filenamecontimesync.exe
size769728 (0xbbec0)
md5c0753ecdb36199af2a55b08428633aca
typePE32 executable (console) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50x10fff
reserved60xfffef000
lfanew0x100

Rich Header

lib idversiontimes used
1272912
1197821
14729923
10978296
481682
484472
10107
93403511
617351
2297821

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections8
TimeDateStamp0x506c545f
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion83.82
SizeOfCode0x50000
SizeOfInitializedData0x6a000
SizeOfUninitializedData0
AddressOfEntryPoint0x68000
BaseOfCode0x18000
BaseOfData0x78000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0xf9000
SizeOfHeaders0x1000
CheckSum0xca065
Subsystem3
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

Armadillo v4.x

Sections

namevavsizeraw sizeflags
.text0x10000xb7850R-X CODE
.rdata0xd0000x106a0R-- IDATA
.data0xf0000x868c0RW- IDATA
.text10x180000x500000x43000RWX CODE
.adata0x680000x100000xd000RWX CODE
.data10x780000x200000xb000RW- IDATA
.pdata0x980000x500000x4e000RW- IDATA
.rsrc0xe80000x110000x11000R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x813ec0x50
RESOURCE0xe80000x101b8
EXCEPTION00
SECURITY0xbb0000xec0
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x780000x2bc
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#17441252
ICON#22961252
ICON#356721252
ICON#437521252
ICON#522161252
ICON#617361252
ICON#713841252
ICON#8120481252
ICON#9169361252
ICON#1096401252
ICON#1142641252
ICON#1224401252
ICON#1311281252
GROUP_ICON#11881252
VERSION#111801252
MANIFEST#114721252
module_namehintordfunction_name
KERNEL32.dll854Sleep
KERNEL32.dll52CloseHandle
KERNEL32.dll111CreateThread
KERNEL32.dll522GlobalUnlock
KERNEL32.dll515GlobalLock
KERNEL32.dll504GlobalAlloc
KERNEL32.dll479GetTickCount
KERNEL32.dll916WideCharToMultiByte
KERNEL32.dll563IsBadReadPtr
KERNEL32.dll502GlobalAddAtomA
KERNEL32.dll503GlobalAddAtomW
KERNEL32.dll511GlobalFree
KERNEL32.dll512GlobalGetAtomNameA
KERNEL32.dll506GlobalDeleteAtom
KERNEL32.dll513GlobalGetAtomNameW
KERNEL32.dll245FreeConsole
KERNEL32.dll344GetEnvironmentVariableA
KERNEL32.dll902VirtualProtect
KERNEL32.dll897VirtualAlloc
KERNEL32.dll416GetProcAddress
KERNEL32.dll369GetLastError
KERNEL32.dll594LoadLibraryA
KERNEL32.dll808SetLastError
KERNEL32.dll836SetThreadPriority
KERNEL32.dll325GetCurrentThread
KERNEL32.dll102CreateProcessA
KERNEL32.dll439GetStartupInfoA
KERNEL32.dll787SetEnvironmentVariableA
KERNEL32.dll706ReleaseMutex
KERNEL32.dll912WaitForSingleObject
KERNEL32.dll96CreateMutexA
KERNEL32.dll644OpenMutexA
KERNEL32.dll326GetCurrentThreadId
KERNEL32.dll83CreateFileA
KERNEL32.dll206FindClose
KERNEL32.dll210FindFirstFileA
KERNEL32.dll213FindFirstFileW
KERNEL32.dll905VirtualQueryEx
KERNEL32.dll346GetExitCodeProcess
KERNEL32.dll696ReadProcessMemory
KERNEL32.dll881UnmapViewOfFile
KERNEL32.dll62ContinueDebugEvent
KERNEL32.dll832SetThreadContext
KERNEL32.dll471GetThreadContext
KERNEL32.dll909WaitForDebugEvent
KERNEL32.dll856SuspendThread
KERNEL32.dll118DebugActiveProcess
KERNEL32.dll722ResumeThread
KERNEL32.dll105CreateProcessW
KERNEL32.dll273GetCommandLineW
KERNEL32.dll440GetStartupInfoW
KERNEL32.dll152EnterCriticalSection
KERNEL32.dll147DuplicateHandle
KERNEL32.dll322GetCurrentProcess
KERNEL32.dll84CreateFileMappingA
KERNEL32.dll903VirtualProtectEx
KERNEL32.dll941WriteProcessMemory
KERNEL32.dll185ExitProcess
KERNEL32.dll931WriteConsoleW
KERNEL32.dll309GetConsoleOutputCP
KERNEL32.dll921WriteConsoleA
KERNEL32.dll823SetStdHandle
KERNEL32.dll238FlushFileBuffers
KERNEL32.dll307GetConsoleMode
KERNEL32.dll290GetConsoleCP
KERNEL32.dll795SetFilePointer
KERNEL32.dll372GetLocaleInfoA
KERNEL32.dll445GetStringTypeW
KERNEL32.dll442GetStringTypeA
KERNEL32.dll581LCMapStringW
KERNEL32.dll629MultiByteToWideChar
KERNEL32.dll580LCMapStringA
KERNEL32.dll540HeapSize
KERNEL32.dll538HeapReAlloc
KERNEL32.dll675QueryPerformanceCounter
KERNEL32.dll899VirtualFree
KERNEL32.dll530HeapCreate
KERNEL32.dll532HeapDestroy
KERNEL32.dll358GetFileType
KERNEL32.dll804SetHandleCount
KERNEL32.dll343GetEnvironmentStringsW
KERNEL32.dll247FreeEnvironmentStringsW
KERNEL32.dll341GetEnvironmentStrings
KERNEL32.dll246FreeEnvironmentStringsA
KERNEL32.dll727RtlUnwind
KERNEL32.dll129DeleteCriticalSection
KERNEL32.dll441GetStdHandle
KERNEL32.dll932WriteFile
KERNEL32.dll868TlsFree
KERNEL32.dll870TlsSetValue
KERNEL32.dll867TlsAlloc
KERNEL32.dll869TlsGetValue
KERNEL32.dll593LeaveCriticalSection
KERNEL32.dll489GetVersionExA
KERNEL32.dll547InitializeCriticalSection
KERNEL32.dll323GetCurrentProcessId
KERNEL32.dll382GetModuleFileNameW
KERNEL32.dll438GetShortPathNameW
KERNEL32.dll381GetModuleFileNameA
KERNEL32.dll437GetShortPathNameA
KERNEL32.dll383GetModuleHandleA
KERNEL32.dll616MapViewOfFile
KERNEL32.dll272GetCommandLineA
KERNEL32.dll458GetSystemTimeAsFileTime
KERNEL32.dll534HeapFree
KERNEL32.dll528HeapAlloc
KERNEL32.dll419GetProcessHeap
KERNEL32.dll679RaiseException
KERNEL32.dll862TerminateProcess
KERNEL32.dll878UnhandledExceptionFilter
KERNEL32.dll842SetUnhandledExceptionFilter
KERNEL32.dll569IsDebuggerPresent
KERNEL32.dll260GetCPInfo
KERNEL32.dll556InterlockedIncrement
KERNEL32.dll552InterlockedDecrement
KERNEL32.dll253GetACP
KERNEL32.dll403GetOEMCP
KERNEL32.dll575IsValidCodePage
USER32.dll270GetDesktopWindow
USER32.dll492MoveWindow
USER32.dll618SetPropA
USER32.dll219EnumThreadWindows
USER32.dll330GetPropA
USER32.dll314GetMessageA
USER32.dll349GetSystemMetrics
USER32.dll634SetTimer
USER32.dll242GetAsyncKeyState
USER32.dll437KillTimer
USER32.dll13BeginPaint
USER32.dll200EndPaint
USER32.dll646SetWindowTextA
USER32.dll273GetDlgItem
USER32.dll82CreateDialogIndirectParamA
USER32.dll658ShowWindow
USER32.dll700UpdateWindow
USER32.dll459LoadStringA
USER32.dll460LoadStringW
USER32.dll227FindWindowA
USER32.dll718WaitForInputIdle
USER32.dll479MessageBoxA
USER32.dll392InSendMessage
USER32.dll690UnpackDDElParam
USER32.dll234FreeDDElParam
USER32.dll142DefWindowProcA
USER32.dll442LoadCursorA
USER32.dll537RegisterClassW
USER32.dll97CreateWindowExW
USER32.dll534RegisterClassA
USER32.dll96CreateWindowExA
USER32.dll379GetWindowThreadProcessId
USER32.dll576SendMessageW
USER32.dll571SendMessageA
USER32.dll512PeekMessageA
USER32.dll682TranslateMessage
USER32.dll161DispatchMessageA
USER32.dll222EnumWindows
USER32.dll432IsWindowUnicode
USER32.dll509PackDDElParam
USER32.dll515PostMessageW
USER32.dll514PostMessageA
USER32.dll429IsWindow
USER32.dll153DestroyWindow
GDI32.dll46CreateDCA
GDI32.dll51CreateDIBitmap
GDI32.dll45CreateCompatibleDC
GDI32.dll526SelectObject
GDI32.dll527SelectPalette
GDI32.dll499RealizePalette
GDI32.dll18BitBlt
GDI32.dll140DeleteDC
GDI32.dll143DeleteObject
GDI32.dll69CreatePalette

StringTable 040904E4

CompanyNameSouthsoftware.com
FileDescriptionAdvanced Time Synchronizer Console Tool
FileVersion4.0.0.800
InternalNameAdvanced Time Synchronizer
LegalCopyrightCopyright © Southsoftware.com, 2002-2012
OriginalFilenamecontimesync.exe
ProductNameAdvanced Time Synchronizer Console Tool
ProductVersion4.0.0.800
Southsoftware on the webhttp://www.southsoftware.com/ http://www.advtimesync.com/
Technical supportsupport@southsoftware.com

VS_FIXEDFILEINFO

FileVersion4.0.0.800
ProductVersion4.0.0.800
StrucVersion0x10000
FileFlagsMask0
FileFlags0
FileOS0x40004
FileType1
FileSubtype0

Signers (1)

issuer: /C=US/ST=UT/L=Salt Lake City/O=The USERTRUST Network/OU=http:\/\/www.usertrust.com/CN=UTN-USERFirst-Object
serial: 4D2A6E76DD12A5CA944E09923D6ECD0F

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http:\/\/www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: May 10 00:00:00 2010 GMT
            Not After : May 10 23:59:59 2015 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping Signer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bc:35:a0:36:70:22:81:11:c3:b2:83:b9:d3:28:
                    c6:36:cd:25:6b:a9:7b:b2:1c:f6:9b:51:9c:ef:35:
                    f4:ed:08:8e:5e:38:08:f8:77:3c:0a:42:e0:f3:70:
                    dc:a3:d7:ca:f5:4c:0b:cf:ff:22:9c:0a:7e:68:d6:
                    09:a2:2a:84:7b:a6:9d:b4:a9:c1:33:e2:ef:1f:17:
                    48:ca:3a:cd:46:e6:c5:aa:77:bd:e3:77:9a:fa:47:
                    53:40:28:59:43:93:f1:a4:81:ea:ef:80:b5:4f:a7:
                    08:ce:ba:6e:bc:ca:76:0c:97:64:59:86:24:bb:3d:
                    82:90:a8:55:b1:92:d3:a0:a7:05:ac:9f:53:25:08:
                    10:47:99:cd:98:de:68:e5:b4:50:78:a3:af:01:cc:
                    59:43:58:e4:76:6e:7e:ac:c7:e2:9e:1f:4f:b0:47:
                    2d:c8:0c:a3:49:27:80:75:8c:bb:06:91:65:0f:90:
                    9b:f4:ba:d1:81:c8:5c:6a:ec:14:e9:25:09:bf:23:
                    16:f4:95:46:40:40:21:bb:83:96:fd:86:1f:7a:c8:
                    0d:10:8e:a2:f8:19:07:58:7f:9f:bd:37:02:60:f2:
                    a4:e9:9d:44:3f:30:05:e4:a7:70:99:51:9a:e8:17:
                    f1:55:ca:b2:61:89:65:46:a7:6a:f2:58:46:7e:aa:
                    a0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8
            X509v3 Subject Key Identifier: 
                2E:2D:B0:0A:44:4A:D3:87:C0:02:07:CE:97:7D:50:62:20:FD:0F:83
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.usertrust.com
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        c8:fb:63:f8:0b:75:75:2c:3a:f1:f2:13:a7:2d:b6:a3:1a:9c:
        ad:01:07:d3:34:8e:77:e0:c2:6e:ae:02:5d:48:4f:a4:d2:21:
        b6:36:fd:2a:35:43:7c:6b:df:80:87:0b:15:f0:76:32:00:b4:
        ce:b5:67:a4:2f:2f:20:1b:9c:54:9e:83:3f:1f:5f:14:95:62:
        82:0f:22:41:22:1f:70:b3:f3:f7:42:de:6c:51:cd:4b:f8:21:
        ac:9b:3b:8c:b1:e5:e6:28:8f:ce:2a:8a:f9:aa:52:4d:8c:5b:
        77:ba:4d:5a:58:db:bb:6a:04:cc:52:1e:9d:e2:28:37:0e:bb:
        e7:0e:91:c7:f8:db:f1:81:98:eb:cd:37:b3:0e:ab:65:d3:62:
        ec:3a:a5:76:eb:13:a8:35:93:c9:2e:0a:01:ec:c0:e8:cc:3d:
        7e:b6:eb:e2:c1:ec:d3:14:92:82:66:87:50:dc:fd:50:97:ac:
        b3:4a:76:73:06:c4:86:11:3a:b3:5f:43:04:52:6f:ea:b3:d0:
        74:36:4c:ca:f1:1b:79:84:37:70:63:ad:74:b9:aa:0e:f3:98:
        b0:86:08:eb:db:e0:1f:8c:10:f2:39:64:9b:ae:4f:0a:2c:92:
        8a:4f:18:b5:91:e5:8d:1a:93:5f:1f:ae:f1:a6:f0:2e:97:d0:
        d2:f6:2b:3c

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:2a:6e:76:dd:12:a5:ca:94:4e:09:92:3d:6e:cd:0f
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http:\/\/www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: Apr 11 00:00:00 2011 GMT
            Not After : Apr 10 23:59:59 2014 GMT
        Subject: C=RU/postalCode=410012, ST=SARATOV, L=Saratov/street=PO Box 375, O=Vadim Belov, CN=Vadim Belov
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ef:c6:d6:29:75:b5:70:93:96:d1:82:8f:60:71:
                    6a:ad:86:4e:3e:0e:43:0c:05:bb:86:bc:51:2f:49:
                    5d:40:cb:fb:42:dd:ae:34:9b:8e:1f:d7:ac:a8:79:
                    b2:03:b3:a6:e9:d7:d6:05:06:42:b7:e7:83:4a:ce:
                    c1:97:2a:1e:4f:80:37:4c:48:de:0e:f1:33:bd:87:
                    55:9d:42:24:6c:97:86:fa:36:5e:0f:53:53:59:7f:
                    88:a5:92:a4:99:59:bb:73:bd:03:06:d4:3b:9f:0b:
                    0a:22:a4:9c:87:19:24:f5:b8:3d:6c:e7:e1:db:81:
                    43:04:df:f2:b8:6a:b5:ef:1a:04:4c:eb:0b:8d:c9:
                    59:67:72:1b:28:de:03:cf:5d:f1:f4:84:99:8f:8d:
                    8b:bf:0d:16:5a:cf:ac:5d:ad:e0:75:29:2d:f2:48:
                    b4:9f:69:38:4e:2d:f9:b1:d1:e9:a6:a1:12:e2:d8:
                    dd:e5:b8:1b:d3:24:46:49:75:5c:77:81:5b:57:d7:
                    95:cb:19:17:fd:13:8e:8e:ff:01:81:b5:bc:26:c9:
                    18:1b:18:e6:67:34:da:70:39:ef:05:f0:2c:c8:fa:
                    c3:c1:57:ec:f9:1c:45:55:b2:e2:e1:ad:c8:fd:43:
                    3a:77:15:66:c7:0e:53:62:b3:f4:50:e0:51:af:09:
                    35:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8
            X509v3 Subject Key Identifier: 
                10:1B:AB:E8:ED:01:EE:68:6F:DC:60:CA:E3:BD:D4:0E:6C:C9:F6:97
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                Code Signing
            Netscape Cert Type: 
                Object Signing
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.1.3.2
                  CPS: https://secure.comodo.net/CPS
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.comodoca.com
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        94:ba:bf:4e:bc:68:61:cf:d7:f4:60:f9:dc:08:31:a0:09:e0:
        3c:a0:a3:a7:27:a9:db:3d:07:f9:c8:16:c8:bd:41:0d:65:78:
        f5:36:d0:14:06:fa:55:b2:7f:10:40:48:f8:39:92:56:ba:9d:
        47:69:e9:70:1c:04:e1:79:e6:0c:f3:52:25:05:52:26:e6:39:
        1c:d9:c9:7e:38:b7:0b:45:62:2c:b1:8f:6a:d2:b1:2a:35:f0:
        dc:02:eb:5d:71:c7:4e:cf:b0:ae:57:1a:2b:64:6c:ec:3e:81:
        a9:47:89:b6:0f:02:4e:27:9f:15:76:7e:9a:f0:04:68:0a:16:
        b8:98:0b:70:bc:52:6d:e7:14:6d:9d:7d:20:90:41:d7:30:c8:
        99:91:e6:1b:69:bf:d5:66:eb:6f:5b:22:71:a0:eb:48:39:b8:
        86:59:72:7b:f9:4b:b6:14:d8:1e:44:dc:7a:dd:d7:1c:ff:3c:
        62:e7:5f:c2:e0:cb:72:1c:54:21:9b:ca:21:2d:fa:45:39:55:
        c7:c8:e8:38:44:73:37:cd:7a:2b:ad:50:0d:1a:c0:ea:b9:43:
        de:db:c7:26:4c:93:71:da:0e:e7:6c:40:31:92:78:df:fb:57:
        ba:3d:85:3f:a6:d9:91:fa:05:8a:4f:a0:e6:d4:72:7a:ac:ab:
        62:19:70:0c
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • : 
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • SHA1
          • 00 8c 6e a3 bf bb 77 b2  0e d3 87 6b 2c e2 7c b8  |..n...w....k,.|.|
4f d3 83 ef                                       |O...            |
    • Certificates
      • Certificate #0
        • 2
          • 47:8A:8E:FB:59:E1:D8:3F:0C:E1:42:D2:A2:87:07:BE
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • ST: UT
            • L: Salt Lake City
            • O: The USERTRUST Network
            • OU: http://www.usertrust.com
            • CN: UTN-USERFirst-Object
          • 2010-05-10 00:00:00 UTC: 2015-05-10 23:59:59 UTC
          • Subject
            • C: GB
            • ST: Greater Manchester
            • L: Salford
            • O: COMODO CA Limited
            • CN: COMODO Time Stamping Signer
          • #5
            • rsaEncryption: nil
            • BC:35:A0:36:70:22:81:11:C3:B2:83:B9:D3:28:C6:36:
              CD:25:6B:A9:7B:B2:1C:F6:9B:51:9C:EF:35:F4:ED:08:
              8E:5E:38:08:F8:77:3C:0A:42:E0:F3:70:DC:A3:D7:CA:
              F5:4C:0B:CF:FF:22:9C:0A:7E:68:D6:09:A2:2A:84:7B:
              A6:9D:B4:A9:C1:33:E2:EF:1F:17:48:CA:3A:CD:46:E6:
              C5:AA:77:BD:E3:77:9A:FA:47:53:40:28:59:43:93:F1:
              A4:81:EA:EF:80:B5:4F:A7:08:CE:BA:6E:BC:CA:76:0C:
              97:64:59:86:24:BB:3D:82:90:A8:55:B1:92:D3:A0:A7:
              05:AC:9F:53:25:08:10:47:99:CD:98:DE:68:E5:B4:50:
              78:A3:AF:01:CC:59:43:58:E4:76:6E:7E:AC:C7:E2:9E:
              1F:4F:B0:47:2D:C8:0C:A3:49:27:80:75:8C:BB:06:91:
              65:0F:90:9B:F4:BA:D1:81:C8:5C:6A:EC:14:E9:25:09:
              BF:23:16:F4:95:46:40:40:21:BB:83:96:FD:86:1F:7A:
              C8:0D:10:8E:A2:F8:19:07:58:7F:9F:BD:37:02:60:F2:
              A4:E9:9D:44:3F:30:05:E4:A7:70:99:51:9A:E8:17:F1:
              55:CA:B2:61:89:65:46:A7:6A:F2:58:46:7E:AA:A0:07              : 0x010001
          • #6
            • authorityKeyIdentifier: 
              da ed 64 74 14 9c 14 3c  ab dd 99 a9 bd 5b 28 4d  |..dt...<.....[(M|
8b 3c c9 d8                                       |.<..            |
            • subjectKeyIdentifier: 
              2e 2d b0 0a 44 4a d3 87  c0 02 07 ce 97 7d 50 62  |.-..DJ.......}Pb|
20 fd 0f 83                                       | ...            |
            • keyUsage: true, 0xc0
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: true, timeStamping
            • crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
            • authorityInfoAccess
              • OCSP: http://ocsp.usertrust.com
        • RSA-SHA1: 
          c8 fb 63 f8 0b 75 75 2c  3a f1 f2 13 a7 2d b6 a3  |..c..uu,:....-..|
1a 9c ad 01 07 d3 34 8e  77 e0 c2 6e ae 02 5d 48  |......4.w..n..]H|
4f a4 d2 21 b6 36 fd 2a  35 43 7c 6b df 80 87 0b  |O..!.6.*5C|k....|
15 f0 76 32 00 b4 ce b5  67 a4 2f 2f 20 1b 9c 54  |..v2....g.// ..T|
9e 83 3f 1f 5f 14 95 62  82 0f 22 41 22 1f 70 b3  |..?._..b.."A".p.|
f3 f7 42 de 6c 51 cd 4b  f8 21 ac 9b 3b 8c b1 e5  |..B.lQ.K.!..;...|
e6 28 8f ce 2a 8a f9 aa  52 4d 8c 5b 77 ba 4d 5a  |.(..*...RM.[w.MZ|
58 db bb 6a 04 cc 52 1e  9d e2 28 37 0e bb e7 0e  |X..j..R...(7....|
91 c7 f8 db f1 81 98 eb  cd 37 b3 0e ab 65 d3 62  |.........7...e.b|
ec 3a a5 76 eb 13 a8 35  93 c9 2e 0a 01 ec c0 e8  |.:.v...5........|
cc 3d 7e b6 eb e2 c1 ec  d3 14 92 82 66 87 50 dc  |.=~.........f.P.|
fd 50 97 ac b3 4a 76 73  06 c4 86 11 3a b3 5f 43  |.P...Jvs....:._C|
04 52 6f ea b3 d0 74 36  4c ca f1 1b 79 84 37 70  |.Ro...t6L...y.7p|
63 ad 74 b9 aa 0e f3 98  b0 86 08 eb db e0 1f 8c  |c.t.............|
10 f2 39 64 9b ae 4f 0a  2c 92 8a 4f 18 b5 91 e5  |..9d..O.,..O....|
8d 1a 93 5f 1f ae f1 a6  f0 2e 97 d0 d2 f6 2b 3c  |..._..........+<|
      • Certificate #1
        • 2
          • 4D:2A:6E:76:DD:12:A5:CA:94:4E:09:92:3D:6E:CD:0F
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • ST: UT
            • L: Salt Lake City
            • O: The USERTRUST Network
            • OU: http://www.usertrust.com
            • CN: UTN-USERFirst-Object
          • 2011-04-11 00:00:00 UTC: 2014-04-10 23:59:59 UTC
          • Subject
            • C: RU
            • postalCode: 410012
            • ST: SARATOV
            • L: Saratov
            • street: PO Box 375
            • O: Vadim Belov
            • CN: Vadim Belov
          • #5
            • rsaEncryption: nil
            • EF:C6:D6:29:75:B5:70:93:96:D1:82:8F:60:71:6A:AD:
              86:4E:3E:0E:43:0C:05:BB:86:BC:51:2F:49:5D:40:CB:
              FB:42:DD:AE:34:9B:8E:1F:D7:AC:A8:79:B2:03:B3:A6:
              E9:D7:D6:05:06:42:B7:E7:83:4A:CE:C1:97:2A:1E:4F:
              80:37:4C:48:DE:0E:F1:33:BD:87:55:9D:42:24:6C:97:
              86:FA:36:5E:0F:53:53:59:7F:88:A5:92:A4:99:59:BB:
              73:BD:03:06:D4:3B:9F:0B:0A:22:A4:9C:87:19:24:F5:
              B8:3D:6C:E7:E1:DB:81:43:04:DF:F2:B8:6A:B5:EF:1A:
              04:4C:EB:0B:8D:C9:59:67:72:1B:28:DE:03:CF:5D:F1:
              F4:84:99:8F:8D:8B:BF:0D:16:5A:CF:AC:5D:AD:E0:75:
              29:2D:F2:48:B4:9F:69:38:4E:2D:F9:B1:D1:E9:A6:A1:
              12:E2:D8:DD:E5:B8:1B:D3:24:46:49:75:5C:77:81:5B:
              57:D7:95:CB:19:17:FD:13:8E:8E:FF:01:81:B5:BC:26:
              C9:18:1B:18:E6:67:34:DA:70:39:EF:05:F0:2C:C8:FA:
              C3:C1:57:EC:F9:1C:45:55:B2:E2:E1:AD:C8:FD:43:3A:
              77:15:66:C7:0E:53:62:B3:F4:50:E0:51:AF:09:35:19              : 0x010001
          • #6
            • authorityKeyIdentifier: 
              da ed 64 74 14 9c 14 3c  ab dd 99 a9 bd 5b 28 4d  |..dt...<.....[(M|
8b 3c c9 d8                                       |.<..            |
            • subjectKeyIdentifier: 
              10 1b ab e8 ed 01 ee 68  6f dc 60 ca e3 bd d4 0e  |.......ho.`.....|
6c c9 f6 97                                       |l...            |
            • keyUsage: true, 0x80
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: codeSigning
            • nsCertType: 0x10
            • certificatePolicies
              • 1.3.6.1.4.1.6449.1.2.1.3.2
                • id-qt-cps: https://secure.comodo.net/CPS
            • crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
            • authorityInfoAccess
              • OCSP: http://ocsp.comodoca.com
        • RSA-SHA1: 
          94 ba bf 4e bc 68 61 cf  d7 f4 60 f9 dc 08 31 a0  |...N.ha...`...1.|
09 e0 3c a0 a3 a7 27 a9  db 3d 07 f9 c8 16 c8 bd  |..<...'..=......|
41 0d 65 78 f5 36 d0 14  06 fa 55 b2 7f 10 40 48  |A.ex.6....U...@H|
f8 39 92 56 ba 9d 47 69  e9 70 1c 04 e1 79 e6 0c  |.9.V..Gi.p...y..|
f3 52 25 05 52 26 e6 39  1c d9 c9 7e 38 b7 0b 45  |.R%.R&.9...~8..E|
62 2c b1 8f 6a d2 b1 2a  35 f0 dc 02 eb 5d 71 c7  |b,..j..*5....]q.|
4e cf b0 ae 57 1a 2b 64  6c ec 3e 81 a9 47 89 b6  |N...W.+dl.>..G..|
0f 02 4e 27 9f 15 76 7e  9a f0 04 68 0a 16 b8 98  |..N'..v~...h....|
0b 70 bc 52 6d e7 14 6d  9d 7d 20 90 41 d7 30 c8  |.p.Rm..m.} .A.0.|
99 91 e6 1b 69 bf d5 66  eb 6f 5b 22 71 a0 eb 48  |....i..f.o["q..H|
39 b8 86 59 72 7b f9 4b  b6 14 d8 1e 44 dc 7a dd  |9..Yr{.K....D.z.|
d7 1c ff 3c 62 e7 5f c2  e0 cb 72 1c 54 21 9b ca  |...
    • Signer
      • 1
      • unnamed
        • #0
          • C: US
          • ST: UT
          • L: Salt Lake City
          • O: The USERTRUST Network
          • OU: http://www.usertrust.com
          • CN: UTN-USERFirst-Object
        • 4D:2A:6E:76:DD:12:A5:CA:94:4E:09:92:3D:6E:CD:0F
      • SHA1: nil
      • #3
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest: 
          4d 54 5f f0 9d 98 e6 e4  c1 3b 24 e4 1f ba 86 59  |MT_......;$....Y|
7a 1b 32 30                                       |z.20            |
      • rsaEncryption: 
        92 2d e1 dd d8 50 70 83  7c 20 b2 be 45 42 cd cf  |.-...Pp.| ..EB..|
e0 1f 0f 32 ef 5c f0 d1  cf c3 eb a5 3c 73 7e ad  |...2.\......E:.|
2b 4d 23 2d d7 f4 d7 cb  08 12 5b 0e 86 87 c8 df  |+M#-......[.....|
1a b8 0a 15 9e d7 9b d5  53 97 f2 bc df 7e 63 d6  |........S....~c.|
c5 d9 4b e3 f7 39 5c e8  b8 33 d4 d6 1c 85 e4 56  |..K..9\..3.....V|
a3 0f 13 56 b8 54 b6 0e  3a b9 93 59 ee cd 40 f9  |...V.T..:..Y..@.|
      • countersignature
        • 0
          • unnamed
            • #0
              • C: US
              • ST: UT
              • L: Salt Lake City
              • O: The USERTRUST Network
              • OU: http://www.usertrust.com
              • CN: UTN-USERFirst-Object
            • 47:8A:8E:FB:59:E1:D8:3F:0C:E1:42:D2:A2:87:07:BE
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2012-10-03 15:12:53 UTC
            • messageDigest: 
              c3 f6 89 a0 f4 58 62 55  f2 e6 69 34 77 3b 7f ef  |.....XbU..i4w;..|
d4 db 06 ea                                       |....            |
          • rsaEncryption: 
            6c 67 73 71 90 93 4f 43  15 b3 5a 60 10 68 a0 50  |lgsq..OC..Z`.h.P|
eb fa a6 15 34 09 9e 00  d9 f6 ab d4 a0 9b 83 ff  |....4...........|
28 43 d5 9f 80 51 9d 0e  08 3f fe c9 5a da fe b6  |(C...Q...?..Z...|
d8 09 89 2f 33 4f 46 25  b0 24 b5 3f 0d 0a 55 47  |.../3OF%.$.?..UG|
89 31 21 0b 5a 06 52 61  2e 77 84 78 73 c1 68 66  |.1!.Z.Ra.w.xs.hf|
7c a9 60 e9 18 7f 2b 95  a4 13 67 5e 64 91 3c f4  ||.`...+...g^d.<.|
6a db 00 e3 b8 e1 95 9f  a7 8e 3a a6 78 7c 39 8c  |j.........:.x|9.|
17 8f f7 08 4b 21 40 ab  ed 9d ea d6 67 a4 ac a3  |....K!@.....g...|
06 ae e9 d5 ae 49 a4 e6  9c fe 79 1e 2c 0c f3 a1  |.....I....y.,...|
d8 6f 9d 5b d6 45 e0 34  69 7c e9 9d 5a e8 60 5a  |.o.[.E.4i|..Z.`Z|
36 f1 15 43 6e 46 05 d6  f4 11 9d 2d 87 8e a8 c3  |6..CnF.....-....|
c0 93 10 bd d7 56 55 4c  a7 4a 54 5e 6d 67 97 bc  |.....VUL.JT^mg..|
59 a3 8f df 1e d7 ce e2  9d 8d 06 9e 05 f8 07 09  |Y...............|
26 ec 37 ca bd e0 99 f9  ab 8c df b7 82 86 9a 67  |&.7............g|
b7 d7 99 9b e2 14 87 81  7a ec 65 96 2f e9 96 ab  |........z.e./...|
e0 28 b4 b5 2f 4b 76 76  e7 ec e5 c5 7a d0 1b 35  |.(../Kvv....z..5|
offsetsizetypecomment
0765952EXE10/03/2012 15:06:07#
15c115HTM#
ae12812048PNG(256 x 256)#
bb0003776PKCS7Authenticode Signature#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER