rSn.m..\| 82 eb 74 5f f7 13 46 c8 d0 80 35 54 74 0f 4e 4a \|..t_..F...5Tt.NJ\| 64 c9 4e 41 d7 14 20 0f 26 b8 5a b0 20 48 31 fc \|d.NA.. .&.Z. H1.\| 0f 4a cf ba 1b 74 3e 42 61 fc f2 b3 60 ad 86 41 \|.J...t>Ba...`..A\|
992	1033	7b 6e 16 33 1b 42 ec d4 b2 73 27 70 27 a0 96 bd \|{n.3.B...s'p'...\| 84 b9 29 2b 26 27 89 48 b4 3e d3 72 a6 84 db bb \|..)+&'.H.>.r....\| e6 c0 c0 2b 14 29 c2 53 54 2c bc 05 f7 41 54 49 \|...+.).ST,...ATI\| 43 3b 74 54 1b 37 3a 36 4d 37 59 db 7d 03 a7 d1 \|C;tT.7:6M7Y.}...\| 0d b7 8b 8e ee 2c db 60 03 52 b3 45 0b 58 18 b6 \|.....,.`.R.E.X..\| 86 b5 76 73 12 0a 68 62 a9 7b 53 48 71 53 31 63 \|..vs..hb.{SHqS1c\| df 46 8d 75 b9 50 2c 8b 72 50 68 41 7b 5c a5 03 \|.F.u.P,.rPhA{\..\| 5f 8c 28 5c 26 5c 87 11 51 5b 36 8b 64 27 04 73 \|_.(\&\..Q[6.d'.s\| 0d 4c 36 b7 e4 3b 82 07 67 46 6f 27 da b7 \|.L6..;..gFo'.. \|
1008	1033	26 49 67 10 26 ea 8a fa c7 20 46 6f eb 21 44 4f \|&Ig.&.... Fo.!DO\| 43 54 59 50 f5 f6 df 80 03 54 4d 4c 20 50 55 42 \|CTYP.....TML PUB\| 4c ca 20 22 2d b0 9d bd bd e6 57 33 43 04 44 54 \|L. "-.....W3C.DT\| 44 18 33 5c 20 0d 89 5b 33 f3 94 13 45 4e 64 b8 \|D.3\ ..[3...ENd.\| 72 74 e0 3f 19 b9 d5 4e 98 68 4f 33 74 d1 50 3c \|rt.?...N.hO3t.P<\| 42 73 af cd 09 07 19 2e 6f 45 b9 d8 8f dc 79 07 \|Bs......oE....y.\| df 68 33 21 06 7b ef b5 61 8b 0c 1e 2d 4d 57 ae \|.h3!.{..a...-MW.\| 9e 38 11 a3 c7 73 20 38 24 4c 13 fc 64 c6 23 ec \|.8...s 8$L..d.#.\| a3 d8 b3 0a 00 3e c7 ef 62 33 b1 92 98 c4 d8 f3 \|.....>..b3......\| 12 2e 12 60 37 9d ab c5 0a 4b 0d 20 54 64 73 3a \|...`7....K. Tds:\| 8b f7 62 d1 37 68 0d 01 1b 33 42 ee eb 0d 0b 0f \|..b.7h...3B.....\| a5 03 20 e5 1a d6 2c 02 bf be 7b fb 5d 9a bc d5 \|.. ...,...{.]...\| 2b 20 9b 2d 42 06 20 2d 2c 03 75 d5 aa 55 51 5d \|+ .-B. -,.u..UQ]\| 6d 22 aa 00 ad 04 16 48 8f d4 0e b8 68 6a 23 40 \|m".....H....hj#@\| fb 9b 09 bc 03 af f4 07 31 33 19 20 e0 0e b8 27 \|........13. ...'\| 31 0f 15 1a 78 85 c6 00 1a 87 1f 69 54 ed a8 00 \|1...x......iT...\| ae 7c fb d1 69 67 f6 0f 75 ae 6f 3c 74 6e e8 43 \|.\|..ig..u.o

module_name	ord	function_name
ADVAPI32.dll		RegCloseKey
COMCTL32.dll	17
comdlg32.dll		FindTextA
GDI32.dll		PatBlt
KERNEL32.DLL		LoadLibraryA
KERNEL32.DLL		ExitProcess
KERNEL32.DLL		GetProcAddress
KERNEL32.DLL		VirtualProtect
msvcrt.dll		exit
SHELL32.dll		ShellExecuteA
USER32.dll		GetDC
WS2_32.dll	112

StringTable 040904b0

CompanyName	NirSoft
FileDescription	IPNetInfo
FileVersion	1.90
InternalName	IPNetInfo
LegalCopyright	Copyright © 2004 - 2020 Nir Sofer
OriginalFilename	ipnetinfo.exe
ProductName	IPNetInfo
ProductVersion	1.90

VS_FIXEDFILEINFO

FileVersion	1.9.0.0
ProductVersion	1.9.0.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=GB/ST=Greater Manchester/L=Salford/O=Sectigo Limited/CN=Sectigo RSA Code Signing CA

