crossfire.exe

info
MZ
PE
resources
imports
exports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	crossfire.exe
size	1871504 (0x1c8e90)
md5	ac90a3374d7ca6db7c2819b97e6e68db

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x120

Rich Header

lib id	version	times used
10	9782	1
11	9782	27
147	30729	2
126	50327	7
125	50727	11
109	50727	22
95	4035	7
123	50727	6
96	4035	1
93	4035	27
1	0	599
110	50727	176
114	50727	294
122	50727	1
124	50727	1
120	50727	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	6
TimeDateStamp	0x52a80b47
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x12f
Magic	0x10b
LinkerVersion	8.0
SizeOfCode	0x27c000
SizeOfInitializedData	0xa2000
SizeOfUninitializedData	0
AddressOfEntryPoint	0xfcfd3
BaseOfCode	0x1000
BaseOfData	0x27d000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x506000
SizeOfHeaders	0x1000
CheckSum	0x1d17d6
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x33f000	0xfc000	RWX IDATA
.rsrc	0x340000	0x9c20	0x4000	RW- IDATA
.idata	0x34a000	0x1000	0x1000	RW- IDATA
.data.t	0x34b000	0xf6000	0x1000	RWX IDATA
.data�	0x441000	0xc4000	0xc4000	RWX IDATA
.data�	0x505000	0x1000	0x1000	RWX IDATA

Data Directory

type	va	size
EXPORT	0x502cf0	0xab
IMPORT	0x34a082	0xaa
RESOURCE	0x340000	0x9c20
EXCEPTION	0	0
SECURITY	0x1c8000	0xe90
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
CURSOR	#3	308	1252
CURSOR	#4	180	1252
CURSOR	#5	308	1252
CURSOR	#6	308	1252
CURSOR	#7	308	1252
CURSOR	#8	308	1252
CURSOR	#9	308	1252
CURSOR	#10	308	1252
CURSOR	#11	308	1252
CURSOR	#12	308	1252
CURSOR	#13	308	1252
CURSOR	#14	308	1252
CURSOR	#15	308	1252
CURSOR	#16	308	1252
CURSOR	#17	308	1252
CURSOR	#18	308	1252
BITMAP	#30994	184	1252
BITMAP	#30996	324	1252
ICON	#1	4264	1252
ICON	#2	1128	1252
DIALOG	#137	976	1252
DIALOG	#143	254	1252
DIALOG	#144	160	1252
DIALOG	#145	1512	1252
DIALOG	#146	2440	1252
DIALOG	#147	366	1252
DIALOG	#148	1272	1252
DIALOG	#149	1156	1252
DIALOG	#150	1326	1252
DIALOG	#151	326	1252
DIALOG	#152	212	1252
DIALOG	#153	3828	1252
DIALOG	#154	2816	1252
DIALOG	#155	1412	1252
DIALOG	#30721	232	1252
DIALOG	#30734	52	1252
STRING	#3841	130	1252
STRING	#3842	42	1252
STRING	#3843	402	1252
STRING	#3857	1250	1252
STRING	#3858	794	1252
STRING	#3859	732	1252
STRING	#3860	138	1252
STRING	#3865	172	1252
STRING	#3866	222	1252
STRING	#3867	1220	1252
STRING	#3868	612	1252
STRING	#3869	44	1252
STRING	#3887	66	1252
GROUP_CURSOR	#30977	34	1252
GROUP_CURSOR	#30998	20	1252
GROUP_CURSOR	#30999	20	1252
GROUP_CURSOR	#31000	20	1252
GROUP_CURSOR	#31001	20	1252
GROUP_CURSOR	#31002	20	1252
GROUP_CURSOR	#31003	20	1252
GROUP_CURSOR	#31004	20	1252
GROUP_CURSOR	#31005	20	1252
GROUP_CURSOR	#31006	20	1252
GROUP_CURSOR	#31007	20	1252
GROUP_CURSOR	#31008	20	1252
GROUP_CURSOR	#31009	20	1252
GROUP_CURSOR	#31010	20	1252
GROUP_CURSOR	#31011	20	1252
GROUP_ICON	#128	34	1252
VERSION	#1	684	1252
MANIFEST	#1	596	1252

module_name	hint	ord	function_name
kernel32.dll			lstrcpy
kernel32.dll			ExitProcess
avifil32.dll			DllGetClassObject

ord	entry_va	function_name
1	0x166937	??4_Init_locks@std@@QAEAAV01@ABV01@@Z
2	0x23e900	LTGetILTMemory
3	0x1e54e0	SetMasterDatabase
4	0x167b30	fcEXP

module_name	crossfire.exe
flags	0
timestamp	2013-12-11 06:50:29
version	0.0
ordinal_base	1
nFunctions	4
nNames	4
Names(4)	0x502d28
Functions(4)	0x502d18
NameOrdinals(4)	0x502d38

VS_FIXEDFILEINFO

dwSignature	0xfeef
FileVersion	6.1.1.27
ProductVersion	6.1.63.27
StrucVersion	0x10001
FileFlagsMask	0
FileFlags	0x40000
FileOS	0x10000
FileType	0
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert SHA2 Assured ID Code Signing CA

serial: 041ED457923C1C53285CB45961ED6F8A

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
        Validity
            Not Before: Oct 22 12:00:00 2013 GMT
            Not After : Oct 22 12:00:00 2028 GMT
        Subject: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 Assured ID Code Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:f8:d3:b3:1c:7f:0e:11:af:67:77:07:d3:0b:31:
                    49:19:cf:d0:fb:45:99:b1:3a:db:44:f5:7f:e5:a8:
                    9d:db:32:d7:71:ea:76:9d:05:2e:b7:8f:fa:92:43:
                    c0:a5:f9:89:d4:37:19:d7:b6:aa:f0:9c:86:a5:d8:
                    25:ac:0e:79:28:3a:7e:e9:d1:67:d3:c6:fb:29:27:
                    c7:d3:7b:23:94:e4:91:23:96:90:77:82:f9:a1:84:
                    23:66:12:54:33:50:74:b1:28:26:bb:24:69:c2:c2:
                    52:f2:14:67:8a:89:45:d4:2d:a1:a3:e9:88:2c:20:
                    95:ae:1c:4a:87:08:df:0c:f5:e2:4d:60:18:be:aa:
                    c4:b2:ae:70:31:66:33:71:3e:ac:70:a2:ab:ce:7f:
                    e9:7c:cb:92:a1:e5:3b:31:1c:cf:ea:f2:0a:e4:57:
                    bb:4a:b5:e9:74:e6:2b:fe:6c:cb:7e:74:39:36:0d:
                    90:ef:e4:b5:4e:a4:a9:ea:6a:0a:ab:84:f3:ac:67:
                    4e:b5:c4:f7:8c:d1:20:25:23:eb:08:64:3e:52:96:
                    c1:f2:0f:12:f4:c5:8e:0f:c1:a2:e8:2c:51:f7:73:
                    bc:bd:85:b1:62:83:73:41:82:07:e4:38:8b:6a:73:
                    20:d0:0f:64:73:3c:9e:9f:a6:33:a9:fd:19:df:25:
                    93:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl
                Full Name:
                  URI:http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.0.2.4
                  CPS: https://www.digicert.com/CPS
                Policy: 2.16.840.1.114412.3
            X509v3 Subject Key Identifier: 
                5A:C4:B9:7B:2A:0A:A3:A5:EA:71:03:C0:60:F9:2D:F6:65:75:0E:58
            X509v3 Authority Key Identifier: 
                45:EB:A2:AF:F4:92:CB:82:31:2D:51:8B:A7:A7:21:9D:F3:6D:C8:0F
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        3e:ec:0d:5a:24:b3:f3:22:d1:15:c8:2c:7c:25:29:76:a8:1d:
        5d:1c:2d:3a:1a:c4:ef:30:61:d7:7e:0b:60:fd:c3:3d:0f:c4:
        af:8b:fd:ef:2a:df:20:55:37:b0:e1:f6:d1:92:75:0f:51:b4:
        6e:a5:8e:5a:e2:5e:24:81:4e:10:a4:ee:3f:71:8e:63:0e:13:
        4b:ad:d7:5f:44:79:f3:36:14:06:8a:f7:9c:46:4e:5c:ff:90:
        b1:1b:07:0e:91:15:fb:ba:af:b5:51:c2:8d:24:ae:24:c6:c7:
        27:2a:a1:29:28:1a:3a:71:28:02:3c:2e:91:a3:c0:25:11:e2:
        9c:14:47:a1:7a:68:68:af:9b:a7:5c:20:5c:d9:71:b1:0c:8f:
        bb:a8:f8:c5:12:68:9f:cf:40:cb:40:44:a5:13:f0:e6:64:0c:
        25:08:42:32:b2:36:8a:24:02:fe:2f:72:7e:1c:d7:49:45:96:
        e8:59:1d:e9:fa:74:64:6b:b2:eb:66:43:da:b3:b0:8c:d5:e9:
        0d:dd:f6:01:20:ce:99:31:63:3d:08:1a:18:b3:81:9b:4f:c6:
        93:10:06:fc:07:81:fa:8b:da:f9:82:49:f7:62:6e:a1:53:fa:
        12:94:18:85:2e:92:91:ea:68:6c:44:32:b2:66:a1:e7:18:a4:
        9a:64:51:ef

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:1e:d4:57:92:3c:1c:53:28:5c:b4:59:61:ed:6f:8a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 Assured ID Code Signing CA
        Validity
            Not Before: Nov  8 00:00:00 2013 GMT
            Not After : Nov 16 12:00:00 2016 GMT
        Subject: C=CA, ST=Ontario, L=Toronto, O=G4box.Inc, CN=G4box.Inc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b9:b2:d1:2f:24:31:49:71:d7:54:21:a4:46:21:
                    59:23:26:d5:3a:b9:d0:69:4f:be:3f:4e:c0:31:68:
                    01:3c:cb:e6:74:33:00:4f:02:3c:47:73:3e:b1:3d:
                    41:c5:22:32:37:d9:a7:28:04:8d:d3:a0:aa:9f:e4:
                    72:6b:c0:bd:7b:39:e1:c0:8b:5b:1f:d2:45:65:1f:
                    6c:aa:c1:2f:cd:70:40:74:72:df:4a:1a:3a:a9:97:
                    b1:d4:cb:e7:3c:da:08:a2:6f:ad:43:d2:a8:97:3b:
                    78:11:21:59:3b:e0:b6:0c:fc:4d:36:2b:1d:45:40:
                    c3:15:91:b1:e7:73:48:57:c4:ae:18:1b:b8:b1:3a:
                    71:70:50:36:11:24:44:65:01:08:65:fc:e0:e9:cb:
                    4b:a9:29:26:1d:65:6f:a5:0b:11:84:7a:aa:6a:0b:
                    f7:17:d4:cd:03:d1:34:ba:73:05:93:b6:b5:d7:68:
                    45:f5:fe:65:ce:72:b9:b5:aa:b4:7d:9e:f1:5c:88:
                    a3:bc:f6:15:d0:02:fb:d4:32:b9:6a:a2:d5:6e:cc:
                    ae:59:1f:d8:c5:43:ae:37:f9:ce:96:45:fd:c8:00:
                    af:9c:14:cd:10:69:02:b2:5b:28:70:67:02:52:cd:
                    90:32:ec:20:91:f3:09:cf:5a:8b:6c:01:7e:77:26:
                    41:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                5A:C4:B9:7B:2A:0A:A3:A5:EA:71:03:C0:60:F9:2D:F6:65:75:0E:58
            X509v3 Subject Key Identifier: 
                3A:80:D7:4C:4A:05:97:83:6F:B4:BD:70:9A:CF:11:AA:87:39:2C:4D
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl3.digicert.com/sha2-assured-cs-g1.crl
                Full Name:
                  URI:http://crl4.digicert.com/sha2-assured-cs-g1.crl
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.3.1
                  CPS: http://www.digicert.com/ssl-cps-repository.htm
                  User Notice:
                    Explicit Text: 
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        53:4f:61:dc:14:07:33:ff:4f:1e:6a:7a:4a:94:13:26:ae:73:
        5d:3f:33:1c:8a:5b:03:e9:74:8a:b4:84:1c:68:98:1e:09:c7:
        db:7c:e5:2c:94:f7:ac:b2:32:55:f6:2f:c0:25:c8:e1:3a:47:
        d3:0b:c4:fb:67:5b:52:d0:4f:23:23:0b:49:1c:72:c6:1d:d4:
        12:7a:5b:e0:16:5c:72:8a:75:bd:09:18:a3:d1:3d:f6:1b:51:
        84:23:a3:d5:a9:99:6a:1d:60:5e:68:8d:7a:5d:cf:61:c0:72:
        ed:ec:a7:8b:52:84:bf:89:d3:0c:e1:3c:e2:fa:0e:6d:5a:55:
        83:f2:9f:b2:2e:ca:de:65:bb:8c:f7:66:96:29:18:ef:0e:d2:
        9c:bd:b5:d8:a4:19:32:6f:21:34:17:ae:1b:fa:51:ec:55:d4:
        3d:e0:07:1c:2f:09:f4:51:98:e2:a5:f7:9c:2c:a7:5c:24:02:
        22:05:90:54:46:be:6a:47:df:ae:77:41:ca:2f:3e:55:26:a0:
        8a:fd:e8:48:28:70:95:74:f5:07:49:80:ef:31:83:3b:51:64:
        61:a6:c7:ee:65:92:73:83:90:0a:db:e0:78:93:1f:28:5b:67:
        45:31:10:0f:da:45:23:4c:9a:4b:50:d9:6d:61:be:36:2e:f8:
        9c:38:7d:a6

