vengine.exe - VESetup.exe - Verification Engine

info
MZ
PE
resources
imports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	vengine.exe
size	3642104 (0x3792f8)
md5	124a1de42ab37c9f16170e2b9e1a0776

type	PE32 executable (GUI) Intel 80386, for MS Windows, PECompact2 compressed
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe0

Rich Header

lib id	version	times used
123	50727	29
125	50727	36
109	50727	207
110	50727	185
1	0	667
114	50727	38
124	50727	1
120	50727	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	2
TimeDateStamp	0x4b717207
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x103
Magic	0x10b
LinkerVersion	8.0
SizeOfCode	0x79000
SizeOfInitializedData	0xa19000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x21efa
BaseOfCode	0x1000
BaseOfData	0x7a000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0xaaf000
SizeOfHeaders	0x400
CheckSum	0x387294
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

PeCompact 2.xx (BitSum Technologies / v2.0)

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xa97000	0x361600	RWX CODE IDATA
.rsrc	0xa98000	0x17000	0x16a00	RWX CODE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0xaad934	0x359
RESOURCE	0xa98000	0x15842
EXCEPTION	0	0
SECURITY	0x378400	0xef8
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0x9db98	0x60
CLR_Header	0	0

show previews

type	name	size	cp
BIN	#103	121856	1252
BIN	#129	7847592	1252
BIN	#147	804352	1252
BIN	#149	223744	1252
CURSOR	#24	308	1252
CURSOR	#25	180	1252
CURSOR	#26	308	1252
CURSOR	#27	308	1252
CURSOR	#28	308	1252
CURSOR	#29	308	1252
CURSOR	#30	308	1252
CURSOR	#31	308	1252
CURSOR	#32	308	1252
CURSOR	#33	308	1252
CURSOR	#34	308	1252
CURSOR	#35	308	1252
CURSOR	#36	308	1252
CURSOR	#37	308	1252
CURSOR	#38	308	1252
CURSOR	#39	308	1252
BITMAP	#130	136	1252
BITMAP	#133	97458	1252
BITMAP	#138	138642	1252
BITMAP	#139	138642	1252
BITMAP	#140	138642	1252
BITMAP	#141	97458	1252
BITMAP	#143	97458	1252
BITMAP	#144	97458	1252
BITMAP	#145	97458	1252
BITMAP	#146	97458	1252
BITMAP	#148	97458	1252
BITMAP	#150	97456	1252
BITMAP	#151	97458	1252
BITMAP	#30994	184	1252
BITMAP	#30996	324	1252
ICON	#1	296	1252
ICON	#2	1384	1252
ICON	#3	872	1252
ICON	#4	488	1252
ICON	#5	1736	1252
ICON	#6	1864	1252
ICON	#7	744	1252
ICON	#8	2216	1252
ICON	#9	3240	1252
ICON	#10	1640	1252
ICON	#11	3752	1252
ICON	#12	7336	1252
ICON	#13	2664	1252
ICON	#14	5672	1252
ICON	#15	12840	1252
ICON	#16	1128	1252
ICON	#17	2440	1252
ICON	#18	4264	1252
ICON	#19	9640	1252
ICON	#20	16936	1252
ICON	#21	1384	1252
ICON	#22	872	1252
ICON	#23	1128	1252
DIALOG	#103	190	1252
DIALOG	#106	424	1252
DIALOG	#107	406	1252
DIALOG	#108	220	1252
DIALOG	#109	332	1252
DIALOG	#110	778	1252
DIALOG	#111	436	1252
DIALOG	#112	406	1252
DIALOG	#30721	232	1252
DIALOG	#30734	52	1252
STRING	#3841	130	1252
STRING	#3842	42	1252
STRING	#3843	402	1252
STRING	#3857	1250	1252
STRING	#3858	794	1252
STRING	#3859	732	1252
STRING	#3860	138	1252
STRING	#3865	172	1252
STRING	#3866	222	1252
STRING	#3867	1220	1252
STRING	#3868	612	1252
STRING	#3869	44	1252
STRING	#3887	66	1252
GROUP_CURSOR	#30977	34	1252
GROUP_CURSOR	#30998	20	1252
GROUP_CURSOR	#30999	20	1252
GROUP_CURSOR	#31000	20	1252
GROUP_CURSOR	#31001	20	1252
GROUP_CURSOR	#31002	20	1252
GROUP_CURSOR	#31003	20	1252
GROUP_CURSOR	#31004	20	1252
GROUP_CURSOR	#31005	20	1252
GROUP_CURSOR	#31006	20	1252
GROUP_CURSOR	#31007	20	1252
GROUP_CURSOR	#31008	20	1252
GROUP_CURSOR	#31009	20	1252
GROUP_CURSOR	#31010	20	1252
GROUP_CURSOR	#31011	20	1252
GROUP_ICON	#128	286	1252
GROUP_ICON	#152	48	1252
VERSION	#1	828	1252
MANIFEST	#1	786	1252

module_name	ord	function_name
kernel32.dll		LoadLibraryA
kernel32.dll		GetProcAddress
kernel32.dll		VirtualAlloc
kernel32.dll		VirtualFree
USER32.dll		SetCapture
GDI32.dll		DeleteObject
COMDLG32.dll		GetFileTitleW
WINSPOOL.DRV		ClosePrinter
ADVAPI32.dll		RegEnumKeyW
SHELL32.dll		SHGetFolderPathW
COMCTL32.dll		InitCommonControlsEx
SHLWAPI.dll		SHGetValueW
ole32.dll		CoCreateGuid
OLEAUT32.dll	150
WININET.dll		InternetConnectW
imagehlp.dll		ImageDirectoryEntryToData

StringTable 040904e4

CompanyName	Comodo CA Ltd.
FileDescription	Verification Engine
FileVersion	2,7,0,37
InternalName	Verification Engine
LegalCopyright	Copyright (c) 2010 Comodo CA Ltd. All rights reserved.
OriginalFilename	VESetup.exe
ProductName	Verification Engine
ProductVersion	2,7,0,37

VS_FIXEDFILEINFO

FileVersion	2.7.0.37
ProductVersion	2.7.0.37
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/ST=UT/L=Salt Lake City/O=The USERTRUST Network/OU=http:\/\/www.usertrust.com/CN=UTN-USERFirst-Object

serial: 863A68583ED1EF52040D77BDDDCED365

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http:\/\/www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: May 17 00:00:00 2005 GMT
            Not After : May 16 23:59:59 2010 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=Comodo Time Stamping Signer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bc:35:a0:36:70:22:81:11:c3:b2:83:b9:d3:28:
                    c6:36:cd:25:6b:a9:7b:b2:1c:f6:9b:51:9c:ef:35:
                    f4:ed:08:8e:5e:38:08:f8:77:3c:0a:42:e0:f3:70:
                    dc:a3:d7:ca:f5:4c:0b:cf:ff:22:9c:0a:7e:68:d6:
                    09:a2:2a:84:7b:a6:9d:b4:a9:c1:33:e2:ef:1f:17:
                    48:ca:3a:cd:46:e6:c5:aa:77:bd:e3:77:9a:fa:47:
                    53:40:28:59:43:93:f1:a4:81:ea:ef:80:b5:4f:a7:
                    08:ce:ba:6e:bc:ca:76:0c:97:64:59:86:24:bb:3d:
                    82:90:a8:55:b1:92:d3:a0:a7:05:ac:9f:53:25:08:
                    10:47:99:cd:98:de:68:e5:b4:50:78:a3:af:01:cc:
                    59:43:58:e4:76:6e:7e:ac:c7:e2:9e:1f:4f:b0:47:
                    2d:c8:0c:a3:49:27:80:75:8c:bb:06:91:65:0f:90:
                    9b:f4:ba:d1:81:c8:5c:6a:ec:14:e9:25:09:bf:23:
                    16:f4:95:46:40:40:21:bb:83:96:fd:86:1f:7a:c8:
                    0d:10:8e:a2:f8:19:07:58:7f:9f:bd:37:02:60:f2:
                    a4:e9:9d:44:3f:30:05:e4:a7:70:99:51:9a:e8:17:
                    f1:55:ca:b2:61:89:65:46:a7:6a:f2:58:46:7e:aa:
                    a0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8
            X509v3 Subject Key Identifier: 
                2E:2D:B0:0A:44:4A:D3:87:C0:02:07:CE:97:7D:50:62:20:FD:0F:83
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        4a:8f:fc:1e:30:a8:3c:75:e8:47:e7:73:ae:b0:69:7a:b2:4d:
        bc:50:d6:9a:8f:81:b6:60:2a:f7:02:a5:48:3a:1e:15:c7:18:
        6b:1c:18:a4:c9:df:fd:f1:ce:f7:b8:2a:d6:6d:a7:cd:e5:7d:
        21:3d:1e:3f:74:c8:a2:b8:79:96:28:ae:e1:fa:73:43:f2:7a:
        be:80:2e:67:04:da:17:fa:9e:5a:96:f5:9c:6d:7e:7e:8c:6c:
        81:27:50:7f:68:d8:89:fa:7d:04:59:67:0f:2d:74:e4:99:87:
        d7:c1:e1:5d:11:4a:26:f7:26:10:80:67:c2:c3:f7:cf:34:1b:
        c4:79:21:cc:60:35:bf:a9:60:77:9e:cb:bc:52:32:22:6c:ad:
        da:df:6d:dd:f3:2e:36:cd:c5:a7:54:e0:f4:a4:cc:e3:f5:d4:
        62:4f:99:06:0c:e5:6f:59:6f:11:c7:cf:58:24:bf:af:25:1d:
        45:11:77:99:65:ae:31:d4:5d:48:9d:8c:c3:72:72:29:99:e5:
        0a:f1:b9:cc:5a:3c:48:d3:ff:40:ce:cd:10:03:3d:bf:33:9c:
        08:f3:10:22:2a:47:b0:77:2b:ee:5b:4e:65:e0:d3:23:3c:03:
        c4:cf:2e:45:62:69:0e:1b:d2:0b:f9:f3:20:0f:53:1a:d0:7c:
        71:f1:38:d0

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            86:3a:68:58:3e:d1:ef:52:04:0d:77:bd:dd:ce:d3:65
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http:\/\/www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: May 14 00:00:00 2007 GMT
            Not After : May 13 23:59:59 2010 GMT
        Subject: C=GB/postalCode=M5 3EQ, ST=Greater Manchester, L=Salford/street=Trafford Road/street=Exchange Quay/street=3rd Floor, 26 Office Village, O=Comodo CA Limited, CN=Comodo CA Limited
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d1:65:1d:dd:a0:15:ae:52:61:61:f0:12:ba:30:
                    24:7e:95:d7:f7:d5:14:44:8d:87:03:5c:e7:43:ad:
                    6d:19:9e:46:0a:2e:9b:1d:7e:61:a8:ce:95:72:e4:
                    a8:82:33:f0:77:d0:d8:46:56:b0:cc:41:03:4e:42:
                    d4:c5:b1:9d:03:e1:91:64:93:fe:2d:3a:eb:9e:e2:
                    88:3b:d0:4c:36:84:3a:9e:61:1f:f3:74:8d:23:8c:
                    3d:63:52:02:05:f3:cd:59:12:82:1b:aa:b5:f3:03:
                    15:56:ef:d3:2c:38:61:23:8b:63:3f:93:da:9d:2c:
                    32:9a:d0:f4:cc:de:5d:be:e4:71:04:a7:cb:98:1e:
                    e5:db:6e:db:5e:18:f2:25:54:19:94:b7:a3:b9:a4:
                    dd:f7:1b:96:8f:db:c2:c5:67:62:0c:be:0b:11:12:
                    fe:e0:c4:e5:de:5f:cb:f8:c4:52:91:e6:87:de:80:
                    b9:5d:56:e1:fa:a3:86:1c:86:fe:6d:98:fc:47:f1:
                    5a:62:76:fd:d9:dc:b1:f5:20:7d:c5:fc:cc:04:3d:
                    18:04:dc:34:98:2b:d4:b6:20:31:4d:d2:5d:17:a6:
                    93:05:2c:e3:67:e4:59:6c:72:25:20:ec:d3:cd:1a:
                    ee:c6:74:b6:46:3c:86:4a:59:af:82:0f:10:36:93:
                    71:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8
            X509v3 Subject Key Identifier: 
                B4:55:DA:A8:CB:42:F0:7E:09:09:5A:09:C5:2E:DA:F4:57:9E:A7:A5
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                Code Signing
            Netscape Cert Type: 
                Object Signing
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.1.3.2
                  CPS: https://secure.comodo.net/CPS
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        75:01:26:01:d6:d7:2c:08:e8:1f:35:20:a3:92:0c:28:4a:85:
        f3:5a:40:88:9b:a6:98:6a:89:ea:7e:bc:d3:16:f9:88:2c:f5:
        ef:e7:11:ab:aa:7b:4e:23:00:21:f7:1a:e3:97:38:bb:6e:d5:
        e7:05:d9:97:e1:94:95:08:ac:d5:23:7b:c7:0f:92:da:2f:d0:
        0f:8e:65:08:bc:b6:a8:00:20:f7:f0:4a:65:b7:19:c8:0f:2d:
        5a:fd:1b:a7:58:94:51:c5:85:68:92:e6:cc:12:09:1a:0f:c1:
        74:e5:9f:e2:03:ef:d7:b7:bb:ce:70:98:8c:dd:4f:0d:69:f2:
        58:cd:b6:57:86:f4:16:14:a6:c5:44:22:75:dd:c9:98:41:36:
        ae:8a:09:f2:ec:17:b7:ef:9f:02:93:75:3b:31:05:e0:5d:46:
        91:54:6f:82:ec:81:cc:32:0c:0e:38:8b:a6:ee:1d:c2:fe:f1:
        8e:2b:4d:07:45:ab:d8:69:5c:52:7c:49:09:0c:80:66:9e:2e:
        18:ea:3e:d1:f7:20:0c:94:b8:ca:bf:30:66:a3:1f:68:93:2c:
        65:4e:04:fd:e9:85:22:07:ee:c6:2a:0a:15:e9:13:8c:48:10:
        fc:84:9b:4b:43:53:5c:24:36:89:cc:39:9f:9c:f3:ff:12:7a:
        61:2e:fb:98

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

c8 a7 af df 5f 56 39 b2 23 ec 3d 82 00 09 e5 27 |...._V9.#.=....'| 35 34 1d d2 |54.. |

Certificates
- Certificate #0
  - 2
    - 4F:63:D0:30:F8:15:A3:A5:B3:44:69:40:06:3D:16:89
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - ST: UT
      - L: Salt Lake City
      - O: The USERTRUST Network
      - OU: http://www.usertrust.com
      - CN: UTN-USERFirst-Object
    - 2005-05-17 00:00:00 UTC: 2010-05-16 23:59:59 UTC
    - Subject
      - C: GB
      - ST: Greater Manchester
      - L: Salford
      - O: Comodo CA Limited
      - CN: Comodo Time Stamping Signer
    - #5
      - rsaEncryption: nil
      - BC:35:A0:36:70:22:81:11:C3:B2:83:B9:D3:28:C6:36:
        CD:25:6B:A9:7B:B2:1C:F6:9B:51:9C:EF:35:F4:ED:08:
        8E:5E:38:08:F8:77:3C:0A:42:E0:F3:70:DC:A3:D7:CA:
        F5:4C:0B:CF:FF:22:9C:0A:7E:68:D6:09:A2:2A:84:7B:
        A6:9D:B4:A9:C1:33:E2:EF:1F:17:48:CA:3A:CD:46:E6:
        C5:AA:77:BD:E3:77:9A:FA:47:53:40:28:59:43:93:F1:
        A4:81:EA:EF:80:B5:4F:A7:08:CE:BA:6E:BC:CA:76:0C:
        97:64:59:86:24:BB:3D:82:90:A8:55:B1:92:D3:A0:A7:
        05:AC:9F:53:25:08:10:47:99:CD:98:DE:68:E5:B4:50:
        78:A3:AF:01:CC:59:43:58:E4:76:6E:7E:AC:C7:E2:9E:
        1F:4F:B0:47:2D:C8:0C:A3:49:27:80:75:8C:BB:06:91:
        65:0F:90:9B:F4:BA:D1:81:C8:5C:6A:EC:14:E9:25:09:
        BF:23:16:F4:95:46:40:40:21:BB:83:96:FD:86:1F:7A:
        C8:0D:10:8E:A2:F8:19:07:58:7F:9F:BD:37:02:60:F2:
        A4:E9:9D:44:3F:30:05:E4:A7:70:99:51:9A:E8:17:F1:
        55:CA:B2:61:89:65:46:A7:6A:F2:58:46:7E:AA:A0:07: 0x010001
    - #6
      - authorityKeyIdentifier:
        da ed 64 74 14 9c 14 3c ab dd 99 a9 bd 5b 28 4d |..dt...<.....[(M| 8b 3c c9 d8 |.<.. |
      - subjectKeyIdentifier:
        2e 2d b0 0a 44 4a d3 87 c0 02 07 ce 97 7d 50 62 |.-..DJ.......}Pb| 20 fd 0f 83 | ... |
      - keyUsage: true, 0xc0
      - basicConstraints
        true
        nil
      - extendedKeyUsage: true, timeStamping
      - crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
  - RSA-SHA1:
```
4a 8f fc 1e 30 a8 3c 75  e8 47 e7 73 ae b0 69 7a  |J...0.
```
- Certificate #1
  - 2
    - 86:3A:68:58:3E:D1:EF:52:04:0D:77:BD:DD:CE:D3:65
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - ST: UT
      - L: Salt Lake City
      - O: The USERTRUST Network
      - OU: http://www.usertrust.com
      - CN: UTN-USERFirst-Object
    - 2007-05-14 00:00:00 UTC: 2010-05-13 23:59:59 UTC
    - Subject
      - C: GB
      - postalCode: M5 3EQ
      - ST: Greater Manchester
      - L: Salford
      - street: Trafford Road
      - street: Exchange Quay
      - street: 3rd Floor, 26 Office Village
      - O: Comodo CA Limited
      - CN: Comodo CA Limited
    - #5
      - rsaEncryption: nil
      - D1:65:1D:DD:A0:15:AE:52:61:61:F0:12:BA:30:24:7E:
        95:D7:F7:D5:14:44:8D:87:03:5C:E7:43:AD:6D:19:9E:
        46:0A:2E:9B:1D:7E:61:A8:CE:95:72:E4:A8:82:33:F0:
        77:D0:D8:46:56:B0:CC:41:03:4E:42:D4:C5:B1:9D:03:
        E1:91:64:93:FE:2D:3A:EB:9E:E2:88:3B:D0:4C:36:84:
        3A:9E:61:1F:F3:74:8D:23:8C:3D:63:52:02:05:F3:CD:
        59:12:82:1B:AA:B5:F3:03:15:56:EF:D3:2C:38:61:23:
        8B:63:3F:93:DA:9D:2C:32:9A:D0:F4:CC:DE:5D:BE:E4:
        71:04:A7:CB:98:1E:E5:DB:6E:DB:5E:18:F2:25:54:19:
        94:B7:A3:B9:A4:DD:F7:1B:96:8F:DB:C2:C5:67:62:0C:
        BE:0B:11:12:FE:E0:C4:E5:DE:5F:CB:F8:C4:52:91:E6:
        87:DE:80:B9:5D:56:E1:FA:A3:86:1C:86:FE:6D:98:FC:
        47:F1:5A:62:76:FD:D9:DC:B1:F5:20:7D:C5:FC:CC:04:
        3D:18:04:DC:34:98:2B:D4:B6:20:31:4D:D2:5D:17:A6:
        93:05:2C:E3:67:E4:59:6C:72:25:20:EC:D3:CD:1A:EE:
        C6:74:B6:46:3C:86:4A:59:AF:82:0F:10:36:93:71:A1: 0x010001
    - #6
      - authorityKeyIdentifier:
        da ed 64 74 14 9c 14 3c ab dd 99 a9 bd 5b 28 4d |..dt...<.....[(M| 8b 3c c9 d8 |.<.. |
      - subjectKeyIdentifier:
        b4 55 da a8 cb 42 f0 7e 09 09 5a 09 c5 2e da f4 |.U...B.~..Z.....| 57 9e a7 a5 |W... |
      - keyUsage: true, 0x80
      - basicConstraints
        true
        nil
      - extendedKeyUsage: codeSigning
      - nsCertType: 0x10
      - certificatePolicies
        1.3.6.1.4.1.6449.1.2.1.3.2
        id-qt-cps: https://secure.comodo.net/CPS
      - crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
  - RSA-SHA1:
```
75 01 26 01 d6 d7 2c 08  e8 1f 35 20 a3 92 0c 28  |u.&...,...5 ...(|
4a 85 f3 5a 40 88 9b a6  98 6a 89 ea 7e bc d3 16  |J..Z@....j..~...|
f9 88 2c f5 ef e7 11 ab  aa 7b 4e 23 00 21 f7 1a  |..,......{N#.!..|
e3 97 38 bb 6e d5 e7 05  d9 97 e1 94 95 08 ac d5  |..8.n...........|
23 7b c7 0f 92 da 2f d0  0f 8e 65 08 bc b6 a8 00  |#{..../...e.....|
20 f7 f0 4a 65 b7 19 c8  0f 2d 5a fd 1b a7 58 94  | ..Je....-Z...X.|
51 c5 85 68 92 e6 cc 12  09 1a 0f c1 74 e5 9f e2  |Q..h........t...|
03 ef d7 b7 bb ce 70 98  8c dd 4f 0d 69 f2 58 cd  |......p...O.i.X.|
b6 57 86 f4 16 14 a6 c5  44 22 75 dd c9 98 41 36  |.W......D"u...A6|
ae 8a 09 f2 ec 17 b7 ef  9f 02 93 75 3b 31 05 e0  |...........u;1..|
5d 46 91 54 6f 82 ec 81  cc 32 0c 0e 38 8b a6 ee  |]F.To....2..8...|
1d c2 fe f1 8e 2b 4d 07  45 ab d8 69 5c 52 7c 49  |.....+M.E..i\R|I|
09 0c 80 66 9e 2e 18 ea  3e d1 f7 20 0c 94 b8 ca  |...f....>.. ....|
bf 30 66 a3 1f 68 93 2c  65 4e 04 fd e9 85 22 07  |.0f..h.,eN....".|
ee c6 2a 0a 15 e9 13 8c  48 10 fc 84 9b 4b 43 53  |..*.....H....KCS|
5c 24 36 89 cc 39 9f 9c  f3 ff 12 7a 61 2e fb 98  |\$6..9.....za...|
```

Signer

1
unnamed
- #0
  - C: US
  - ST: UT
  - L: Salt Lake City
  - O: The USERTRUST Network
  - OU: http://www.usertrust.com
  - CN: UTN-USERFirst-Object
- 86:3A:68:58:3E:D1:EF:52:04:0D:77:BD:DD:CE:D3:65
SHA1: nil

contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

59 41 a2 c4 bb 98 4f 61  42 fe 85 63 00 07 29 92  |YA....OaB..c..).|
a1 7a 80 4a                                       |.z.J            |

1.3.6.1.4.1.311.2.1.12

00 56 00 65 00 72 00 69 00 66 00 69 00 63 00 61 |.V.e.r.i.f.i.c.a| 00 74 00 69 00 6f 00 6e 00 45 00 6e 00 67 00 69 |.t.i.o.n.E.n.g.i| 00 6e 00 65 00 20 00 73 00 65 00 74 00 75 00 70 |.n.e. .s.e.t.u.p|
: http://www.vengine.com

rsaEncryption:

16 a1 5f cb b4 f0 17 b0  08 a9 3a 20 9d a9 b6 5a  |.._.......: ...Z|
c6 ca db a3 69 47 bd 1f  af 1d 06 70 d0 2d 17 dc  |....iG.....p.-..|
19 53 0e a2 79 42 12 62  74 8e 8d 5e 73 94 47 29  |.S..yB.bt..^s.G)|
56 9a 6a 87 d5 7d ea 4f  6c f1 36 8b 4d d4 ba da  |V.j..}.Ol.6.M...|
b4 ae 97 5d fb a1 98 af  a1 68 09 5e 29 cc 9a 5c  |...].....h.^)..\|
af 8d d6 da 35 7e 8f a6  34 aa 93 24 63 41 41 e8  |....5~..4..$cAA.|
16 7c fe 46 01 8e 37 89  9e 7c 19 80 f2 51 34 8e  |.|.F..7..|...Q4.|
0b ee d6 65 4a 4f e8 a9  dc c9 fa 3d ec dc 9c 59  |...eJO.....=...Y|
51 9c 7c 18 10 4f 11 cd  8f 72 96 6f 72 5b 2c 01  |Q.|..O...r.or[,.|
9a d5 53 c2 85 0c 27 f2  77 a7 2e 27 cf 28 2b 99  |..S...'.w..'.(+.|
d6 7f 6f e7 29 f8 30 4b  fa 86 a3 4b 72 e4 df 25  |..o.).0K...Kr..%|
94 be 93 38 60 0f 01 49  48 02 8e c7 97 87 b8 78  |...8`..IH......x|
b9 11 89 9f c2 eb 89 7a  67 b1 d0 0f 02 0e 0d 69  |.......zg......i|
21 e7 47 d6 1e 85 eb f7  f1 40 98 e5 3b 8a 5d 42  |!.G......@..;.]B|
2f 67 e3 bc fe 24 f9 d9  8b ac ac 34 a6 c9 0c 8b  |/g...$.....4....|
b8 e3 9e 77 2d 1c 09 be  57 1c 31 af 48 52 19 33  |...w-...W.1.HR.3|

countersignature

unnamed
- #0
  - C: US
  - ST: UT
  - L: Salt Lake City
  - O: The USERTRUST Network
  - OU: http://www.usertrust.com
  - CN: UTN-USERFirst-Object
- 4F:63:D0:30:F8:15:A3:A5:B3:44:69:40:06:3D:16:89
SHA1: nil

contentType: pkcs7-data
signingTime: 2010-02-09 14:33:27 UTC

messageDigest:

bd 4b 27 7c f7 2c 2e 54  49 d5 e5 09 c0 f8 c2 92  |.K'|.,.TI.......|
c6 e7 5e 68                                       |..^h            |

rsaEncryption:

05 03 3d d5 25 1b bd 59  a3 6a b7 55 2d 12 d2 91  |..=.%..Y.j.U-...|
71 18 5d 6b e5 15 47 a7  f6 69 23 94 d6 07 89 c7  |q.]k..G..i#.....|
c9 6f d4 d1 e7 fb ed f4  6f 54 8b 61 0d e4 91 49  |.o......oT.a...I|
ca 34 94 d0 52 af 7c 41  9c d3 0d a7 5e 1e 0d 8c  |.4..R.|A....^...|
30 3d 68 20 08 34 39 f2  47 f7 f8 c6 e4 2b d1 56  |0=h .49.G....+.V|
6a 88 be ba 77 75 3a c0  80 f1 a1 29 66 4d e4 19  |j...wu:....)fM..|
6b 4c e5 22 6d a0 1f 07  b7 13 45 69 7f 61 35 4c  |kL."m.....Ei.a5L|
02 80 4d 2c 31 d3 67 06  15 04 5c 8b 16 23 72 70  |..M,1.g...\..#rp|
57 dd c1 21 26 cc 09 f1  82 8c 0e 58 82 c4 66 af  |W..!&......X..f.|
86 35 30 cd 1b 07 32 6b  b4 db ed 37 ee 52 86 9f  |.50...2k...7.R..|
13 32 8e a1 52 66 28 97  8f bc a1 2f 23 b6 00 31  |.2..Rf(..../#..1|
3f c6 51 ec 71 03 ed 2d  d9 88 5f ee b2 5a de e2  |?.Q.q..-.._..Z..|
86 8f dd 4b 08 06 33 a6  8e 6f b5 4b 84 5b 4c 8c  |...K..3..o.K.[L.|
3b 30 8f b8 3f 38 f7 d0  65 92 ac 80 02 d8 73 e1  |;0..?8..e.....s.|
6a bf 4b df 72 34 c3 6a  97 1a 2e 37 55 e6 ff 5d  |j.K.r4.j...7U..]|
c7 dc ea 9b 47 3e 0c 16  8e 35 ff 1b 74 2a 99 bf  |....G>...5..t*..|

show previews

offset	size	type	comment
0	3638272	EXE	02/09/2010 14:32:39	#
15c1	15	HTM		#
378400	3832	PKCS7	Authenticode Signature	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x846aa8

[?] can't find file_offset of VA 0x90b0a8

[?] can't find file_offset of VA 0x941aa8

[?] can't find file_offset of VA 0x941be0

[?] can't find file_offset of VA 0x941c98

[?] can't find file_offset of VA 0x941dd0

[?] can't find file_offset of VA 0x941f08

[?] can't find file_offset of VA 0x942040

[?] can't find file_offset of VA 0x942178

[?] can't find file_offset of VA 0x9422b0

[?] can't find file_offset of VA 0x9423e8

[?] can't find file_offset of VA 0x942520

[?] can't find file_offset of VA 0x942658

[?] can't find file_offset of VA 0x942790

[?] can't find file_offset of VA 0x9428c8

[?] can't find file_offset of VA 0x942a00

[?] can't find file_offset of VA 0x942b38

[?] can't find file_offset of VA 0x942c70

[?] can't find file_offset of VA 0x942da8

[?] can't find file_offset of VA 0x942e30

[?] can't find file_offset of VA 0x95aae8

[?] can't find file_offset of VA 0x97c880

[?] can't find file_offset of VA 0x99e618

[?] can't find file_offset of VA 0x9c03b0

[?] can't find file_offset of VA 0x9d8068

[?] can't find file_offset of VA 0x9efd20

[?] can't find file_offset of VA 0xa079d8

[?] can't find file_offset of VA 0xa1f690

[?] can't find file_offset of VA 0xa37348

[?] can't find file_offset of VA 0xa4f000

[?] can't find file_offset of VA 0xa66cb0

[?] can't find file_offset of VA 0xa7e968

[?] can't find file_offset of VA 0xa7ea20

[?] can't find file_offset of VA 0xa7eb68

[?] can't find file_offset of VA 0xa7f0d0

[?] can't find file_offset of VA 0xa7f438

[?] can't find file_offset of VA 0xa7f8a0

[?] can't find file_offset of VA 0xa7f960

[?] can't find file_offset of VA 0xa7fb08

[?] can't find file_offset of VA 0xa7fca0

[?] can't find file_offset of VA 0xa7fd80

[?] can't find file_offset of VA 0xa7fed0

[?] can't find file_offset of VA 0xa801e0

[?] can't find file_offset of VA 0xa80398

[?] can't find file_offset of VA 0xa80530

[?] can't find file_offset of VA 0xa80618

[?] can't find file_offset of VA 0xa80650

[?] can't find file_offset of VA 0xa806d8

[?] can't find file_offset of VA 0xa80708

[?] can't find file_offset of VA 0xa808a0

[?] can't find file_offset of VA 0xa80d88

[?] can't find file_offset of VA 0xa810a8

[?] can't find file_offset of VA 0xa81388

[?] can't find file_offset of VA 0xa81418

[?] can't find file_offset of VA 0xa814c8

[?] can't find file_offset of VA 0xa815a8

[?] can't find file_offset of VA 0xa81a70

[?] can't find file_offset of VA 0xa81cd8

[?] can't find file_offset of VA 0xa81d08

[?] can't find file_offset of VA 0xa81d50

[?] can't find file_offset of VA 0xa81d78

[?] can't find file_offset of VA 0xa81d90

[?] can't find file_offset of VA 0xa81da8

[?] can't find file_offset of VA 0xa81dc0

[?] can't find file_offset of VA 0xa81dd8

[?] can't find file_offset of VA 0xa81df0

[?] can't find file_offset of VA 0xa81e08

[?] can't find file_offset of VA 0xa81e20

[?] can't find file_offset of VA 0xa81e38

[?] can't find file_offset of VA 0xa81e50

[?] can't find file_offset of VA 0xa81e68

[?] can't find file_offset of VA 0xa81e80

[?] can't find file_offset of VA 0xa81e98

[?] can't find file_offset of VA 0xa81eb0

[?] can't find file_offset of VA 0xa81ec8

vengine.exe-