filenameMyCleanPC april 14 2012 v3.exe
size1973168 (0x1e1bb0)
md516bc4c0885f13edf320f3c5e37ce8101
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

Rich Header

lib idversiontimes used
1584021935
17040219196
1754021914
131307292
1473072931
10425
17140219129
154402191
157402191

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0x4f70f576
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion10.0
SizeOfCode0x7dc00
SizeOfInitializedData0x162e00
SizeOfUninitializedData0
AddressOfEntryPoint0x60269
BaseOfCode0x1000
BaseOfData0x7f000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion0.0
SubsystemVersion5.1
Reserved10
SizeOfImage0x1e8000
SizeOfHeaders0x400
CheckSum0x1e7e0d
Subsystem2
DllCharacteristics0x8140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x7dac40x7dc00R-X CODE
.rdata0x7f0000x171be0x17200R-- IDATA
.data0x970000x77840x4800RW- IDATA
.tls0x9f00020x200RW- IDATA
.rsrc0xa00000x139d540x139e00R-- IDATA
.reloc0x1da0000xd3320xd400R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x9425c0x12c
RESOURCE0xa00000x139d54
EXCEPTION00
SECURITY0x1e0e000xdb0
BASERELOC0x1da0000x7138
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS0x86c480x18
LOAD_CONFIG0x86c000x40
Bound_IAT00
IAT0x7f0000x5c8
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x49f0000x49f0010x49c6740x47f71400
typenamesizecp
PNG#5000754451252
PNG#5001669051252
XML#400012721252
ICON#137521252
ICON#222161252
ICON#317361252
ICON#413841252
ICON#5306571252
ICON#696401252
ICON#742641252
ICON#824401252
ICON#911281252
DIALOG#2016521252
DIALOG#2022321252
STRING#915161252
STRING#3585421252
STRING#36016621252
STRING#36038081252
STRING#36046361252
STRING#36052621252
STRING#36062181252
STRING#38255041252
STRING#38261741252
STRING#3838681252
RCDATA#999910748081252
GROUP_ICON#2161321252
VERSION#17641252
MANIFEST#115301252
idlangstring
1281033Stub
1291033Loading embedded configuration
1301033Reading embedded configuration
1311033Error
1321033There is nothing to download
1331033Unable to find the embedded configuration
1341033Getting your personal software configuration
1351033An error occured while trying to download your software configuration
1361033Reading your software configuration
1371033Installing now. Your software will be ready in a few moments.
1381033I accept the terms of the <a id="eula" href="http://www.cyberdefender.com/eula.html">End-User License Agreement</a> and <a id="privacy" href="http://www.cyberdefender.com/privacy_policy.html">Privacy Policy</a>.
1401033(866) 793-0453
1411033 If you would like assistance, please call %1
1421033An error has occured while downloading you software. Please check your internet connection and try again when you are ready.
573451033Ready
576001033Create a new document New
576011033Open an existing document Open
576021033Close the active document Close
576031033Save the active document Save
576041033Save the active document with a new name Save As
576051033Change the printing options Page Setup
576061033Change the printer and printing options Print Setup
576071033Print the active document Print
576091033Display full pages Print Preview
576321033Erase the selection Erase
576331033Erase everything Erase All
576341033Copy the selection and put it on the Clipboard Copy
576351033Cut the selection and put it on the Clipboard Cut
576361033Find the specified text Find
576371033Insert Clipboard contents Paste
576401033Repeat the last action Repeat
576411033Replace specific text with different text Replace
576421033Select the entire document Select All
576431033Undo the last action Undo
576441033Redo the previously undone action Redo
576481033Open another window for the active document New Window
576491033Arrange icons at the bottom of the window Arrange Icons
576501033Arrange windows so they overlap Cascade Windows
576511033Arrange windows as non-overlapping tiles Tile Windows
576521033Arrange windows as non-overlapping tiles Tile Windows
576531033Split the active window into panes Split
576641033Display program information, version number and copyright About
576651033Quit the application; prompts to save documents Exit
576801033Switch to the next window pane Next Pane
576811033Switch back to the previous window pane Previous Pane
611841033Change the window size
611851033Change the window position
611861033Reduce the window to an icon
611871033Enlarge the window to full size
611881033Switch to the next document window
611891033Switch to the previous document window
611901033Close the active window and prompts to save the documents
612021033Restore the window to normal size
612031033Activate Task List
612151033Activate this window
614021033Open this document
module_namehintordfunction_name
KERNEL32.dll664GetTimeZoneInformation
KERNEL32.dll516GetLocaleInfoA
KERNEL32.dll675GetVersionExA
KERNEL32.dll549GetNativeSystemInfo
KERNEL32.dll1189SetUnhandledExceptionFilter
KERNEL32.dll531GetModuleFileNameA
KERNEL32.dll449GetCurrentProcessId
KERNEL32.dll852LockResource
KERNEL32.dll1201SizeofResource
KERNEL32.dll840LocalFree
KERNEL32.dll1349lstrcmpiW
KERNEL32.dll100CompareStringW
KERNEL32.dll536GetModuleHandleW
KERNEL32.dll581GetProcAddress
KERNEL32.dll691GlobalAlloc
KERNEL32.dll702GlobalLock
KERNEL32.dll709GlobalUnlock
KERNEL32.dll747InterlockedDecrement
KERNEL32.dll751InterlockedIncrement
KERNEL32.dll532GetModuleFileNameW
KERNEL32.dll870MulDiv
KERNEL32.dll1346lstrcmpW
KERNEL32.dll209DeleteCriticalSection
KERNEL32.dll739InitializeCriticalSectionAndSpinCount
KERNEL32.dll1358lstrlenW
KERNEL32.dll155CreateMutexA
KERNEL32.dll1110SetEnvironmentVariableA
KERNEL32.dll1107SetEndOfFile
KERNEL32.dll1159SetStdHandle
KERNEL32.dll1316WriteConsoleW
KERNEL32.dll780IsValidLocale
KERNEL32.dll269EnumSystemLocalesA
KERNEL32.dll667GetUserDefaultLCID
KERNEL32.dll778IsValidCodePage
KERNEL32.dll567GetOEMCP
KERNEL32.dll360GetACP
KERNEL32.dll935QueryPerformanceCounter
KERNEL32.dll474GetEnvironmentStringsW
KERNEL32.dll353FreeEnvironmentStringsW
KERNEL32.dll1126SetFilePointer
KERNEL32.dll343FlushFileBuffers
KERNEL32.dll410GetConsoleCP
KERNEL32.dll1135SetHandleCount
KERNEL32.dll479GetExitCodeProcess
KERNEL32.dll768IsDebuggerPresent
KERNEL32.dll1235UnhandledExceptionFilter
KERNEL32.dll1216TerminateProcess
KERNEL32.dll1113SetEvent
KERNEL32.dll717HeapCreate
KERNEL32.dll454GetDateFormatA
KERNEL32.dll661GetTimeFormatA
KERNEL32.dll181CreateThread
KERNEL32.dll282ExitThread
KERNEL32.dll370GetCPInfo
KERNEL32.dll813LCMapStringW
KERNEL32.dll960ReadFile
KERNEL32.dll611GetStartupInfoW
KERNEL32.dll723HeapSetInformation
KERNEL32.dll391GetCommandLineW
KERNEL32.dll1265VirtualQuery
KERNEL32.dll1263VirtualProtect
KERNEL32.dll1048RtlUnwind
KERNEL32.dll612GetStdHandle
KERNEL32.dll499GetFileType
KERNEL32.dll428GetConsoleMode
KERNEL32.dll191CreateWaitableTimerA
KERNEL32.dll1196SetWaitableTimer
KERNEL32.dll1271WaitForMultipleObjects
KERNEL32.dll1213SystemTimeToFileTime
KERNEL32.dll1224TlsSetValue
KERNEL32.dll1039ResetEvent
KERNEL32.dll884OpenEventA
KERNEL32.dll627GetSystemInfo
KERNEL32.dll1223TlsGetValue
KERNEL32.dll1222TlsFree
KERNEL32.dll1221TlsAlloc
KERNEL32.dll349FormatMessageA
KERNEL32.dll323FindNextFileA
KERNEL32.dll306FindFirstFileA
KERNEL32.dll862MoveFileA
KERNEL32.dll124CreateDirectoryA
KERNEL32.dll211DeleteFileA
KERNEL32.dll1024RemoveDirectoryA
KERNEL32.dll659GetTickCount
KERNEL32.dll676GetVersionExW
KERNEL32.dll715HeapAlloc
KERNEL32.dll232DuplicateHandle
KERNEL32.dll171CreateSemaphoreA
KERNEL32.dll830LoadLibraryExW
KERNEL32.dll354FreeLibrary
KERNEL32.dll1297WideCharToMultiByte
KERNEL32.dll1273WaitForSingleObject
KERNEL32.dll1022ReleaseSemaphore
KERNEL32.dll586GetProcessHeap
KERNEL32.dll719HeapFree
KERNEL32.dll633GetSystemTimeAsFileTime
KERNEL32.dll350FormatMessageW
KERNEL32.dll333FindResourceExW
KERNEL32.dll334FindResourceW
KERNEL32.dll281ExitProcess
KERNEL32.dll833LoadResource
KERNEL32.dll82CloseHandle
KERNEL32.dll130CreateEventA
KERNEL32.dll1357lstrlenA
KERNEL32.dll871MultiByteToWideChar
KERNEL32.dll514GetLastError
KERNEL32.dll748InterlockedExchange
KERNEL32.dll1139SetLastError
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll344FlushInstructionCache
KERNEL32.dll825LeaveCriticalSection
KERNEL32.dll238EnterCriticalSection
KERNEL32.dll945RaiseException
KERNEL32.dll302FindClose
KERNEL32.dll143CreateFileW
KERNEL32.dll905OutputDebugStringA
KERNEL32.dll1043ResumeThread
KERNEL32.dll136CreateFileA
KERNEL32.dll331FindResourceA
KERNEL32.dll1317WriteFile
KERNEL32.dll644GetTempPathA
KERNEL32.dll448GetCurrentProcess
KERNEL32.dll518GetLocaleInfoW
KERNEL32.dll782IsWow64Process
KERNEL32.dll698GlobalFree
KERNEL32.dll745InterlockedCompareExchange
KERNEL32.dll753InterlockedPushEntrySList
KERNEL32.dll485GetFileAttributesA
KERNEL32.dll202DecodePointer
KERNEL32.dll234EncodePointer
KERNEL32.dll738InitializeCriticalSection
KERNEL32.dll1202Sleep
KERNEL32.dll772IsProcessorFeaturePresent
KERNEL32.dll617GetStringTypeW
KERNEL32.dll724HeapSize
KERNEL32.dll722HeapReAlloc
KERNEL32.dll718HeapDestroy
KERNEL32.dll752InterlockedPopEntrySList
KERNEL32.dll1257VirtualAlloc
KERNEL32.dll1260VirtualFree
KERNEL32.dll831LoadLibraryW
USER32.dll160DestroyAcceleratorTable
USER32.dll14BeginPaint
USER32.dll475IsWindow
USER32.dll269GetClassInfoExW
USER32.dll491LoadCursorW
USER32.dll589RegisterClassExW
USER32.dll110CreateWindowExW
USER32.dll88CreateAcceleratorTableW
USER32.dll419GetWindowTextW
USER32.dll418GetWindowTextLengthW
USER32.dll611RegisterWindowMessageW
USER32.dll748SystemParametersInfoW
USER32.dll216EnableWindow
USER32.dll62CheckDlgButton
USER32.dll462IsDlgButtonChecked
USER32.dll208DrawTextW
USER32.dll549OffsetRect
USER32.dll528MessageBoxExW
USER32.dll687SetRectEmpty
USER32.dll495LoadImageW
USER32.dll785UpdateWindow
USER32.dll476IsWindowEnabled
USER32.dll294GetDlgCtrlID
USER32.dll762TranslateAcceleratorW
USER32.dll708SetWindowLongW
USER32.dll406GetWindowLongW
USER32.dll331GetMenu
USER32.dll710SetWindowPos
USER32.dll276GetClientRect
USER32.dll220EndPaint
USER32.dll30CallWindowProcW
USER32.dll735ShowWindow
USER32.dll658SetFocus
USER32.dll3AdjustWindowRectEx
USER32.dll576PtInRect
USER32.dll196DrawFocusRect
USER32.dll648SetCursor
USER32.dll288GetCursorPos
USER32.dll264GetCapture
USER32.dll166DestroyWindow
USER32.dll503LoadMenuW
USER32.dll506LoadStringW
USER32.dll107CreatePopupMenu
USER32.dll615RemoveMenu
USER32.dll536MonitorFromPoint
USER32.dll674SetMenuItemInfoW
USER32.dll340GetMenuItemInfoW
USER32.dll670SetMenuDefaultItem
USER32.dll567PostQuitMessage
USER32.dll521MapWindowPoints
USER32.dll351GetMonitorInfoW
USER32.dll538MonitorFromWindow
USER32.dll412GetWindowRect
USER32.dll398GetWindow
USER32.dll356GetParent
USER32.dll291GetDesktopWindow
USER32.dll99CreateDialogParamW
USER32.dll636SendMessageW
USER32.dll715SetWindowTextW
USER32.dll446InvalidateRect
USER32.dll457IsChild
USER32.dll295GetDlgItem
USER32.dll533MessageBoxW
USER32.dll461IsDialogMessageW
USER32.dll300GetFocus
USER32.dll773UnregisterClassA
USER32.dll175DispatchMessageW
USER32.dll764TranslateMessage
USER32.dll349GetMessageW
USER32.dll563PeekMessageW
USER32.dll156DefWindowProcW
USER32.dll379GetSysColor
USER32.dll49CharNextW
USER32.dll539MoveWindow
USER32.dll71ClientToScreen
USER32.dll621ScreenToClient
USER32.dll289GetDC
USER32.dll613ReleaseDC
USER32.dll447InvalidateRgn
USER32.dll586RedrawWindow
USER32.dll640SetCapture
USER32.dll274GetClassNameW
USER32.dll612ReleaseCapture
USER32.dll485LoadAcceleratorsW
USER32.dll64CheckMenuRadioItem
USER32.dll420GetWindowThreadProcessId
USER32.dll569PostThreadMessageW
USER32.dll525MessageBeep
USER32.dll505LoadStringA
USER32.dll759TrackPopupMenuEx
USER32.dll337GetMenuItemCount
USER32.dll10AppendMenuW
USER32.dll164DestroyMenu
USER32.dll246FillRect
GDI32.dll64CreateFontIndirectW
GDI32.dll84CreateSolidBrush
GDI32.dll459GetDeviceCaps
GDI32.dll19BitBlt
GDI32.dll47CreateCompatibleBitmap
GDI32.dll230DeleteObject
GDI32.dll53CreateDIBSection
GDI32.dll525GetStockObject
GDI32.dll691StretchBlt
GDI32.dll639SetBkMode
GDI32.dll457GetDIBColorTable
GDI32.dll509GetObjectW
GDI32.dll647SetDIBColorTable
GDI32.dll631SelectObject
GDI32.dll227DeleteDC
GDI32.dll48CreateCompatibleDC
GDI32.dll678SetTextColor
ADVAPI32.dll503OpenProcessToken
ADVAPI32.dll616RegQueryInfoKeyW
ADVAPI32.dll638RegSetValueExW
ADVAPI32.dll584RegDeleteValueW
ADVAPI32.dll580RegDeleteKeyW
ADVAPI32.dll569RegCreateKeyExW
ADVAPI32.dll622RegQueryValueExW
ADVAPI32.dll568RegCreateKeyExA
ADVAPI32.dll637RegSetValueExA
ADVAPI32.dll591RegEnumKeyExW
ADVAPI32.dll609RegOpenKeyExW
ADVAPI32.dll560RegCloseKey
ADVAPI32.dll621RegQueryValueExA
ADVAPI32.dll677SetEntriesInAclA
ADVAPI32.dll309GetKernelObjectSecurity
ADVAPI32.dll124CreateProcessAsUserW
ADVAPI32.dll694SetSecurityDescriptorDacl
ADVAPI32.dll223DuplicateTokenEx
ADVAPI32.dll371ImpersonateLoggedOnUser
ADVAPI32.dll480MakeAbsoluteSD
ADVAPI32.dll685SetKernelObjectSecurity
ADVAPI32.dll60BuildExplicitAccessWithNameA
ADVAPI32.dll328GetSecurityDescriptorDacl
SHELL32.dll191SHGetFolderPathA
SHELL32.dll195SHGetFolderPathW
SHELL32.dll290ShellExecuteW
ole32.dll6CLSIDFromProgID
ole32.dll8CLSIDFromString
ole32.dll312OleLockRunning
ole32.dll16CoCreateInstance
ole32.dll103CoTaskMemAlloc
ole32.dll134CreateStreamOnHGlobal
ole32.dll306OleInitialize
ole32.dll329OleUninitialize
ole32.dll15CoCreateGuid
ole32.dll62CoInitialize
ole32.dll105CoTaskMemRealloc
ole32.dll104CoTaskMemFree
ole32.dll63CoInitializeEx
ole32.dll38CoGetClassObject
ole32.dll377StringFromGUID2
OLEAUT32.dll277
OLEAUT32.dll161
OLEAUT32.dll162
OLEAUT32.dll420
OLEAUT32.dll9
OLEAUT32.dll8
OLEAUT32.dll2
OLEAUT32.dll4
OLEAUT32.dll7
OLEAUT32.dll6
COMCTL32.dll123InitCommonControlsEx
COMCTL32.dll146_TrackMouseEvent
MSIMG32.dllAlphaBlend
MSIMG32.dll3TransparentBlt
gdiplus.dll81GdipCreateBitmapFromStream
gdiplus.dll628GdiplusShutdown
gdiplus.dll54GdipCloneImage
gdiplus.dll176GdipDrawImageI
gdiplus.dll289GdipGetImageGraphicsContext
gdiplus.dll629GdiplusStartup
gdiplus.dll46GdipBitmapUnlockBits
gdiplus.dll43GdipBitmapLockBits
gdiplus.dll80GdipCreateBitmapFromScan0
gdiplus.dll290GdipGetImageHeight
gdiplus.dll293GdipGetImagePalette
gdiplus.dll294GdipGetImagePaletteSize
gdiplus.dll295GdipGetImagePixelFormat
gdiplus.dll237GdipFree
gdiplus.dll33GdipAlloc
gdiplus.dll144GdipDeleteGraphics
gdiplus.dll152GdipDisposeImage
gdiplus.dll300GdipGetImageWidth
WS2_32.dll111
WS2_32.dll116
WS2_32.dll57
WS2_32.dll52
PSAPI.DLL18GetPerformanceInfo
WINHTTP.dll9WinHttpCrackUrl
WINHTTP.dll22WinHttpReceiveResponse
WINHTTP.dll28WinHttpSetTimeouts
WINHTTP.dll26WinHttpSetOption
WINHTTP.dll13WinHttpGetIEProxyConfigForCurrentUser
WINHTTP.dll23WinHttpSendRequest
WINHTTP.dll31WinHttpWriteData
WINHTTP.dll8WinHttpConnect
WINHTTP.dll7WinHttpCloseHandle
WINHTTP.dll19WinHttpQueryHeaders
WINHTTP.dll18WinHttpQueryDataAvailable
WINHTTP.dll4WinHttpAddRequestHeaders
WINHTTP.dll21WinHttpReadData
WINHTTP.dll14WinHttpGetProxyForUrl
WINHTTP.dll16WinHttpOpenRequest
WINHTTP.dll15WinHttpOpen
msi.dll87
msi.dll112
msi.dll91
msi.dll117
msi.dll160
msi.dll158
msi.dll159
msi.dll8
msi.dll32
msi.dll141

StringTable 040904b0

CompanyNameCyberDefender Corporation
FileDescriptionMyCleanPC.exe
FileVersion1.0.0.4371
InternalNameCDStub
LegalCopyrightCopyright 2012
OriginalFilenameMyCleanPC.exe
ProductNameMyCleanPC.exe Stub Installer
ProductVersion1.0.0.4371

VS_FIXEDFILEINFO

FileVersion1.0.0.4371
ProductVersion1.0.0.4371
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType2
FileSubtype0

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10/CN=VeriSign Class 3 Code Signing 2010 CA
serial: 2F020BCB1B37E9E1D2927775129A0B65

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:02:0b:cb:1b:37:e9:e1:d2:92:77:75:12:9a:0b:65
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Validity
            Not Before: Nov 22 00:00:00 2011 GMT
            Not After : Nov 22 23:59:59 2012 GMT
        Subject: C=US, ST=California, L=Los Angeles, O=CyberDefender Corporation, OU=Security Software, OU=Digital ID Class 3 - Microsoft Software Validation v2, CN=CyberDefender Corporation
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:d0:89:71:b7:66:60:fc:0a:34:c9:a6:86:e7:df:
                    28:87:7f:b4:36:56:1f:f7:b9:f1:14:7d:98:65:6e:
                    c4:c2:e7:a5:e6:ff:33:e1:03:af:58:6a:e0:55:8b:
                    08:23:c5:37:7e:f1:62:a3:ac:d0:06:c7:e1:ca:f7:
                    cf:18:06:b5:4d:da:39:29:5f:99:1a:fa:c8:a2:d2:
                    55:39:f3:55:e9:96:ba:d2:87:d9:81:be:e6:03:d8:
                    20:aa:6b:b8:7e:1b:73:2e:b9:07:12:66:c3:f9:c7:
                    30:7a:df:0d:4c:0e:92:6b:6c:0a:07:74:d3:f1:70:
                    c3:14:0b:f5:e8:bf:3a:d2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://csc3-2010-crl.verisign.com/CSC3-2010.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa
            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
                CA Issuers - URI:http://csc3-2010-aia.verisign.com/CSC3-2010.cer
            X509v3 Authority Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        31:20:f5:a4:08:11:3c:b3:9d:d0:d3:de:5a:20:3e:26:34:be:
        ab:df:7d:fb:83:c3:ad:0f:b2:3a:95:cc:18:38:83:19:47:97:
        f4:a9:fe:2b:3b:a5:2f:9d:1e:6a:0b:87:44:72:3e:c6:49:21:
        7d:38:04:fc:9b:a7:17:e7:4a:58:96:81:9c:78:2f:f0:26:e9:
        07:02:84:59:bc:c5:6f:ee:9c:9c:28:03:80:3d:dd:fb:6e:24:
        8a:0c:b8:32:7d:78:bd:61:ef:db:23:e9:f5:93:e8:33:61:3a:
        f3:69:3a:13:5d:ba:d2:dd:60:ab:e8:ed:09:ba:8c:9f:59:2f:
        c2:32:08:b3:58:da:d6:5e:d7:9a:f4:52:c1:7d:7b:a9:7d:ea:
        e9:0c:60:07:3d:c4:18:f0:b6:7f:35:81:e6:1b:cb:97:a4:88:
        71:55:d0:bd:0d:3f:43:73:d2:52:66:df:0c:72:e7:bb:f2:5a:
        9b:ec:52:9e:fa:d3:1c:cd:75:e7:df:46:37:58:c2:31:ff:5e:
        a8:8a:1e:47:9a:dc:b7:40:45:a9:9f:01:ba:bc:82:46:fe:07:
        85:b7:43:c0:ca:1c:8f:7d:4c:4d:6f:9e:c0:a6:b4:2f:fe:ff:
        58:4c:71:b3:ae:44:5e:17:bc:bf:36:ee:40:db:83:ba:c4:cc:
        a6:fc:d2:f3

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https:\/\/www.verisign.com\/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:f5:23:4b:5e:a5:d7:8a:bb:32:e9:d4:57:f7:ef:
                    e4:c7:26:7e:ad:19:98:fe:a8:9d:7d:94:f6:36:6b:
                    10:d7:75:81:30:7f:04:68:7f:cb:2b:75:1e:cd:1d:
                    08:8c:df:69:94:a7:37:a3:9c:7b:80:e0:99:e1:ee:
                    37:4d:5f:ce:3b:14:ee:86:d4:d0:f5:27:35:bc:25:
                    0b:38:a7:8c:63:9d:17:a3:08:a5:ab:b0:fb:cd:6a:
                    62:82:4c:d5:21:da:1b:d9:f1:e3:84:3b:8a:2a:4f:
                    85:5b:90:01:4f:c9:a7:76:10:7f:27:03:7c:be:ae:
                    7e:7d:c1:dd:f9:05:bc:1b:48:9c:69:e7:c0:a4:3c:
                    3c:41:00:3e:df:96:e5:c5:e4:94:71:d6:55:01:c7:
                    00:26:4a:40:3c:b5:a1:26:a9:0c:a7:6d:80:8e:90:
                    25:7b:cf:bf:3f:1c:eb:2f:96:fa:e5:87:77:c6:b5:
                    56:b2:7a:3b:54:30:53:1b:df:62:34:ff:1e:d1:f4:
                    5a:93:28:85:e5:4c:17:4e:7e:5b:fd:a4:93:99:7f:
                    df:cd:ef:a4:75:ef:ef:15:f6:47:e7:f8:19:72:d8:
                    2e:34:1a:a6:b4:a7:4c:7e:bd:bb:4f:0c:3d:57:f1:
                    30:d6:a6:36:8e:d6:80:76:d7:19:2e:a5:cd:7e:34:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.verisign.com/pca3-g5.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-8
            X509v3 Subject Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            X509v3 Authority Key Identifier: 
                7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        56:22:e6:34:a4:c4:61:cb:48:b9:01:ad:56:a8:64:0f:d9:8c:
        91:c4:bb:cc:0c:e5:ad:7a:a0:22:7f:df:47:38:4a:2d:6c:d1:
        7f:71:1a:7c:ec:70:a9:b1:f0:4f:e4:0f:0c:53:fa:15:5e:fe:
        74:98:49:24:85:81:26:1c:91:14:47:b0:4c:63:8c:bb:a1:34:
        d4:c6:45:e8:0d:85:26:73:03:d0:a9:8c:64:6d:dc:71:92:e6:
        45:05:60:15:59:51:39:fc:58:14:6b:fe:d4:a4:ed:79:6b:08:
        0c:41:72:e7:37:22:06:09:be:23:e9:3f:44:9a:1e:e9:61:9d:
        cc:b1:90:5c:fc:3d:d2:8d:ac:42:3d:65:36:d4:b4:3d:40:28:
        8f:9b:10:cf:23:26:cc:4b:20:cb:90:1f:5d:8c:4c:34:ca:3c:
        d8:e5:37:d6:6f:a5:20:bd:34:eb:26:d9:ae:0d:e7:c5:9a:f7:
        a1:b4:21:91:33:6f:86:e8:58:bb:25:7c:74:0e:58:fe:75:1b:
        63:3f:ce:31:7c:9b:8f:1b:96:9e:c5:53:76:84:5b:9c:ad:91:
        fa:ac:ed:93:ba:5d:c8:21:53:c2:82:53:63:af:12:0d:50:87:
        11:1b:3d:54:52:96:8a:2c:9c:3d:92:1a:08:9a:05:2e:c7:93:
        a5:48:91:d3
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • : 
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • SHA1
          • af 96 bc 0b 1a 51 43 01  e3 9e a7 b1 d4 26 21 cb  |.....QC......&!.|
5f 3f 95 3f                                       |_?.?            |
    • Certificates
      • Certificate #0
        • 2
          • 2F:02:0B:CB:1B:37:E9:E1:D2:92:77:75:12:9A:0B:65
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: Terms of use at https://www.verisign.com/rpa (c)10
            • CN: VeriSign Class 3 Code Signing 2010 CA
          • 2011-11-22 00:00:00 UTC: 2012-11-22 23:59:59 UTC
          • Subject
            • C: US
            • ST: California
            • L: Los Angeles
            • O: CyberDefender Corporation
            • OU: Security Software
            • OU: Digital ID Class 3 - Microsoft Software Validation v2
            • CN: CyberDefender Corporation
          • #5
            • rsaEncryption: nil
            • D0:89:71:B7:66:60:FC:0A:34:C9:A6:86:E7:DF:28:87:
              7F:B4:36:56:1F:F7:B9:F1:14:7D:98:65:6E:C4:C2:E7:
              A5:E6:FF:33:E1:03:AF:58:6A:E0:55:8B:08:23:C5:37:
              7E:F1:62:A3:AC:D0:06:C7:E1:CA:F7:CF:18:06:B5:4D:
              DA:39:29:5F:99:1A:FA:C8:A2:D2:55:39:F3:55:E9:96:
              BA:D2:87:D9:81:BE:E6:03:D8:20:AA:6B:B8:7E:1B:73:
              2E:B9:07:12:66:C3:F9:C7:30:7A:DF:0D:4C:0E:92:6B:
              6C:0A:07:74:D3:F1:70:C3:14:0B:F5:E8:BF:3A:D2:0D              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • nil
            • keyUsage: true, 0x80
            • crlDistributionPoints: http://csc3-2010-crl.verisign.com/CSC3-2010.crl
            • certificatePolicies
              • 2.16.840.1.113733.1.7.23.3
                • id-qt-cps: https://www.verisign.com/rpa
            • extendedKeyUsage: codeSigning
            • authorityInfoAccess
              • #0
                • OCSP: http://ocsp.verisign.com
                • caIssuers: http://csc3-2010-aia.verisign.com/CSC3-2010.cer
            • authorityKeyIdentifier: 
              cf 99 a9 ea 7b 26 f4 4b  c9 8e 8f d7 f0 05 26 ef  |....{&.K......&.|
e3 d2 a7 9d                                       |....            |
            • nsCertType: 0x10
            • 1.3.6.1.4.1.311.2.1.27
              • false: true
        • RSA-SHA1: 
          31 20 f5 a4 08 11 3c b3  9d d0 d3 de 5a 20 3e 26  |1 ....<.....Z >&|
34 be ab df 7d fb 83 c3  ad 0f b2 3a 95 cc 18 38  |4...}......:...8|
83 19 47 97 f4 a9 fe 2b  3b a5 2f 9d 1e 6a 0b 87  |..G....+;./..j..|
44 72 3e c6 49 21 7d 38  04 fc 9b a7 17 e7 4a 58  |Dr>.I!}8......JX|
96 81 9c 78 2f f0 26 e9  07 02 84 59 bc c5 6f ee  |...x/.&....Y..o.|
9c 9c 28 03 80 3d dd fb  6e 24 8a 0c b8 32 7d 78  |..(..=..n$...2}x|
bd 61 ef db 23 e9 f5 93  e8 33 61 3a f3 69 3a 13  |.a..#....3a:.i:.|
5d ba d2 dd 60 ab e8 ed  09 ba 8c 9f 59 2f c2 32  |]...`.......Y/.2|
08 b3 58 da d6 5e d7 9a  f4 52 c1 7d 7b a9 7d ea  |..X..^...R.}{.}.|
e9 0c 60 07 3d c4 18 f0  b6 7f 35 81 e6 1b cb 97  |..`.=.....5.....|
a4 88 71 55 d0 bd 0d 3f  43 73 d2 52 66 df 0c 72  |..qU...?Cs.Rf..r|
e7 bb f2 5a 9b ec 52 9e  fa d3 1c cd 75 e7 df 46  |...Z..R.....u..F|
37 58 c2 31 ff 5e a8 8a  1e 47 9a dc b7 40 45 a9  |7X.1.^...G...@E.|
9f 01 ba bc 82 46 fe 07  85 b7 43 c0 ca 1c 8f 7d  |.....F....C....}|
4c 4d 6f 9e c0 a6 b4 2f  fe ff 58 4c 71 b3 ae 44  |LMo..../..XLq..D|
5e 17 bc bf 36 ee 40 db  83 ba c4 cc a6 fc d2 f3  |^...6.@.........|
      • Certificate #1
        • 2
          • 52:00:E5:AA:25:56:FC:1A:86:ED:96:C9:D4:4B:33:C7
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: (c) 2006 VeriSign, Inc. - For authorized use only
            • CN: VeriSign Class 3 Public Primary Certification Authority - G5
          • 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
          • Subject
            • C: US
            • O: VeriSign, Inc.
            • OU: VeriSign Trust Network
            • OU: Terms of use at https://www.verisign.com/rpa (c)10
            • CN: VeriSign Class 3 Code Signing 2010 CA
          • #5
            • rsaEncryption: nil
            • F5:23:4B:5E:A5:D7:8A:BB:32:E9:D4:57:F7:EF:E4:C7:
              26:7E:AD:19:98:FE:A8:9D:7D:94:F6:36:6B:10:D7:75:
              81:30:7F:04:68:7F:CB:2B:75:1E:CD:1D:08:8C:DF:69:
              94:A7:37:A3:9C:7B:80:E0:99:E1:EE:37:4D:5F:CE:3B:
              14:EE:86:D4:D0:F5:27:35:BC:25:0B:38:A7:8C:63:9D:
              17:A3:08:A5:AB:B0:FB:CD:6A:62:82:4C:D5:21:DA:1B:
              D9:F1:E3:84:3B:8A:2A:4F:85:5B:90:01:4F:C9:A7:76:
              10:7F:27:03:7C:BE:AE:7E:7D:C1:DD:F9:05:BC:1B:48:
              9C:69:E7:C0:A4:3C:3C:41:00:3E:DF:96:E5:C5:E4:94:
              71:D6:55:01:C7:00:26:4A:40:3C:B5:A1:26:A9:0C:A7:
              6D:80:8E:90:25:7B:CF:BF:3F:1C:EB:2F:96:FA:E5:87:
              77:C6:B5:56:B2:7A:3B:54:30:53:1B:DF:62:34:FF:1E:
              D1:F4:5A:93:28:85:E5:4C:17:4E:7E:5B:FD:A4:93:99:
              7F:DF:CD:EF:A4:75:EF:EF:15:F6:47:E7:F8:19:72:D8:
              2E:34:1A:A6:B4:A7:4C:7E:BD:BB:4F:0C:3D:57:F1:30:
              D6:A6:36:8E:D6:80:76:D7:19:2E:A5:CD:7E:34:2D:89              : 0x010001
          • X509v3 extensions
            • basicConstraints
              • true
              • true: 0
            • certificatePolicies
              • 2.16.840.1.113733.1.7.23.3
                • #0
                  • id-qt-cps: https://www.verisign.com/cps
                  • id-qt-unotice: https://www.verisign.com/rpa
            • keyUsage: true, 6
            • 1.3.6.1.5.5.7.1.12
              • image/gif
                • SHA1: 
                  8f e5 d3 1a 86 ac 8d 8e  6b c3 cf 80 6a d4 48 18  |........k...j.H.|
2c 7b 19 2e                                       |,{..            |
                • http://logo.verisign.com/vslogo.gif
            • crlDistributionPoints: http://crl.verisign.com/pca3-g5.crl
            • authorityInfoAccess
              • OCSP: http://ocsp.verisign.com
            • extendedKeyUsage
              • clientAuth: codeSigning
            • subjectAltName
              • CN: VeriSignMPKI-2-8
            • subjectKeyIdentifier: 
              cf 99 a9 ea 7b 26 f4 4b  c9 8e 8f d7 f0 05 26 ef  |....{&.K......&.|
e3 d2 a7 9d                                       |....            |
            • authorityKeyIdentifier: 
              7f d3 65 a7 c2 dd ec bb  f0 30 09 f3 43 39 fa 02  |..e......0..C9..|
af 33 31 33                                       |.313            |
        • RSA-SHA1: 
          56 22 e6 34 a4 c4 61 cb  48 b9 01 ad 56 a8 64 0f  |V".4..a.H...V.d.|
d9 8c 91 c4 bb cc 0c e5  ad 7a a0 22 7f df 47 38  |.........z."..G8|
4a 2d 6c d1 7f 71 1a 7c  ec 70 a9 b1 f0 4f e4 0f  |J-l..q.|.p...O..|
0c 53 fa 15 5e fe 74 98  49 24 85 81 26 1c 91 14  |.S..^.t.I$..&...|
47 b0 4c 63 8c bb a1 34  d4 c6 45 e8 0d 85 26 73  |G.Lc...4..E...&s|
03 d0 a9 8c 64 6d dc 71  92 e6 45 05 60 15 59 51  |....dm.q..E.`.YQ|
39 fc 58 14 6b fe d4 a4  ed 79 6b 08 0c 41 72 e7  |9.X.k....yk..Ar.|
37 22 06 09 be 23 e9 3f  44 9a 1e e9 61 9d cc b1  |7"...#.?D...a...|
90 5c fc 3d d2 8d ac 42  3d 65 36 d4 b4 3d 40 28  |.\.=...B=e6..=@(|
8f 9b 10 cf 23 26 cc 4b  20 cb 90 1f 5d 8c 4c 34  |....#&.K ...].L4|
ca 3c d8 e5 37 d6 6f a5  20 bd 34 eb 26 d9 ae 0d  |.<..7.o. .4.&...|
e7 c5 9a f7 a1 b4 21 91  33 6f 86 e8 58 bb 25 7c  |......!.3o..X.%||
74 0e 58 fe 75 1b 63 3f  ce 31 7c 9b 8f 1b 96 9e  |t.X.u.c?.1|.....|
c5 53 76 84 5b 9c ad 91  fa ac ed 93 ba 5d c8 21  |.Sv.[........].!|
53 c2 82 53 63 af 12 0d  50 87 11 1b 3d 54 52 96  |S..Sc...P...=TR.|
8a 2c 9c 3d 92 1a 08 9a  05 2e c7 93 a5 48 91 d3  |.,.=.........H..|
    • Signer
      • 1
      • unnamed
        • #0
          • C: US
          • O: VeriSign, Inc.
          • OU: VeriSign Trust Network
          • OU: Terms of use at https://www.verisign.com/rpa (c)10
          • CN: VeriSign Class 3 Code Signing 2010 CA
        • 2F:02:0B:CB:1B:37:E9:E1:D2:92:77:75:12:9A:0B:65
      • SHA1: nil
      • #3
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest: 
          fc e7 2e e8 08 5d 6f 1e  6a ff a1 54 20 e0 37 b7  |.....]o.j..T .7.|
ef 05 04 c5                                       |....            |
      • rsaEncryption: 
        6e 44 cf ac e2 63 11 7a  2a 13 9a 50 ce 17 05 1c  |nD...c.z*..P....|
fd 40 61 46 11 d7 14 d5  ce 69 46 15 d5 60 89 78  |.@aF.....iF..`.x|
6c 15 f6 fd 29 14 26 00  91 3d da 9d 31 b1 05 71  |l...).&..=..1..q|
52 cc f1 18 70 e9 9f a9  59 c6 2b 0f 42 ed 43 19  |R...p...Y.+.B.C.|
06 32 03 f1 80 cc f8 10  a2 72 92 a5 35 3e ec eb  |.2.......r..5>..|
c5 74 51 b7 53 da 71 0b  a2 81 7e b7 8b 47 72 94  |.tQ.S.q...~..Gr.|
aa 7a 27 61 cf 24 db 09  e9 b8 bf fb 56 02 04 5a  |.z'a.$......V..Z|
d7 0e 76 38 33 49 e1 6f  b2 5a f8 6d 9b c6 85 95  |..v83I.o.Z.m....|
offsetsizetypecomment
01969664EXE03/26/2012 23:02:14#
15c115HTM#
9a23875445PNG(711 x 332)#
ac8f066905PNG(711 x 332)#
bf6c430657PNG(256 x 256)#
1e0e003504PKCS7Authenticode Signature#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER
[?] can't find file_offset of VA 0x9c674