isflash.bin

info
MZ
PE
foremost
signature
hexdump
disasm
log
discuss
donate

filename	isflash.bin
size	17246400 (0x10728c0)
md5	9b8c3db4374ad52a7b7db9e0ffee97ef

type	MS-DOS executable PE32+ executable (DLL) (EFI application) x86-64, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0
blocks_in_file	0
num_relocs	0
header_paragraphs	0
min_extra_paragraphs	0
max_extra_paragraphs	0
ss	0
sp	0
checksum	0
ip	0
cs	0
reloc_table_offset	0
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xb0

DOS stub

00000000: 4d 5a 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |MZ..............|
00000010: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
00000030: 00 00 00 00 00 00 00 00  00 00 00 00 b0 00 00 00  |................|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000b0:

PE Header

Signature	PE
Machine	0x8664
NumberOfSections	4
TimeDateStamp	0
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xf0
Characteristics	0x2022
Magic	0x20b
LinkerVersion	9.0
SizeOfCode	0x1400
SizeOfInitializedData	0x1070ce0
SizeOfUninitializedData	0
AddressOfEntryPoint	0x260
BaseOfCode	0x260
ImageBase	0x180000000
SectionAlignment	0x20
FileAlignment	0x20
OperatingSystemVersion	5.2
ImageVersion	0.0
SubsystemVersion	5.2
Reserved1	0
SizeOfImage	0x1072340
SizeOfHeaders	0x260
CheckSum	0x107fea5
Subsystem	0xa
DllCharacteristics	0
SizeOfStackReserve	0
SizeOfStackCommit	0
SizeOfHeapReserve	0
SizeOfHeapCommit	0
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x260	0x13fc	0x1400	R-X CODE
.rdata	0x1660	0x9ec	0xa00	R-- IDATA
.data	0x2060	0x10701eb	0x1070200	RW- IDATA
	0x1072260	0xcc	0xe0	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0	0
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0x1072340	0x580
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /CN=QA Certificate.

serial: -2A11D3B63978E372B8E6F0D101A8DFEE

Certificates (1)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
             (Negative)2a:11:d3:b6:39:78:e3:72:b8:e6:f0:d1:01:a8:df:ee
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=QA Certificate.
        Validity
            Not Before: Apr 13 05:23:24 2012 GMT
            Not After : Dec 31 23:59:59 2039 GMT
        Subject: CN=QA Certificate.
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dd:08:35:1f:d6:b0:7b:1d:32:57:fc:3c:49:
                    48:8e:81:99:50:e3:27:2d:a5:b9:ca:14:07:01:07:
                    c5:bf:5e:b6:5f:b9:95:3b:ae:d9:80:2f:ee:56:f5:
                    98:dc:87:c5:0e:7c:68:75:35:99:a9:2a:82:92:de:
                    da:20:0a:39:b3:9d:08:12:3d:90:e2:99:0c:fd:44:
                    59:80:44:55:10:5e:33:8c:0a:7f:90:92:77:d1:22:
                    d3:f4:56:b1:1e:1a:ec:58:fe:d1:b3:c7:1e:64:a8:
                    b7:8e:11:6f:f6:52:ef:10:85:88:87:73:3d:7e:63:
                    3f:34:b9:e2:d0:70:a2:e0:4a:7d:72:42:b4:39:25:
                    34:e5:65:2a:9e:6d:01:8f:89:c7:ac:29:67:1f:34:
                    07:85:0a:53:c1:65:ce:85:3e:eb:9e:df:e2:98:f0:
                    84:ea:5a:3d:fa:fc:32:2e:f1:4c:24:7d:23:66:69:
                    ed:10:12:63:35:8f:94:a3:b7:93:2c:e9:02:55:a2:
                    99:9f:40:83:f2:b4:13:ab:2b:b1:7e:44:99:57:15:
                    b1:55:4d:fc:5e:48:8e:b6:0e:60:04:6d:a0:c6:fc:
                    2b:5a:8f:c5:da:4a:40:65:63:b4:c4:60:42:a5:76:
                    b5:77:9c:81:18:f1:4d:38:e1:23:0b:e6:dc:90:e5:
                    67:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            2.5.29.1: 
                0B......s....R.._!....0.1.0...U....QA Certificate.....,I....G....W .
    Signature Algorithm: sha256WithRSAEncryption
         65:79:f6:fc:5c:a1:31:84:a9:84:94:2c:b1:b8:31:31:53:ec:
         a6:36:b4:81:08:7a:32:2d:09:fd:99:3e:4d:d7:9d:4b:b2:fe:
         43:b7:72:1f:4f:b3:99:b0:d8:47:24:8c:d6:2b:af:42:42:9c:
         19:0c:f6:f5:86:54:41:83:f5:fa:fb:f0:07:51:b8:77:3d:49:
         53:aa:50:f7:05:f3:3d:fa:30:c6:f2:61:b9:c1:e5:cd:f8:29:
         ca:9e:cb:8c:fd:23:96:6c:f2:2c:6a:c7:84:30:e8:e3:65:c9:
         a8:e4:0e:70:ac:d6:d9:e7:7e:d5:9c:9d:e9:b2:63:b3:6d:35:
         4d:36:18:d6:b3:58:2f:1a:c5:05:5a:63:b2:bd:2f:27:ca:77:
         d1:b9:46:be:dc:d3:da:c1:49:2e:25:be:e4:ac:2e:57:bb:a2:
         1d:af:19:91:a6:9f:47:a5:49:07:29:9f:83:11:46:00:85:4c:
         1f:5a:13:dd:3d:92:8e:d1:92:b5:ea:a6:54:95:ef:31:0d:4b:
         34:9d:e0:98:eb:12:b4:06:6b:01:d3:05:86:de:49:fc:c7:b7:
         74:34:b3:32:11:84:3e:74:37:e2:f4:0f:9c:e3:97:5a:38:93:
         83:f5:0d:93:0b:16:96:a8:f2:7a:ef:fa:53:be:10:1c:9c:7d:
         16:a9:aa:b9

pkcs7-signedData

SHA256: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA256

96 40 2e f3 2b 8d 14 9c d9 62 aa 03 ae 44 1e a4 |.@..+....b...D..| 58 c8 8f f2 8b 66 02 5d 10 59 fe 03 c0 21 0b b3 |X....f.].Y...!..|

2
- -55920138895300297581828271423110045678
- RSA-SHA256: nil
- CN: QA Certificate.
- 2012-04-13 05:23:24 UTC: 2039-12-31 23:59:59 UTC
- CN: QA Certificate.
- #5
  - rsaEncryption: nil
  - BB:DD:08:35:1F:D6:B0:7B:1D:32:57:FC:3C:49:48:8E:
    81:99:50:E3:27:2D:A5:B9:CA:14:07:01:07:C5:BF:5E:
    B6:5F:B9:95:3B:AE:D9:80:2F:EE:56:F5:98:DC:87:C5:
    0E:7C:68:75:35:99:A9:2A:82:92:DE:DA:20:0A:39:B3:
    9D:08:12:3D:90:E2:99:0C:FD:44:59:80:44:55:10:5E:
    33:8C:0A:7F:90:92:77:D1:22:D3:F4:56:B1:1E:1A:EC:
    58:FE:D1:B3:C7:1E:64:A8:B7:8E:11:6F:F6:52:EF:10:
    85:88:87:73:3D:7E:63:3F:34:B9:E2:D0:70:A2:E0:4A:
    7D:72:42:B4:39:25:34:E5:65:2A:9E:6D:01:8F:89:C7:
    AC:29:67:1F:34:07:85:0A:53:C1:65:CE:85:3E:EB:9E:
    DF:E2:98:F0:84:EA:5A:3D:FA:FC:32:2E:F1:4C:24:7D:
    23:66:69:ED:10:12:63:35:8F:94:A3:B7:93:2C:E9:02:
    55:A2:99:9F:40:83:F2:B4:13:AB:2B:B1:7E:44:99:57:
    15:B1:55:4D:FC:5E:48:8E:B6:0E:60:04:6D:A0:C6:FC:
    2B:5A:8F:C5:DA:4A:40:65:63:B4:C4:60:42:A5:76:B5:
    77:9C:81:18:F1:4D:38:E1:23:0B:E6:DC:90:E5:67:8B: 0x010001
- 2.5.29.1
  - dc 91 16 1f 73 a6 8f c7 0c 52 1d d1 5f 21 82 b3 |....s....R.._!..|
    - CN: QA Certificate.
    - d5 ee 2c 49 c6 87 1c 8d 47 19 0f 2e fe 57 20 12 |..,I....G....W .|

RSA-SHA256:

65 79 f6 fc 5c a1 31 84  a9 84 94 2c b1 b8 31 31  |ey..\.1....,..11|
53 ec a6 36 b4 81 08 7a  32 2d 09 fd 99 3e 4d d7  |S..6...z2-...>M.|
9d 4b b2 fe 43 b7 72 1f  4f b3 99 b0 d8 47 24 8c  |.K..C.r.O....G$.|
d6 2b af 42 42 9c 19 0c  f6 f5 86 54 41 83 f5 fa  |.+.BB......TA...|
fb f0 07 51 b8 77 3d 49  53 aa 50 f7 05 f3 3d fa  |...Q.w=IS.P...=.|
30 c6 f2 61 b9 c1 e5 cd  f8 29 ca 9e cb 8c fd 23  |0..a.....).....#|
96 6c f2 2c 6a c7 84 30  e8 e3 65 c9 a8 e4 0e 70  |.l.,j..0..e....p|
ac d6 d9 e7 7e d5 9c 9d  e9 b2 63 b3 6d 35 4d 36  |....~.....c.m5M6|
18 d6 b3 58 2f 1a c5 05  5a 63 b2 bd 2f 27 ca 77  |...X/...Zc../'.w|
d1 b9 46 be dc d3 da c1  49 2e 25 be e4 ac 2e 57  |..F.....I.%....W|
bb a2 1d af 19 91 a6 9f  47 a5 49 07 29 9f 83 11  |........G.I.)...|
46 00 85 4c 1f 5a 13 dd  3d 92 8e d1 92 b5 ea a6  |F..L.Z..=.......|
54 95 ef 31 0d 4b 34 9d  e0 98 eb 12 b4 06 6b 01  |T..1.K4.......k.|
d3 05 86 de 49 fc c7 b7  74 34 b3 32 11 84 3e 74  |....I...t4.2..>t|
37 e2 f4 0f 9c e3 97 5a  38 93 83 f5 0d 93 0b 16  |7......Z8.......|
96 a8 f2 7a ef fa 53 be  10 1c 9c 7d 16 a9 aa b9  |...z..S....}....|

#0
- CN: QA Certificate.
- -55920138895300297581828271423110045678
SHA256: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4

messageDigest:

b3 64 7c b9 87 66 52 42  8e f5 a0 29 8c ab ab d0  |.d|..fRB...)....|
86 d4 25 3c 10 a2 aa 98  2b ec 4b da 03 25 67 39  |..%<....+.K..%g9|

rsaEncryption:

1d e5 46 38 79 8f f0 5b  20 c2 9a e3 2c b8 ed f3  |..F8y..[ ...,...|
89 f5 53 63 f9 d5 01 3e  1f d4 59 1f 89 b7 2c 15  |..Sc...>..Y...,.|
ab dd 9f dd f3 c9 ad 2f  0b eb 93 ff 0a c0 e3 47  |......./.......G|
03 87 d0 7d 3a ed d8 bd  cf bc 81 74 1a 6d 19 bd  |...}:......t.m..|
b7 69 52 d2 61 76 87 02  a2 c8 3b c8 6b 57 36 ee  |.iR.av....;.kW6.|
cb 24 1e a9 61 46 29 2b  f4 b7 ba 7f 69 ca 48 cf  |.$..aF)+....i.H.|
c7 1e 43 90 06 94 2e 4c  f0 c2 91 85 28 45 33 51  |..C....L....(E3Q|
98 75 e6 a8 92 86 ac 20  00 1d 19 13 37 11 f7 ea  |.u..... ....7...|
49 c8 30 8a f4 45 73 60  64 28 c9 aa 39 5f 86 5d  |I.0..Es`d(..9_.]|
05 0d d2 ed c6 cb a3 b2  5e ca 64 75 bc de 44 bc  |........^.du..D.|
39 6f 28 ca e5 ca 19 22  3e cf a9 a4 da 52 03 db  |9o(....">....R..|
da 30 56 9d c2 0a ff fb  1d f5 4d 66 c5 59 38 a4  |.0V.......Mf.Y8.|
32 e5 ea 24 5b 38 b1 83  81 94 8e ed a2 df 64 72  |2..$[8........dr|
5e 5b d2 0c cf 28 79 55  5e 7b a8 c7 46 f7 39 98  |^[...(yU^{..F.9.|
e0 16 af 04 97 e6 b6 95  66 1f 2a 2b d3 89 8a d2  |........f.*+....|
c4 8f 71 9e 38 67 73 9b  3f 97 f2 94 79 59 56 3e  |..q.8gs.?...yYV>|

show previews

offset	size	type	comment
15c1	15	HTM		#
f4fce4	6816	DLL	01/01/1970 00:00:00	#
f51784	1184060	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK