patch-ps1.exe

info
MZ
PE
resources
strings
imports
exports
foremost
7zip
signature
hexdump
disasm
log
discuss
donate

filename	patch-ps1.exe
size	25345744 (0x182bed0)
md5	08a9bb37190a8c0de1bb997f00dc466c

type	PE32 executable (GUI) Intel 80386, for MS Windows, RAR self-extracting archive
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe0

Rich Header

lib id	version	times used
147	30729	21
1	0	176
149	21022	5
131	30729	9
132	30729	45
146	30729	1
148	30729	1
145	30729	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x4f3e6a59
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x103
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0x11e00
SizeOfInitializedData	0x9400
SizeOfUninitializedData	0
AddressOfEntryPoint	0xb583
BaseOfCode	0x1000
BaseOfData	0x13000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0x34000
SizeOfHeaders	0x400
CheckSum	0x1839e87
Subsystem	2
DllCharacteristics	0x8500
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ 6.0 - 8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x11c32	0x11e00	R-X CODE
.rdata	0x13000	0x1c35	0x1e00	R-- IDATA
.data	0x15000	0x156fc	0x200	RW- IDATA
.CRT	0x2b000	0x10	0x200	R-- IDATA
.rsrc	0x2c000	0x7098	0x7200	R-- IDATA

Data Directory

type	va	size
EXPORT	0x14bb0	0x33
IMPORT	0x13c4c	0xdc
RESOURCE	0x2c000	0x7098
EXCEPTION	0	0
SECURITY	0x182a9c0	0x1510
BASERELOC	0	0
DEBUG	0x132c0	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x13000	0x2c0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
BITMAP	#101	2998	1252
ICON	#1	16936	1252
DIALOG	ASKNEXTVOL	706	1252
DIALOG	GETPASSWORD1	314	1252
DIALOG	LICENSEDLG	242	1252
DIALOG	RENAMEDLG	334	1252
DIALOG	REPLACEFILEDLG	792	1252
DIALOG	STARTDLG	586	1252
STRING	#7	596	1252
STRING	#8	986	1252
STRING	#9	482	1252
STRING	#10	818	1252
STRING	#11	356	1252
STRING	#12	108	1252
GROUP_ICON	#100	20	1252
MANIFEST	#1	1464	1252

id	lang	string
100	25	Выберите папку для извлечения
101	25	Извлечение %s
102	25	Пропуск %s
103	25	Неожиданный конец архива
104	25	Повреждён заголовок файла "%s"
105	25	Повреждён заголовок комментария архива
106	25	Повреждён комментарий архива
107	25	Недостаточно памяти
108	25	Неизвестный метод в %s
109	25	Невозможно открыть %s
110	25	Невозможно создать %s
111	25	Невозможно создать папку %s
112	25	Ошибка CRC в зашифрованном файле %s. Файл повреждён или указан неверный пароль.
113	25	Ошибка CRC в %s
114	25	Ошибка CRC сжатых данных в %s
115	25	Неверный пароль для %s
116	25	Ошибка записи файла %s. Возможно, нет места на диске.
117	25	Ошибка чтения файла %s
118	25	Ошибка закрытия файла
119	25	Отсутствует необходимый том
120	25	Архив повреждён или имеет неизвестный формат
121	25	Извлечение из %s
123	25	Следующий том
124	25	Повреждён заголовок архива
125	25	Готово
126	25	Ошибка
127	25	При выполнении операции произошли ошибки. Дополнительные сведения приведены в информационном окне.
128	25	байт
129	25	изменён
130	25	папка недоступна
131	25	Некоторые файлы не были созданы. Закройте все программы, перезагрузите Windows и повторите установку.
132	25	Некоторые инсталляционные файлы повреждены. Загрузите новую копию и повторите установку.
133	25	Все файлы
150	25	<ul><li>Нажмите кнопку <b>Установить</b>, чтобы начать извлечение.</li><br><br>
151	25	<ul><li>Нажмите кнопку <b>Извлечь</b>, чтобы начать извлечение.</li><br><br>
152	25	<li>Кнопка <b>Обзор</b> позволяет выбрать папку назначения
153	25	в дереве папок. Имя папки также можно ввести
154	25	вручную.</li><br><br>
155	25	<li>Если папки назначения не существует, то она будет
156	25	создана автоматически до начала процесса извлечения.</li></ul>
160	25	Архив повреждён
165	25	Извлечение файлов в папку %s
166	25	Извлечение файлов во временную папку
170	25	Извлечь
171	25	Ход извлечения
175	25	Общая длина пути и имени файла не должна превышать %d символов
176	25	Неподдерживаемый метод шифрования в %s

module_name	hint	ord	function_name
COMCTL32.dll	123		InitCommonControlsEx
SHLWAPI.dll	164		SHAutoComplete
KERNEL32.dll	214		DeleteFileW
KERNEL32.dll	211		DeleteFileA
KERNEL32.dll	124		CreateDirectoryA
KERNEL32.dll	129		CreateDirectoryW
KERNEL32.dll	302		FindClose
KERNEL32.dll	323		FindNextFileA
KERNEL32.dll	306		FindFirstFileA
KERNEL32.dll	325		FindNextFileW
KERNEL32.dll	313		FindFirstFileW
KERNEL32.dll	659		GetTickCount
KERNEL32.dll	1297		WideCharToMultiByte
KERNEL32.dll	691		GlobalAlloc
KERNEL32.dll	676		GetVersionExW
KERNEL32.dll	504		GetFullPathNameA
KERNEL32.dll	507		GetFullPathNameW
KERNEL32.dll	871		MultiByteToWideChar
KERNEL32.dll	532		GetModuleFileNameW
KERNEL32.dll	334		FindResourceW
KERNEL32.dll	536		GetModuleHandleW
KERNEL32.dll	715		HeapAlloc
KERNEL32.dll	586		GetProcessHeap
KERNEL32.dll	719		HeapFree
KERNEL32.dll	722		HeapReAlloc
KERNEL32.dll	97		CompareStringA
KERNEL32.dll	281		ExitProcess
KERNEL32.dll	518		GetLocaleInfoW
KERNEL32.dll	1121		SetFileAttributesW
KERNEL32.dll	228		DosDateTimeToFileTime
KERNEL32.dll	456		GetDateFormatW
KERNEL32.dll	663		GetTimeFormatW
KERNEL32.dll	293		FileTimeToSystemTime
KERNEL32.dll	292		FileTimeToLocalFileTime
KERNEL32.dll	285		ExpandEnvironmentStringsW
KERNEL32.dll	1273		WaitForSingleObject
KERNEL32.dll	1202		Sleep
KERNEL32.dll	479		GetExitCodeProcess
KERNEL32.dll	645		GetTempPathW
KERNEL32.dll	864		MoveFileExW
KERNEL32.dll	1238		UnmapViewOfFile
KERNEL32.dll	855		MapViewOfFile
KERNEL32.dll	391		GetCommandLineW
KERNEL32.dll	140		CreateFileMappingW
KERNEL32.dll	1111		SetEnvironmentVariableW
KERNEL32.dll	889		OpenFileMappingW
KERNEL32.dll	581		GetProcAddress
KERNEL32.dll	838		LocalFileTimeToFileTime
KERNEL32.dll	1213		SystemTimeToFileTime
KERNEL32.dll	631		GetSystemTime
KERNEL32.dll	100		CompareStringW
KERNEL32.dll	766		IsDBCSLeadByte
KERNEL32.dll	370		GetCPInfo
KERNEL32.dll	1101		SetCurrentDirectoryW
KERNEL32.dll	831		LoadLibraryW
KERNEL32.dll	354		FreeLibrary
KERNEL32.dll	1118		SetFileAttributesA
KERNEL32.dll	490		GetFileAttributesW
KERNEL32.dll	485		GetFileAttributesA
KERNEL32.dll	1317		WriteFile
KERNEL32.dll	612		GetStdHandle
KERNEL32.dll	960		ReadFile
KERNEL32.dll	143		CreateFileW
KERNEL32.dll	447		GetCurrentDirectoryW
KERNEL32.dll	136		CreateFileA
KERNEL32.dll	499		GetFileType
KERNEL32.dll	1107		SetEndOfFile
KERNEL32.dll	1126		SetFilePointer
KERNEL32.dll	867		MoveFileW
KERNEL32.dll	1130		SetFileTime
KERNEL32.dll	448		GetCurrentProcess
KERNEL32.dll	82		CloseHandle
KERNEL32.dll	1139		SetLastError
KERNEL32.dll	514		GetLastError
KERNEL32.dll	563		GetNumberFormatW
USER32.dll	820		wvsprintfA
USER32.dll	821		wvsprintfW
USER32.dll	613		ReleaseDC
USER32.dll	289		GetDC
USER32.dll	636		SendMessageW
USER32.dll	656		SetDlgItemTextW
USER32.dll	658		SetFocus
USER32.dll	218		EndDialog
USER32.dll	163		DestroyIcon
USER32.dll	627		SendDlgItemMessageW
USER32.dll	298		GetDlgItemTextW
USER32.dll	274		GetClassNameW
USER32.dll	172		DialogBoxParamW
USER32.dll	480		IsWindowVisible
USER32.dll	806		WaitForInputIdle
USER32.dll	659		SetForegroundWindow
USER32.dll	379		GetSysColor
USER32.dll	566		PostMessageW
USER32.dll	487		LoadBitmapW
USER32.dll	493		LoadIconW
USER32.dll	53		CharToOemA
USER32.dll	545		OemToCharA
USER32.dll	521		MapWindowPoints
USER32.dll	110		CreateWindowExW
USER32.dll	715		SetWindowTextW
USER32.dll	785		UpdateWindow
USER32.dll	491		LoadCursorW
USER32.dll	589		RegisterClassExW
USER32.dll	708		SetWindowLongW
USER32.dll	406		GetWindowLongW
USER32.dll	156		DefWindowProcW
USER32.dll	563		PeekMessageW
USER32.dll	349		GetMessageW
USER32.dll	764		TranslateMessage
USER32.dll	175		DispatchMessageW
USER32.dll	166		DestroyWindow
USER32.dll	85		CopyRect
USER32.dll	475		IsWindow
USER32.dll	55		CharToOemBuffW
USER32.dll	533		MessageBoxW
USER32.dll	735		ShowWindow
USER32.dll	295		GetDlgItem
USER32.dll	216		EnableWindow
USER32.dll	546		OemToCharBuffA
USER32.dll	57		CharUpperA
USER32.dll	54		CharToOemBuffA
USER32.dll	506		LoadStringW
USER32.dll	710		SetWindowPos
USER32.dll	419		GetWindowTextW
USER32.dll	382		GetSystemMetrics
USER32.dll	398		GetWindow
USER32.dll	60		CharUpperW
USER32.dll	412		GetWindowRect
USER32.dll	249		FindWindowExW
USER32.dll	356		GetParent
USER32.dll	276		GetClientRect
GDI32.dll	459		GetDeviceCaps
GDI32.dll	509		GetObjectW
GDI32.dll	47		CreateCompatibleBitmap
GDI32.dll	631		SelectObject
GDI32.dll	691		StretchBlt
GDI32.dll	48		CreateCompatibleDC
GDI32.dll	230		DeleteObject
GDI32.dll	227		DeleteDC
COMDLG32.dll	12		GetOpenFileNameW
COMDLG32.dll	4		CommDlgExtendedError
COMDLG32.dll	14		GetSaveFileNameW
ADVAPI32.dll	609		RegOpenKeyExW
ADVAPI32.dll	407		LookupPrivilegeValueW
ADVAPI32.dll	622		RegQueryValueExW
ADVAPI32.dll	569		RegCreateKeyExW
ADVAPI32.dll	638		RegSetValueExW
ADVAPI32.dll	560		RegCloseKey
ADVAPI32.dll	682		SetFileSecurityW
ADVAPI32.dll	681		SetFileSecurityA
ADVAPI32.dll	503		OpenProcessToken
ADVAPI32.dll	31		AdjustTokenPrivileges
SHELL32.dll	127		SHChangeNotify
SHELL32.dll	289		ShellExecuteExW
SHELL32.dll	172		SHFileOperationW
SHELL32.dll	189		SHGetFileInfoW
SHELL32.dll	223		SHGetSpecialFolderLocation
SHELL32.dll	207		SHGetMalloc
SHELL32.dll	123		SHBrowseForFolderW
SHELL32.dll	215		SHGetPathFromIDListW
ole32.dll	329		OleUninitialize
ole32.dll	306		OleInitialize
ole32.dll	16		CoCreateInstance
ole32.dll	134		CreateStreamOnHGlobal
ole32.dll	8		CLSIDFromString
OLEAUT32.dll		8

ord	entry_va	function_name

module_name	WINRAR.SFX
flags	0
timestamp	2012-02-17 14:55:21
version	0.0
ordinal_base	1
nFunctions	0
nNames	0
Names(0)	0
Functions(0)	0
NameOrdinals(0)	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Code Signing CA

serial: 2A2DCB6250C2FA8A228D0A7DF37523E7

Certificates (3)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: Dec 31 00:00:00 2015 GMT
            Not After : Jul  9 18:40:36 2019 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO SHA-1 Time Stamping Signer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e9:3d:df:d7:37:08:c9:1e:38:b2:52:53:42:
                    6d:22:f1:b1:c4:06:04:6b:9e:fd:82:74:50:43:7d:
                    c6:a0:bb:1f:4e:f9:02:71:26:b1:ef:43:d8:83:8c:
                    48:fc:e7:0f:97:7a:9a:eb:9c:de:a6:a3:0e:3b:1c:
                    44:18:75:8e:78:a5:17:69:fe:49:18:a4:e2:bb:5c:
                    4e:fe:8e:2a:54:7a:50:f0:d5:f6:cc:91:e7:99:79:
                    d7:de:79:94:d7:96:33:fe:0e:83:be:22:bf:63:16:
                    2c:a3:dd:28:1b:af:3d:ab:ea:97:d2:f1:bf:04:10:
                    e7:3d:48:45:fd:1f:68:65:c1:7f:59:99:69:c0:22:
                    31:0c:62:6e:a7:5c:65:01:21:b0:63:c4:22:18:27:
                    ee:e6:fc:d2:00:3d:47:2e:a8:b8:86:56:5d:04:dc:
                    13:17:25:6e:1c:df:44:0f:15:cd:b7:db:a5:57:76:
                    42:6f:00:68:82:99:d2:e3:c1:de:f0:8b:94:57:4c:
                    ec:08:90:22:21:ce:22:2b:98:0c:42:e6:42:93:94:
                    98:93:ef:fd:06:d9:3f:bc:5b:9b:54:3c:20:b1:ee:
                    6a:d6:47:7a:c5:ab:80:e9:30:9a:de:f1:a4:3f:55:
                    4d:0a:09:34:8a:75:29:d2:69:ad:97:0f:50:bf:f8:
                    ca:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8

            X509v3 Subject Key Identifier: 
                8E:6B:2D:33:6B:F4:33:A7:93:B3:13:9A:A5:E0:0A:F7:12:35:6A:88
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.usertrust.com

    Signature Algorithm: sha1WithRSAEncryption
         ba:33:24:40:40:8c:7c:db:58:9f:b3:60:98:b2:f5:c0:31:fe:
         eb:1f:6e:50:f6:0a:e0:e4:e6:81:ad:26:87:a2:df:fd:b3:da:
         f4:73:f3:00:fb:29:1b:89:1b:15:3e:db:6b:52:93:2b:c4:ac:
         39:81:d7:3c:67:57:9a:39:36:e0:28:08:9a:e3:39:4f:9b:89:
         09:7f:7b:c5:61:7f:59:89:32:25:0a:6a:ae:1a:3e:f0:a2:27:
         a8:b6:c3:b8:87:f7:16:04:48:41:3d:5c:d8:ec:9f:4d:20:31:
         04:d9:65:a1:ed:cd:69:07:53:16:3d:dd:36:02:0a:88:eb:40:
         e5:06:30:0b:b8:16:4b:dc:ef:bc:55:09:ff:c6:3e:12:2e:76:
         b3:dc:ce:42:ef:f9:76:57:e1:b7:0a:05:40:98:58:9a:5d:71:
         16:93:71:8c:65:81:ea:6f:f3:89:f7:fb:73:ad:b4:e7:bf:d9:
         8e:6f:aa:0b:4f:25:f3:b8:e1:d5:dd:75:98:68:81:f8:aa:c0:
         d1:80:c2:c4:c4:39:89:c1:f6:c9:9e:6c:d7:74:f9:d9:97:f8:
         4f:c2:9a:0a:cd:5e:8f:f8:19:e9:e0:a5:9f:c4:f0:92:21:e6:
         2d:79:25:c9:22:f9:c3:f0:3a:84:57:ad:3a:16:f4:63:94:10:
         1d:5d:d0:c6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:2d:cb:62:50:c2:fa:8a:22:8d:0a:7d:f3:75:23:e7
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Code Signing CA
        Validity
            Not Before: Aug 14 00:00:00 2015 GMT
            Not After : Aug 13 23:59:59 2016 GMT
        Subject: C=RU/postalCode=190005, ST=Saint-Petersburg, L=Saint-Petersburg/street=22 Liter A Pom 1n, ul.13 Krasnoarmeiskaya, O=Inter Ai-Ti, OOO, CN=Inter Ai-Ti, OOO
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7d:ef:97:94:10:59:c4:36:73:7d:c8:63:2c:
                    70:d4:3a:55:00:2a:98:3e:31:37:5c:aa:5f:18:f9:
                    41:ed:97:05:be:fb:d1:e4:bf:15:e5:8e:40:95:bf:
                    36:42:18:f9:63:6f:89:ab:e4:4c:56:56:c3:c9:cb:
                    a9:0a:dd:0a:f6:4c:df:c9:bb:28:5d:18:8f:cb:08:
                    3d:b4:b8:b9:39:94:aa:a5:e1:6f:72:2b:a8:c3:01:
                    7f:c9:97:18:44:e1:8a:b4:34:3e:b9:d4:e2:32:cb:
                    9d:39:99:a9:51:2f:c8:19:4f:21:83:cd:60:34:be:
                    c8:09:4c:af:b8:44:1a:c0:08:69:9a:c7:8a:e4:ec:
                    c9:59:69:a2:0c:ab:64:d6:d3:e5:f8:b6:2b:67:24:
                    cd:60:17:85:f6:b0:33:c5:35:5f:81:3c:a4:60:d5:
                    b8:d2:09:e4:c7:95:a7:b2:61:09:eb:50:e7:e6:a6:
                    05:a7:7f:2a:7b:d4:68:46:2c:42:ff:ad:76:99:4d:
                    5b:63:40:9a:26:9e:8b:fb:92:71:43:ae:6a:67:28:
                    95:c3:01:d3:da:77:b2:63:3a:b4:83:96:e5:5e:0e:
                    ba:0a:ae:9e:4c:2f:df:24:07:8c:3b:47:93:1c:90:
                    6f:c0:88:79:14:ba:09:5b:d7:de:dc:c4:1e:69:34:
                    0f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:29:91:60:FF:8A:4D:FA:EB:F9:A6:6A:B8:CF:F9:E6:4B:BD:49:CE:12

            X509v3 Subject Key Identifier: 
                45:FD:FD:5B:0C:2D:B7:28:4E:E4:DC:EC:A9:5B:BC:45:41:23:D7:8D
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                Code Signing
            Netscape Cert Type: 
                Object Signing
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.1.3.2
                  CPS: https://secure.comodo.net/CPS

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.comodoca.com/COMODORSACodeSigningCA.crl

            Authority Information Access: 
                CA Issuers - URI:http://crt.comodoca.com/COMODORSACodeSigningCA.crt
                OCSP - URI:http://ocsp.comodoca.com

            X509v3 Subject Alternative Name: 
                email:info@interitspb.ru
    Signature Algorithm: sha256WithRSAEncryption
         14:ac:6d:f4:f8:63:ca:45:c9:30:b5:f6:24:dc:f0:35:bc:68:
         b4:65:06:cb:88:2b:c6:a3:91:5b:72:49:27:72:a2:1b:06:e7:
         57:8b:f8:41:b8:d5:ce:c1:b2:17:2e:72:af:8f:8e:ea:be:39:
         54:12:7a:75:44:d9:7f:a0:73:8b:a6:7c:92:6d:bd:d0:ae:73:
         c3:ca:c1:8a:54:26:4d:bd:7d:db:89:d4:e0:3e:68:b8:54:ae:
         13:e3:ea:ac:01:b1:2a:ad:8d:33:a0:14:38:b5:1a:ea:dc:53:
         7b:29:c8:ef:ee:54:9b:6a:2f:a1:a1:5b:08:4e:89:7b:19:a1:
         fa:d9:73:39:c0:02:c0:2d:ed:3d:6c:46:4c:89:3a:56:e9:50:
         16:06:77:73:82:55:2d:7a:2d:50:ae:29:c9:17:b8:b6:34:c5:
         fb:f0:c7:c5:67:d4:86:3e:78:68:90:38:57:d4:a5:34:f7:a0:
         55:29:39:65:ca:7d:09:79:9a:9f:ea:86:43:d7:73:e2:dd:bf:
         f1:a5:81:a1:e8:27:b2:3a:c6:31:b0:aa:30:69:72:b1:10:9c:
         d8:06:94:8c:d4:0f:77:b4:52:f6:40:70:87:e7:4a:ee:3c:d2:
         e7:ab:c5:38:d6:2b:39:ee:5a:7a:0c:45:e4:1b:84:dd:65:83:
         02:78:cb:b3

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority
        Validity
            Not Before: May  9 00:00:00 2013 GMT
            Not After : May  8 23:59:59 2028 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Code Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:98:90:63:77:91:34:7f:8a:d1:dd:e9:67:31:
                    11:eb:cc:1e:fd:31:1d:b3:b9:62:57:3f:93:bc:5b:
                    e3:9f:1e:24:32:11:27:6b:bc:51:91:a7:cf:9e:9e:
                    25:b3:5f:81:a8:18:0f:1d:1e:20:30:0e:fb:61:7b:
                    86:09:b3:e3:fd:a2:68:9d:1c:2c:9d:bf:72:e3:e4:
                    75:a0:e5:35:23:8e:c9:8a:ee:1a:0c:64:c7:d8:42:
                    a1:7b:b5:52:03:4b:3a:b0:8e:23:4b:4b:63:e0:22:
                    94:37:7b:d5:79:90:0a:14:18:51:2c:e6:fe:c1:12:
                    f0:1c:3f:61:61:0a:8c:a2:dc:f6:c3:30:aa:cd:28:
                    18:75:48:c1:79:5a:08:cd:bb:8c:55:8c:f7:d4:76:
                    90:3a:33:46:50:73:98:5c:f4:85:4a:6b:0f:80:dd:
                    5e:d6:bd:fd:a9:2f:c0:25:f5:f9:78:d7:8d:5f:10:
                    c2:44:55:3c:90:3c:31:46:cb:70:ae:07:a9:0a:e3:
                    af:c1:01:6f:90:1a:23:e2:5f:38:db:c6:08:5d:47:
                    b3:83:41:f0:2e:00:37:14:b9:12:aa:79:92:52:cd:
                    87:0f:7b:d8:62:29:a4:7e:30:bd:1b:b5:8c:72:b4:
                    48:f2:e3:e8:21:f9:5e:4c:62:79:8b:02:06:9f:7f:
                    d5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:BB:AF:7E:02:3D:FA:A6:F1:3C:84:8E:AD:EE:38:98:EC:D9:32:32:D4

            X509v3 Subject Key Identifier: 
                29:91:60:FF:8A:4D:FA:EB:F9:A6:6A:B8:CF:F9:E6:4B:BD:49:CE:12
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Certificate Policies: 
                Policy: X509v3 Any Policy

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.comodoca.com/COMODORSACertificationAuthority.crl

            Authority Information Access: 
                CA Issuers - URI:http://crt.comodoca.com/COMODORSAAddTrustCA.crt
                OCSP - URI:http://ocsp.comodoca.com

    Signature Algorithm: sha384WithRSAEncryption
         02:3f:02:39:c3:ee:f8:ca:3b:89:de:0c:6d:4d:b1:f1:4e:92:
         4f:af:c2:38:2c:04:cc:c5:63:11:ab:09:63:af:ab:a2:d7:02:
         3f:cc:6f:19:c3:3d:d6:1a:08:94:ff:25:d8:a9:88:a7:2b:10:
         1a:e0:9b:b1:07:22:1a:51:1c:3a:d4:e1:e9:09:bf:e6:24:74:
         af:1e:7b:16:31:6e:23:ef:54:51:2d:52:02:e2:75:08:05:4c:
         f1:b7:51:e1:51:00:c6:87:f6:6c:ee:10:44:76:57:6a:f1:df:
         58:6b:21:aa:49:d4:7c:37:4e:bd:ff:b6:75:54:40:18:36:57:
         67:11:cd:4f:02:e4:fe:f3:da:fc:75:17:db:ec:b7:f7:65:09:
         23:49:1f:43:57:83:ea:7e:20:77:61:c8:4d:f2:bb:65:4d:a8:
         f7:85:45:07:af:7a:69:27:65:90:29:40:8b:df:7b:3a:51:39:
         8c:a8:1f:70:79:ad:6d:42:20:a2:cf:0c:6c:03:8c:4c:cd:73:
         07:94:e7:5a:8e:3a:04:ba:a2:a1:7c:1f:cb:63:3a:15:a7:d4:
         15:1b:a7:52:47:32:a9:f4:bf:64:47:d1:aa:1f:53:4e:32:30:
         73:c2:6f:b7:78:82:9d:5c:ff:46:bb:6b:22:1d:88:0b:f8:1b:
         aa:34:a6:fc:8c:f5:dd:7f:65:8c:8c:31:57:31:d0:36:ec:47:
         a1:cf:cb:8b:a8:ef:1c:18:58:c5:06:77:ca:4b:9b:51:af:4c:
         08:4a:7a:8f:e2:a3:52:e2:8e:8e:cc:26:e4:b2:d8:e5:38:c2:
         a8:ed:c6:81:9c:35:6b:a9:58:61:4a:0a:97:b4:4b:42:b6:55:
         9d:be:99:e7:70:6d:59:f8:6d:2a:0c:7f:19:60:5f:0c:9a:88:
         6c:30:ac:52:09:90:16:1b:ff:2b:9d:db:d0:20:ca:89:ea:28:
         7e:32:8e:19:df:7b:48:33:1e:d7:65:f8:ae:c9:f8:83:14:93:
         76:7d:64:d0:8e:ce:be:35:7d:ff:72:31:4d:9f:9e:bd:1e:6c:
         2f:a8:8f:0c:06:50:fb:8c:27:b3:76:c9:f4:e6:d7:c3:34:e2:
         8c:87:21:86:61:fe:bf:55:74:e1:21:77:03:0a:68:6c:bb:e4:
         c9:a9:e6:cf:59:25:eb:7c:ec:45:0e:79:66:68:e8:22:cd:b8:
         ef:98:85:4d:96:11:3c:09:8a:d0:7f:bc:28:28:13:fb:6a:ca:
         54:8d:92:5c:cd:c2:65:98:06:9e:ce:48:5b:d4:b5:37:93:46:
         41:7c:07:dd:cf:fa:43:ef:ba:67:61:ff:7d:49:e0:bb:30:7d:
         5c:80:e3:e6:16:39:4b:a7

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

53 cc 0a ad e6 6d 12 0e ae a8 cd aa bf e9 2b ef |S....m........+.| b1 b8 1a f3 |.... |

Certificates

Certificate #0
- 2
  - 16:88:F0:39:25:5E:63:8E:69:14:39:07:E6:33:0B
  - RSA-SHA1: nil
  - Issuer
    - C: US
    - ST: UT
    - L: Salt Lake City
    - O: The USERTRUST Network
    - OU: http://www.usertrust.com
    - CN: UTN-USERFirst-Object
  - 2015-12-31 00:00:00 UTC: 2019-07-09 18:40:36 UTC
  - Subject
    - C: GB
    - ST: Greater Manchester
    - L: Salford
    - O: COMODO CA Limited
    - CN: COMODO SHA-1 Time Stamping Signer
  - #5
    - rsaEncryption: nil
    - E9:E9:3D:DF:D7:37:08:C9:1E:38:B2:52:53:42:6D:22:
      F1:B1:C4:06:04:6B:9E:FD:82:74:50:43:7D:C6:A0:BB:
      1F:4E:F9:02:71:26:B1:EF:43:D8:83:8C:48:FC:E7:0F:
      97:7A:9A:EB:9C:DE:A6:A3:0E:3B:1C:44:18:75:8E:78:
      A5:17:69:FE:49:18:A4:E2:BB:5C:4E:FE:8E:2A:54:7A:
      50:F0:D5:F6:CC:91:E7:99:79:D7:DE:79:94:D7:96:33:
      FE:0E:83:BE:22:BF:63:16:2C:A3:DD:28:1B:AF:3D:AB:
      EA:97:D2:F1:BF:04:10:E7:3D:48:45:FD:1F:68:65:C1:
      7F:59:99:69:C0:22:31:0C:62:6E:A7:5C:65:01:21:B0:
      63:C4:22:18:27:EE:E6:FC:D2:00:3D:47:2E:A8:B8:86:
      56:5D:04:DC:13:17:25:6E:1C:DF:44:0F:15:CD:B7:DB:
      A5:57:76:42:6F:00:68:82:99:D2:E3:C1:DE:F0:8B:94:
      57:4C:EC:08:90:22:21:CE:22:2B:98:0C:42:E6:42:93:
      94:98:93:EF:FD:06:D9:3F:BC:5B:9B:54:3C:20:B1:EE:
      6A:D6:47:7A:C5:AB:80:E9:30:9A:DE:F1:A4:3F:55:4D:
      0A:09:34:8A:75:29:D2:69:AD:97:0F:50:BF:F8:CA:09: 0x010001
  - #6
    - authorityKeyIdentifier:
```
da ed 64 74 14 9c 14 3c  ab dd 99 a9 bd 5b 28 4d  |..dt...<.....[(M|
8b 3c c9 d8                                       |.<..            |
```
    - subjectKeyIdentifier:
```
8e 6b 2d 33 6b f4 33 a7  93 b3 13 9a a5 e0 0a f7  |.k-3k.3.........|
12 35 6a 88                                       |.5j.            |
```
    - keyUsage: true, 0xc0
    - basicConstraints
      - true
      - nil
    - extendedKeyUsage: true, timeStamping
    - crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
    - authorityInfoAccess
      - OCSP: http://ocsp.usertrust.com
- RSA-SHA1:
```
ba 33 24 40 40 8c 7c db  58 9f b3 60 98 b2 f5 c0  |.3$@@.|.X..`....|
31 fe eb 1f 6e 50 f6 0a  e0 e4 e6 81 ad 26 87 a2  |1...nP.......&..|
df fd b3 da f4 73 f3 00  fb 29 1b 89 1b 15 3e db  |.....s...)....>.|
6b 52 93 2b c4 ac 39 81  d7 3c 67 57 9a 39 36 e0  |kR.+..9....'......|
16 04 48 41 3d 5c d8 ec  9f 4d 20 31 04 d9 65 a1  |..HA=\...M 1..e.|
ed cd 69 07 53 16 3d dd  36 02 0a 88 eb 40 e5 06  |..i.S.=.6....@..|
30 0b b8 16 4b dc ef bc  55 09 ff c6 3e 12 2e 76  |0...K...U...>..v|
b3 dc ce 42 ef f9 76 57  e1 b7 0a 05 40 98 58 9a  |...B..vW....@.X.|
5d 71 16 93 71 8c 65 81  ea 6f f3 89 f7 fb 73 ad  |]q..q.e..o....s.|
b4 e7 bf d9 8e 6f aa 0b  4f 25 f3 b8 e1 d5 dd 75  |.....o..O%.....u|
98 68 81 f8 aa c0 d1 80  c2 c4 c4 39 89 c1 f6 c9  |.h.........9....|
9e 6c d7 74 f9 d9 97 f8  4f c2 9a 0a cd 5e 8f f8  |.l.t....O....^..|
19 e9 e0 a5 9f c4 f0 92  21 e6 2d 79 25 c9 22 f9  |........!.-y%.".|
c3 f0 3a 84 57 ad 3a 16  f4 63 94 10 1d 5d d0 c6  |..:.W.:..c...]..|
```
Certificate #1
- 2
  - 2A:2D:CB:62:50:C2:FA:8A:22:8D:0A:7D:F3:75:23:E7
  - RSA-SHA256: nil
  - Issuer
    - C: GB
    - ST: Greater Manchester
    - L: Salford
    - O: COMODO CA Limited
    - CN: COMODO RSA Code Signing CA
  - 2015-08-14 00:00:00 UTC: 2016-08-13 23:59:59 UTC
  - Subject
    - C: RU
    - postalCode: 190005
    - ST: Saint-Petersburg
    - L: Saint-Petersburg
    - street: 22 Liter A Pom 1n, ul.13 Krasnoarmeiskaya
    - O: Inter Ai-Ti, OOO
    - CN: Inter Ai-Ti, OOO
  - #5
    - rsaEncryption: nil
    - AE:7D:EF:97:94:10:59:C4:36:73:7D:C8:63:2C:70:D4:
      3A:55:00:2A:98:3E:31:37:5C:AA:5F:18:F9:41:ED:97:
      05:BE:FB:D1:E4:BF:15:E5:8E:40:95:BF:36:42:18:F9:
      63:6F:89:AB:E4:4C:56:56:C3:C9:CB:A9:0A:DD:0A:F6:
      4C:DF:C9:BB:28:5D:18:8F:CB:08:3D:B4:B8:B9:39:94:
      AA:A5:E1:6F:72:2B:A8:C3:01:7F:C9:97:18:44:E1:8A:
      B4:34:3E:B9:D4:E2:32:CB:9D:39:99:A9:51:2F:C8:19:
      4F:21:83:CD:60:34:BE:C8:09:4C:AF:B8:44:1A:C0:08:
      69:9A:C7:8A:E4:EC:C9:59:69:A2:0C:AB:64:D6:D3:E5:
      F8:B6:2B:67:24:CD:60:17:85:F6:B0:33:C5:35:5F:81:
      3C:A4:60:D5:B8:D2:09:E4:C7:95:A7:B2:61:09:EB:50:
      E7:E6:A6:05:A7:7F:2A:7B:D4:68:46:2C:42:FF:AD:76:
      99:4D:5B:63:40:9A:26:9E:8B:FB:92:71:43:AE:6A:67:
      28:95:C3:01:D3:DA:77:B2:63:3A:B4:83:96:E5:5E:0E:
      BA:0A:AE:9E:4C:2F:DF:24:07:8C:3B:47:93:1C:90:6F:
      C0:88:79:14:BA:09:5B:D7:DE:DC:C4:1E:69:34:0F:7F: 0x010001
  - #6
    - authorityKeyIdentifier:
```
29 91 60 ff 8a 4d fa eb  f9 a6 6a b8 cf f9 e6 4b  |).`..M....j....K|
bd 49 ce 12                                       |.I..            |
```
    - subjectKeyIdentifier:
```
45 fd fd 5b 0c 2d b7 28  4e e4 dc ec a9 5b bc 45  |E..[.-.(N....[.E|
41 23 d7 8d                                       |A#..            |
```
    - keyUsage: true, 0x80
    - basicConstraints
      - true
      - nil
    - extendedKeyUsage: codeSigning
    - nsCertType: 0x10
    - certificatePolicies
      - 1.3.6.1.4.1.6449.1.2.1.3.2
        id-qt-cps: https://secure.comodo.net/CPS
    - crlDistributionPoints: http://crl.comodoca.com/COMODORSACodeSigningCA.crl
    - authorityInfoAccess
      - #0
        caIssuers: http://crt.comodoca.com/COMODORSACodeSigningCA.crt
        OCSP: http://ocsp.comodoca.com
    - subjectAltName: info@interitspb.ru
- RSA-SHA256:
```
14 ac 6d f4 f8 63 ca 45  c9 30 b5 f6 24 dc f0 35  |..m..c.E.0..$..5|
bc 68 b4 65 06 cb 88 2b  c6 a3 91 5b 72 49 27 72  |.h.e...+...[rI'r|
a2 1b 06 e7 57 8b f8 41  b8 d5 ce c1 b2 17 2e 72  |....W..A.......r|
af 8f 8e ea be 39 54 12  7a 75 44 d9 7f a0 73 8b  |.....9T.zuD...s.|
a6 7c 92 6d bd d0 ae 73  c3 ca c1 8a 54 26 4d bd  |.|.m...s....T&M.|
7d db 89 d4 e0 3e 68 b8  54 ae 13 e3 ea ac 01 b1  |}....>h.T.......|
2a ad 8d 33 a0 14 38 b5  1a ea dc 53 7b 29 c8 ef  |*..3..8....S{)..|
ee 54 9b 6a 2f a1 a1 5b  08 4e 89 7b 19 a1 fa d9  |.T.j/..[.N.{....|
73 39 c0 02 c0 2d ed 3d  6c 46 4c 89 3a 56 e9 50  |s9...-.=lFL.:V.P|
16 06 77 73 82 55 2d 7a  2d 50 ae 29 c9 17 b8 b6  |..ws.U-z-P.)....|
34 c5 fb f0 c7 c5 67 d4  86 3e 78 68 90 38 57 d4  |4.....g..>xh.8W.|
a5 34 f7 a0 55 29 39 65  ca 7d 09 79 9a 9f ea 86  |.4..U)9e.}.y....|
43 d7 73 e2 dd bf f1 a5  81 a1 e8 27 b2 3a c6 31  |C.s........'.:.1|
b0 aa 30 69 72 b1 10 9c  d8 06 94 8c d4 0f 77 b4  |..0ir.........w.|
52 f6 40 70 87 e7 4a ee  3c d2 e7 ab c5 38 d6 2b  |R.@p..J.<....8.+|
39 ee 5a 7a 0c 45 e4 1b  84 dd 65 83 02 78 cb b3  |9.Zz.E....e..x..|
```

Certificate #2

2
- 2E:7C:87:CC:0E:93:4A:52:FE:94:FD:1C:B7:CD:34:AF
- RSA-SHA384: nil
- Issuer
  - C: GB
  - ST: Greater Manchester
  - L: Salford
  - O: COMODO CA Limited
  - CN: COMODO RSA Certification Authority
- 2013-05-09 00:00:00 UTC: 2028-05-08 23:59:59 UTC
- Subject
  - C: GB
  - ST: Greater Manchester
  - L: Salford
  - O: COMODO CA Limited
  - CN: COMODO RSA Code Signing CA
- #5
  - rsaEncryption: nil
  - A6:98:90:63:77:91:34:7F:8A:D1:DD:E9:67:31:11:EB:
    CC:1E:FD:31:1D:B3:B9:62:57:3F:93:BC:5B:E3:9F:1E:
    24:32:11:27:6B:BC:51:91:A7:CF:9E:9E:25:B3:5F:81:
    A8:18:0F:1D:1E:20:30:0E:FB:61:7B:86:09:B3:E3:FD:
    A2:68:9D:1C:2C:9D:BF:72:E3:E4:75:A0:E5:35:23:8E:
    C9:8A:EE:1A:0C:64:C7:D8:42:A1:7B:B5:52:03:4B:3A:
    B0:8E:23:4B:4B:63:E0:22:94:37:7B:D5:79:90:0A:14:
    18:51:2C:E6:FE:C1:12:F0:1C:3F:61:61:0A:8C:A2:DC:
    F6:C3:30:AA:CD:28:18:75:48:C1:79:5A:08:CD:BB:8C:
    55:8C:F7:D4:76:90:3A:33:46:50:73:98:5C:F4:85:4A:
    6B:0F:80:DD:5E:D6:BD:FD:A9:2F:C0:25:F5:F9:78:D7:
    8D:5F:10:C2:44:55:3C:90:3C:31:46:CB:70:AE:07:A9:
    0A:E3:AF:C1:01:6F:90:1A:23:E2:5F:38:DB:C6:08:5D:
    47:B3:83:41:F0:2E:00:37:14:B9:12:AA:79:92:52:CD:
    87:0F:7B:D8:62:29:A4:7E:30:BD:1B:B5:8C:72:B4:48:
    F2:E3:E8:21:F9:5E:4C:62:79:8B:02:06:9F:7F:D5:0B: 0x010001
- #6
  - authorityKeyIdentifier:
```
bb af 7e 02 3d fa a6 f1  3c 84 8e ad ee 38 98 ec  |..~.=...<....8..|
d9 32 32 d4                                       |.22.            |
```
  - subjectKeyIdentifier:
```
29 91 60 ff 8a 4d fa eb  f9 a6 6a b8 cf f9 e6 4b  |).`..M....j....K|
bd 49 ce 12                                       |.I..            |
```
  - keyUsage: true, 0x86
  - basicConstraints
    - true
    - true: 0
  - extendedKeyUsage: codeSigning
  - certificatePolicies: anyPolicy
  - crlDistributionPoints: http://crl.comodoca.com/COMODORSACertificationAuthority.crl
  - authorityInfoAccess
    - #0
      - caIssuers: http://crt.comodoca.com/COMODORSAAddTrustCA.crt
      - OCSP: http://ocsp.comodoca.com

RSA-SHA384:

02 3f 02 39 c3 ee f8 ca  3b 89 de 0c 6d 4d b1 f1  |.?.9....;...mM..|
4e 92 4f af c2 38 2c 04  cc c5 63 11 ab 09 63 af  |N.O..8,...c...c.|
ab a2 d7 02 3f cc 6f 19  c3 3d d6 1a 08 94 ff 25  |....?.o..=.....%|
d8 a9 88 a7 2b 10 1a e0  9b b1 07 22 1a 51 1c 3a  |....+......".Q.:|
d4 e1 e9 09 bf e6 24 74  af 1e 7b 16 31 6e 23 ef  |......$t..{.1n#.|
54 51 2d 52 02 e2 75 08  05 4c f1 b7 51 e1 51 00  |TQ-R..u..L..Q.Q.|
c6 87 f6 6c ee 10 44 76  57 6a f1 df 58 6b 21 aa  |...l..DvWj..Xk!.|
49 d4 7c 37 4e bd ff b6  75 54 40 18 36 57 67 11  |I.|7N...uT@.6Wg.|
cd 4f 02 e4 fe f3 da fc  75 17 db ec b7 f7 65 09  |.O......u.....e.|
23 49 1f 43 57 83 ea 7e  20 77 61 c8 4d f2 bb 65  |#I.CW..~ wa.M..e|
4d a8 f7 85 45 07 af 7a  69 27 65 90 29 40 8b df  |M...E..zi'e.)@..|
7b 3a 51 39 8c a8 1f 70  79 ad 6d 42 20 a2 cf 0c  |{:Q9...py.mB ...|
6c 03 8c 4c cd 73 07 94  e7 5a 8e 3a 04 ba a2 a1  |l..L.s...Z.:....|
7c 1f cb 63 3a 15 a7 d4  15 1b a7 52 47 32 a9 f4  ||..c:......RG2..|
bf 64 47 d1 aa 1f 53 4e  32 30 73 c2 6f b7 78 82  |.dG...SN20s.o.x.|
9d 5c ff 46 bb 6b 22 1d  88 0b f8 1b aa 34 a6 fc  |.\.F.k"......4..|
8c f5 dd 7f 65 8c 8c 31  57 31 d0 36 ec 47 a1 cf  |....e..1W1.6.G..|
cb 8b a8 ef 1c 18 58 c5  06 77 ca 4b 9b 51 af 4c  |......X..w.K.Q.L|
08 4a 7a 8f e2 a3 52 e2  8e 8e cc 26 e4 b2 d8 e5  |.Jz...R....&....|
38 c2 a8 ed c6 81 9c 35  6b a9 58 61 4a 0a 97 b4  |8......5k.XaJ...|
4b 42 b6 55 9d be 99 e7  70 6d 59 f8 6d 2a 0c 7f  |KB.U....pmY.m*..|
19 60 5f 0c 9a 88 6c 30  ac 52 09 90 16 1b ff 2b  |.`_...l0.R.....+|
9d db d0 20 ca 89 ea 28  7e 32 8e 19 df 7b 48 33  |... ...(~2...{H3|
1e d7 65 f8 ae c9 f8 83  14 93 76 7d 64 d0 8e ce  |..e.......v}d...|
be 35 7d ff 72 31 4d 9f  9e bd 1e 6c 2f a8 8f 0c  |.5}.r1M....l/...|
06 50 fb 8c 27 b3 76 c9  f4 e6 d7 c3 34 e2 8c 87  |.P..'.v.....4...|
21 86 61 fe bf 55 74 e1  21 77 03 0a 68 6c bb e4  |!.a..Ut.!w..hl..|
c9 a9 e6 cf 59 25 eb 7c  ec 45 0e 79 66 68 e8 22  |....Y%.|.E.yfh."|
cd b8 ef 98 85 4d 96 11  3c 09 8a d0 7f bc 28 28  |.....M..<.....((|
13 fb 6a ca 54 8d 92 5c  cd c2 65 98 06 9e ce 48  |..j.T..\..e....H|
5b d4 b5 37 93 46 41 7c  07 dd cf fa 43 ef ba 67  |[..7.FA|....C..g|
61 ff 7d 49 e0 bb 30 7d  5c 80 e3 e6 16 39 4b a7  |a.}I..0}\....9K.|

Signer

1
unnamed
- #0
  - C: GB
  - ST: Greater Manchester
  - L: Salford
  - O: COMODO CA Limited
  - CN: COMODO RSA Code Signing CA
- 2A:2D:CB:62:50:C2:FA:8A:22:8D:0A:7D:F3:75:23:E7
SHA1: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

64 eb 3e 26 9e 6d 4e fd  7f 25 64 44 73 b4 71 e3  |d.>&.mN..%dDs.q.|
27 2a b8 66                                       |'*.f            |

rsaEncryption:

68 e8 49 81 f1 b7 8b 3a  c5 82 c9 a1 54 58 c9 57  |h.I....:....TX.W|
63 e2 6f 1b 6c 47 d6 f3  3e bb c1 16 59 c6 af ea  |c.o.lG..>...Y...|
39 c9 ce 63 b6 2e b4 7b  4b 86 fe 97 7a d7 ec 16  |9..c...{K...z...|
69 cd c4 20 f7 78 63 d8  5c 7d d6 b5 7d 6c b9 51  |i.. .xc.\}..}l.Q|
9c dc 31 7f 0d 3b 83 b5  18 4c bc 66 74 55 52 f4  |..1..;...L.ftUR.|
46 aa 81 27 23 f1 c7 38  3d e1 fc d5 c3 fd b0 67  |F..'#..8=......g|
c9 fc e9 6b 46 ac b4 40  e3 a1 81 8a 4c fd e1 c4  |...kF..@....L...|
be a1 27 2b 6a 87 a6 df  22 73 15 ca cc 40 e0 9f  |..'+j..."s...@..|
c1 1e 55 cd 21 53 f7 4d  8f 1e 5c 8b f9 b9 21 2b  |..U.!S.M..\...!+|
88 35 6c ab 5d 9a 27 e1  01 7f 1c 70 9b 39 53 01  |.5l.].'....p.9S.|
80 1a 1d be 8e 83 4e e0  15 34 1e 58 12 bb 3e 28  |......N..4.X..>(|
ff 6c 50 37 d9 f4 73 c5  4c 90 a7 c6 06 e1 96 5c  |.lP7..s.L......\|
26 05 95 22 e1 cb 34 e2  78 a2 e4 b2 a1 8c d4 51  |&.."..4.x......Q|
04 33 b3 2a d1 44 b6 f5  c6 22 f5 cc 38 63 69 52  |.3.*.D..."..8ciR|
1b 68 ee 54 c3 bd 68 1c  b0 c7 5e 18 8d 76 9f 7d  |.h.T..h...^..v.}|
60 e9 24 06 07 bf 79 d0  bc e5 cc c2 b5 a4 99 68  |`.$...y........h|

countersignature

unnamed
- #0
  - C: US
  - ST: UT
  - L: Salt Lake City
  - O: The USERTRUST Network
  - OU: http://www.usertrust.com
  - CN: UTN-USERFirst-Object
- 16:88:F0:39:25:5E:63:8E:69:14:39:07:E6:33:0B
SHA1: nil

contentType: pkcs7-data
signingTime: 2016-01-17 09:47:28 UTC

messageDigest:

a9 49 7a 43 8b 9c 28 07  36 31 75 0c f2 a0 24 80  |.IzC..(.61u...$.|
2a 01 3e 69                                       |*.>i            |

rsaEncryption:

28 b1 2c 3b ef b8 4f 47  ff 2a 84 4b a5 66 83 10  |(.,;..OG.*.K.f..|
82 b7 98 45 90 4a c7 3b  71 db 5e 21 b3 4c 0e 51  |...E.J.;q.^!.L.Q|
b1 e5 ea 85 07 07 bb 16  09 12 23 69 18 ff 0e 7d  |..........#i...}|
20 21 25 c4 6f be 49 ba  23 d0 ce 51 0d ac 5a 6d  | !%.o.I.#..Q..Zm|
8d 26 a1 d6 a8 5c ed d0  31 6c 64 7e 02 35 5b 40  |.&...\..1ld~.5[@|
27 4b 3c 31 4e 7a 84 b3  7b 1a 35 5c 75 c7 49 78  |'K<1Nz..{.5\u.Ix|
65 19 4d de d2 98 e3 08  56 b0 fc 81 6a 3e 0e 16  |e.M.....V...j>..|
b8 5d 48 96 8f 25 a3 26  23 62 ab 20 0d d6 7a a1  |.]H..%.&#b. ..z.|
b8 6e 2b 6a 5b 52 61 b9  2b bd 29 a4 b7 2a d6 77  |.n+j[Ra.+.)..*.w|
f2 f9 32 35 43 be 9d 0c  5e be 8a 2b fd 04 7c 4e  |..25C...^..+..|N|
dc 5e b9 ba c7 93 5e 75  83 3d ed aa 3a 21 7f 1c  |.^....^u.=..:!..|
5c 36 68 27 45 99 84 cc  a6 64 76 03 f8 9e 9b fe  |\6h'E....dv.....|
77 04 6d 34 dc 8b 0c 61  a3 d0 4f 4e ed e4 c4 c5  |w.m4...a..ON....|
17 73 39 4b 28 d9 4f 27  c9 f3 3e d0 2e f4 99 c3  |.s9K(.O'..>.....|
1d 68 35 0f 79 3f 8e 3e  78 23 fc 0e 78 e2 ae 5f  |.h5.y?.>x#..x.._|
66 5f 32 dc ed 26 44 f3  42 a5 2f d7 76 da ab 38  |f_2..&D.B./.v..8|

show previews

offset	size	type	comment
0	112128	EXE	02/17/2012 14:55:21	#
15c1	15	HTM		#
1b600	51207	RAR	Password Protected:Encrypted Headers!	#
27e07	25182409	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 25345744 bytes (25 MiB)


--
Type = PE
Physical Size = 25345744
CPU = x86
Characteristics = Executable 32-bit NoRelocs
Created = 2012-02-17 14:55:21
Headers Size = 1024
Checksum = 25403015
Image Size = 212992
Section Alignment = 4096
File Alignment = 512
Code Size = 73216
Initialized Data Size = 37888
Uninitialized Data Size = 0
Linker Version = 9.0
OS Version = 5.0
Image Version = 0.0
Subsystem Version = 5.0
Subsystem = Windows GUI
DLL Characteristics = NX-Compatible NoSEH TerminalServerAware
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
----
Path = [0]
Size = 25228224
Packed Size = 25228224
Virtual Size = 25228224
Offset = 112128
--
Path = [0]
Type = Rar
Physical Size = 25228222
Tail Size = 2
Characteristics = Solid
Solid = +
Blocks = 1
Multivolume = -
Volumes = 1

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2015-11-27 01:19:06 ....A      6916368      2646258  autorun.exe
2014-06-11 00:51:00 ....A       328416       135015  lua5.1.dll
2014-06-11 00:50:58 ....A        11264         2103  lua51.dll
2015-11-27 01:18:44 ....A       925643       927980  AutoPlay/autorun.cdd
2015-10-10 00:47:54 ....A        32038          298  adept_installer.ico
2015-10-10 00:47:54 ....A        32038          120  AutoPlay/Icons/adept_installer.ico
2015-08-19 18:29:18 ....A         4286         1101  AutoPlay/Icons/icon.ico
2015-07-12 01:40:42 ....A        16958         3674  AutoPlay/Icons/iconka.ico
2003-05-27 19:27:00 ....A         3872         2975  AutoPlay/Audio/Click1.ogg
2003-05-27 19:27:00 ....A         3833          576  AutoPlay/Audio/High1.ogg
2015-11-25 03:54:53 ....A          169           79  AutoPlay/Images/0001_2.png
2015-11-25 03:55:04 ....A          178           62  AutoPlay/Images/0002_2.png
2015-11-25 03:55:17 ....A          178           54  AutoPlay/Images/0003_1.png
2015-11-25 03:55:30 ....A          177           50  AutoPlay/Images/0004.png
2015-11-25 03:56:04 ....A          175           54  AutoPlay/Images/0005.png
2015-09-09 18:50:04 ....A         6385         6162  AutoPlay/Images/2323232323.png
2015-09-09 20:15:22 ....A         1121         1085  AutoPlay/Images/3333.png
2015-09-09 21:10:21 ....A          125           66  AutoPlay/Images/5454545333.png
2015-07-16 18:12:37 ....A         1421         1401  AutoPlay/Images/66666666666-min.png
2015-07-16 18:10:34 ....A          212          228  AutoPlay/Images/666666666666.png
2014-06-11 00:51:24 ....A         5858         3083  AutoPlay/Plugins/sb_Windows7.png
2013-11-11 10:14:21 .R..A      1481164      1484838  resourse/kode/163.jpg
2013-12-27 10:23:40 .R..A      1301140      1302775  resourse/kode/164.jpg
2013-12-12 10:21:07 .R..A      1127063      1123789  resourse/kode/165.jpg
2013-12-20 10:02:05 .R..A      1597716      1537289  resourse/kode/166.jpg
2013-12-20 10:02:11 .R..A      1129516      1131466  resourse/kode/167.jpg
2013-11-26 00:40:34 .R..A      1485477      1488835  resourse/kode/168.jpg
2013-12-06 10:09:12 .R..A      1489163      1492482  resourse/kode/169.jpg
2013-12-06 10:06:21 .R..A      1038478      1033459  resourse/kode/170.jpg
2013-12-06 10:07:25 .R..A      1028769      1029658  resourse/kode/171.jpg
2013-12-06 10:04:06 .R..A      1479430      1482352  resourse/kode/172.jpg
2013-12-12 10:24:33 .R..A      1050882      1052436  resourse/kode/174.jpg
2014-01-04 11:21:17 .R..A      1284171      1266971  resourse/kode/176.jpg
2014-01-04 11:14:56 .R..A      1204171      1203336  resourse/kode/177.jpg
2013-12-08 11:01:32 .R..A      1133530      1135931  resourse/kode/178.jpg
2013-12-08 11:00:45 .R..A      1307363      1310325  resourse/kode/179.jpg
2015-11-27 01:25:56 ....A      2413945      2417107  resourse/cracker-antitabletka-ru-ps-cs6.zip
2015-11-27 01:18:45 D....            0            0  AutoPlay/Audio
2015-11-27 01:18:45 D....            0            0  AutoPlay/Icons
2015-11-27 01:18:45 D....            0            0  AutoPlay/Images
2015-11-27 01:24:54 D....            0            0  resourse/kode
2015-11-27 01:18:45 D....            0            0  AutoPlay/Plugins
2015-11-27 01:18:45 D....            0            0  AutoPlay
2015-11-27 01:25:56 D....            0            0  resourse
------------------- ----- ------------ ------------  ------------------------
2015-11-27 01:25:56           29842693     25225473  37 files, 7 folders

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x0