MainApp.exe

info
MZ
PE
imports
foremost
signature
hexdump
disasm
log
discuss
donate

filename	MainApp.exe
size	164616 (0x28308)
md5	3fea9dc9587a25cb0d994a7ebf5874e6

type	PE32 executable (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe0

Rich Header

lib id	version	times used
185	30716	2
205	50628	25
203	61030	3
1	0	84
207	50628	64
206	50628	183
207	61219	1
204	61030	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x5614dbb4
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	11.0
SizeOfCode	0x1b800
SizeOfInitializedData	0xda00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x96e3
BaseOfCode	0x1000
BaseOfData	0x1d000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.0
ImageVersion	0.0
SubsystemVersion	6.0
Reserved1	0
SizeOfImage	0x2c000
SizeOfHeaders	0x400
CheckSum	0x3696f
Subsystem	3
DllCharacteristics	0x8140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0 2005

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x1b6df	0x1b800	R-X CODE
.rdata	0x1d000	0x64d6	0x6600	R-- IDATA
.data	0x24000	0x3b64	0x1a00	RW- IDATA
.reloc	0x28000	0x36d2	0x3800	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x22e0c	0x3c
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0x27400	0xf08
BASERELOC	0x28000	0x163c
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x21580	0x40
Bound_IAT	0	0
IAT	0x1d000	0x12c
Delay_IAT	0	0
CLR_Header	0	0

module_name	hint	ord	function_name
login.dll		1
KERNEL32.dll	1084		QueryPerformanceCounter
KERNEL32.dll	881		InterlockedIncrement
KERNEL32.dll	877		InterlockedDecrement
KERNEL32.dll	1501		WideCharToMultiByte
KERNEL32.dll	320		EnterCriticalSection
KERNEL32.dll	957		LeaveCriticalSection
KERNEL32.dll	871		InitializeCriticalSectionEx
KERNEL32.dll	286		DeleteCriticalSection
KERNEL32.dll	1375		Sleep
KERNEL32.dll	316		EncodePointer
KERNEL32.dll	279		DecodePointer
KERNEL32.dll	621		GetLocaleInfoEx
KERNEL32.dll	1004		MultiByteToWideChar
KERNEL32.dll	738		GetStringTypeW
KERNEL32.dll	618		GetLastError
KERNEL32.dll	849		HeapFree
KERNEL32.dll	1096		RaiseException
KERNEL32.dll	1210		RtlUnwind
KERNEL32.dll	482		GetCommandLineA
KERNEL32.dll	870		InitializeCriticalSectionAndSpinCount
KERNEL32.dll	461		GetCPInfo
KERNEL32.dll	845		HeapAlloc
KERNEL32.dll	904		IsProcessorFeaturePresent
KERNEL32.dll	733		GetStdHandle
KERNEL32.dll	1521		WriteFile
KERNEL32.dll	637		GetModuleFileNameW
KERNEL32.dll	365		ExitProcess
KERNEL32.dll	640		GetModuleHandleExW
KERNEL32.dll	693		GetProcAddress
KERNEL32.dll	854		HeapSize
KERNEL32.dll	899		IsDebuggerPresent
KERNEL32.dll	698		GetProcessHeap
KERNEL32.dll	1303		SetLastError
KERNEL32.dll	552		GetCurrentThreadId
KERNEL32.dll	599		GetFileType
KERNEL32.dll	865		InitOnceExecuteOnce
KERNEL32.dll	727		GetStartupInfoW
KERNEL32.dll	636		GetModuleFileNameA
KERNEL32.dll	756		GetSystemTimeAsFileTime
KERNEL32.dll	785		GetTickCount64
KERNEL32.dll	576		GetEnvironmentStringsW
KERNEL32.dll	439		FreeEnvironmentStringsW
KERNEL32.dll	1424		UnhandledExceptionFilter
KERNEL32.dll	1360		SetUnhandledExceptionFilter
KERNEL32.dll	424		FlsAlloc
KERNEL32.dll	426		FlsGetValue
KERNEL32.dll	427		FlsSetValue
KERNEL32.dll	425		FlsFree
KERNEL32.dll	547		GetCurrentProcess
KERNEL32.dll	1391		TerminateProcess
KERNEL32.dll	641		GetModuleHandleW
KERNEL32.dll	909		IsValidCodePage
KERNEL32.dll	446		GetACP
KERNEL32.dll	672		GetOEMCP
KERNEL32.dll	796		GetUserDefaultLocaleName
KERNEL32.dll	944		LCMapStringEx
KERNEL32.dll	912		IsValidLocaleName
KERNEL32.dll	352		EnumSystemLocalesEx
KERNEL32.dll	852		HeapReAlloc
KERNEL32.dll	142		CloseHandle
KERNEL32.dll	429		FlushFileBuffers
KERNEL32.dll	502		GetConsoleCP
KERNEL32.dll	520		GetConsoleMode
KERNEL32.dll	1112		ReadFile
KERNEL32.dll	1289		SetFilePointerEx
KERNEL32.dll	1045		OutputDebugStringW
KERNEL32.dll	962		LoadLibraryExW
KERNEL32.dll	963		LoadLibraryW
KERNEL32.dll	1327		SetStdHandle
KERNEL32.dll	1520		WriteConsoleW
KERNEL32.dll	1110		ReadConsoleW
KERNEL32.dll	214		CreateFileW

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /CN=Test GmbH

serial: 664B20B4F80A419C4192CD0D25A220C0

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4b:20:b4:f8:0a:41:9c:41:92:cd:0d:25:a2:20:c0
        Signature Algorithm: sha1WithRSA
        Issuer: CN=Test GmbH
        Validity
            Not Before: Sep 30 22:00:00 2015 GMT
            Not After : Sep 29 22:00:00 2016 GMT
        Subject: CN=Test GmbH
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (1024 bit)
                Modulus:
                    00:b6:5d:09:03:21:d7:64:be:9f:89:a5:b6:fa:39:
                    5a:48:07:bb:dd:a5:ff:9c:1d:e5:11:70:b8:5d:a2:
                    93:9c:08:99:4f:70:a9:2a:15:99:10:ea:60:6a:83:
                    af:5c:5c:e9:e8:26:d7:5d:36:b7:69:b6:2b:15:14:
                    00:2a:be:69:af:94:ba:b2:c3:48:7a:f7:fa:23:f5:
                    3b:21:6f:9b:23:6a:25:ca:9f:24:9f:7c:3d:14:67:
                    5e:6e:54:62:7f:5c:f7:0f:50:bb:cb:58:21:0e:96:
                    a7:59:1c:e2:b2:1f:ea:51:62:39:a5:53:96:e8:04:
                    db:b6:9d:3a:b7:4f:4b:67:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            2.5.29.1: 
                0<...4..0...'61......0.1.0...U....Test GmbH..fK ..
A.A..%. .
    Signature Algorithm: sha1WithRSA
         6d:60:35:19:49:44:d7:09:27:1e:4b:f8:de:c1:f8:df:22:d4:
         87:76:00:b0:b7:11:8c:4f:bb:8d:29:a8:aa:b0:41:74:5a:2c:
         3b:77:e2:30:24:38:41:5d:2e:6e:6e:85:07:47:de:53:2a:3d:
         26:4b:78:51:5e:9a:01:8f:c7:e1:51:7b:17:de:57:f2:ec:c0:
         0e:61:d5:35:b9:d5:ee:29:75:e0:f2:32:ec:f2:87:67:47:11:
         e0:f0:8b:3e:27:fa:bb:5c:ce:5d:13:47:8d:9f:ae:39:a2:dc:
         60:07:92:d8:27:5b:ae:6d:62:4c:0b:1b:a8:05:8e:28:31:ff:
         0d:12

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9f:ea:c8:11:b0:f1:62:47:a5:fc:20:d8:05:23:ac:e6
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: May  5 00:00:00 2015 GMT
            Not After : Dec 31 23:59:59 2015 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping Signer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:35:a0:36:70:22:81:11:c3:b2:83:b9:d3:28:
                    c6:36:cd:25:6b:a9:7b:b2:1c:f6:9b:51:9c:ef:35:
                    f4:ed:08:8e:5e:38:08:f8:77:3c:0a:42:e0:f3:70:
                    dc:a3:d7:ca:f5:4c:0b:cf:ff:22:9c:0a:7e:68:d6:
                    09:a2:2a:84:7b:a6:9d:b4:a9:c1:33:e2:ef:1f:17:
                    48:ca:3a:cd:46:e6:c5:aa:77:bd:e3:77:9a:fa:47:
                    53:40:28:59:43:93:f1:a4:81:ea:ef:80:b5:4f:a7:
                    08:ce:ba:6e:bc:ca:76:0c:97:64:59:86:24:bb:3d:
                    82:90:a8:55:b1:92:d3:a0:a7:05:ac:9f:53:25:08:
                    10:47:99:cd:98:de:68:e5:b4:50:78:a3:af:01:cc:
                    59:43:58:e4:76:6e:7e:ac:c7:e2:9e:1f:4f:b0:47:
                    2d:c8:0c:a3:49:27:80:75:8c:bb:06:91:65:0f:90:
                    9b:f4:ba:d1:81:c8:5c:6a:ec:14:e9:25:09:bf:23:
                    16:f4:95:46:40:40:21:bb:83:96:fd:86:1f:7a:c8:
                    0d:10:8e:a2:f8:19:07:58:7f:9f:bd:37:02:60:f2:
                    a4:e9:9d:44:3f:30:05:e4:a7:70:99:51:9a:e8:17:
                    f1:55:ca:b2:61:89:65:46:a7:6a:f2:58:46:7e:aa:
                    a0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8

            X509v3 Subject Key Identifier: 
                2E:2D:B0:0A:44:4A:D3:87:C0:02:07:CE:97:7D:50:62:20:FD:0F:83
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.usertrust.com

    Signature Algorithm: sha1WithRSAEncryption
         0d:bb:ad:60:11:1b:b5:f0:0d:cc:e6:48:3a:7a:3e:0e:33:dc:
         1c:b9:ea:d6:20:fe:a3:4d:d0:cc:76:4e:e8:18:d8:79:df:d3:
         4f:9a:42:64:23:8a:29:72:8a:3a:6c:66:a6:3c:3a:17:a8:70:
         45:65:c6:73:c3:d0:ce:89:54:fb:ac:69:0f:58:b0:19:cb:86:
         9f:7e:b9:7e:eb:51:92:bf:9b:dd:eb:d1:65:f0:25:7b:88:7c:
         de:bd:a5:c8:b5:14:51:bc:c0:81:30:8a:85:38:7b:e6:79:fe:
         67:55:93:87:fe:4f:e8:8d:0e:ed:f3:72:92:b5:c2:89:80:6d:
         d1:59:e3:1d:0d:ea:b1:38:ee:03:9d:00:19:a5:ab:21:9b:79:
         c3:cc:c2:3e:68:7e:bd:c9:4d:69:4d:b4:64:51:fb:b2:28:74:
         e2:53:89:ce:9d:fa:ad:e2:db:ce:ab:7b:7e:06:44:74:fd:0a:
         a3:c9:b7:a7:30:cd:49:d2:92:64:f1:22:a6:b8:28:45:74:79:
         e9:a7:ce:3b:33:f9:83:50:94:7d:68:c0:1d:49:c7:60:78:7a:
         3c:64:26:d5:be:fa:0a:6d:e4:1e:e1:09:53:8f:a9:c5:23:ac:
         c7:9d:61:42:21:f0:2c:16:71:49:3b:10:af:2c:6f:1a:e6:31:
         f1:14:fd:6c

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

a6 b5 86 d5 b4 a1 24 66 ae 05 a2 17 da 8e 60 d6 |......$f......`.|

1.3.6.1.4.1.311.2.3.1:

00 00 00 00 e0 b6 5e a7  c2 0c f7 92 61 f4 75 d1  |......^.....a.u.|
40 f3 cd 2e d6 f7 a7 58  00 04 00 00 64 f5 f9 2d  |@......X....d..-|
72 16 63 92 49 57 ab e3  b5 34 51 b5 a4 b2 31 18  |r.c.IW...4Q...1.|
00 14 00 00 fc 6d 48 a0  8d eb 7d 2c 4d 59 a3 e1  |.....mH...},MY..|
0f dc aa a7 61 3c 77 de  00 24 00 00 88 41 cb 8d  |....a.eZ.bd&.|
2c b8 e6 fa c9 98 ef c7  00 04 01 00 02 82 47 55  |,.............GU|
32 21 be fe d2 e2 f7 17  d6 bc b7 df 47 da b1 02  |2!..........G...|
00 14 01 00 cd c7 b0 72  c1 7f 1e a6 e6 ac 58 02  |.......r......X.|
ed 38 7e d1 e8 13 7c 6f  00 24 01 00 7e 37 d6 e2  |.8~...|o.$..~7..|
ff 55 25 44 c1 c0 fe 54  a5 25 58 8d 0a 6a de 35  |.U%D...T.%X..j.5|
00 34 01 00 4d 01 83 26  c7 20 54 82 49 27 79 a6  |.4..M..&. T.I'y.|
ff 40 a3 73 5e 64 d5 a2  00 44 01 00 0f 7c 5a d2  |.@.s^d...D...|Z.|
56 91 43 71 f8 51 bd a4  50 aa 60 73 b8 1c 84 e8  |V.Cq.Q..P.`s....|
00 54 01 00 a7 81 02 aa  dc f8 c4 ec dc 57 92 49  |.T...........W.I|
82 0b df 16 e1 9c 5a 6f  00 64 01 00 a2 33 6f 11  |......Zo.d...3o.|
fc e9 69 3b aa fb 5f 4c  35 ba f9 cc 77 5f c9 be  |..i;.._L5...w_..|
00 74 01 00 a0 79 9d 52  e2 c8 b5 0d 81 22 1b c7  |.t...y.R....."..|
a2 5b f3 47 44 b5 0f 6c  00 84 01 00 ed c0 4f bc  |.[.GD..l......O.|
ac f9 8d 94 6d f9 18 10  c4 bc 06 71 74 fe 5f b8  |....m......qt._.|
00 94 01 00 a3 92 e9 98  85 9f 28 8c 6b 59 c6 3f  |..........(.kY.?|
14 33 bf 3a 23 2d 50 df  00 a4 01 00 e5 42 d8 b2  |.3.:#-P......B..|
08 80 d4 fa ff 97 fa 4d  55 fd be 88 95 11 be 17  |.......MU.......|
00 b4 01 00 21 e0 7d 86  d6 36 1c 51 b3 66 e4 9a  |....!.}..6.Q.f..|
ef f4 31 4c 69 7b 5b 8b  00 bc 01 00 d8 4c 8e 99  |..1Li{[......L..|
63 aa 87 a9 0b 38 64 73  80 f8 49 f8 f5 66 46 a8  |c....8ds..I..fF.|
00 cc 01 00 e8 bd 07 77  c7 49 6a 5d f2 ed 47 c5  |.......w.Ij]..G.|
28 7b a8 d1 7b 85 ec bb  00 dc 01 00 69 4a 13 76  |({..{.......iJ.v|
2d 6c 04 b1 6d c7 0e 59  c7 7a c4 2d a5 7e 1d 8e  |-l..m..Y.z.-.~..|
00 ec 01 00 13 eb 70 9a  96 1c 42 2c e9 18 df e6  |......p...B,....|
1d 43 9f 8b be e7 91 7c  00 fc 01 00 c7 2c 7e 8f  |.C.....|.....,~.|
f0 1e f8 af d6 84 e7 7b  f1 67 86 cb 83 1c 9f c9  |.......{.g......|
00 0c 02 00 0d 50 0c ed  7c bf e8 d5 0d a9 ad 47  |.....P..|......G|
8e 87 1b 6e 6c 30 c5 5c  00 1c 02 00 40 b1 8d 5d  |...nl0.\....@..]|
85 79 55 15 12 04 cb cb  b3 45 d3 8b 19 1e 16 da  |.yU......E......|
00 22 02 00 25 47 24 36  73 b4 04 83 0f 21 4f 8f  |."..%G$6s....!O.|
3e 22 1a 46 2b 33 af d9  00 32 02 00 a7 c0 28 b7  |>".F+3...2....(.|
13 a2 89 76 d8 f7 c5 83  dc a0 cb a1 63 c0 30 c2  |...v........c.0.|
00 3c 02 00 9b b0 95 5f  6a f8 ab 4f b5 80 fd 66  |.<....._j..O...f|
93 68 4e 8d cb be fc e0  00 4c 02 00 9d c5 d0 d8  |.hN......L......|
b1 18 b8 05 b7 21 d1 93  a3 a3 28 ff 9b e6 76 c0  |.....!....(...v.|
00 5c 02 00 1c ea f7 3d  f4 0e 53 1d f3 bf b2 6b  |.\.....=..S....k|
4f b7 cd 95 fb 7b ff 1d  00 6c 02 00 1c ea f7 3d  |O....{...l.....=|
f4 0e 53 1d f3 bf b2 6b  4f b7 cd 95 fb 7b ff 1d  |..S....kO....{..|
00 74 02 00 00 00 00 00  00 00 00 00 00 00 00 00  |.t..............|
00 00 00 00 00 00 00 00                           |........        |

SHA1

10 69 7f 72 42 19 ed b2 2d d5 e4 98 4b fb a9 7e |.i.rB...-...K..~| 14 83 af d0 |.... |

unnamed
- #0
  - 2
    - 66:4B:20:B4:F8:0A:41:9C:41:92:CD:0D:25:A2:20:C0
    - RSA-SHA1-2: nil
    - CN: Test GmbH
    - 2015-09-30 22:00:00 UTC: 2016-09-29 22:00:00 UTC
    - CN: Test GmbH
    - #5
      - rsaEncryption: nil
      - B6:5D:09:03:21:D7:64:BE:9F:89:A5:B6:FA:39:5A:48:
        07:BB:DD:A5:FF:9C:1D:E5:11:70:B8:5D:A2:93:9C:08:
        99:4F:70:A9:2A:15:99:10:EA:60:6A:83:AF:5C:5C:E9:
        E8:26:D7:5D:36:B7:69:B6:2B:15:14:00:2A:BE:69:AF:
        94:BA:B2:C3:48:7A:F7:FA:23:F5:3B:21:6F:9B:23:6A:
        25:CA:9F:24:9F:7C:3D:14:67:5E:6E:54:62:7F:5C:F7:
        0F:50:BB:CB:58:21:0E:96:A7:59:1C:E2:B2:1F:EA:51:
        62:39:A5:53:96:E8:04:DB:B6:9D:3A:B7:4F:4B:67:19: 0x010001
    - 2.5.29.1
      - 95 34 c8 0d d2 30 0f 02 ba 27 36 31 bc bd 91 90 |.4...0...'61....|
        CN: Test GmbH
        66 4b 20 b4 f8 0a 41 9c 41 92 cd 0d 25 a2 20 c0 |fK ...A.A...%. .|
  - RSA-SHA1-2:
```
6d 60 35 19 49 44 d7 09  27 1e 4b f8 de c1 f8 df  |m`5.ID..'.K.....|
22 d4 87 76 00 b0 b7 11  8c 4f bb 8d 29 a8 aa b0  |"..v.....O..)...|
41 74 5a 2c 3b 77 e2 30  24 38 41 5d 2e 6e 6e 85  |AtZ,;w.0$8A].nn.|
07 47 de 53 2a 3d 26 4b  78 51 5e 9a 01 8f c7 e1  |.G.S*=&KxQ^.....|
51 7b 17 de 57 f2 ec c0  0e 61 d5 35 b9 d5 ee 29  |Q{..W....a.5...)|
75 e0 f2 32 ec f2 87 67  47 11 e0 f0 8b 3e 27 fa  |u..2...gG....>'.|
bb 5c ce 5d 13 47 8d 9f  ae 39 a2 dc 60 07 92 d8  |.\.].G...9..`...|
27 5b ae 6d 62 4c 0b 1b  a8 05 8e 28 31 ff 0d 12  |'[.mbL.....(1...|
```
- Certificate #1
  - 2
    - 9F:EA:C8:11:B0:F1:62:47:A5:FC:20:D8:05:23:AC:E6
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - ST: UT
      - L: Salt Lake City
      - O: The USERTRUST Network
      - OU: http://www.usertrust.com
      - CN: UTN-USERFirst-Object
    - 2015-05-05 00:00:00 UTC: 2015-12-31 23:59:59 UTC
    - Subject
      - C: GB
      - ST: Greater Manchester
      - L: Salford
      - O: COMODO CA Limited
      - CN: COMODO Time Stamping Signer
    - #5
      - rsaEncryption: nil
      - BC:35:A0:36:70:22:81:11:C3:B2:83:B9:D3:28:C6:36:
        CD:25:6B:A9:7B:B2:1C:F6:9B:51:9C:EF:35:F4:ED:08:
        8E:5E:38:08:F8:77:3C:0A:42:E0:F3:70:DC:A3:D7:CA:
        F5:4C:0B:CF:FF:22:9C:0A:7E:68:D6:09:A2:2A:84:7B:
        A6:9D:B4:A9:C1:33:E2:EF:1F:17:48:CA:3A:CD:46:E6:
        C5:AA:77:BD:E3:77:9A:FA:47:53:40:28:59:43:93:F1:
        A4:81:EA:EF:80:B5:4F:A7:08:CE:BA:6E:BC:CA:76:0C:
        97:64:59:86:24:BB:3D:82:90:A8:55:B1:92:D3:A0:A7:
        05:AC:9F:53:25:08:10:47:99:CD:98:DE:68:E5:B4:50:
        78:A3:AF:01:CC:59:43:58:E4:76:6E:7E:AC:C7:E2:9E:
        1F:4F:B0:47:2D:C8:0C:A3:49:27:80:75:8C:BB:06:91:
        65:0F:90:9B:F4:BA:D1:81:C8:5C:6A:EC:14:E9:25:09:
        BF:23:16:F4:95:46:40:40:21:BB:83:96:FD:86:1F:7A:
        C8:0D:10:8E:A2:F8:19:07:58:7F:9F:BD:37:02:60:F2:
        A4:E9:9D:44:3F:30:05:E4:A7:70:99:51:9A:E8:17:F1:
        55:CA:B2:61:89:65:46:A7:6A:F2:58:46:7E:AA:A0:07: 0x010001
    - #6
      - authorityKeyIdentifier:
        da ed 64 74 14 9c 14 3c ab dd 99 a9 bd 5b 28 4d |..dt...<.....[(M| 8b 3c c9 d8 |.<.. |
      - subjectKeyIdentifier:
        2e 2d b0 0a 44 4a d3 87 c0 02 07 ce 97 7d 50 62 |.-..DJ.......}Pb| 20 fd 0f 83 | ... |
      - keyUsage: true, 0xc0
      - basicConstraints
        true
        nil
      - extendedKeyUsage: true, timeStamping
      - crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
      - authorityInfoAccess
        OCSP: http://ocsp.usertrust.com
  - RSA-SHA1:
```
0d bb ad 60 11 1b b5 f0  0d cc e6 48 3a 7a 3e 0e  |...`.......H:z>.|
33 dc 1c b9 ea d6 20 fe  a3 4d d0 cc 76 4e e8 18  |3..... ..M..vN..|
d8 79 df d3 4f 9a 42 64  23 8a 29 72 8a 3a 6c 66  |.y..O.Bd#.)r.:lf|
a6 3c 3a 17 a8 70 45 65  c6 73 c3 d0 ce 89 54 fb  |.<:..pEe.s....T.|
ac 69 0f 58 b0 19 cb 86  9f 7e b9 7e eb 51 92 bf  |.i.X.....~.~.Q..|
9b dd eb d1 65 f0 25 7b  88 7c de bd a5 c8 b5 14  |....e.%{.|......|
51 bc c0 81 30 8a 85 38  7b e6 79 fe 67 55 93 87  |Q...0..8{.y.gU..|
fe 4f e8 8d 0e ed f3 72  92 b5 c2 89 80 6d d1 59  |.O.....r.....m.Y|
e3 1d 0d ea b1 38 ee 03  9d 00 19 a5 ab 21 9b 79  |.....8.......!.y|
c3 cc c2 3e 68 7e bd c9  4d 69 4d b4 64 51 fb b2  |...>h~..MiM.dQ..|
28 74 e2 53 89 ce 9d fa  ad e2 db ce ab 7b 7e 06  |(t.S.........{~.|
44 74 fd 0a a3 c9 b7 a7  30 cd 49 d2 92 64 f1 22  |Dt......0.I..d."|
a6 b8 28 45 74 79 e9 a7  ce 3b 33 f9 83 50 94 7d  |..(Ety...;3..P.}|
68 c0 1d 49 c7 60 78 7a  3c 64 26 d5 be fa 0a 6d  |h..I.`xz
```

#0
- CN: Test GmbH
- 66:4B:20:B4:F8:0A:41:9C:41:92:CD:0D:25:A2:20:C0
SHA1: nil

contentType: 1.3.6.1.4.1.311.2.1.4

messageDigest:

c7 56 60 46 41 16 aa d4  2b 43 94 71 b6 59 a9 ce  |.V`FA...+C.q.Y..|
4d 03 e9 69                                       |M..i            |

1.3.6.1.4.1.311.2.1.12

00 53 00 69 00 67 00 6e 00 65 00 64 00 20 00 4d |.S.i.g.n.e.d. .M| 00 61 00 69 00 6e 00 20 00 41 00 70 00 70 |.a.i.n. .A.p.p |
: https://www.ethical-hacking.de/

rsaEncryption:

6c 58 ed 71 a8 42 b1 14  e7 89 f8 c8 44 70 89 28  |lX.q.B......Dp.(|
ab 09 4f 50 af e5 7d 02  f4 f5 85 89 af d2 40 06  |..OP..}.......@.|
88 31 e5 b6 9e 18 c2 c7  45 1f 44 72 5f 3d 73 00  |.1......E.Dr_=s.|
3f 35 f6 52 79 f4 2a 93  0f 20 35 b3 43 ef 68 0f  |?5.Ry.*.. 5.C.h.|
df e2 6e 40 f3 a0 ec 43  9b a8 45 de 68 9e 49 b5  |..n@...C..E.h.I.|
72 99 82 23 76 cc a1 c3  38 78 67 df c6 3c 61 48  |r..#v...8xg..countersignature0unnamed#0C: US
ST: UT
L: Salt Lake City
O: The USERTRUST Network
OU: http://www.usertrust.com
CN: UTN-USERFirst-Object
9F:EA:C8:11:B0:F1:62:47:A5:FC:20:D8:05:23:AC:E6
SHA1: nil
#2contentType: pkcs7-data
signingTime: 2015-10-07 08:46:21 UTC
messageDigest: 30 1c da 0a 94 5e 2c 95  31 5d 96 3c 22 52 7a 0a  |0....^,.1].<"Rz.|
5a d1 2b 03                                       |Z.+.            |
rsaEncryption: 4b b3 ac 2c 54 60 5c 5f  8d 09 3d ae e6 97 cc 54  |K..,T`\_..=....T|
b4 9a c7 62 a4 a0 b2 e5  bb 53 8f d4 09 c1 fc 64  |...b.....S.....d|
12 31 7e 70 41 bd 2e 4a  9a 1b 5a 23 18 db d4 08  |.1~pA..J..Z#....|
21 17 5f c4 f3 11 fc d6  a2 98 c8 f8 e2 83 61 d5  |!._...........a.|
1a f7 05 0f d4 70 b1 aa  b0 f1 32 03 50 e5 01 2d  |.....p....2.P..-|
cf d3 a7 63 ec fb 0b 83  b0 90 a1 95 27 94 97 d2  |...c........'...|
52 c9 7e 00 ef 49 31 fa  a6 b2 c4 ef 1c 28 46 d9  |R.~..I1......(F.|
c7 59 78 44 a1 e1 a3 d2  90 d5 c3 25 fa 43 8b 2f  |.YxD.......%.C./|
d7 23 16 b0 92 0c 8f b3  e3 67 4c eb 43 9e 8d 1d  |.#.......gL.C...|
f8 2c ac a1 f2 75 78 04  cd 58 ed 4d 0e 6a 56 07  |.,...ux..X.M.jV.|
56 cf 38 a8 ce dc 7d 68  97 6d c8 02 cc 45 fc e0  |V.8...}h.m...E..|
8b f5 5c d8 59 ed d3 33  33 63 df e8 47 5e 1d 45  |..\.Y..33c..G^.E|
fe 5e d8 fc 03 b8 23 fa  5b da 80 b3 60 e5 dd 40  |.^....#.[...`..@|
68 53 19 24 38 cb 7f 2c  40 7d dc c0 ad c7 da b4  |hS.$8..,@}......|
f1 ed c4 2d ac 91 1a 43  c8 5f 28 42 b6 13 28 5c  |...-...C._(B..(\|
c4 55 75 83 16 b5 6e 61  1c 08 51 f8 dd 77 ee 30  |.Uu...na..Q..w.0|

show previews

offset	size	type	comment
0	160768	EXE	10/07/2015 08:45:40	#
15c1	15	HTM		#
27400	3848	PKCS7	Authenticode Signature	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK