Gridinsoft Logo
File Icon

The CertFix.001069.exe (БСртфикс - ΡƒΡ‚ΠΈΠ»ΠΈΡ‚Π° ΠΏΡ€ΠΎΠ²Π΅Ρ€ΠΊΠΈ сСртификатов) File Analysis

Updated 1 year ago
Checked by Malware Check
CertFix.001069.exe

Technical Analysis

File Name CertFix.001069.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.172.174
Database Version 2024-04-22 18:00:30 UTC
βœ“

Clean File

No threats detected by our scanner

0%
Detection Rate
576,144
File Size (bytes)
2024-04-22
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
03437b073ab55aef499b0987f0297a86
SHA1
87b3001a7c9e65f819197ebfc552c02e22446a0f
SHA256
9231f28982389ae6fdde72fdc803e632b625b28ecfd092654c5425477c82dbf0
SHA512
5526ad50b6f6e050b7b252232850f4c1d8512a009081e552a0cb2c82d9b904e4fce1c03d060e0d9282fb06f53b533392bdb1da46dcbcdf11cc13cec7fe941a41
ImpHash
0afc42333afc38c53975da0527382d57

PE Analysis

Basic Information

β–Ό
Icon
Hash: f36b4d8d7190028bdb57c96ef1e82322
Fuzzy: 0cad98afe4cd73051f396c9aa684b0e7
dHash: 9ca9d2e9a492196c
Image Base 0x00400000
Entry Point 0x00411f6b
Compilation Time 2021-07-06 04:55:59
Checksum 0x0009c46e (Actual: 0x0009c46e)
OS Version 5.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path c:\BuildAgent\work\6b0d2302df9244e9\bin\CertFix.pdb
Digital Signature OK
Imports 15 libraries
Exports 2 functions
Resources 12 Resources
Sections 5 Sections

Version Information

β–Ό
FileDescription БСртфикс - ΡƒΡ‚ΠΈΠ»ΠΈΡ‚Π° ΠΏΡ€ΠΎΠ²Π΅Ρ€ΠΊΠΈ сСртификатов
FileVersion 1.1.28.194
InternalName CertFix
LegalCopyright (C) 2010-2021 PF SKB Kontur AO
OriginalFilename CertFix.exe
ProductName CertFix
CompanyName PF SKB Kontur AO
ProductVersion 1.1.28.194
Translation 0x0419 0x04b0

PE Sections

β–Ό
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 199,086 bytes 199,168 bytes 6.64 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 34234BD7EE22D6C8691BC6D78461C0E7
.rdata 0x00032000 53,030 bytes 53,248 bytes 5.31 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 4A13190E2214339448E8CC5314750687
.data 0x0003f000 24,952 bytes 15,360 bytes 3.87 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE E9B7A35416093F7C3611CE33381B5D85
.rsrc 0x00046000 279,512 bytes 279,552 bytes 6.30 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 9A1D37778CC467C48699B1223EAC44E4
.reloc 0x0008b000 13,636 bytes 13,824 bytes 6.58 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ CD17C1F34E5BD47827BEE53D58F92D8E
Entropy Analysis Alert

2 section(s) with elevated entropy (β‰₯6.5) - possible compression

Resource Analysis

β–Ό
Total Resources: 12 (278,798 bytes)
Resource Type Count Total Size Percentage
RT_ICON 8 26,560 bytes
9.5%
RT_RCDATA 1 250,104 bytes
89.7%
RT_GROUP_ICON 1 118 bytes
0%
RT_VERSION 1 788 bytes
0.3%
RT_MANIFEST 1 1,228 bytes
0.4%

Certificate Chain Analysis

β–Ό
Certificate Information
Product CertFix
Description БСртфикс - ΡƒΡ‚ΠΈΠ»ΠΈΡ‚Π° ΠΏΡ€ΠΎΠ²Π΅Ρ€ΠΊΠΈ сСртификатов
File Version 1.1.28.194
Original Name CertFix.exe
Signing Date 04:56 AM 07/06/2021 (1463 days ago)
Verification Status Signed
Signers AO Proizvodstvennaya Firma SKB Kontur; GlobalSign Extended Validation CodeSigning CA - SHA256 - G3; GlobalSign Root CA - R3
Counter Signers DigiCert Timestamp 2021; DigiCert SHA2 Assured ID Timestamping CA; DigiCert
Internal Name CertFix
Copyright (C) 2010-2021 PF SKB Kontur AO
Certificate Chain Summary
Symantec Time Stamping Services CA - G2 #1 Primary
Validity Period: 2012-12-21 00:00:00 β†’ 2020-12-30 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 7E 93 EB FB 7C C6 4E 59 EA 4B 9A 77 D4 06 FC 3B
Symantec Time Stamping Services Signer - G4 #2 Chain
Validity Period: 2012-10-18 00:00:00 β†’ 2020-12-29 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 0E CF F4 38 C8 FE BF 35 6E 04 D8 6A 98 1B 1A 50
Crypto-Pro #3 Chain
Validity Period: 2014-12-09 00:00:00 β†’ 2016-02-07 23:59:59
Signature Algorithm: sha1RSA
Serial Number: 46 45 0E D6 D9 B0 FA F5 A4 7D 51 2B 64 40 D2 3E
GlobalSign Extended Validation CodeSigning CA - SHA256 - G3 #4 Chain
Validity Period: 2016-06-15 00:00:00 β†’ 2024-06-15 00:00:00
Signature Algorithm: sha256RSA
Serial Number: 48 1B 6A 07 A9 42 4C 1E AA FE F3 CD F1 0F
AO Proizvodstvennaya Firma SKB Kontur #5 Chain
Validity Period: 2019-07-02 06:28:16 β†’ 2022-07-02 06:28:16
Signature Algorithm: sha256RSA
Serial Number: 40 E9 7F 18 51 5A 87 B0 6A 68 44 29
DigiCert Timestamp 2021 #6 Chain
Validity Period: 2021-01-01 00:00:00 β†’ 2031-01-06 00:00:00
Signature Algorithm: sha256RSA
Serial Number: 0D 42 4A E0 BE 3A 88 FF 60 40 21 CE 14 00 F0 DD
DigiCert SHA2 Assured ID Timestamping CA #7 Chain
Validity Period: 2016-01-07 12:00:00 β†’ 2031-01-07 12:00:00
Signature Algorithm: sha256RSA
Serial Number: 0A A1 25 D6 D6 32 1B 7E 41 E4 05 DA 36 97 C2 15

βœ“ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware