filenameSearchMyFiles.exe
size82016 (0x14060)
md5b418f13912721928c177587e26fa73d7
typePE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
9540354
93403520
6492105
28917811
10300
2592103
1145072735
124507271
120507271

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections3
TimeDateStamp0x51c745fa
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x103
Magic0x10b
LinkerVersion8.0
SizeOfCode0x11000
SizeOfInitializedData0x2000
SizeOfUninitializedData0x17000
AddressOfEntryPoint0x28310
BaseOfCode0x18000
BaseOfData0x29000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x2b000
SizeOfHeaders0x1000
CheckSum0x21fc4
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

UPX v0.89.6 - v1.02 / v1.05 - v1.22

This file is packed with UPX. Analysis will be incomplete without unpacking.
We can unpack it for you.

»» Analyze unpacked file

Sections

namevavsizeraw sizeflags
UPX00x10000x170000RWX UDATA
UPX10x180000x110000x10600RWX IDATA
.rsrc0x290000x20000x1e00RW- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x2aa040x2ac
RESOURCE0x290000x1a04
EXCEPTION00
SECURITY0x128000x1860
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
CURSOR#13081252
BITMAP#10411281252
BITMAP#1332161252
BITMAP#1342161252
ICON#222161252
ICON#313841252
MENU#10223761252
MENU#1047861252
MENU#110201252
DIALOG#1051621252
DIALOG#1076621252
DIALOG#10938301252
DIALOG#1122501252
DIALOG#10968221252
STRING#17621252
STRING#26161252
STRING#7621252
STRING#8701252
STRING#93021252
STRING#101921252
STRING#322801252
STRING#38821252
STRING#391321252
STRING#441381252
STRING#45561252
STRING#631741252
STRING#642101252
STRING#691101252
STRING#703181252
ACCELERATORS#1031441252
GROUP_CURSOR#103201252
GROUP_ICON#101341252
VERSION#17281252
MANIFEST#13621252
idlangstring
01033
37 3b de 2c 9a 6c 17 5c  f5 7b 0d 12 b0 2c e1 a5  |7;.,.l.\.{...,..|
5c b0 b2 17 83 23 56 89  1d 18 2c 18 59 b5 a1 00  |\....#V...,.Y...|
8c 2d 3b 84 af 58 09 17  30 58 b9 b1 cd 03 39 07  |.-;..X..0X....9.|
45 03 43 21 5e 4c 62 5d  c7 15 90 a9 86 25 6f 45  |E.C!^Lb].....%oE|
2c 5b 12 ef 01 a5 c7 1f  d9 c2 42 42 1f 4f 1d fb  |,[........BB.O..|
4e b3 1a 6b 63 b9 79 6f  26 4d e2 2d d7 c7 11 5e  |N..kc.yo&M.-...^|
a4 03 21 9f 4c a1 15 15  e3 3b f4 3d 53 8d 67 85  |..!.L....;.=S.g.|
b0 24 cd 4e a7 0f 4d 9b  6e 45 18 d8 43 bf d7 66  |.$.N..M.nE..C..f|
6c 5b b7 fe 0e ad 20 31  2e 32 2e 37 20 4f 70 79  |l[.... 1.2.7 Opy|
ea 67 7d 81 ff db 68 74  0f 39 39 35 2d 32 30 31  |.g}...ht.995-201|
32 20 4d 01 6b 20 41 64  2c 40 75 6d 73 72 e8 03  |2 M.k Ad,@umsr..|
29 05 0b 11 6c 14 41 07  68 09 54 05 0d 0d b3 0b  |)...l.A.h.T.....|
b9 0f 5d 53 c7 bf bb 13  00 17 00 1b 00 1f c3 2b  |..]S...........+|
2b 3b 95 53 a3 e0 ff 00  d7 83 00 a3 00 c3 00 e3  |+;.S............|
00 2f 0c 32 24 9f 01 10  11 12 32 c8 20 83 13 14  |./.2$.....2. ...|
15 f6 04 d4 0d 10 b9 44  21 02 83 0d 57 d7 0d 07  |.......D!...W...|
7f 0d 39 19 89 bf 7f 6b  b7 bb 41 d7 81 00 c1 1f  |..9....k..A.....|
01 81 02 6c 03 01 04 01  06 01 d8 c0 fe ff 08 01  |...l............|
0c 01 10 01 18 01 20 01  30 01 40 01 60 7f 73 34  |...... .0.@.`.s4|
dd 37 6c 6b 63 16 01 17  18 d3 34 4d d3 19 1a 1b  |.7lkc.....4M....|
1c 1d b3 ed b6 4d 40 c4  c3 69 b8 03 62 85 07 ac  |.....M@..i..b...|
48 d7 34 5d 9c 03 90 7c  6c 1b 54 97 37 b7 3b 60  |H.4]...|l.T.7.;`|
07 6c 08 50 03 6b 14 08  73 07 1f 6e 97 c2 75 0b  |.l.P.k..s..n..u.|
70 03 2d 09 c0 81 07 0a  f7 b9 a6 e9 0f 60 20 a0  |p.-..........` .|
07 2f 80 1f 4d d3 35 4d  40 e0 06 0f 58 18 90 f9  |./..M.5M@...X...|
a6 e9 6e a5 07 3b 3f 78  38 d0 00 11 07 11 a6 69  |..n..;?x8......i|
9a a6 68 28 b0 08 88 76  a6 69 9a 48 f0 04 54 db  |..h(...v.i.H..T.|
08 e3 69 9a a6 e9 3f 2b  74 34 c8 0d a6 69 9a a6  |..i...?+t4...i..|
64 24 a8 04 84 37 dd 67  9a 44 e8 4f 5c 0f 1c 98  |d$...7.g.D.O\...|
00 14 5d d7 34 cd 07 53  7c 3c d8 cf 17 7f 6c 34  |..].4..S|<....l4|
4d d3 34 2c b8 0c 8c 4c  d3 34 4d d3 f8 03 52 12  |M.4,...L.4M...R.|
a3 4d d3 34 4d 23 72 32  c4 0b 62 34 4d d3 34 22  |.M.4M#r2..b4M.4"|
a4 02 82 42 d3 34 4d d3  e4 07 5a 1a 94 5d d3 34  |...B.4M...Z..].4|
4d 43 7a 3a d4 13 3f 6a  34 4d d3 34 2a b4 0a 8a  |MCz:..?j4M.4*...|
4a 5b 30 4d d3 f4 05 56  d3 40 ca 4d d3 34 9b 7f  |J[0M...V.@.M.4..|
33 76 36 cc 0f 34 4d d3  34 66 26 ac 06 86 d3 34  |3v6..4M.4f&....4|
4d d3 46 ec 09 5e 1e 4d  d3 34 4d 9c 63 7e 3e dc  |M.F..^.M.4M.c~>.|
1b 74 5d d3 74 0f 6e 2e  bc 07 0e 0f 8e d3 0d 42  |.t].t.n........B|
d3 4e fc ff 51 ff 11 48  d3 0c 42 83 ff 71 31 c2  |.N..Q..H..B..q1.|
d3 34 4d 33 61 21 a2 01  81 34 cd 20 4d 41 e2 59  |.4M3a!...4. MA.Y|
19 92 0c d2 34 83 79 39  d2 69 d3 34 4d d3 29 b2  |....4.y9.i.4M.).|
09 89 49 0b 26 33 48 f2  55 3b 5b 01 83 34 cd 09  |..I.&3H.U;[..4..|
ff 75 35 ca 65 34 4d d3  34 25 aa 05 85 45 48 d3  |.u5.e4M.4%...EH.|
0c d2 ea 5d 1d 9a cd 20  4d 33 7d 3d da 6d 2d 34  |...]... M3}=.m-4|
4d d3 34 ba 0d 8d 4d fa  0c d2 34 83 53 13 c3 73  |M.4...M...4.S..s|
4d 33 48 d3 33 c6 63 23  a6 20 4d d3 34 03 83 43  |M3H.3.c#. M.4..C|
e6 34 83 34 cd 5b 1b 96  7b 3b 4d d3 0c d2 d6 6b  |.4.4.[..{;M....k|
2b b6 0b 33 48 d3 34 8b  4b f6                    |+..3H.4.K.      |
161033
d3 0c 48 17 77 37 ce d3  34 4d 33 67 27 ae 07 87  |..H.w7..4M3g'...|
34 cd 20 4d 47 ee 5f 1f  9e 0d d2 34 83 7f 3f de  |4. MG._....4..?.|
6f a6 fb 5c d3 0f 2f be  07 4f 8f 0f 4f 19 92 a1  |o..\../..O..O...|
a4 fe ff c1 a1 21 19 92  21 e1 91 92 21 19 92 d1  |.....!..!...!...|
b1 f1 86 64 48 86 c9 a9  e9 48 86 64 48 99 d9 19  |...dH....H.dH...|
4a 86 64 b9 f9 c5 21 19  92 21 a5 e5 92 21 19 92  |J.d...!..!...!..|
95 d5 b5 86 64 28 19 f5  cd ad 48 86 64 48 ed 9d  |....d(....H.dH..|
64 48 86 64 dd bd fd 21  19 92 a1 c3 a3 92 21 19  |dH.d...!......!.|
92 e3 93 d3 86 92 21 19  b3 f3 cb 48 86 64 48 ab  |......!....H.dH.|
eb 64 48 86 64 9b db bb  21 19 4a 86 fb c7 92 21  |.dH.d...!.J....!|
19 92 a7 e7 97 19 92 21  19 d7 b7 f7 48 86 64 28  |.......!....H.d(|
cf af 64 48 86 64 ef 9f  df 85 6d 48 86 bf ff 3f  |..dH.d....mH...?|
05 cf bf 2d 2c b4 17 03  77 05 a7 1b 07 10 11 05  |...-,...w.......|
05 00 db da f2 97 19 04  15 05 41 00 1d 40 1f ef  |..........A..@..|
18 07 1b e5 2f 7f 02 14  05 21 00 1c 20 12 05 09  |..../....!.. ...|
00 1a ad 05 69 9a cd b5  81 af ba 3f 02 81 19 e5  |....i......?....|
59 9e e5 18 07 06 61 60  9e e5 59 9e 04 03 31 30  |Y.....a`..Y...10|
0d 0c bd 62 31 59 c1 df  56 86 36 43 0f 27 06 a9  |...b1Y..V.6C.'..|
14 0b 37 19 da 9a a1 0c  3d 29 5b 0e 49 bf f4 7f  |..7.....=)[.I...|
cc b1 00 96 30 07 77 2c  61 0e ee ba 51 e8 19 c4  |....0.w,a...Q...|
6d 07 8f fc ff ff ff f4  6a 70 35 a5 63 e9 a3 95  |m.......jp5.c...|
64 9e 32 88 db 0e a4 b8  dc 79 1e e9 d5 e0 88 d9  |d.2......y......|
d2 97 2b 4c b6 ff ff ff  6f ed 7c b1 7e 07 2d b8  |..+L....o.|.~.-.|
e7 91 1d bf 90 64 10 b7  1d f2 20 b0 6a 48 71 b9  |.....d.... .jHq.|
f3 de 41 be 84 ff ff ff  ff 7d d4 da 1a eb e4 dd  |..A......}......|
6d 51 b5 d4 f4 c7 85 d3  83 56 98 6c 13 c0 a8 6b  |mQ.......V.l...k|
64 7a f9 62 fd ec c9 65  8a ff 6f fc ff 4f 5c 01  |dz.b...e..o..O\.|
14 d9 6c 06 63 63 3d 0f  fa f5 0d 30 c8 20 6e 3b  |..l.cc=....0. n;|
5e 10 69 4c e4 41 60 ff  ff ff ff d5 72 71 67 a2  |^.iL.A`.....rqg.|
d1 e4 03 3c 47 d4 04 4b  fd 85 0d d2 6b b5 0a a5  |...
961033퐳ﾸ漆즢砇츴踏蒨領රꕪ￿翿㴭࡭沗酤封凴歫慢ᱬヘ蕥拿
1121033
95 06 6c 7b a5 01 1b c1  f4 cc 57 c4 0f f5 c6 d9  |..l{......W.....|
b0 65 50 e9 b7 12 ea f0  ff ff ff b8 be 8b 7c 88  |.eP...........|.|
b9 fc df 1d dd 62 49 2d  da 15 f3 7c d3 8c 65 4c  |.....bI-...|..eL|
d4 fb 58 61 b2 4d ce db  ff 2f b0 2c 3a 99 bc a3  |..Xa.M.../.,:...|
e2 30 bb d4 41 a5                                 |.0..A.          |
1281033
d7 95 d8 61 c4 ff ff ff  ff d1 a4 fb f4 d6 d3 6a  |...a...........j|
e9 69 43 fc d9 6e 34 46  88 67 ad d0 b8 60 da 73  |.iC..n4F.g...`.s|
2d 04 44 e5 1d 03 33 5f  4c fd ff ff ff 0a aa c9  |-.D...3_L.......|
7c 0d dd 3c 71 05 50 aa  41 02 27 10 10 0b be 86  ||..jm..Zjz|
0b cf 0e e4 9d ff 90 27  ae ff 5f fa bf 52 b1 9e  |.......'.._..R..|
07 7d 44 93 0f f0 d2 a3  38 68 f2 01 1e fe c2 06  |.}D.....8h......|
69 5d 57 62 f7 ff ff ff  ff cb 67 65 80 71 36 6c  |i]Wb......ge.q6l|
19 e7 06 6b 6e 76 1b d4  fe e0 2b d3 89 5a 7a da  |...knv....+..Zz.|
10 cc 4a dd 67 6f df b9  f9 ff ff ff ff f9 ef be  |..J.go..........|
8e 43 be b7 17 d5 8e b0  60 e8 a3 d6 d6 7e 93 d1  |.C......`....~..|
a1 c4 c2 d8 38 52 f2 df  4f f1 67 bb d1 ff ff ff  |....8R..O.g.....|
ff 67 57 bc a6 dd 06 b5  3f 4b 36 b2 48 da        |.gW.....?K6.H.  |
1441033
d8 4c 1b 0a af f6 4a 03  36 60 7a 04 41 c3 ef 60  |.L....J.6`z.A..`|
df ff ff ff ff 55 df 67  a8 ef 8e 6e 31 79 be 69  |.....U.g...n1y.i|
46 8c b3 61 cb 1a 83 66  bc a0 d2 6f 25 36 e2 68  |F..a...f...o%6.h|
52 95 77 0c cc ff ff ff  ff 03 47 0b bb b9 16 02  |R.w.......G.....|
22 2f 26 05 55 be 3b ba  c5 28 0b bd b2 92 5a b4  |"/&.U.;..(....Z.|
2b 04 6a b3 5c a7 ff d7  c2 fd ff ff ff 31 cf d0  |+.j.\........1..|
b5 8b 9e d9 2c 1d ae de  5b b0 c2 64 9b 26 f2 63  |....,...[..d.&.c|
ec 9c a3 6a 75 0a 93 6d  02 a9 06 ff 5b ff 0b ec  |...ju..m....[...|
3f 36 0e eb 85 67 07 72  13 3e 05 82 4a bf 95 14  |?6...g.r.>..J...|
7a b8 e2 ff ff ff ff ae  2b b1 7b 38 1b b6 0c 9b  |z.......+.{8....|
8e d2 92 0d be d5 e5 b7  ef dc 7c 21 df db 0b d4  |..........|!....|
d2 d3 86 42 e2 d4 f1 c6  ff ff ff f8 b3 dd 68 6e  |...B..........hn|
4961033
83 da 1f cd 16 be 81 5b  26 b9 f6 e1 77 b0 6f 77  |.......[&...w.ow|
47 b7 18 e6 5a 7d ff bf  44 d4 70 55 ca 3b 06 66  |G...Z}..D.pU.;.f|
5c 0b 01 11 ff 9e 65 8f  69 ff ff 37 fe ae 62 f8  |\.....e.i..7..b.|
d3 ff 6b 61 c4 6c 16 78  e2 0a a0 ee d2 0d d7 54  |..ka.l.x.......T|
83 04 4e c2 b3 03 39 ff  ff ff ff 61 26 67 a7 f7  |..N...9....a&g..|
16 60 d0 4d 47 69 49 db  77 6e 3e 4a 6a d1 ae dc  |.`.MGiI.wn>Jj...|
5a d6 d9 66 0b df 40 f0  3b d8 37 ff ff ff ff 53  |Z..f..@.;.7....S|
ae bc a9 c5 9e bb de 7f  cf b2 47 e9 ff b5 30 1c  |..........G...0.|
f2 bd bd 8a c2 ba ca 30  93 b3 53 a6 a3 b4 24 ff  |.......0..S...$.|
ff ff ff 05 36 d0 ba 93  06 d7 cd 29 57 de 54 bf  |....6......)W.T.|
67 d9 23 2e 7a 66 b3 b8  4a 61 c4 02 1b 68 5d 94  |g.#.zf..Ja...h].|
2b 6f 2a ff 4f ff ff 37  be 0b b4 a1 8e 0c c3 1b  |+o*.O..7........|
df 05 5a 8d ef 02 2d ff  41 31 1b 19 82 62 36 32  |..Z...-.A1...b62|
c3 f8 ff c6 c2 53 2d 23  c5 d8 45 f4 77 7d 86 a7  |.....S-#..E.w}..|
5a 56 c7 96 41 4f ff ff  ff 97 52 d9 c8 49 bb c2  |ZV..AO....R..I..|
d1 8a e8 ef fa cb d9 f4  e3 0c 4f b5 ac 4d 7e ae  |..........O..M~.|
b5 8e 2d 83 9e ff ff ff  ff cf 1c 98 87 51 12 c2  |..-..........Q..|
4a 10 23 d9 53 d3 70 f4                           |J.#.S.p.        |
5921033啡껗ᐮ뗦휷颵＜譿雿莄夅ᮘᢂ魞﫛뀭쮚ꤶ嵝＜￿泿ｬ㿟푁ພ쵚⒢閄ᗣ貟䘠Ʝ睡뺩￧
6081033
ff d0 f3 e8 24 83 de c3  65 b2 c5 da aa ae 31 eb  |....$...e.....1.|
9f 46 44 28 cc 6b 6f 69  fd 70 76 ae 6b ff ff 06  |.FD(.koi.pv.k...|
ff 31 39 ef 5a 2a 20 2c  09 40 6d 38 1c 12 f3 36  |.19.Z* ,.@m8...6|
46 df b2 07 5d c6 71 54  70 e1 a5 80 a5 ed 82 6b  |F...].qTp......k|
84 2a bb b6 e1 ff ff ff  7f a2 75 91 1c 89 34 a0  |.*........u...4.|
07 90 fb bc 9f 17 ba 8d  84 0e 79 de a9 25 38 ef  |..........y..%8.|
b2 3c ff 79 f3 73 be d6  ff ff ff 48 e8 6a 7d 1b  |.<.y.s.....H.j}.|
c5 41 3c 2a de 58 05 4f  79 f0 44 7e 62 e9 87 2d  |.A<*.X.Oy.D~b..-|
4f c2 c6 1c                                       |O...            |
6881033
54 08 ff ff ff ff 8a 15  94 40 bb 0e 8d 83 e8 23  |T........@.....#|
a6 c2 d9 38 bf 0d c5 a0  38 4c f4 bb 21 8f a7 96  |...8....8L..!...|
0a ce 96 8d 13 5f f8 ff  02 4b cc 5c 48 31 d7 45  |....._...K.\H1.E|
8b 62 fa 6e ca 53 e5 54  5d bb ba fe ff 7f e3 15  |.b.n.S.T].......|
6c a0 c5 3f 8d 88 97 0e  96 91 50 98 d7 de 11 a9  |l..?......P.....|
cc c7 d2 fa e1 ec 93 cb  ff ff ff b7 e2 5c d7 62  |.............\.b|
72 1d e6 79 6b de b5 54  40 9f 84 4f 59 58 12 0e  |r..yk..T@..OYX..|
16 19 23 15 0f da 70 2f  f1 c6 ff 38 24 9b 41 23  |..#...p/...8$.A#|
3d a7 6b fd 65 23 e6 7c  25 93                    |=.k.e#.|%.      |
7041033뿿탵ꍎ嚮鿢ᢊ찡㎧ﵠ⪼괤탮됿￿៿ቮ沟লꮆ䠤匕⧐繆棻敷
9921033
e2 f6 79 3f 2f ff ff ff  ff b7 48 24 36 74 1b 09  |..y?/.....H$6t..|
1d 35 2a 12 04 f2 bc 53  4b b3 8d 48 52 70 de 65  |.5*....SK..HRp.e|
79 31 ef 7e 60 fe f3 e6  e7 ff ff ff ff bf c2 fd  |y1.~`...........|
fe 7c 91 d0 d5 3d a0 cb  cc fa 36 8a 83 bb 07 91  |.|...=....6.....|
9a 78 54 bc b1 39 65 a7  a8 4b 98 83 3b ff ff ff  |.xT..9e..K..;...|
ff 0a a9 98 22 c9 fa b5  09 88 cb ae 10 4f 5d ef  |...."........O].|
5f 0e 6c f4 46 cd 3f d9  6d 8c 0e c2 74 43 12 5a  |_.l.F.?.m...tC.Z|
f3 17 fa ff ff 02 23 41  ea c1 70 6c c1 80 41 77  |......#A..pl..Aw|
d8 47 d7 36 97 06 e6 2d  8e c5 72 a5 84 ff 02 ff  |.G.6...-..r.....|
ff 84 1b bc 1a 8a 41 71  5b bb 5a 68 98 e8 77 43  |......Aq[.Zh..wC|
d9 d8 5a 1e 4f 2d 15 5f  7e 7f 83 8d fe 36        |..Z.O-._~....6  |
10081033
2d 1b 27 dd 3a 3e 83 98  b9 53 31 83 a0 ff ff ff  |-.'.:>...S1.....|
ff 90 62 ae 8b d1 53 b5  92 16 c5 f4 dd 57 f4 ef  |..b...S......W..|
c4 94 a7 c2 ef d5 96 d9  f6 e9 bc 07 ae a8 8d 1c  |................|
b7 ff 2f fc 0b 20 31 9c  2a ef 2a 85 ed 2a ca ac  |../.. 1.*.*..*..|
48 70 d3 6f 1b 5d f8 2e  2a ff ff 2f fc 46 e1 e1  |Hp.o.]..*../.F..|
36 de 66 c6 c5 7f 63 54  e8 54 22 65 f3 4d e5 f3  |6.f...cT.T"e.M..|
b2 02 a4 c2 a9 1b 67 ff  ff ff ff 91 84 30 26 a0  |......g......0&.|
9f 29 b8 ae c5 e4 f9 9f  de fd 3a cc f3 d6 7b fd  |.)........:...{.|
e8 cf bc 6b a9 80 fd 5a  b2 99 3e ff ff ff 12 b3  |...k...Z..>.....|
b2 7f 38 84 ab b0 24 1c  2c f1 15 07 35 32 46 2a  |..8...$.,...52F*|
1e 73 77 31 07 b4 e1 fe  1b ff ff 70 48 f5 d0 6b  |.sw1.......pH..k|
51 36 83 46 7a 77 b2 5d  63 4e d7 d6 0f e6 e1 d2  |Q6.Fzw.]cN......|
cc b5 cc f9 ff ff ff 37  26 d7 e0 4a 12 96 af 0b  |.......7&..J....|
23 8d                                             |#.              |
10881033
70 a0 9d 89 41 bb 84 46  5d 23 03 07 6c 38 1a ff  |p...A..F]#..l8..|
ff ff ff c4 3f 15 31 85  0e 0e 28 42 98 4f 67 03  |....?.1...(B.Og.|
a9 54 7e c0 fa 79 55 81  cb 62 4c 1f c5 38 81 5e  |.T~..yU..bL..8.^|
f4 23 98 ff ff 16 ff 9d  a7 0e b3 dc 96 15 aa 15  |.#..............|
54 e5 5a 31 4f fc 99 62  62 d7 d8 53 79 ce 17 ff  |T.Z1O..bb..Sy...|
ff ff ff 4f e1 49 56 7e  fa 50 95 2d d7 7b d4 1c  |...O.IV~.P.-.{..|
cc 62 13 8a 8d 2d 52 bb  96 34 91 e8 bb 1f        |.b...-R..4....  |
11041033
a0 06 ec 6f f1 ff ff f3  7e 5e ad c2 65 47 6e 91  |...o....~^..eGn.|
48 6c 2f a0 53 75 e8 36  12 3a a9 7b 23 6a 54 ff  |Hl/.Su.6.:.{#jT.|
37 7e 8b 24 d9 65 3f 11  e4 79 78 a5 48 bc 8f 66  |7~.$.e?..yx.H..f|
1b 91 a4 27 2a ff ff ed  ff 8a bd e0 bc cb f2 a1  |...'*...........|
8d d0 eb 62 f2 c0 23 ef  e6 d9 bd e1 bc 14 fc d0  |...b..#.........|
a7 0d 3f 83 8a ff b7 ff  ff 26 7e b2 91 3f b9 24  |..?......&~..?.$|
d0 70 f8 15 cb 69 3b 46  e6 42 e0 fd 5b b5 6b 65  |.p...i;F.B..[.ke|
dc f4 5a 7e c5 4f ff ff  ff 37 09 53 ee 76 38 48  |..Z~.O...7.S.v8H|
f7 b1 ae 09 b8 f0 9f 12  a1 33 cc 3f 8a 72 fd 24  |.........3.?.r.$|
93 ff 37 d0 5f fa ff 6a  c2 01 6e d4 84 03 59 be  |..7._..j..n...Y.|
46 02 dc a8 58 eb c2 cb  06 b2 7c 0b e2 bf 11 9f  |F...X.....|.....|
16 4f 05 b8 51 13 0e 8f  9a 2f 75 fb 7f d6 85 97  |.O..Q..../u.....|
0d e1 ef 55 0c 64 f9 1a  49 93 d8 6d 2d 9e 0a ff  |...U.d..I..m-...|
ff ff d6 3d 47 d1 70 a3  26 1c 47 c9 e4 1d 1e 77  |...=G.p.&.G....w|
a2 1f 29 1d 60 1e ac 0b  2f 1b 9b 61 ed ff ff ff  |..).`.../..a....|
ff 1a c2 df ab 18 f5 b5  69 19 c8 f2 35 12 ff 98  |........i...5...|
f7 13 a6 26 b1 11 91 4c  73 10 14 5a 3c 15 23 30  |...&...Ls..Z<.#0|
fe ff ff ff 02 52 8e b8  16 4d e4 7a 17 e0 46 4d  |.....R...M.z..FM|
38 d7 2c 8f 39 8e 92 c9  3b b9 f8 0b 3a ff 2f f1  |8.,.9...;...:./.|
ff 3c ee 44 3f 0b 84 86  3e 52 3a c0 3c 38        |.<.D?...>R:.<8  |
module_namehintordfunction_name
KERNEL32.DLLLoadLibraryA
KERNEL32.DLLGetProcAddress
KERNEL32.DLLVirtualProtect
KERNEL32.DLLVirtualAlloc
KERNEL32.DLLVirtualFree
KERNEL32.DLLExitProcess
ADVAPI32.dllRegCloseKey
COMCTL32.dll17
comdlg32.dllFindTextW
GDI32.dllSetBkMode
MPR.dllWNetGetUniversalNameW
msvcrt.dllexit
ole32.dllDoDragDrop
SHELL32.dllSHGetMalloc
USER32.dllGetDC
VERSION.dllVerQueryValueW

StringTable 040904b0

CompanyNameNirSoft
FileDescriptionSearchMyFiles
FileVersion2.40
InternalNameSearchMyFiles
LegalCopyrightCopyright © 2009 - 2013 Nir Sofer
OriginalFilenameSearchMyFiles.exe
ProductNameSearchMyFiles
ProductVersion2.40

VS_FIXEDFILEINFO

FileVersion2.4.0.0
ProductVersion2.4.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0

Signers (1)

issuer: /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO Code Signing CA 2
serial: A1A3E7280E0A2DF12F84309649820519

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
        Validity
            Not Before: Jun  7 08:09:10 2005 GMT
            Not After : May 30 10:48:38 2020 GMT
        Subject: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http:\/\/www.usertrust.com, CN=UTN-USERFirst-Object
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ce:aa:81:3f:a3:a3:61:78:aa:31:00:55:95:11:
                    9e:27:0f:1f:1c:df:3a:9b:82:68:30:c0:4a:61:1d:
                    f1:2f:0e:fa:be:79:f7:a5:23:ef:55:51:96:84:cd:
                    db:e3:b9:6e:3e:31:d8:0a:20:67:c7:f4:d9:bf:94:
                    eb:47:04:3e:02:ce:2a:a2:5d:87:04:09:f6:30:9d:
                    18:8a:97:b2:aa:1c:fc:41:d2:a1:36:cb:fb:3d:91:
                    ba:e7:d9:70:35:fa:e4:e7:90:c3:9b:a3:9b:d3:3c:
                    f5:12:99:77:b1:b7:09:e0:68:e6:1c:b8:f3:94:63:
                    88:6a:6a:fe:0b:76:c9:be:f4:22:e4:67:b9:ab:1a:
                    5e:77:c1:85:07:dd:0d:6c:bf:ee:06:c7:77:6a:41:
                    9e:a7:0f:d7:fb:ee:94:17:b7:fc:85:be:a4:ab:c4:
                    1c:31:dd:d7:b6:d1:e4:f0:ef:df:16:8f:b2:52:93:
                    d7:a1:d4:89:a1:07:2e:bf:e1:01:12:42:1e:1a:e1:
                    d8:95:34:db:64:79:28:ff:ba:2e:11:c2:e5:e8:5b:
                    92:48:fb:47:0b:c2:6c:da:ad:32:83:41:f3:a5:e5:
                    41:70:fd:65:90:6d:fa:fa:51:c4:f9:bd:96:2b:19:
                    04:2c:d3:6d:a7:dc:f0:7f:6f:83:65:e2:6a:ab:87:
                    86:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                AD:BD:98:7A:34:B4:26:F7:FA:C4:26:54:EF:03:BD:E0:24:CB:54:1A
            X509v3 Subject Key Identifier: 
                DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.usertrust.com/AddTrustExternalCARoot.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.usertrust.com
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        4d:42:2f:a6:c1:8a:eb:07:80:90:58:46:8c:f8:19:39:66:2a:
        3c:5a:2c:6d:cf:d4:d9:87:55:8d:79:0b:12:88:7b:40:8f:d5:
        c7:f8:4b:8d:55:16:63:ad:b7:57:dc:3b:2b:bd:d3:c1:4f:1e:
        03:87:4b:44:9b:e3:e2:40:45:26:f3:26:49:2b:6a:84:f1:54:
        7a:d4:42:da:fc:d3:6a:bb:66:7e:ca:9e:ea:e9:bb:dc:07:c7:
        c3:92:4e:83:3c:81:49:9f:92:d5:32:09:ea:49:2e:a1:11:71:
        9a:36:d2:c5:4e:68:b6:cb:0e:1b:25:16:af:6c:de:5d:76:d8:
        1f:72:b1:93:26:86:17:db:18:de:af:45:e9:df:fb:98:af:14:
        18:ed:a4:5e:f6:89:94:45:f0:55:04:4a:dd:ff:27:dd:06:4a:
        40:f6:b4:bc:f1:e4:0f:99:02:bb:fd:5d:0e:2e:28:c1:be:3b:
        5f:1a:3f:97:10:84:bc:16:3e:d8:a3:9c:63:1d:66:cb:5c:5f:
        da:3e:f3:0f:0a:09:35:22:db:db:c0:3f:00:f9:e6:0d:5d:67:
        d1:fd:a0:1e:03:2b:d9:40:f7:be:cc:87:66:54:80:a6:a3:b8:
        f5:19:62:d5:d2:26:b1:98:26:ee:9a:cb:44:a7:45:5a:81:95:
        15:1a:f5:51

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http:\/\/www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: May 10 00:00:00 2010 GMT
            Not After : May 10 23:59:59 2015 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping Signer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bc:35:a0:36:70:22:81:11:c3:b2:83:b9:d3:28:
                    c6:36:cd:25:6b:a9:7b:b2:1c:f6:9b:51:9c:ef:35:
                    f4:ed:08:8e:5e:38:08:f8:77:3c:0a:42:e0:f3:70:
                    dc:a3:d7:ca:f5:4c:0b:cf:ff:22:9c:0a:7e:68:d6:
                    09:a2:2a:84:7b:a6:9d:b4:a9:c1:33:e2:ef:1f:17:
                    48:ca:3a:cd:46:e6:c5:aa:77:bd:e3:77:9a:fa:47:
                    53:40:28:59:43:93:f1:a4:81:ea:ef:80:b5:4f:a7:
                    08:ce:ba:6e:bc:ca:76:0c:97:64:59:86:24:bb:3d:
                    82:90:a8:55:b1:92:d3:a0:a7:05:ac:9f:53:25:08:
                    10:47:99:cd:98:de:68:e5:b4:50:78:a3:af:01:cc:
                    59:43:58:e4:76:6e:7e:ac:c7:e2:9e:1f:4f:b0:47:
                    2d:c8:0c:a3:49:27:80:75:8c:bb:06:91:65:0f:90:
                    9b:f4:ba:d1:81:c8:5c:6a:ec:14:e9:25:09:bf:23:
                    16:f4:95:46:40:40:21:bb:83:96:fd:86:1f:7a:c8:
                    0d:10:8e:a2:f8:19:07:58:7f:9f:bd:37:02:60:f2:
                    a4:e9:9d:44:3f:30:05:e4:a7:70:99:51:9a:e8:17:
                    f1:55:ca:b2:61:89:65:46:a7:6a:f2:58:46:7e:aa:
                    a0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8
            X509v3 Subject Key Identifier: 
                2E:2D:B0:0A:44:4A:D3:87:C0:02:07:CE:97:7D:50:62:20:FD:0F:83
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.usertrust.com
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        c8:fb:63:f8:0b:75:75:2c:3a:f1:f2:13:a7:2d:b6:a3:1a:9c:
        ad:01:07:d3:34:8e:77:e0:c2:6e:ae:02:5d:48:4f:a4:d2:21:
        b6:36:fd:2a:35:43:7c:6b:df:80:87:0b:15:f0:76:32:00:b4:
        ce:b5:67:a4:2f:2f:20:1b:9c:54:9e:83:3f:1f:5f:14:95:62:
        82:0f:22:41:22:1f:70:b3:f3:f7:42:de:6c:51:cd:4b:f8:21:
        ac:9b:3b:8c:b1:e5:e6:28:8f:ce:2a:8a:f9:aa:52:4d:8c:5b:
        77:ba:4d:5a:58:db:bb:6a:04:cc:52:1e:9d:e2:28:37:0e:bb:
        e7:0e:91:c7:f8:db:f1:81:98:eb:cd:37:b3:0e:ab:65:d3:62:
        ec:3a:a5:76:eb:13:a8:35:93:c9:2e:0a:01:ec:c0:e8:cc:3d:
        7e:b6:eb:e2:c1:ec:d3:14:92:82:66:87:50:dc:fd:50:97:ac:
        b3:4a:76:73:06:c4:86:11:3a:b3:5f:43:04:52:6f:ea:b3:d0:
        74:36:4c:ca:f1:1b:79:84:37:70:63:ad:74:b9:aa:0e:f3:98:
        b0:86:08:eb:db:e0:1f:8c:10:f2:39:64:9b:ae:4f:0a:2c:92:
        8a:4f:18:b5:91:e5:8d:1a:93:5f:1f:ae:f1:a6:f0:2e:97:d0:
        d2:f6:2b:3c

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http:\/\/www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: Aug 24 00:00:00 2011 GMT
            Not After : May 30 10:48:38 2020 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Code Signing CA 2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cb:f8:e7:a7:e8:f1:97:28:40:68:80:37:d2:c8:
                    3f:8e:92:8a:92:37:87:47:80:ea:4c:99:cf:6e:f9:
                    15:47:bd:ee:75:f4:44:ac:d0:c3:d4:4d:f7:19:c0:
                    d3:3c:4d:c1:47:b9:59:65:16:93:8c:d9:0a:84:9b:
                    9f:e8:f6:6a:63:58:fe:5f:dc:d1:7f:4b:51:9f:00:
                    1c:00:87:54:20:07:57:a0:82:c9:2f:98:af:33:8a:
                    bb:7b:80:22:25:6a:6c:af:c2:2c:6c:79:13:bd:a3:
                    2a:48:d6:b5:8e:61:55:e9:6b:e8:3d:80:bf:14:03:
                    85:18:8e:7e:4c:e9:c2:19:88:73:92:72:cd:fa:ff:
                    50:4d:cb:2c:a6:7b:1a:73:b1:00:90:2c:d9:32:e2:
                    fb:fd:ac:95:42:36:ec:34:c5:13:53:68:b2:c1:9f:
                    40:9f:da:7b:c8:9d:62:6c:93:a2:42:d7:79:9f:97:
                    4f:31:5b:50:21:a1:ab:af:d9:1c:b2:ce:75:be:5b:
                    2c:56:00:24:8d:11:c1:75:1f:f0:fe:d2:95:fe:f0:
                    e1:31:23:18:67:c0:5b:13:fd:5a:98:94:94:ff:ff:
                    59:02:1f:00:ac:e6:f1:f2:fa:3a:73:b3:1d:42:fc:
                    54:75:cf:51:31:2f:e3:db:81:d9:77:23:2a:4f:59:
                    ce:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8
            X509v3 Subject Key Identifier: 
                1E:C5:B1:2C:7D:87:DA:02:68:7C:25:BC:0C:07:84:3F:B6:CF:DE:F1
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl
            Authority Information Access: 
                CA Issuers - URI:http://crt.usertrust.com/UTNAddTrustObject_CA.crt
                OCSP - URI:http://ocsp.usertrust.com
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        95:89:77:93:68:01:5e:7c:d9:2d:37:07:90:5d:5a:42:5e:0c:
        64:b4:36:b5:0f:f6:ab:d5:39:27:de:22:46:a4:49:1c:66:4b:
        46:19:59:2e:79:49:03:f6:9c:92:df:6d:50:35:5c:0c:91:2e:
        60:03:59:d0:f1:64:f7:69:09:f6:7e:fe:eb:34:b3:6d:b1:bf:
        66:9c:a3:ba:31:78:b9:87:35:61:3d:92:31:1b:ef:f4:e8:9e:
        d6:ac:45:fa:0c:36:3c:80:67:bb:bd:ef:2e:c2:90:e1:3d:71:
        2f:3b:c1:b0:58:7e:45:c3:52:71:03:07:f6:f3:39:4d:8b:36:
        21:1b:01:df:d9:da:5e:2b:eb:0e:97:80:1e:44:1c:50:88:f5:
        c6:12:33:4a:a8:4d:a5:8d:2f:94:0c:7b:c6:bf:9a:2c:c3:32:
        cd:bd:8c:27:26:f0:e1:30:03:50:06:82:bc:f4:3b:b3:83:75:
        06:c6:ef:ba:ee:d3:80:f8:52:c6:ac:cb:79:f2:38:9e:7b:b0:
        92:58:42:91:05:c8:96:21:ad:b9:4b:16:81:14:69:f1:37:b0:
        fe:34:f7:dc:b0:df:97:f5:43:10:9b:76:8f:b4:65:f5:e8:9f:
        13:b7:1e:ac:6f:c4:69:8a:5f:ba:3c:61:7e:5e:49:86:23:13:
        2e:af:15:48

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a1:a3:e7:28:0e:0a:2d:f1:2f:84:30:96:49:82:05:19
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Code Signing CA 2
        Validity
            Not Before: Sep 17 00:00:00 2012 GMT
            Not After : Sep 17 23:59:59 2014 GMT
        Subject: C=IL/postalCode=52583, ST=Gush Dan, L=Ramat Gan/street=5 Hashoshanim st., O=Nir Sofer, CN=Nir Sofer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b2:e1:93:e8:3f:8b:6c:2b:a5:1c:e0:7e:22:ef:
                    98:23:87:63:22:fd:d6:e7:bd:1a:a8:45:6a:f4:a9:
                    09:0f:9f:91:ea:7a:78:94:11:eb:04:08:22:88:8b:
                    ed:7f:3f:8f:8b:db:3e:a7:22:7b:b4:41:f3:61:8e:
                    bf:6d:fc:30:24:bc:d4:36:5b:69:b7:f1:0e:91:31:
                    29:22:a9:29:3c:a2:d4:b4:b4:1a:ab:96:98:d3:16:
                    3a:3b:d2:78:63:4d:2d:c8:74:c9:2a:b6:37:86:03:
                    08:3a:7f:94:c3:f1:7b:31:e0:90:f3:e2:13:f1:31:
                    8a:66:6e:bc:93:f6:18:21:ac:c9:7a:6a:60:f7:73:
                    fc:8c:34:37:0b:9e:30:5f:3c:60:e1:b1:f6:c9:b9:
                    ac:c2:6a:59:e1:6a:45:79:8d:07:15:33:8f:48:c5:
                    e5:d8:61:99:b7:d2:7f:fa:c6:e3:be:e2:29:ad:0a:
                    d7:fb:03:9e:bd:b1:c2:cc:49:c0:8b:49:29:c0:9c:
                    70:ea:ca:0c:eb:07:28:ef:22:88:a6:6c:89:20:d1:
                    be:22:a7:17:cc:4d:cb:9c:1e:e8:3b:f2:49:d3:c3:
                    2b:da:b9:eb:66:24:69:0f:b1:09:10:3b:c7:2b:4e:
                    58:db:f7:e7:6b:27:ea:b1:f9:3a:39:fb:70:d6:1a:
                    61:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                1E:C5:B1:2C:7D:87:DA:02:68:7C:25:BC:0C:07:84:3F:B6:CF:DE:F1
            X509v3 Subject Key Identifier: 
                DF:14:8C:41:65:8A:73:1F:F2:16:DB:2D:3B:5F:52:83:09:40:75:D0
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                Code Signing
            Netscape Cert Type: 
                Object Signing
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.1.3.2
                  CPS: https://secure.comodo.net/CPS
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.comodoca.com/COMODOCodeSigningCA2.crl
            Authority Information Access: 
                CA Issuers - URI:http://crt.comodoca.com/COMODOCodeSigningCA2.crt
                OCSP - URI:http://ocsp.comodoca.com
            X509v3 Subject Alternative Name: 
                email:support@nirsoft.net
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        5f:6c:f3:96:b3:66:31:18:bb:c7:e7:dc:12:ea:b4:46:54:f3:
        5f:7b:9b:ae:0f:2d:b1:22:62:dd:25:ce:f4:b7:46:cc:ef:62:
        3e:af:9f:25:90:a8:3b:b1:26:e1:ce:9e:06:4a:ca:cb:a7:a1:
        77:94:d4:4c:b7:ce:28:ef:f6:bf:13:43:6f:b6:fd:3d:f0:04:
        87:53:11:07:4b:01:d2:23:6b:58:fe:be:15:e1:df:97:e3:d6:
        cf:35:a0:cf:2f:66:33:f3:db:57:66:cd:fe:44:45:a0:88:59:
        0f:b7:9c:05:30:71:50:39:6f:d1:d1:f8:31:f5:c6:d5:38:57:
        81:72:16:78:fa:7f:7a:9c:6d:bf:2e:97:41:cf:82:fd:d7:53:
        55:9e:dc:7d:f9:4a:fd:6e:17:5a:49:40:0f:21:94:bb:83:db:
        27:05:c6:33:7e:41:db:e1:32:98:a1:88:ee:7b:c2:ff:7b:61:
        4c:0d:14:40:6d:4d:0c:f0:9a:be:49:62:f7:a8:57:cd:a6:08:
        db:94:1e:d4:40:47:33:24:8d:2c:30:65:14:1a:52:10:f7:1d:
        51:e0:bb:8c:6d:8c:68:ef:cc:28:2f:ed:74:c4:15:ef:34:50:
        fb:b3:f3:2d:51:69:be:02:92:ba:5c:ab:b3:24:28:0c:44:2c:
        6a:b2:8e:12
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • : 
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • SHA1
          • d5 34 ac d9 5a e1 95 27  35 24 16 e6 50 da 2b 62  |.4..Z..'5$..P.+b|
b2 eb 4c 59                                       |..LY            |
    • Certificates
      • Certificate #0
        • 2
          • 42:1A:F2:94:09:84:19:1F:52:0A:4B:C6:24:26:A7:4B
          • RSA-SHA1: nil
          • Issuer
            • C: SE
            • O: AddTrust AB
            • OU: AddTrust External TTP Network
            • CN: AddTrust External CA Root
          • 2005-06-07 08:09:10 UTC: 2020-05-30 10:48:38 UTC
          • Subject
            • C: US
            • ST: UT
            • L: Salt Lake City
            • O: The USERTRUST Network
            • OU: http://www.usertrust.com
            • CN: UTN-USERFirst-Object
          • #5
            • rsaEncryption: nil
            • CE:AA:81:3F:A3:A3:61:78:AA:31:00:55:95:11:9E:27:
              0F:1F:1C:DF:3A:9B:82:68:30:C0:4A:61:1D:F1:2F:0E:
              FA:BE:79:F7:A5:23:EF:55:51:96:84:CD:DB:E3:B9:6E:
              3E:31:D8:0A:20:67:C7:F4:D9:BF:94:EB:47:04:3E:02:
              CE:2A:A2:5D:87:04:09:F6:30:9D:18:8A:97:B2:AA:1C:
              FC:41:D2:A1:36:CB:FB:3D:91:BA:E7:D9:70:35:FA:E4:
              E7:90:C3:9B:A3:9B:D3:3C:F5:12:99:77:B1:B7:09:E0:
              68:E6:1C:B8:F3:94:63:88:6A:6A:FE:0B:76:C9:BE:F4:
              22:E4:67:B9:AB:1A:5E:77:C1:85:07:DD:0D:6C:BF:EE:
              06:C7:77:6A:41:9E:A7:0F:D7:FB:EE:94:17:B7:FC:85:
              BE:A4:AB:C4:1C:31:DD:D7:B6:D1:E4:F0:EF:DF:16:8F:
              B2:52:93:D7:A1:D4:89:A1:07:2E:BF:E1:01:12:42:1E:
              1A:E1:D8:95:34:DB:64:79:28:FF:BA:2E:11:C2:E5:E8:
              5B:92:48:FB:47:0B:C2:6C:DA:AD:32:83:41:F3:A5:E5:
              41:70:FD:65:90:6D:FA:FA:51:C4:F9:BD:96:2B:19:04:
              2C:D3:6D:A7:DC:F0:7F:6F:83:65:E2:6A:AB:87:86:75              : 0x010001
          • #6
            • authorityKeyIdentifier: 
              ad bd 98 7a 34 b4 26 f7  fa c4 26 54 ef 03 bd e0  |...z4.&...&T....|
24 cb 54 1a                                       |$.T.            |
            • subjectKeyIdentifier: 
              da ed 64 74 14 9c 14 3c  ab dd 99 a9 bd 5b 28 4d  |..dt...<.....[(M|
8b 3c c9 d8                                       |.<..            |
            • keyUsage: true, 6
            • basicConstraints: true, true
            • certificatePolicies: anyPolicy
            • crlDistributionPoints: http://crl.usertrust.com/AddTrustExternalCARoot.crl
            • authorityInfoAccess
              • OCSP: http://ocsp.usertrust.com
        • RSA-SHA1: 
          4d 42 2f a6 c1 8a eb 07  80 90 58 46 8c f8 19 39  |MB/.......XF...9|
66 2a 3c 5a 2c 6d cf d4  d9 87 55 8d 79 0b 12 88  |f*...|
63 1d 66 cb 5c 5f da 3e  f3 0f 0a 09 35 22 db db  |c.f.\_.>....5"..|
c0 3f 00 f9 e6 0d 5d 67  d1 fd a0 1e 03 2b d9 40  |.?....]g.....+.@|
f7 be cc 87 66 54 80 a6  a3 b8 f5 19 62 d5 d2 26  |....fT......b..&|
b1 98 26 ee 9a cb 44 a7  45 5a 81 95 15 1a f5 51  |..&...D.EZ.....Q|
      • Certificate #1
        • 2
          • 47:8A:8E:FB:59:E1:D8:3F:0C:E1:42:D2:A2:87:07:BE
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • ST: UT
            • L: Salt Lake City
            • O: The USERTRUST Network
            • OU: http://www.usertrust.com
            • CN: UTN-USERFirst-Object
          • 2010-05-10 00:00:00 UTC: 2015-05-10 23:59:59 UTC
          • Subject
            • C: GB
            • ST: Greater Manchester
            • L: Salford
            • O: COMODO CA Limited
            • CN: COMODO Time Stamping Signer
          • #5
            • rsaEncryption: nil
            • BC:35:A0:36:70:22:81:11:C3:B2:83:B9:D3:28:C6:36:
              CD:25:6B:A9:7B:B2:1C:F6:9B:51:9C:EF:35:F4:ED:08:
              8E:5E:38:08:F8:77:3C:0A:42:E0:F3:70:DC:A3:D7:CA:
              F5:4C:0B:CF:FF:22:9C:0A:7E:68:D6:09:A2:2A:84:7B:
              A6:9D:B4:A9:C1:33:E2:EF:1F:17:48:CA:3A:CD:46:E6:
              C5:AA:77:BD:E3:77:9A:FA:47:53:40:28:59:43:93:F1:
              A4:81:EA:EF:80:B5:4F:A7:08:CE:BA:6E:BC:CA:76:0C:
              97:64:59:86:24:BB:3D:82:90:A8:55:B1:92:D3:A0:A7:
              05:AC:9F:53:25:08:10:47:99:CD:98:DE:68:E5:B4:50:
              78:A3:AF:01:CC:59:43:58:E4:76:6E:7E:AC:C7:E2:9E:
              1F:4F:B0:47:2D:C8:0C:A3:49:27:80:75:8C:BB:06:91:
              65:0F:90:9B:F4:BA:D1:81:C8:5C:6A:EC:14:E9:25:09:
              BF:23:16:F4:95:46:40:40:21:BB:83:96:FD:86:1F:7A:
              C8:0D:10:8E:A2:F8:19:07:58:7F:9F:BD:37:02:60:F2:
              A4:E9:9D:44:3F:30:05:E4:A7:70:99:51:9A:E8:17:F1:
              55:CA:B2:61:89:65:46:A7:6A:F2:58:46:7E:AA:A0:07              : 0x010001
          • #6
            • authorityKeyIdentifier: 
              da ed 64 74 14 9c 14 3c  ab dd 99 a9 bd 5b 28 4d  |..dt...<.....[(M|
8b 3c c9 d8                                       |.<..            |
            • subjectKeyIdentifier: 
              2e 2d b0 0a 44 4a d3 87  c0 02 07 ce 97 7d 50 62  |.-..DJ.......}Pb|
20 fd 0f 83                                       | ...            |
            • keyUsage: true, 0xc0
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: true, timeStamping
            • crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
            • authorityInfoAccess
              • OCSP: http://ocsp.usertrust.com
        • RSA-SHA1: 
          c8 fb 63 f8 0b 75 75 2c  3a f1 f2 13 a7 2d b6 a3  |..c..uu,:....-..|
1a 9c ad 01 07 d3 34 8e  77 e0 c2 6e ae 02 5d 48  |......4.w..n..]H|
4f a4 d2 21 b6 36 fd 2a  35 43 7c 6b df 80 87 0b  |O..!.6.*5C|k....|
15 f0 76 32 00 b4 ce b5  67 a4 2f 2f 20 1b 9c 54  |..v2....g.// ..T|
9e 83 3f 1f 5f 14 95 62  82 0f 22 41 22 1f 70 b3  |..?._..b.."A".p.|
f3 f7 42 de 6c 51 cd 4b  f8 21 ac 9b 3b 8c b1 e5  |..B.lQ.K.!..;...|
e6 28 8f ce 2a 8a f9 aa  52 4d 8c 5b 77 ba 4d 5a  |.(..*...RM.[w.MZ|
58 db bb 6a 04 cc 52 1e  9d e2 28 37 0e bb e7 0e  |X..j..R...(7....|
91 c7 f8 db f1 81 98 eb  cd 37 b3 0e ab 65 d3 62  |.........7...e.b|
ec 3a a5 76 eb 13 a8 35  93 c9 2e 0a 01 ec c0 e8  |.:.v...5........|
cc 3d 7e b6 eb e2 c1 ec  d3 14 92 82 66 87 50 dc  |.=~.........f.P.|
fd 50 97 ac b3 4a 76 73  06 c4 86 11 3a b3 5f 43  |.P...Jvs....:._C|
04 52 6f ea b3 d0 74 36  4c ca f1 1b 79 84 37 70  |.Ro...t6L...y.7p|
63 ad 74 b9 aa 0e f3 98  b0 86 08 eb db e0 1f 8c  |c.t.............|
10 f2 39 64 9b ae 4f 0a  2c 92 8a 4f 18 b5 91 e5  |..9d..O.,..O....|
8d 1a 93 5f 1f ae f1 a6  f0 2e 97 d0 d2 f6 2b 3c  |..._..........+<|
      • Certificate #2
        • 2
          • 10:70:9D:4F:F5:54:08:D7:30:60:01:D8:EA:91:75:BB
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • ST: UT
            • L: Salt Lake City
            • O: The USERTRUST Network
            • OU: http://www.usertrust.com
            • CN: UTN-USERFirst-Object
          • 2011-08-24 00:00:00 UTC: 2020-05-30 10:48:38 UTC
          • Subject
            • C: GB
            • ST: Greater Manchester
            • L: Salford
            • O: COMODO CA Limited
            • CN: COMODO Code Signing CA 2
          • #5
            • rsaEncryption: nil
            • CB:F8:E7:A7:E8:F1:97:28:40:68:80:37:D2:C8:3F:8E:
              92:8A:92:37:87:47:80:EA:4C:99:CF:6E:F9:15:47:BD:
              EE:75:F4:44:AC:D0:C3:D4:4D:F7:19:C0:D3:3C:4D:C1:
              47:B9:59:65:16:93:8C:D9:0A:84:9B:9F:E8:F6:6A:63:
              58:FE:5F:DC:D1:7F:4B:51:9F:00:1C:00:87:54:20:07:
              57:A0:82:C9:2F:98:AF:33:8A:BB:7B:80:22:25:6A:6C:
              AF:C2:2C:6C:79:13:BD:A3:2A:48:D6:B5:8E:61:55:E9:
              6B:E8:3D:80:BF:14:03:85:18:8E:7E:4C:E9:C2:19:88:
              73:92:72:CD:FA:FF:50:4D:CB:2C:A6:7B:1A:73:B1:00:
              90:2C:D9:32:E2:FB:FD:AC:95:42:36:EC:34:C5:13:53:
              68:B2:C1:9F:40:9F:DA:7B:C8:9D:62:6C:93:A2:42:D7:
              79:9F:97:4F:31:5B:50:21:A1:AB:AF:D9:1C:B2:CE:75:
              BE:5B:2C:56:00:24:8D:11:C1:75:1F:F0:FE:D2:95:FE:
              F0:E1:31:23:18:67:C0:5B:13:FD:5A:98:94:94:FF:FF:
              59:02:1F:00:AC:E6:F1:F2:FA:3A:73:B3:1D:42:FC:54:
              75:CF:51:31:2F:E3:DB:81:D9:77:23:2A:4F:59:CE:23              : 0x010001
          • #6
            • authorityKeyIdentifier: 
              da ed 64 74 14 9c 14 3c  ab dd 99 a9 bd 5b 28 4d  |..dt...<.....[(M|
8b 3c c9 d8                                       |.<..            |
            • subjectKeyIdentifier: 
              1e c5 b1 2c 7d 87 da 02  68 7c 25 bc 0c 07 84 3f  |...,}...h|%....?|
b6 cf de f1                                       |....            |
            • keyUsage: true, 6
            • basicConstraints
              • true
              • true: 0
            • extendedKeyUsage: codeSigning
            • certificatePolicies: anyPolicy
            • crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
            • authorityInfoAccess
              • #0
                • caIssuers: http://crt.usertrust.com/UTNAddTrustObject_CA.crt
                • OCSP: http://ocsp.usertrust.com
        • RSA-SHA1: 
          95 89 77 93 68 01 5e 7c  d9 2d 37 07 90 5d 5a 42  |..w.h.^|.-7..]ZB|
5e 0c 64 b4 36 b5 0f f6  ab d5 39 27 de 22 46 a4  |^.d.6.....9'."F.|
49 1c 66 4b 46 19 59 2e  79 49 03 f6 9c 92 df 6d  |I.fKF.Y.yI.....m|
50 35 5c 0c 91 2e 60 03  59 d0 f1 64 f7 69 09 f6  |P5\...`.Y..d.i..|
7e fe eb 34 b3 6d b1 bf  66 9c a3 ba 31 78 b9 87  |~..4.m..f...1x..|
35 61 3d 92 31 1b ef f4  e8 9e d6 ac 45 fa 0c 36  |5a=.1.......E..6|
3c 80 67 bb bd ef 2e c2  90 e1 3d 71 2f 3b c1 b0  |<.g.......=q/;..|
58 7e 45 c3 52 71 03 07  f6 f3 39 4d 8b 36 21 1b  |X~E.Rq....9M.6!.|
01 df d9 da 5e 2b eb 0e  97 80 1e 44 1c 50 88 f5  |....^+.....D.P..|
c6 12 33 4a a8 4d a5 8d  2f 94 0c 7b c6 bf 9a 2c  |..3J.M../..{...,|
c3 32 cd bd 8c 27 26 f0  e1 30 03 50 06 82 bc f4  |.2...'&..0.P....|
3b b3 83 75 06 c6 ef ba  ee d3 80 f8 52 c6 ac cb  |;..u........R...|
79 f2 38 9e 7b b0 92 58  42 91 05 c8 96 21 ad b9  |y.8.{..XB....!..|
4b 16 81 14 69 f1 37 b0  fe 34 f7 dc b0 df 97 f5  |K...i.7..4......|
43 10 9b 76 8f b4 65 f5  e8 9f 13 b7 1e ac 6f c4  |C..v..e.......o.|
69 8a 5f ba 3c 61 7e 5e  49 86 23 13 2e af 15 48  |i._.
      • Certificate #3
        • 2
          • A1:A3:E7:28:0E:0A:2D:F1:2F:84:30:96:49:82:05:19
          • RSA-SHA1: nil
          • Issuer
            • C: GB
            • ST: Greater Manchester
            • L: Salford
            • O: COMODO CA Limited
            • CN: COMODO Code Signing CA 2
          • 2012-09-17 00:00:00 UTC: 2014-09-17 23:59:59 UTC
          • Subject
            • C: IL
            • postalCode: 52583
            • ST: Gush Dan
            • L: Ramat Gan
            • street: 5 Hashoshanim st.
            • O: Nir Sofer
            • CN: Nir Sofer
          • #5
            • rsaEncryption: nil
            • B2:E1:93:E8:3F:8B:6C:2B:A5:1C:E0:7E:22:EF:98:23:
              87:63:22:FD:D6:E7:BD:1A:A8:45:6A:F4:A9:09:0F:9F:
              91:EA:7A:78:94:11:EB:04:08:22:88:8B:ED:7F:3F:8F:
              8B:DB:3E:A7:22:7B:B4:41:F3:61:8E:BF:6D:FC:30:24:
              BC:D4:36:5B:69:B7:F1:0E:91:31:29:22:A9:29:3C:A2:
              D4:B4:B4:1A:AB:96:98:D3:16:3A:3B:D2:78:63:4D:2D:
              C8:74:C9:2A:B6:37:86:03:08:3A:7F:94:C3:F1:7B:31:
              E0:90:F3:E2:13:F1:31:8A:66:6E:BC:93:F6:18:21:AC:
              C9:7A:6A:60:F7:73:FC:8C:34:37:0B:9E:30:5F:3C:60:
              E1:B1:F6:C9:B9:AC:C2:6A:59:E1:6A:45:79:8D:07:15:
              33:8F:48:C5:E5:D8:61:99:B7:D2:7F:FA:C6:E3:BE:E2:
              29:AD:0A:D7:FB:03:9E:BD:B1:C2:CC:49:C0:8B:49:29:
              C0:9C:70:EA:CA:0C:EB:07:28:EF:22:88:A6:6C:89:20:
              D1:BE:22:A7:17:CC:4D:CB:9C:1E:E8:3B:F2:49:D3:C3:
              2B:DA:B9:EB:66:24:69:0F:B1:09:10:3B:C7:2B:4E:58:
              DB:F7:E7:6B:27:EA:B1:F9:3A:39:FB:70:D6:1A:61:F7              : 0x010001
          • #6
            • authorityKeyIdentifier: 
              1e c5 b1 2c 7d 87 da 02  68 7c 25 bc 0c 07 84 3f  |...,}...h|%....?|
b6 cf de f1                                       |....            |
            • subjectKeyIdentifier: 
              df 14 8c 41 65 8a 73 1f  f2 16 db 2d 3b 5f 52 83  |...Ae.s....-;_R.|
09 40 75 d0                                       |.@u.            |
            • keyUsage: true, 0x80
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: codeSigning
            • nsCertType: 0x10
            • certificatePolicies
              • 1.3.6.1.4.1.6449.1.2.1.3.2
                • id-qt-cps: https://secure.comodo.net/CPS
            • crlDistributionPoints: http://crl.comodoca.com/COMODOCodeSigningCA2.crl
            • authorityInfoAccess
              • #0
                • caIssuers: http://crt.comodoca.com/COMODOCodeSigningCA2.crt
                • OCSP: http://ocsp.comodoca.com
            • subjectAltName: support@nirsoft.net
        • RSA-SHA1: 
          5f 6c f3 96 b3 66 31 18  bb c7 e7 dc 12 ea b4 46  |_l...f1........F|
54 f3 5f 7b 9b ae 0f 2d  b1 22 62 dd 25 ce f4 b7  |T._{...-."b.%...|
46 cc ef 62 3e af 9f 25  90 a8 3b b1 26 e1 ce 9e  |F..b>..%..;.&...|
06 4a ca cb a7 a1 77 94  d4 4c b7 ce 28 ef f6 bf  |.J....w..L..(...|
13 43 6f b6 fd 3d f0 04  87 53 11 07 4b 01 d2 23  |.Co..=...S..K..#|
6b 58 fe be 15 e1 df 97  e3 d6 cf 35 a0 cf 2f 66  |kX.........5../f|
33 f3 db 57 66 cd fe 44  45 a0 88 59 0f b7 9c 05  |3..Wf..DE..Y....|
30 71 50 39 6f d1 d1 f8  31 f5 c6 d5 38 57 81 72  |0qP9o...1...8W.r|
16 78 fa 7f 7a 9c 6d bf  2e 97 41 cf 82 fd d7 53  |.x..z.m...A....S|
55 9e dc 7d f9 4a fd 6e  17 5a 49 40 0f 21 94 bb  |U..}.J.n.ZI@.!..|
83 db 27 05 c6 33 7e 41  db e1 32 98 a1 88 ee 7b  |..'..3~A..2....{|
c2 ff 7b 61 4c 0d 14 40  6d 4d 0c f0 9a be 49 62  |..{aL..@mM....Ib|
f7 a8 57 cd a6 08 db 94  1e d4 40 47 33 24 8d 2c  |..W.......@G3$.,|
30 65 14 1a 52 10 f7 1d  51 e0 bb 8c 6d 8c 68 ef  |0e..R...Q...m.h.|
cc 28 2f ed 74 c4 15 ef  34 50 fb b3 f3 2d 51 69  |.(/.t...4P...-Qi|
be 02 92 ba 5c ab b3 24  28 0c 44 2c 6a b2 8e 12  |....\..$(.D,j...|
    • Signer
      • 1
      • unnamed
        • #0
          • C: GB
          • ST: Greater Manchester
          • L: Salford
          • O: COMODO CA Limited
          • CN: COMODO Code Signing CA 2
        • A1:A3:E7:28:0E:0A:2D:F1:2F:84:30:96:49:82:05:19
      • SHA1: nil
      • #3
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest: 
          3e 25 e9 e7 7c 80 0e 79  19 30 d0 92 92 28 f2 5b  |>%..|..y.0...(.[|
78 bd 5f ba                                       |x._.            |
      • rsaEncryption: 
        ab 89 ba 1c 38 21 92 1f  50 19 86 76 20 6e b6 65  |....8!..P..v n.e|
95 92 da 7d 68 da 85 b8  30 c3 13 7b 45 e6 46 b1  |...}h...0..{E.F.|
99 1c e8 2d cd c8 dd 10  e3 d1 8d 27 c9 73 10 5b  |...-.......'.s.[|
9a 07 3f d6 50 0b 41 d9  8c ad 68 a7 da 5e 36 85  |..?.P.A...h..^6.|
d4 a5 f5 93 85 8f 88 97  87 96 bf 1b 9b 87 d1 51  |...............Q|
0d 95 b1 35 ad 62 45 7c  e0 d0 4b 5a 6f 97 25 0d  |...5.bE|..KZo.%.|
9d 6b 81 1e a3 c2 2c ed  76 04 43 75 64 ac 85 1d  |.k....,.v.Cud...|
6f 83 4c e7 3a dd b6 e9  96 46 a0 58 09 eb 3d e5  |o.L.:....F.X..=.|
64 64 e8 4e 15 18 b1 3e  8e 5a 06 26 a4 e7 d4 ba  |dd.N...>.Z.&....|
44 1b 8d 1f 95 b1 26 b2  3e 84 d2 61 7c 86 2b 1c  |D.....&.>..a|.+.|
29 37 f4 27 a6 a5 6a 91  ff fa fc ad 19 b4 32 ff  |)7.'..j.......2.|
ed 15 28 9e e5 79 ef a4  34 a0 4e c6 c9 83 a8 ff  |..(..y..4.N.....|
5e 7e c4 02 1a c0 7e b2  23 f0 98 99 59 18 28 0b  |^~....~.#...Y.(.|
ae b3 06 55 4f c1 da 1e  2c 9e 15 eb e1 a3 f4 55  |...UO...,......U|
f3 91 f6 8c e3 3d e9 64  57 3e 28 c8 c2 0f 8d 54  |.....=.dW>(....T|
24 7b 4e bb 70 74 77 c9  45 55 b8 7c 46 b9 92 a9  |${N.ptw.EU.|F...|
      • countersignature
        • 0
          • unnamed
            • #0
              • C: US
              • ST: UT
              • L: Salt Lake City
              • O: The USERTRUST Network
              • OU: http://www.usertrust.com
              • CN: UTN-USERFirst-Object
            • 47:8A:8E:FB:59:E1:D8:3F:0C:E1:42:D2:A2:87:07:BE
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2013-06-23 18:02:27 UTC
            • messageDigest: 
              83 4c cf b0 85 87 dc 59  be c4 42 2a 9e b3 be 71  |.L.....Y..B*...q|
1e 61 f1 16                                       |.a..            |
          • rsaEncryption: 
            51 ee 79 af 99 28 7f 88  e3 a1 12 e8 f4 e3 8a 02  |Q.y..(..........|
94 ed 49 63 1c d4 c8 a9  fc aa f1 00 15 a1 cd 72  |..Ic...........r|
f3 4e c4 07 0e e5 cd 8c  d7 62 5c 82 2b 62 4e 63  |.N.......b\.+bNc|
d5 89 2a d6 86 82 09 78  cc 3e 8e 72 36 6e b0 90  |..*....x.>.r6n..|
17 71 66 0b fd a3 9b f9  63 80 5e 3c 17 bc b4 03  |.qf.....c.^<....|
a3 a1 7e 14 f8 ab 71 d5  bc c3 bc 4e 2a e6 d0 54  |..~...q....N*..T|
56 de 0f 9f 35 71 b3 ae  cd 81 27 ce c0 39 a7 65  |V...5q....'..9.e|
50 16 d5 bd 2d 3d 9c 64  73 8d 14 e8 9d 42 4c 22  |P...-=.ds....BL"|
4a bb e0 51 fe ba 56 60  e3 d3 eb 07 9e 7b 57 ca  |J..Q..V`.....{W.|
fc 2a 5f e2 e3 8b a1 48  6e 1b 74 30 0e 7f 30 31  |.*_....Hn.t0..01|
82 46 b3 f4 f8 6f cd f2  5d a9 d7 c5 24 52 24 55  |.F...o..]...$R$U|
90 18 13 98 31 aa 25 96  0e 70 ba a5 1c 56 48 a5  |....1.%..p...VH.|
e0 bd 3f ce 59 b2 a8 e9  7e 6f d6 cb b3 96 46 94  |..?.Y...~o....F.|
d4 8c 36 90 37 8f ff f4  49 49 d6 6f 8d 52 c7 85  |..6.7...II.o.R..|
56 99 31 e3 2f 84 b0 ae  8a 97 e2 d7 37 e1 8a d6  |V.1./.......7...|
c3 8b b1 21 7a 25 2e 4d  79 af 16 44 ee 0e 46 28  |...!z%.My..D..F(|
offsetsizetypecomment
075776EXE06/23/2013 19:01:14#
15c115HTM#
128006240PKCS7Authenticode Signature#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER
[!] string size(30318) > stringtable size(762). truncated to 760
[!] cannot convert "\xDE,\x9Al\x17\\\xF5{\r\x12\xB0,\xE1\xA5\\\xB0"... to UTF-16
[!] string size(6566) > stringtable size(616). truncated to 614
[!] cannot convert "H\x17w7\xCE\xD34M3g'\xAE\a\x874\xCD"... to UTF-16
[!] string size(81790) > stringtable size(62). truncated to 60
[!] string size(3370) > stringtable size(70). truncated to 68
[!] cannot convert "l{\xA5\x01\e\xC1\xF4\xCCW\xC4\x0F\xF5\xC6\xD9\xB0e"... to UTF-16
[!] string size(76718) > stringtable size(302). truncated to 300
[!] cannot convert "\xD8a\xC4\xFF\xFF\xFF\xFF\xD1\xA4\xFB\xF4\xD6\xD3j\xE9i"... to UTF-16
[!] string size(39344) > stringtable size(192). truncated to 190
[!] cannot convert "\e\n\xAF\xF6J\x036`z\x04A\xC3\xEF`\xDF\xFF"... to UTF-16
[!] string size(111878) > stringtable size(280). truncated to 278
[!] cannot convert "\x1F\xCD\x16\xBE\x81[&\xB9\xF6\xE1w\xB0owG\xB7"... to UTF-16
[!] string size(74992) > stringtable size(82). truncated to 80
[!] string size(107006) > stringtable size(132). truncated to 130
[!] cannot convert "\xF3\xE8$\x83\xDE\xC3e\xB2\xC5\xDA\xAA\xAE1\xEB\x9FF"... to UTF-16
[!] string size(4264) > stringtable size(138). truncated to 136
[!] cannot convert "\xFF\xFF\xFF\xFF\x8A\x15\x94@\xBB\x0E\x8D\x83\xE8#\xA6\xC2"... to UTF-16
[!] string size(130160) > stringtable size(56). truncated to 54
[!] string size(126404) > stringtable size(174). truncated to 172
[!] cannot convert "y?/\xFF\xFF\xFF\xFF\xB7H$6t\e\t\x1D5"... to UTF-16
[!] string size(13914) > stringtable size(210). truncated to 208
[!] cannot convert "'\xDD:>\x83\x98\xB9S1\x83\xA0\xFF\xFF\xFF\xFF\x90"... to UTF-16
[!] string size(82144) > stringtable size(110). truncated to 108
[!] cannot convert "\x9D\x89A\xBB\x84F]#\x03\al8\x1A\xFF\xFF\xFF"... to UTF-16
[!] string size(3392) > stringtable size(318). truncated to 316
[!] cannot convert "\xECo\xF1\xFF\xFF\xF3~^\xAD\xC2eGn\x91Hl"... to UTF-16
[!] refusing to read CURDIRENTRY beyond resource size