serial: F7A0A730C87D94CD8302E3EA7F661BB7

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f7:a0:a7:30:c8:7d:94:cd:83:02:e3:ea:7f:66:1b:b7
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Code Signing CA
        Validity
            Not Before: Sep  9 00:00:00 2019 GMT
            Not After : Sep  9 23:59:59 2023 GMT
        Subject: C=IL/postalCode=7135117, L=Lod/street=Dakar 21, Unit 82, O=Nir Sofer, CN=Nir Sofer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b8:87:e4:ae:15:b9:c9:cc:42:2b:2e:bf:fe:50:
                    b0:5f:b5:d1:56:82:cf:67:89:71:50:09:d2:6a:b4:
                    cb:ad:93:2d:a8:6b:e9:4c:dd:80:6a:eb:39:e1:4b:
                    3f:3a:57:38:b9:ff:ec:ae:21:5a:0e:11:ae:e3:0b:
                    60:bb:2c:1d:51:0a:31:b7:98:d9:b0:fa:99:99:d4:
                    b9:4d:05:46:07:72:fd:3d:9a:20:ef:76:ed:f9:26:
                    8e:92:a7:e4:19:15:bb:bb:a9:23:e4:75:b9:2f:bc:
                    4b:99:57:57:4b:37:50:fe:df:17:1c:0a:6d:4c:1f:
                    09:96:23:77:41:ff:98:ac:70:87:8b:ad:25:02:39:
                    f7:04:79:c7:ea:b9:b9:f4:58:07:82:58:82:da:43:
                    ff:21:09:e8:e9:53:a3:25:de:96:cf:64:2d:53:21:
                    ae:90:5e:2e:6f:20:33:d4:75:b8:24:da:ec:9c:1d:
                    07:e4:eb:47:c5:39:06:3c:f3:39:d7:d8:e8:87:57:
                    7c:2d:4b:da:e5:15:12:ec:ec:ad:fa:b4:a1:60:16:
                    eb:fb:21:f0:8a:3d:6e:80:d8:5d:23:cf:11:2a:0d:
                    44:16:7a:39:86:a9:51:cf:a2:e8:70:3b:54:53:19:
                    55:be:1b:95:df:2a:44:33:d1:36:ef:4c:02:97:6c:
                    95:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                0E:E1:3A:A8:53:3A:31:D5:8A:BE:C1:BB:AD:67:1A:03:85:AD:34:0E
            X509v3 Subject Key Identifier: 
                A5:8D:D4:E2:0A:D2:27:0F:4F:07:CE:14:44:4A:67:AF:5C:C3:AD:7D
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                Code Signing
            Netscape Cert Type: 
                Object Signing
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.1.3.2
                  CPS: https://sectigo.com/CPS
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.sectigo.com/SectigoRSACodeSigningCA.crl
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/SectigoRSACodeSigningCA.crt
                OCSP - URI:http://ocsp.sectigo.com
            X509v3 Subject Alternative Name: 
                email:support@nirsoft.net
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        81:70:05:36:f6:c5:ca:24:90:44:c4:10:4f:ef:5d:d2:d6:4b:
        0b:fa:9c:7a:13:d4:e6:0a:d3:af:4e:59:0c:7b:a9:e9:a2:48:
        6c:1d:d5:72:da:76:17:45:00:be:2e:56:fc:bf:a1:51:86:97:
        eb:b9:6f:3b:ec:02:fc:43:cc:60:cc:21:16:f9:dc:00:21:ad:
        95:e4:00:0c:59:6a:2e:b0:c1:09:e3:d1:14:69:68:89:44:e4:
        c7:01:9c:51:0c:54:02:b7:0e:7f:4a:4d:39:70:99:99:80:08:
        ce:34:81:f6:9d:1b:dd:b6:cd:5a:ef:df:f0:02:2a:f1:36:d4:
        aa:11:7c:20:d6:97:22:70:7b:90:0d:a7:27:2a:a0:dc:b8:2d:
        9c:79:37:72:34:ed:ad:65:ec:1c:6f:3e:e5:82:db:76:bb:2d:
        54:4c:59:5a:35:bf:6c:1c:57:ad:a7:bc:c2:32:85:2c:ef:86:
        93:78:82:cd:f3:42:cf:32:07:67:38:df:80:58:bf:c7:35:0d:
        f1:96:7b:d7:e9:7c:1f:c1:49:bc:18:d1:74:14:96:16:9f:d8:
        ce:2b:f1:72:03:18:20:eb:53:ed:9f:f4:b3:e6:c3:8a:36:c4:
        3e:24:ee:77:34:9a:45:14:45:c7:60:64:70:a6:25:25:6d:fc:
        6e:e0:43:64

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
        Validity
            Not Before: Nov  2 00:00:00 2018 GMT
            Not After : Dec 31 23:59:59 2030 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Code Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:86:22:8d:32:85:7a:18:9f:49:f0:96:2f:63:08:
                    1e:2d:dc:7c:9f:14:cf:e3:26:b6:25:66:29:40:86:
                    54:46:74:31:62:c5:10:ed:b2:87:27:a6:99:cb:95:
                    30:c0:56:f5:a4:75:c6:a9:0e:50:62:a5:51:91:10:
                    6a:e0:4b:62:ae:fd:f0:f8:18:ac:a7:ff:ee:2e:33:
                    20:fa:0c:19:89:a8:6c:7b:ad:00:c3:61:a1:dc:69:
                    65:6d:1f:6e:27:96:d7:97:51:86:a6:f4:27:e5:7c:
                    6a:8b:95:1e:5b:60:d5:7e:d7:16:92:9c:00:2f:68:
                    f7:97:ed:6a:72:be:38:3b:63:de:8f:bf:6e:4c:41:
                    5d:12:20:08:59:e8:39:cd:8f:d2:d6:cf:06:b4:57:
                    05:b6:4e:a1:3e:57:6b:1f:98:bc:c4:62:d6:1b:0b:
                    8d:c7:66:1b:4a:9f:9d:81:c4:72:40:b5:e2:5f:ef:
                    0b:45:ff:a3:ce:17:a6:2d:55:b0:b7:b0:bc:54:6a:
                    9d:bc:8d:56:53:c6:f0:ba:79:50:49:2c:f7:03:b9:
                    fe:2f:65:35:f2:22:ea:2c:07:af:46:d9:f9:46:1c:
                    dc:8c:7c:71:28:f3:fe:a7:c6:14:dd:55:91:6e:8a:
                    11:0d:df:06:24:95:7d:0f:a7:a1:7c:3a:da:86:35:
                    61:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                53:79:BF:5A:AA:2B:4A:CF:54:80:E1:D8:9B:C0:9D:F2:B2:03:66:CB
            X509v3 Subject Key Identifier: 
                0E:E1:3A:A8:53:3A:31:D5:8A:BE:C1:BB:AD:67:1A:03:85:AD:34:0E
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Extended Key Usage: 
                Code Signing, Time Stamping
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
            Authority Information Access: 
                CA Issuers - URI:http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt
                OCSP - URI:http://ocsp.usertrust.com
    Signature Algorithm: sha384WithRSAEncryption
    Signature Value:
        4d:63:50:ed:47:34:4a:61:a4:db:de:6a:2a:8c:9b:f1:00:00:
        1e:1d:62:7b:3a:d7:32:c2:f6:b3:e0:63:b3:fb:61:00:88:9a:
        1b:6d:10:07:04:4f:be:b8:ea:89:78:22:eb:0f:46:ec:f3:46:
        5e:40:46:89:12:f4:0b:77:5a:9c:2a:41:3a:fc:d6:f4:eb:e7:
        f7:15:95:33:c3:a1:83:28:b7:de:2f:e4:94:f7:85:33:83:2d:
        4a:40:48:bf:9a:c2:4f:4a:b1:8f:24:f4:b3:81:37:d3:b7:64:
        b0:a6:23:6a:59:68:52:42:5f:ff:04:eb:e1:74:65:79:08:f5:
        a9:93:de:6b:71:40:99:96:ba:78:f1:b9:c8:e2:c3:08:16:b1:
        ab:63:5a:c8:15:80:6d:74:5e:4a:75:7e:a5:b8:c3:6c:b5:cf:
        df:4a:79:87:5c:c7:40:4d:63:35:f6:30:d3:cf:b5:0a:0e:0b:
        04:7f:a0:4b:ae:bb:a3:a5:d0:84:00:93:3e:53:5d:34:a5:00:
        35:69:6c:be:9f:20:25:10:0d:19:fb:50:90:61:be:39:8f:7a:
        8e:4d:f6:9f:0e:1e:fe:07:51:12:66:83:26:19:48:95:ce:4a:
        c9:c1:7f:f3:3a:05:9b:f9:6f:df:88:7f:c0:23:9e:d2:1e:43:
        7a:45:31:c1:9c:4d:a9:f0:59:b2:59:19:e8:6a:8d:29:04:02:
        77:7c:4b:4b:cd:70:be:3a:b2:55:5a:78:3e:bc:bb:6f:03:10:
        25:77:15:34:8a:f9:36:cc:43:92:e4:ba:4f:f1:62:93:28:25:
        57:29:fb:51:19:c7:a1:25:40:6a:84:57:c6:b2:9d:b1:bc:1c:
        0a:da:7c:67:7e:7d:2e:e9:28:4c:18:7e:c4:7b:31:41:71:9a:
        4b:29:ec:0b:3d:57:50:d2:ca:dd:fd:9e:05:51:e5:44:78:dd:
        01:de:b1:75:98:0d:54:24:fd:f0:4e:e3:e2:f8:83:bd:72:ba:
        cb:3d:3a:ee:f0:5e:17:92:68:6d:c8:61:f9:a6:f1:2a:0a:0b:
        a5:b9:f4:9e:ee:98:32:05:85:9e:eb:f9:83:29:d3:c6:2c:7d:
        bd:3a:77:2e:8b:37:42:a0:6a:82:ed:3b:4a:aa:94:10:a4:e1:
        0d:f8:17:c5:b6:5a:79:33:18:92:e3:b5:75:f8:a1:e9:8e:0a:
        25:1e:e4:1e:f1:9f:5a:87:23:ff:9f:a4:51:9e:fb:39:80:11:
        cd:db:b5:c4:a7:a8:80:6f:e5:53:d4:e0:e3:a2:c2:d2:5b:1a:
        fa:32:26:2d:6a:57:70:1c:3c:a4:58:2e:a3:f3:5b:4b:07:dc:
        32:59:f3:87:a7:1a:6d:58

pkcs7-signedData

SHA256: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA256

7d 2d f4 a8 da 9d 75 92 a6 80 b1 50 0d 47 86 75 |}-....u....P.G.u| 69 ae 8b 82 38 69 5d 42 cc ee 1d a2 76 df f2 75 |i...8i]B....v..u|

Certificates

Certificate #0
- 2
  - F7:A0:A7:30:C8:7D:94:CD:83:02:E3:EA:7F:66:1B:B7
  - RSA-SHA256: nil
  - Issuer
    - C: GB
    - ST: Greater Manchester
    - L: Salford
    - O: Sectigo Limited
    - CN: Sectigo RSA Code Signing CA
  - 2019-09-09 00:00:00 UTC: 2023-09-09 23:59:59 UTC
  - Subject
    - C: IL
    - postalCode: 7135117
    - L: Lod
    - street: Dakar 21, Unit 82
    - O: Nir Sofer
    - CN: Nir Sofer
  - #5
    - rsaEncryption: nil
    - B8:87:E4:AE:15:B9:C9:CC:42:2B:2E:BF:FE:50:B0:5F:
      B5:D1:56:82:CF:67:89:71:50:09:D2:6A:B4:CB:AD:93:
      2D:A8:6B:E9:4C:DD:80:6A:EB:39:E1:4B:3F:3A:57:38:
      B9:FF:EC:AE:21:5A:0E:11:AE:E3:0B:60:BB:2C:1D:51:
      0A:31:B7:98:D9:B0:FA:99:99:D4:B9:4D:05:46:07:72:
      FD:3D:9A:20:EF:76:ED:F9:26:8E:92:A7:E4:19:15:BB:
      BB:A9:23:E4:75:B9:2F:BC:4B:99:57:57:4B:37:50:FE:
      DF:17:1C:0A:6D:4C:1F:09:96:23:77:41:FF:98:AC:70:
      87:8B:AD:25:02:39:F7:04:79:C7:EA:B9:B9:F4:58:07:
      82:58:82:DA:43:FF:21:09:E8:E9:53:A3:25:DE:96:CF:
      64:2D:53:21:AE:90:5E:2E:6F:20:33:D4:75:B8:24:DA:
      EC:9C:1D:07:E4:EB:47:C5:39:06:3C:F3:39:D7:D8:E8:
      87:57:7C:2D:4B:DA:E5:15:12:EC:EC:AD:FA:B4:A1:60:
      16:EB:FB:21:F0:8A:3D:6E:80:D8:5D:23:CF:11:2A:0D:
      44:16:7A:39:86:A9:51:CF:A2:E8:70:3B:54:53:19:55:
      BE:1B:95:DF:2A:44:33:D1:36:EF:4C:02:97:6C:95:F7: 0x010001
  - #6
    - authorityKeyIdentifier:
```
0e e1 3a a8 53 3a 31 d5  8a be c1 bb ad 67 1a 03  |..:.S:1......g..|
85 ad 34 0e                                       |..4.            |
```
    - subjectKeyIdentifier:
```
a5 8d d4 e2 0a d2 27 0f  4f 07 ce 14 44 4a 67 af  |......'.O...DJg.|
5c c3 ad 7d                                       |\..}            |
```
    - keyUsage: true, 0x80
    - basicConstraints
      - true
      - nil
    - extendedKeyUsage: codeSigning
    - nsCertType: 0x10
    - certificatePolicies
      - 1.3.6.1.4.1.6449.1.2.1.3.2
        id-qt-cps: https://sectigo.com/CPS
    - crlDistributionPoints: http://crl.sectigo.com/SectigoRSACodeSigningCA.crl
    - authorityInfoAccess
      - #0
        caIssuers: http://crt.sectigo.com/SectigoRSACodeSigningCA.crt
        OCSP: http://ocsp.sectigo.com
    - subjectAltName: support@nirsoft.net
- RSA-SHA256:
```
81 70 05 36 f6 c5 ca 24  90 44 c4 10 4f ef 5d d2  |.p.6...$.D..O.].|
d6 4b 0b fa 9c 7a 13 d4  e6 0a d3 af 4e 59 0c 7b  |.K...z......NY.{|
a9 e9 a2 48 6c 1d d5 72  da 76 17 45 00 be 2e 56  |...Hl..r.v.E...V|
fc bf a1 51 86 97 eb b9  6f 3b ec 02 fc 43 cc 60  |...Q....o;...C.`|
cc 21 16 f9 dc 00 21 ad  95 e4 00 0c 59 6a 2e b0  |.!....!.....Yj..|
c1 09 e3 d1 14 69 68 89  44 e4 c7 01 9c 51 0c 54  |.....ih.D....Q.T|
02 b7 0e 7f 4a 4d 39 70  99 99 80 08 ce 34 81 f6  |....JM9p.....4..|
9d 1b dd b6 cd 5a ef df  f0 02 2a f1 36 d4 aa 11  |.....Z....*.6...|
7c 20 d6 97 22 70 7b 90  0d a7 27 2a a0 dc b8 2d  || .."p{...'*...-|
9c 79 37 72 34 ed ad 65  ec 1c 6f 3e e5 82 db 76  |.y7r4..e..o>...v|
bb 2d 54 4c 59 5a 35 bf  6c 1c 57 ad a7 bc c2 32  |.-TLYZ5.l.W....2|
85 2c ef 86 93 78 82 cd  f3 42 cf 32 07 67 38 df  |.,...x...B.2.g8.|
80 58 bf c7 35 0d f1 96  7b d7 e9 7c 1f c1 49 bc  |.X..5...{..|..I.|
18 d1 74 14 96 16 9f d8  ce 2b f1 72 03 18 20 eb  |..t......+.r.. .|
53 ed 9f f4 b3 e6 c3 8a  36 c4 3e 24 ee 77 34 9a  |S.......6.>$.w4.|
45 14 45 c7 60 64 70 a6  25 25 6d fc 6e e0 43 64  |E.E.`dp.%%m.n.Cd|
```

Certificate #1

2
- 1D:A2:48:30:6F:9B:26:18:D0:82:E0:96:7D:33:D3:6A
- RSA-SHA384: nil
- Issuer
  - C: US
  - ST: New Jersey
  - L: Jersey City
  - O: The USERTRUST Network
  - CN: USERTrust RSA Certification Authority
- 2018-11-02 00:00:00 UTC: 2030-12-31 23:59:59 UTC
- Subject
  - C: GB
  - ST: Greater Manchester
  - L: Salford
  - O: Sectigo Limited
  - CN: Sectigo RSA Code Signing CA
- #5
  - rsaEncryption: nil
  - 86:22:8D:32:85:7A:18:9F:49:F0:96:2F:63:08:1E:2D:
    DC:7C:9F:14:CF:E3:26:B6:25:66:29:40:86:54:46:74:
    31:62:C5:10:ED:B2:87:27:A6:99:CB:95:30:C0:56:F5:
    A4:75:C6:A9:0E:50:62:A5:51:91:10:6A:E0:4B:62:AE:
    FD:F0:F8:18:AC:A7:FF:EE:2E:33:20:FA:0C:19:89:A8:
    6C:7B:AD:00:C3:61:A1:DC:69:65:6D:1F:6E:27:96:D7:
    97:51:86:A6:F4:27:E5:7C:6A:8B:95:1E:5B:60:D5:7E:
    D7:16:92:9C:00:2F:68:F7:97:ED:6A:72:BE:38:3B:63:
    DE:8F:BF:6E:4C:41:5D:12:20:08:59:E8:39:CD:8F:D2:
    D6:CF:06:B4:57:05:B6:4E:A1:3E:57:6B:1F:98:BC:C4:
    62:D6:1B:0B:8D:C7:66:1B:4A:9F:9D:81:C4:72:40:B5:
    E2:5F:EF:0B:45:FF:A3:CE:17:A6:2D:55:B0:B7:B0:BC:
    54:6A:9D:BC:8D:56:53:C6:F0:BA:79:50:49:2C:F7:03:
    B9:FE:2F:65:35:F2:22:EA:2C:07:AF:46:D9:F9:46:1C:
    DC:8C:7C:71:28:F3:FE:A7:C6:14:DD:55:91:6E:8A:11:
    0D:DF:06:24:95:7D:0F:A7:A1:7C:3A:DA:86:35:61:D3: 0x010001
- #6
  - authorityKeyIdentifier:
```
53 79 bf 5a aa 2b 4a cf  54 80 e1 d8 9b c0 9d f2  |Sy.Z.+J.T.......|
b2 03 66 cb                                       |..f.            |
```
  - subjectKeyIdentifier:
```
0e e1 3a a8 53 3a 31 d5  8a be c1 bb ad 67 1a 03  |..:.S:1......g..|
85 ad 34 0e                                       |..4.            |
```
  - keyUsage: true, 0x86
  - basicConstraints
    - true
    - true: 0
  - extendedKeyUsage
    - codeSigning: timeStamping
  - certificatePolicies: anyPolicy
  - crlDistributionPoints: http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
  - authorityInfoAccess
    - #0
      - caIssuers: http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt
      - OCSP: http://ocsp.usertrust.com

RSA-SHA384:

4d 63 50 ed 47 34 4a 61  a4 db de 6a 2a 8c 9b f1  |McP.G4Ja...j*...|
00 00 1e 1d 62 7b 3a d7  32 c2 f6 b3 e0 63 b3 fb  |....b{:.2....c..|
61 00 88 9a 1b 6d 10 07  04 4f be b8 ea 89 78 22  |a....m...O....x"|
eb 0f 46 ec f3 46 5e 40  46 89 12 f4 0b 77 5a 9c  |..F..F^@F....wZ.|
2a 41 3a fc d6 f4 eb e7  f7 15 95 33 c3 a1 83 28  |*A:........3...(|
b7 de 2f e4 94 f7 85 33  83 2d 4a 40 48 bf 9a c2  |../....3.-J@H...|
4f 4a b1 8f 24 f4 b3 81  37 d3 b7 64 b0 a6 23 6a  |OJ..$...7..d..#j|
59 68 52 42 5f ff 04 eb  e1 74 65 79 08 f5 a9 93  |YhRB_....tey....|
de 6b 71 40 99 96 ba 78  f1 b9 c8 e2 c3 08 16 b1  |.kq@...x........|
ab 63 5a c8 15 80 6d 74  5e 4a 75 7e a5 b8 c3 6c  |.cZ...mt^Ju~...l|
b5 cf df 4a 79 87 5c c7  40 4d 63 35 f6 30 d3 cf  |...Jy.\.@Mc5.0..|
b5 0a 0e 0b 04 7f a0 4b  ae bb a3 a5 d0 84 00 93  |.......K........|
3e 53 5d 34 a5 00 35 69  6c be 9f 20 25 10 0d 19  |>S]4..5il.. %...|
fb 50 90 61 be 39 8f 7a  8e 4d f6 9f 0e 1e fe 07  |.P.a.9.z.M......|
51 12 66 83 26 19 48 95  ce 4a c9 c1 7f f3 3a 05  |Q.f.&.H..J....:.|
9b f9 6f df 88 7f c0 23  9e d2 1e 43 7a 45 31 c1  |..o....#...CzE1.|
9c 4d a9 f0 59 b2 59 19  e8 6a 8d 29 04 02 77 7c  |.M..Y.Y..j.)..w||
4b 4b cd 70 be 3a b2 55  5a 78 3e bc bb 6f 03 10  |KK.p.:.UZx>..o..|
25 77 15 34 8a f9 36 cc  43 92 e4 ba 4f f1 62 93  |%w.4..6.C...O.b.|
28 25 57 29 fb 51 19 c7  a1 25 40 6a 84 57 c6 b2  |(%W).Q...%@j.W..|
9d b1 bc 1c 0a da 7c 67  7e 7d 2e e9 28 4c 18 7e  |......|g~}..(L.~|
c4 7b 31 41 71 9a 4b 29  ec 0b 3d 57 50 d2 ca dd  |.{1Aq.K)..=WP...|
fd 9e 05 51 e5 44 78 dd  01 de b1 75 98 0d 54 24  |...Q.Dx....u..T$|
fd f0 4e e3 e2 f8 83 bd  72 ba cb 3d 3a ee f0 5e  |..N.....r..=:..^|
17 92 68 6d c8 61 f9 a6  f1 2a 0a 0b a5 b9 f4 9e  |..hm.a...*......|
ee 98 32 05 85 9e eb f9  83 29 d3 c6 2c 7d bd 3a  |..2......)..,}.:|
77 2e 8b 37 42 a0 6a 82  ed 3b 4a aa 94 10 a4 e1  |w..7B.j..;J.....|
0d f8 17 c5 b6 5a 79 33  18 92 e3 b5 75 f8 a1 e9  |.....Zy3....u...|
8e 0a 25 1e e4 1e f1 9f  5a 87 23 ff 9f a4 51 9e  |..%.....Z.#...Q.|
fb 39 80 11 cd db b5 c4  a7 a8 80 6f e5 53 d4 e0  |.9.........o.S..|
e3 a2 c2 d2 5b 1a fa 32  26 2d 6a 57 70 1c 3c a4  |....[..2&-jWp.<.|
58 2e a3 f3 5b 4b 07 dc  32 59 f3 87 a7 1a 6d 58  |X...[K..2Y....mX|

Signer

1
unnamed
- #0
  - C: GB
  - ST: Greater Manchester
  - L: Salford
  - O: Sectigo Limited
  - CN: Sectigo RSA Code Signing CA
- F7:A0:A7:30:C8:7D:94:CD:83:02:E3:EA:7F:66:1B:B7
SHA256: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

96 37 c8 d0 db ad 37 25  7c 52 73 22 f0 2a e6 fe  |.7....7%|Rs".*..|
16 dc d7 de e7 64 70 0a  a7 a7 77 20 71 39 b4 8c  |.....dp...w q9..|

rsaEncryption:

44 2e 04 c0 f2 8a d9 2c  87 53 d2 34 f4 2e f5 5c  |D......,.S.4...\|
be 89 e2 6a 62 10 67 ff  6f e9 ce ae b8 5d 98 34  |...jb.g.o....].4|
64 18 78 69 e9 8a e3 a1  c4 ad 23 93 90 1c 91 95  |d.xi......#.....|
ab 13 33 45 36 26 47 80  28 21 82 8d 74 c3 a8 0b  |..3E6&G.(!..t...|
95 2c 7d 13 f2 dd 98 61  9d 73 7b dd b6 86 0b ad  |.,}....a.s{.....|
a1 17 78 77 08 e0 e3 a9  82 39 51 97 fd c4 37 7c  |..xw.....9Q...7||
6a d7 19 d8 a0 07 72 0d  27 0a b5 46 e0 96 b2 3f  |j.....r.'..F...?|
63 2f 05 6e 75 b9 88 d4  23 a1 03 41 78 56 71 e3  |c/.nu...#..AxVq.|
d8 74 5a 8f cf ee 7f 37  03 26 ba 44 e9 63 27 4a  |.tZ....7.&.D.c'J|
ed 72 d4 54 a4 55 25 52  17 93 9a ba 63 ac 52 47  |.r.T.U%R....c.RG|
91 08 4d f4 30 9f f2 ba  1e 3a 79 f6 1b ed b2 b6  |..M.0....:y.....|
95 62 45 3d 08 76 a8 17  32 6f 2e 15 17 d6 9e 22  |.bE=.v..2o....."|
b4 1f 6a 8d 77 6a eb 2f  f7 79 c2 a5 9a b9 cc a8  |..j.wj./.y......|
9b c2 ea 03 a4 83 bd 3e  f4 a3 a1 28 cc 0f e5 7e  |.......>...(...~|
82 bb bb 3a 84 f6 08 1c  a9 8c 71 e1 94 c1 e0 bd  |...:......q.....|
35 72 3e b3 a3 90 be fa  ff 64 33 fe ae c4 0b 8b  |5r>......d3.....|

1.3.6.1.4.1.311.3.3.1

pkcs7-signedData

SHA256: nil
id-smime-ct-TSTInfo
- 1
  - 1.3.6.1.4.1.6449.2.1.1
  - SHA256
    - d0 f6 7e 70 2c 31 07 3b 22 2e f5 73 5e 72 6d 39 |..~p,1.;"..s^rm9| 0e d1 ea 0c d2 3c cd ef 47 ab a6 21 c6 8f a7 c4 |.....<..G..!....|
  - B7:17:77:C9:C8:2F:CF:A0:2D:6E:6A:BD:CC:9E:C1:10:
    F4:73:8E:FB
  - 2020-02-14 16:07:26 UTC
  - Subject
    - C: GB
    - ST: Greater Manchester
    - L: Salford
    - O: Sectigo Limited
    - CN: Sectigo RSA Time Stamping Signer #1
Certificates
- Certificate #0
  - 2
    - 3D:1A:35:72:30:15:82:63:30:D0:13:71:7E:82:41:08
    - RSA-SHA384: nil
    - Issuer
      - C: GB
      - ST: Greater Manchester
      - L: Salford
      - O: Sectigo Limited
      - CN: Sectigo RSA Time Stamping CA
    - 2019-05-02 00:00:00 UTC: 2030-08-01 23:59:59 UTC
    - Subject
      - C: GB
      - ST: Greater Manchester
      - L: Salford
      - O: Sectigo Limited
      - CN: Sectigo RSA Time Stamping Signer #1
    - #5
      - rsaEncryption: nil
      - CB:51:50:FF:56:FE:FC:78:63:70:01:93:5A:9E:18:F4:
        3B:53:F6:07:AF:21:6C:F5:A2:0F:7D:1D:70:2D:84:74:
        48:8B:9C:8A:95:05:3D:59:84:F9:91:80:79:51:2C:D9:
        8A:B7:C1:0B:9A:BA:0A:8A:CD:66:4F:03:8B:01:BB:30:
        CA:AB:BD:DB:C0:4F:12:5E:FC:0A:CC:E2:45:B0:01:38:
        8A:BB:4D:E7:D4:1C:54:98:ED:39:58:CF:5B:C2:2F:45:
        98:31:0A:F9:35:38:B8:31:2E:6D:B4:1E:39:72:E1:B8:
        2A:BE:9F:8C:8C:1A:A5:46:AE:0B:2B:4C:99:FE:2C:4B:
        FC:28:B9:22:3A:66:17:D0:AA:56:8A:21:C0:F3:96:24:
        B4:D0:85:26:6B:BA:F0:6F:64:98:79:A6:AD:BD:5C:D8:
        53:6B:2B:0A:D6:72:8A:85:46:E3:0D:18:06:DA:C6:7B:
        41:56:36:9B:15:3E:F1:6A:11:A0:F7:66:F5:18:D0:80:
        55:63:87:68:66:EB:0E:79:55:82:5C:A3:ED:49:B8:71:
        86:9E:93:37:B0:6B:A3:EA:62:6C:A3:AE:96:E8:B9:FD:
        8B:AB:C6:F6:59:5B:00:3C:57:20:18:2D:70:03:A7:9C:
        EF:92:EB:79:A1:C7:5D:EC:7C:B4:8F:4B:DF:EB:5D:FC:
        A3:20:DD:92:38:E5:6A:51:3A:6B:85:9C:4C:A0:98:08:
        69:5B:06:E7:2A:19:D0:95:93:8B:3B:6B:8A:05:09:29:
        D8:D6:DA:DB:E3:72:FA:5C:4A:2F:7B:15:56:86:32:BF:
        7F:05:09:9D:2D:2A:CF:50:E1:E6:61:20:DB:C7:06:80:
        5C:4E:14:46:BE:AE:57:71:A2:AA:6C:30:93:1C:7E:77:
        CB:06:E9:57:CD:91:F5:D5:33:72:1C:E1:DA:CA:6E:EB:
        F3:0F:EC:79:5B:BB:27:9E:E8:1E:FE:2F:F2:BB:7F:E9:
        E5:D0:67:EB:B8:0D:7C:A4:2B:59:03:8B:95:ED:22:28:
        CD:FA:2C:3B:C7:16:11:AF:E3:D6:B1:50:67:69:C5:8E:
        F5:79:D0:AD:FF:87:CC:F8:7F:AA:F9:A2:ED:61:F8:C8:
        8D:69:DA:B1:F4:51:91:EB:67:57:D1:64:11:EB:64:CB:
        03:BD:49:55:3A:45:43:18:2C:25:6C:D1:2F:0C:2D:6F:
        F5:41:35:24:A0:F2:63:59:16:5F:D9:A4:E9:2C:4E:DB:
        BB:31:12:C6:6D:F8:5B:6E:03:DC:CB:15:8F:1B:8D:72:
        EC:DB:0F:15:90:D6:12:4E:EE:E2:00:31:25:93:35:6F:
        6A:5B:A5:12:63:40:01:8A:B9:69:88:3A:88:B8:0F:19: 0x010001
    - #6
      - authorityKeyIdentifier:
        1a a1 f8 61 19 20 0f c3 41 77 45 28 8e d1 35 5f |...a. ..AwE(..5_| 06 12 04 55 |...U |
      - subjectKeyIdentifier:
        6f 4d 86 07 d8 32 27 9e 2c 29 d2 d0 13 03 80 81 |oM...2'.,)......| dd 05 83 29 |...) |
      - keyUsage: true, 0xc0
      - basicConstraints
        true
        nil
      - extendedKeyUsage: true, timeStamping
      - certificatePolicies
        1.3.6.1.4.1.6449.1.2.1.3.8
        id-qt-cps: https://sectigo.com/CPS
      - crlDistributionPoints: http://crl.sectigo.com/SectigoRSATimeStampingCA.crl
      - authorityInfoAccess
        #0
        caIssuers: http://crt.sectigo.com/SectigoRSATimeStampingCA.crt
        OCSP: http://ocsp.sectigo.com
  - RSA-SHA384:
```
c0 68 ed b3 d8 d4 50 9b  ef d3 75 cb 0f 3b f7 24  |.h....P...u..;.$|
d3 7a 37 45 8d 2c ef 16  fb 51 a9 2c 1f b5 25 b5  |.z7E.,...Q.,..%.|
8a 9f 5d 0b c2 1b 20 74  8d 66 0f 36 cb aa f6 36  |..]... t.f.6...6|
0d 0f 7e 8f 4b 4a 74 43  65 ac 0d 2a f6 0a ed 6b  |..~.KJtCe..*...k|
6d c5 09 38 ed 00 1b f8  e5 dc a6 0a 40 05 47 ef  |m..8........@.G.|
84 ca 09 bc 43 66 83 bf  9f ed db 8e 3d d1 41 64  |....Cf......=.Ad|
b1 70 02 2d 03 57 5b 18  6f 1c 2c cb 1e b2 00 e8  |.p.-.W[.o.,.....|
ba 09 2f 5b 81 04 35 b9  a9 63 6d 8e 08 c5 18 d1  |../[..5..cm.....|
e1 21 ac f9 12 0a 14 c0  12 db 7e 25 9d ac 1d 10  |.!........~%....|
c0 5a a5 83 d2 1f 1a 66  55 fc 9b 2a e2 ec 37 57  |.Z.....fU..*..7W|
8e e5 df 96 30 f8 c0 93  0b 43 18 f9 02 6f a9 51  |....0....C...o.Q|
af b8 57 0a f3 1c 07 69  39 8f 37 9c 6d d7 91 ae  |..W....i9.7.m...|
a5 2e 49 e9 4a de b3 d0  8c bf 39 90 0d c0 81 ce  |..I.J.....9.....|
f0 2a 07 3a 0c a6 2d 51  d2 72 f3 53 c6 f9 bd ef  |.*.:..-Q.r.S....|
ef 0c 69 49 77 9f 2c 56  c4 e9 a1 08 3d 07 ae c5  |..iIw.,V....=...|
1e d6 84 22 c7 bc 7d 43  1b 58 38 62 4e d1 05 25  |..."..}C.X8bN..%|
84 c5 42 f8 1f 2f f6 db  fa ab 8c 54 ec 45 8a 6c  |..B../.....T.E.l|
12 4d 30 5a 52 e5 a4 17  09 22 e6 ef 6f f5 5f 86  |.M0ZR...."..o._.|
43 df a1 2d bd 4a 46 92  a0 81 96 2c 61 97 7f 40  |C..-.JF....,a..@|
6f d8 3f 8c 35 5a ab d1  c6 a0 3b 85 66 54 80 ef  |o.?.5Z....;.fT..|
1f 1a f5 f1 9b b0 a1 27  7d b2 e7 0b cf f6 2d 9c  |.......'}.....-.|
58 13 94 a9 86 fc 45 52  a2 28 6d 7f 74 0f 52 91  |X.....ER.(m.t.R.|
49 7a e9 12 f8 a9 3b b0  92 fd 7d 91 14 e9 5b 6d  |Iz....;...}...[m|
48 94 f2 c8 96 ee 05 38  b3 c5 ec 30 3f e1 07 20  |H......8...0?.. |
04 b1 d8 8b bc fd b3 3e  6f f2 02 53 06 f4 a0 ed  |.......>o..S....|
c9 9a 72 a3 97 5f 00 fb  cb 63 d0 e8 cd 74 fd 75  |..r.._...c...t.u|
c9 d4 36 45 ba 7b 12 59  72 ed e7 f2 7a 50 00 78  |..6E.{.Yr...zP.x|
f8 43 9a 46 d8 df bf 54  d4 5e b1 c7 d1 bc 1b 83  |.C.F...T.^......|
f4 2b e7 0b e8 47 c8 53  9e cc 1a ac f6 fa 8a 75  |.+...G.S.......u|
53 6c 20 85 a9 d5 b8 6a  ba 24 8e 8a 2b 08 91 9f  |Sl ....j.$..+...|
37 04 1c f6 6f a2 dd 34  aa 91 ff c6 15 2e 1e 42  |7...o..4.......B|
1a 09 29 4f f4 c6 cd e2  91 a2 d3 40 0c 8e 78 e3  |..)O.......@..x.|
```
- Certificate #1
  - 2
    - 30:0F:6F:AC:DD:66:98:74:7C:A9:46:36:A7:78:2D:B9
    - RSA-SHA384: nil
    - Issuer
      - C: US
      - ST: New Jersey
      - L: Jersey City
      - O: The USERTRUST Network
      - CN: USERTrust RSA Certification Authority
    - 2019-05-02 00:00:00 UTC: 2038-01-18 23:59:59 UTC
    - Subject
      - C: GB
      - ST: Greater Manchester
      - L: Salford
      - O: Sectigo Limited
      - CN: Sectigo RSA Time Stamping CA
    - #5
      - rsaEncryption: nil
      - C8:1B:01:AF:D9:2C:7E:88:99:7D:01:98:3F:20:90:BD:
        9C:80:21:54:93:B9:CF:A0:3E:53:EF:B3:5A:C0:76:D6:
        1A:04:A5:CE:47:83:B5:EB:C4:CC:49:34:CB:F3:45:65:
        B9:F9:A7:64:16:26:09:FB:D5:32:52:79:2E:C9:63:C2:
        13:9B:B6:86:3F:01:05:92:66:6F:21:AB:D5:71:10:79:
        87:F4:46:2A:CD:C4:5A:C9:DB:D7:5D:49:4D:72:56:0F:
        DC:C9:E3:53:98:3A:2A:1E:FC:CE:58:49:D3:BF:F3:39:
        BB:B9:A4:23:42:AC:D0:15:C3:7F:9E:A2:5C:D7:38:F1:
        16:B2:70:D3:A3:C4:DF:B3:C5:72:AC:2E:0A:77:FC:0D:
        94:52:B7:FC:1F:95:73:24:3D:01:28:BC:0F:0D:4F:B3:
        91:01:8E:6E:9D:27:75:55:D1:17:3B:34:21:7B:97:01:
        94:AF:7F:80:CF:D1:11:0A:57:84:C9:7F:56:E0:BD:46:
        9C:82:BE:94:9D:BF:B4:20:B0:60:7E:B8:4D:F5:0D:3F:
        DB:D0:EA:85:8C:8A:56:71:D1:2D:94:4C:C8:8C:3C:D3:
        14:A2:9C:BD:26:FF:D3:53:20:C7:60:69:9B:58:0A:54:
        F4:05:E7:FD:31:AC:F9:C8:85:17:C7:B8:29:19:A4:29:
        2F:46:E3:DD:DB:91:5F:9F:3F:36:3E:0E:30:67:2B:46:
        B7:35:AF:96:BE:DA:4C:60:CC:A8:BB:9F:0D:14:D4:18:
        C4:30:98:74:82:21:CF:62:56:B5:21:73:12:1E:FD:AA:
        CA:08:58:87:77:A4:15:EB:19:55:FF:D0:39:54:2D:26:
        EE:45:1A:3A:6F:CD:D7:84:F0:D7:F0:28:C5:4F:64:83:
        02:D4:FB:E2:DE:F1:BC:02:28:F4:6D:DA:27:8A:06:D2:
        96:87:DE:E8:6B:0E:F0:5B:7D:E9:76:69:93:20:1C:4A:
        97:2C:77:19:2B:93:95:98:9C:97:9E:EB:8E:C1:78:56:
        C6:44:25:DF:06:12:9A:06:2D:9F:03:5E:FD:83:A2:53:
        67:CA:B1:FA:8D:A1:64:C9:88:92:59:CB:A8:46:C0:C9:
        F2:A6:FF:7D:57:DB:12:76:FA:8A:41:24:D4:1B:FC:72:
        A5:14:A2:D4:AD:43:1C:A4:49:8B:41:39:14:03:1E:29:
        FA:1B:A5:22:AE:A5:C3:4D:82:D0:8D:DA:6B:B7:DB:F7:
        18:40:57:73:F0:71:A3:FB:4A:7D:45:36:C1:F7:8D:82:
        FA:B9:C9:0D:53:80:7D:FA:B6:39:58:32:EF:6F:18:50:
        89:D7:4F:9D:33:BD:1A:B5:9D:A1:DE:95:41:7A:A7:83: 0x010001
    - #6
      - authorityKeyIdentifier:
        53 79 bf 5a aa 2b 4a cf 54 80 e1 d8 9b c0 9d f2 |Sy.Z.+J.T.......| b2 03 66 cb |..f. |
      - subjectKeyIdentifier:
        1a a1 f8 61 19 20 0f c3 41 77 45 28 8e d1 35 5f |...a. ..AwE(..5_| 06 12 04 55 |...U |
      - keyUsage: true, 0x86
      - basicConstraints
        true
        true: 0
      - extendedKeyUsage: timeStamping
      - certificatePolicies: anyPolicy
      - crlDistributionPoints: http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl
      - authorityInfoAccess
        #0
        caIssuers: http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt
        OCSP: http://ocsp.usertrust.com
  - RSA-SHA384:
```
6d 54 81 a5 33 5d 16 e1  b5 53 81 91 75 df 03 7a  |mT..3]...S..u..z|
32 0b 2d 25 84 11 b2 b0  db 2a 7d 2a 05 f5 bc 3b  |2.-%.....*}*...;|
27 f4 5a a0 b9 49 59 90  29 6c 61 cb b5 50 db e2  |'.Z..IY.)la..P..|
7d f9 9f 00 ef 40 c3 ad  d3 e2 e4 56 f9 58 41 cf  |}....@.....V.XA.|
f1 42 e5 10 7d ff b0 74  1f 8f c6 5c 09 f9 33 5e  |.B..}..t...\..3^|
ea a0 1c 26 58 5c f3 b4  11 0f d5 d5 c3 e2 bc d5  |...&X\..........|
58 78 bf 48 76 e1 44 67  6d 8f b0 43 10 0f 8d e4  |Xx.Hv.Dgm..C....|
f9 38 62 bf 13 01 c5 85  a3 4c c5 cc b2 53 30 95  |.8b......L...S0.|
a4 d6 f4 96 56 08 b8 cd  5c 7f 01 96 be 72 52 6a  |....V...\....rRj|
3b 42 37 7c 16 78 39 93  93 94 9b b1 dc b2 6d 41  |;B7|.x9.......mA|
6d 67 cd c9 6f 90 3d 7f  45 72 c1 1b 23 d6 c2 55  |mg..o.=.Er..#..U|
84 66 e4 b3 c5 66 06 f6  f3 d6 4b 5e ad a3 2b 42  |.f...f....K^..+B|
8a 21 92 fe a8 6f 5a 25  70 62 81 73 63 5e a0 bb  |.!...oZ%pb.sc^..|
d8 dc d7 4a d3 3d af 83  06 38 12 1d 24 87 2d e4  |...J.=...8..$.-.|
fc 02 d6 3e 77 04 bc 04  36 b5 e7 77 cb 9c 2e 8d  |...>w...6..w....|
23 18 b9 a3 c2 47 1d f0  5d d6 a1 73 57 05 68 9a  |#....G..]..sW.h.|
a7 c9 37 65 1d be ea bc  d8 42 83 43 05 a5 8b a6  |..7e.....B.C....|
09 ff d1 a1 94 a6 4e aa  3d 09 f5 05 6c b7 d2 64  |......N.=...l..d|
5a d8 2a 22 c2 4b 9d f1  39 5e 4c de 48 3d 9b 34  |Z.*".K..9^L.H=.4|
96 9a 09 5f 8e fd f7 b1  52 91 ce 3f 89 f6 1c a1  |..._....R..?....|
b5 a9 75 1f 71 bf 5b 43  5d 65 3d 50 81 6e ab f0  |..u.q.[C]e=P.n..|
d0 d3 fc b2 b3 1f b6 99  96 26 f4 3c 79 8b 5c 64  |.........&.
```

unnamed
- #0
  - C: GB
  - ST: Greater Manchester
  - L: Salford
  - O: Sectigo Limited
  - CN: Sectigo RSA Time Stamping CA
- 3D:1A:35:72:30:15:82:63:30:D0:13:71:7E:82:41:08
SHA256: nil

contentType: id-smime-ct-TSTInfo
signingTime: 2020-02-14 16:07:26 UTC

messageDigest:

96 ad 04 7e 22 e8 a9 34  7d 45 5b 71 a0 62 48 3c  |...~"..4}E[q.bH<|
b5 4f cf 37 3f 38 5a bf  8c 5e 2c 4c 39 b2 47 e8  |.O.7?8Z..^,L9.G.|

id-smime-aa-signingCertificate

25 c8 ac 73 4e 48 50 b7 f8 d9 13 91 a8 1b 92 49 |%..sNHP........I| 36 65 9f 61 |6e.a |

02 d6 5b 95 e2 83 70 c1 57 00 95 fa 88 f9 23 dd |..[...p.W.....#.| 93 7f ad 8f |.... |
- unnamed
  - #0
    - C: US
    - ST: New Jersey
    - L: Jersey City
    - O: The USERTRUST Network
    - CN: USERTrust RSA Certification Authority
  - 30:0F:6F:AC:DD:66:98:74:7C:A9:46:36:A7:78:2D:B9

rsaEncryption:

5d fa d3 35 31 60 fd 60  f1 ff 8c 92 f5 7a 7d 86  |]..51`.`.....z}.|
d8 a6 c7 21 4e fa 14 21  0b 40 3f 67 07 d6 ff 51  |...!N..!.@?g...Q|
83 61 95 b3 af 55 0d a7  2a 3a c2 1f ab b9 2b 4b  |.a...U..*:....+K|
2a 22 5b d8 bc 69 01 3e  ba a4 98 42 d9 11 8e da  |*"[..i.>...B....|
4a 8e 2e b3 e8 43 8b 4d  50 91 09 e9 cc 24 2a 1b  |J....C.MP....$*.|
6f bf 31 eb d3 92 af a6  44 cd a0 13 e9 47 73 ce  |o.1.....D....Gs.|
dd 13 0d b3 6e dd 3a 45  49 6e 32 e9 98 40 a8 43  |....n.:EIn2..@.C|
80 85 34 fc 6a 94 a2 99  d0 64 db b0 6f d2 08 cb  |..4.j....d..o...|
6d f2 2a fb 69 c6 25 fc  89 26 08 7c f0 55 5b 53  |m.*.i.%..&.|.U[S|
15 b0 10 c3 a1 f1 db 33  bf 4a cb b0 e6 cf 2a 68  |.......3.J....*h|
1a 6c a9 6a dd 40 f2 21  c6 a5 e8 77 e4 65 eb da  |.l.j.@.!...w.e..|
27 27 16 7a e7 79 5a ba  a2 85 39 5d 83 57 48 68  |''.z.yZ...9].WHh|
1e d7 49 4f 5d 98 0d d7  79 2d c2 63 1f 2e 06 25  |..IO]...y-.c...%|
8b bf 59 16 15 b7 73 4a  31 57 d9 1e c0 f1 44 a3  |..Y...sJ1W....D.|
93 cc af ba 48 52 72 c0  20 ff 8d 64 4e 24 e7 08  |....HRr. ..dN$..|
73 c4 c2 19 56 bf 21 14  fc e9 97 12 81 33 27 95  |s...V.!......3'.|
ca 85 05 98 3e c9 2f d0  bd 28 ec c2 87 ba 79 1e  |....>./..(....y.|
cc b4 39 ad ff 89 74 04  83 0c 21 83 e3 f2 fd 42  |..9...t...!....B|
de 00 bf 8b 60 8a ee 02  eb 04 fe 8e 2b 6a 4e 67  |....`.......+jNg|
da 14 a4 d4 9c 0c 7d 52  08 8c 14 8f 96 bc 59 b8  |......}R......Y.|
9b b7 85 b8 76 bf fc f2  5a 7c 91 59 ef 64 6d 7f  |....v...Z|.Y.dm.|
81 96 3e 37 92 40 bb ef  03 06 76 0f a8 fc 33 8a  |..>7.@....v...3.|
54 0d ff 43 5c 0e 7f 7f  3f 81 3f 32 68 f8 7f b6  |T..C\...?.?2h...|
3e 89 cf 77 53 f3 2e b8  68 a8 08 06 69 e1 53 b6  |>..wS...h...i.S.|
71 79 18 e7 7f 74 db 3b  c2 da bb ee e0 16 47 2f  |qy...t.;......G/|
59 cb 6c e3 16 1b e4 8c  f8 c6 79 87 36 0c 5c 92  |Y.l.......y.6.\.|
ed 6d ee 3f e9 dc 6b 66  6e 70 86 29 0f a0 65 d6  |.m.?..kfnp.)..e.|
e1 40 c1 d8 94 1d a5 80  75 92 32 7b ba 21 06 ec  |.@......u.2{.!..|
7b b1 85 f4 cc a1 32 e0  1e c3 3a dd f8 95 4f 25  |{.....2...:...O%|
0c ed cd 59 b8 3a 8a 01  06 5e ac 90 e8 fe 27 45  |...Y.:...^....'E|
a3 6b c4 b0 16 9f 34 e9  75 28 48 f3 f5 3c 5b 4c  |.k....4.u(H..<[L|
a9 e5 c0 cf 87 57 ea 14  b6 34 01 40 5e 95 64 97  |.....W...4.@^.d.|

show previews

offset	size	type	comment
0	46592	EXE	02/14/2020 16:03:35	#
15c1	15	HTM		#
b600	8552	PKCS7	Authenticode Signature	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[!] string size(21072) > stringtable size(376). truncated to 374

[!] cannot convert "!\xB6e\xCBn2\t/\x13\x12Gm\xD6\xFE\x7F\xD7"... to UTF-16

[!] string size(56374) > stringtable size(282). truncated to 280

[!] cannot convert "<\xE7\xB1<\x9F\xDD\xF0&\e\x90msg\xA1Un"... to UTF-16

[!] string size(65518) > stringtable size(126). truncated to 124

[!] cannot convert "&\x06\x10'\x1C\xCE\xD0\xB5\xF4<?x\xDA \xDDs"... to UTF-16

[!] string size(59516) > stringtable size(66). truncated to 64

[!] cannot convert "W\x8C\xB8\x8D\xC6\xD3\xEB.\xD4\x93m\xB2x+4\xDA"... to UTF-16

[!] string size(97290) > stringtable size(58). truncated to 56

[!] string size(40120) > stringtable size(304). truncated to 302

[!] cannot convert "E\v\\\xA8\xDA\x10\x02\x01cu\xF93\xD7-\xB4]"... to UTF-16

[!] string size(33930) > stringtable size(80). truncated to 78

[!] cannot convert "\tC\xB2]\x90ID(SI\x14$\x0F;Y\t"... to UTF-16

[!] string size(103078) > stringtable size(64). truncated to 62

[!] cannot convert "\xA2\xE9V\x81B\xAA\xAErSn\xF1m\xB1\xD8\x82\xEB"... to UTF-16

[!] string size(56566) > stringtable size(142). truncated to 140

[!] cannot convert "\x163\eB\xEC\xD4\xB2s'p'\xA0\x96\xBD\x84\xB9"... to UTF-16

[!] string size(37452) > stringtable size(274). truncated to 272

[!] cannot convert "g\x10&\xEA\x8A\xFA\xC7 Fo\xEB!DOCT"... to UTF-16

[!] refusing to read CURDIRENTRY beyond resource size

ipnetinfo.exe-