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

bb fe 97 c8 82 6f 7f 29 6f 9d f4 17 90 eb 3b 51 |.....o.)o.....;Q| b5 36 69 7c |.6i| |

Certificates

Certificate #0
- 2
  - 04:09:18:1B:5F:D5:BB:66:75:53:43:B5:6F:95:50:08
  - RSA-SHA256: nil
  - Issuer
    - C: US
    - O: DigiCert Inc
    - OU: www.digicert.com
    - CN: DigiCert Assured ID Root CA
  - 2013-10-22 12:00:00 UTC: 2028-10-22 12:00:00 UTC
  - Subject
    - C: US
    - O: DigiCert Inc
    - OU: www.digicert.com
    - CN: DigiCert SHA2 Assured ID Code Signing CA
  - #5
    - rsaEncryption: nil
    - F8:D3:B3:1C:7F:0E:11:AF:67:77:07:D3:0B:31:49:19:
      CF:D0:FB:45:99:B1:3A:DB:44:F5:7F:E5:A8:9D:DB:32:
      D7:71:EA:76:9D:05:2E:B7:8F:FA:92:43:C0:A5:F9:89:
      D4:37:19:D7:B6:AA:F0:9C:86:A5:D8:25:AC:0E:79:28:
      3A:7E:E9:D1:67:D3:C6:FB:29:27:C7:D3:7B:23:94:E4:
      91:23:96:90:77:82:F9:A1:84:23:66:12:54:33:50:74:
      B1:28:26:BB:24:69:C2:C2:52:F2:14:67:8A:89:45:D4:
      2D:A1:A3:E9:88:2C:20:95:AE:1C:4A:87:08:DF:0C:F5:
      E2:4D:60:18:BE:AA:C4:B2:AE:70:31:66:33:71:3E:AC:
      70:A2:AB:CE:7F:E9:7C:CB:92:A1:E5:3B:31:1C:CF:EA:
      F2:0A:E4:57:BB:4A:B5:E9:74:E6:2B:FE:6C:CB:7E:74:
      39:36:0D:90:EF:E4:B5:4E:A4:A9:EA:6A:0A:AB:84:F3:
      AC:67:4E:B5:C4:F7:8C:D1:20:25:23:EB:08:64:3E:52:
      96:C1:F2:0F:12:F4:C5:8E:0F:C1:A2:E8:2C:51:F7:73:
      BC:BD:85:B1:62:83:73:41:82:07:E4:38:8B:6A:73:20:
      D0:0F:64:73:3C:9E:9F:A6:33:A9:FD:19:DF:25:93:D1: 0x010001
  - X509v3 extensions
    - basicConstraints
      - true
      - true: 0
    - keyUsage: true, 0x86
    - extendedKeyUsage: codeSigning
    - authorityInfoAccess
      - #0
        OCSP: http://ocsp.digicert.com
        caIssuers: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt
    - crlDistributionPoints
      - http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl
    - certificatePolicies
      - #0
        2.16.840.1.114412.0.2.4
        id-qt-cps: https://www.digicert.com/CPS
        2.16.840.1.114412.3
    - subjectKeyIdentifier:
```
5a c4 b9 7b 2a 0a a3 a5  ea 71 03 c0 60 f9 2d f6  |Z..{*....q..`.-.|
65 75 0e 58                                       |eu.X            |
```
    - authorityKeyIdentifier:
```
45 eb a2 af f4 92 cb 82  31 2d 51 8b a7 a7 21 9d  |E.......1-Q...!.|
f3 6d c8 0f                                       |.m..            |
```
- RSA-SHA256:
```
3e ec 0d 5a 24 b3 f3 22  d1 15 c8 2c 7c 25 29 76  |>..Z$.."...,|%)v|
a8 1d 5d 1c 2d 3a 1a c4  ef 30 61 d7 7e 0b 60 fd  |..].-:...0a.~.`.|
c3 3d 0f c4 af 8b fd ef  2a df 20 55 37 b0 e1 f6  |.=......*. U7...|
d1 92 75 0f 51 b4 6e a5  8e 5a e2 5e 24 81 4e 10  |..u.Q.n..Z.^$.N.|
a4 ee 3f 71 8e 63 0e 13  4b ad d7 5f 44 79 f3 36  |..?q.c..K.._Dy.6|
14 06 8a f7 9c 46 4e 5c  ff 90 b1 1b 07 0e 91 15  |.....FN\........|
fb ba af b5 51 c2 8d 24  ae 24 c6 c7 27 2a a1 29  |....Q..$.$..'*.)|
28 1a 3a 71 28 02 3c 2e  91 a3 c0 25 11 e2 9c 14  |(.:q(.<....%....|
47 a1 7a 68 68 af 9b a7  5c 20 5c d9 71 b1 0c 8f  |G.zhh...\ \.q...|
bb a8 f8 c5 12 68 9f cf  40 cb 40 44 a5 13 f0 e6  |.....h..@.@D....|
64 0c 25 08 42 32 b2 36  8a 24 02 fe 2f 72 7e 1c  |d.%.B2.6.$../r~.|
d7 49 45 96 e8 59 1d e9  fa 74 64 6b b2 eb 66 43  |.IE..Y...tdk..fC|
da b3 b0 8c d5 e9 0d dd  f6 01 20 ce 99 31 63 3d  |.......... ..1c=|
08 1a 18 b3 81 9b 4f c6  93 10 06 fc 07 81 fa 8b  |......O.........|
da f9 82 49 f7 62 6e a1  53 fa 12 94 18 85 2e 92  |...I.bn.S.......|
91 ea 68 6c 44 32 b2 66  a1 e7 18 a4 9a 64 51 ef  |..hlD2.f.....dQ.|
```

Certificate #1

04:1E:D4:57:92:3C:1C:53:28:5C:B4:59:61:ED:6F:8A
RSA-SHA256: nil
Issuer
- C: US
- O: DigiCert Inc
- OU: www.digicert.com
- CN: DigiCert SHA2 Assured ID Code Signing CA
2013-11-08 00:00:00 UTC: 2016-11-16 12:00:00 UTC
Subject
- C: CA
- ST: Ontario
- L: Toronto
- O: G4box.Inc
- CN: G4box.Inc
#5
- rsaEncryption: nil
- B9:B2:D1:2F:24:31:49:71:D7:54:21:A4:46:21:59:23:
  26:D5:3A:B9:D0:69:4F:BE:3F:4E:C0:31:68:01:3C:CB:
  E6:74:33:00:4F:02:3C:47:73:3E:B1:3D:41:C5:22:32:
  37:D9:A7:28:04:8D:D3:A0:AA:9F:E4:72:6B:C0:BD:7B:
  39:E1:C0:8B:5B:1F:D2:45:65:1F:6C:AA:C1:2F:CD:70:
  40:74:72:DF:4A:1A:3A:A9:97:B1:D4:CB:E7:3C:DA:08:
  A2:6F:AD:43:D2:A8:97:3B:78:11:21:59:3B:E0:B6:0C:
  FC:4D:36:2B:1D:45:40:C3:15:91:B1:E7:73:48:57:C4:
  AE:18:1B:B8:B1:3A:71:70:50:36:11:24:44:65:01:08:
  65:FC:E0:E9:CB:4B:A9:29:26:1D:65:6F:A5:0B:11:84:
  7A:AA:6A:0B:F7:17:D4:CD:03:D1:34:BA:73:05:93:B6:
  B5:D7:68:45:F5:FE:65:CE:72:B9:B5:AA:B4:7D:9E:F1:
  5C:88:A3:BC:F6:15:D0:02:FB:D4:32:B9:6A:A2:D5:6E:
  CC:AE:59:1F:D8:C5:43:AE:37:F9:CE:96:45:FD:C8:00:
  AF:9C:14:CD:10:69:02:B2:5B:28:70:67:02:52:CD:90:
  32:EC:20:91:F3:09:CF:5A:8B:6C:01:7E:77:26:41:13: 0x010001

authorityKeyIdentifier:

5a c4 b9 7b 2a 0a a3 a5  ea 71 03 c0 60 f9 2d f6  |Z..{*....q..`.-.|
65 75 0e 58                                       |eu.X            |

subjectKeyIdentifier:

3a 80 d7 4c 4a 05 97 83  6f b4 bd 70 9a cf 11 aa  |:..LJ...o..p....|
87 39 2c 4d                                       |.9,M            |

keyUsage: true, 0x80
extendedKeyUsage: codeSigning
crlDistributionPoints
- http://crl3.digicert.com/sha2-assured-cs-g1.crl: http://crl4.digicert.com/sha2-assured-cs-g1.crl

certificatePolicies

2.16.840.1.114412.3.1

id-qt-cps: http://www.digicert.com/ssl-cps-repository.htm

id-qt-unotice:

00 41 00 6e 00 79 00 20  00 75 00 73 00 65 00 20  |.A.n.y. .u.s.e. |
00 6f 00 66 00 20 00 74  00 68 00 69 00 73 00 20  |.o.f. .t.h.i.s. |
00 43 00 65 00 72 00 74  00 69 00 66 00 69 00 63  |.C.e.r.t.i.f.i.c|
00 61 00 74 00 65 00 20  00 63 00 6f 00 6e 00 73  |.a.t.e. .c.o.n.s|
00 74 00 69 00 74 00 75  00 74 00 65 00 73 00 20  |.t.i.t.u.t.e.s. |
00 61 00 63 00 63 00 65  00 70 00 74 00 61 00 6e  |.a.c.c.e.p.t.a.n|
00 63 00 65 00 20 00 6f  00 66 00 20 00 74 00 68  |.c.e. .o.f. .t.h|
00 65 00 20 00 44 00 69  00 67 00 69 00 43 00 65  |.e. .D.i.g.i.C.e|
00 72 00 74 00 20 00 43  00 50 00 2f 00 43 00 50  |.r.t. .C.P./.C.P|
00 53 00 20 00 61 00 6e  00 64 00 20 00 74 00 68  |.S. .a.n.d. .t.h|
00 65 00 20 00 52 00 65  00 6c 00 79 00 69 00 6e  |.e. .R.e.l.y.i.n|
00 67 00 20 00 50 00 61  00 72 00 74 00 79 00 20  |.g. .P.a.r.t.y. |
00 41 00 67 00 72 00 65  00 65 00 6d 00 65 00 6e  |.A.g.r.e.e.m.e.n|
00 74 00 20 00 77 00 68  00 69 00 63 00 68 00 20  |.t. .w.h.i.c.h. |
00 6c 00 69 00 6d 00 69  00 74 00 20 00 6c 00 69  |.l.i.m.i.t. .l.i|
00 61 00 62 00 69 00 6c  00 69 00 74 00 79 00 20  |.a.b.i.l.i.t.y. |
00 61 00 6e 00 64 00 20  00 61 00 72 00 65 00 20  |.a.n.d. .a.r.e. |
00 69 00 6e 00 63 00 6f  00 72 00 70 00 6f 00 72  |.i.n.c.o.r.p.o.r|
00 61 00 74 00 65 00 64  00 20 00 68 00 65 00 72  |.a.t.e.d. .h.e.r|
00 65 00 69 00 6e 00 20  00 62 00 79 00 20 00 72  |.e.i.n. .b.y. .r|
00 65 00 66 00 65 00 72  00 65 00 6e 00 63 00 65  |.e.f.e.r.e.n.c.e|
00 2e                                             |..              |

authorityInfoAccess
- #0
  - OCSP: http://ocsp.digicert.com
  - caIssuers: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt
basicConstraints
- true
- nil

RSA-SHA256:

53 4f 61 dc 14 07 33 ff  4f 1e 6a 7a 4a 94 13 26  |SOa...3.O.jzJ..&|
ae 73 5d 3f 33 1c 8a 5b  03 e9 74 8a b4 84 1c 68  |.s]?3..[..t....h|
98 1e 09 c7 db 7c e5 2c  94 f7 ac b2 32 55 f6 2f  |.....|.,....2U./|
c0 25 c8 e1 3a 47 d3 0b  c4 fb 67 5b 52 d0 4f 23  |.%..:G....g[R.O#|
23 0b 49 1c 72 c6 1d d4  12 7a 5b e0 16 5c 72 8a  |#.I.r....z[..\r.|
75 bd 09 18 a3 d1 3d f6  1b 51 84 23 a3 d5 a9 99  |u.....=..Q.#....|
6a 1d 60 5e 68 8d 7a 5d  cf 61 c0 72 ed ec a7 8b  |j.`^h.z].a.r....|
52 84 bf 89 d3 0c e1 3c  e2 fa 0e 6d 5a 55 83 f2  |R......<...mZU..|
9f b2 2e ca de 65 bb 8c  f7 66 96 29 18 ef 0e d2  |.....e...f.)....|
9c bd b5 d8 a4 19 32 6f  21 34 17 ae 1b fa 51 ec  |......2o!4....Q.|
55 d4 3d e0 07 1c 2f 09  f4 51 98 e2 a5 f7 9c 2c  |U.=.../..Q.....,|
a7 5c 24 02 22 05 90 54  46 be 6a 47 df ae 77 41  |.\$."..TF.jG..wA|
ca 2f 3e 55 26 a0 8a fd  e8 48 28 70 95 74 f5 07  |./>U&....H(p.t..|
49 80 ef 31 83 3b 51 64  61 a6 c7 ee 65 92 73 83  |I..1.;Qda...e.s.|
90 0a db e0 78 93 1f 28  5b 67 45 31 10 0f da 45  |....x..([gE1...E|
23 4c 9a 4b 50 d9 6d 61  be 36 2e f8 9c 38 7d a6  |#L.KP.ma.6...8}.|

Signer

1
unnamed
- #0
  - C: US
  - O: DigiCert Inc
  - OU: www.digicert.com
  - CN: DigiCert SHA2 Assured ID Code Signing CA
- 04:1E:D4:57:92:3C:1C:53:28:5C:B4:59:61:ED:6F:8A
SHA1: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

0f 23 43 c6 af 4e d7 26  b1 a5 0c 03 51 45 81 45  |.#C..N.&....QE.E|
6e 7c ee ce                                       |n|..            |

rsaEncryption:

b6 09 dd 91 d6 da 12 03  02 6b 3f 9a dd 16 01 a0  |.........k?.....|
b0 57 f2 be 05 25 b0 2d  a4 9a 7e cc 3f 4f 14 82  |.W...%.-..~.?O..|
02 ee 54 a8 9e e6 7d df  56 06 27 ff a0 40 33 4e  |..T...}.V.'..@3N|
3f c8 71 73 03 7c 09 91  14 77 6f bd e9 6d 71 fe  |?.qs.|...wo..mq.|
44 6b f1 21 5b 95 66 64  fd d5 d9 4c bc 03 ce b1  |Dk.![.fd...L....|
73 e6 ce 1b fd ee 05 e6  78 e4 4c 99 ef 02 f0 f5  |s.......x.L.....|
74 d8 a3 5d e3 0d f3 2a  c4 f3 79 7f 47 4f 38 c8  |t..]...*..y.GO8.|
87 73 3d 2d 84 dc a5 19  df e1 d3 3c d7 93 53 75  |.s=-.......<..Su|
5a 95 57 26 93 9c 2b ed  80 a9 e1 d2 f4 04 11 ce  |Z.W&..+.........|
77 27 a2 8c 27 35 03 8f  b7 51 1e 7d a3 cb c9 7b  |w'..'5...Q.}...{|
a2 d7 59 a9 3e 91 37 f0  2d 3b 71 51 23 7d 67 f3  |..Y.>.7.-;qQ#}g.|
a2 75 be 59 0d bf f4 a6  cb c0 97 49 1c 78 b8 aa  |.u.Y.......I.x..|
34 64 32 f6 cf 51 39 93  b4 a1 73 53 fb c6 48 ca  |4d2..Q9...sS..H.|
a5 9b 53 21 fc 71 11 db  76 78 00 9d 4a 63 dd 54  |..S!.q..vx..Jc.T|
80 a8 b6 89 8c 16 27 2d  b6 da cf c1 f1 27 2e 1f  |......'-.....'..|
5a fb c3 8e a0 5d 42 7a  1d 6f b9 ac 5d 2a 84 7c  |Z....]Bz.o..]*.||

show previews

offset	size	type	comment
0	1867776	EXE	12/11/2013 06:50:47	#
15c1	15	HTM		#
1c8000	3728	PKCS7	Authenticode Signature	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0x34429c

[?] can't find file_offset of VA 0x344c24

[?] can't find file_offset of VA 0x344d94

[?] can't find file_offset of VA 0x34528c

[?] can't find file_offset of VA 0x345710

[?] can't find file_offset of VA 0x345c40

[?] can't find file_offset of VA 0x345d88

[?] can't find file_offset of VA 0x345e5c

[?] can't find file_offset of VA 0x346d50

[?] can't find file_offset of VA 0x347850

[?] can't find file_offset of VA 0x347dd4

[?] can't find file_offset of VA 0x347ebc

[?] can't find file_offset of VA 0x347ef0

[?] can't find file_offset of VA 0x347f74

[?] can't find file_offset of VA 0x347fa0

[?] can't find file_offset of VA 0x348134

[?] can't find file_offset of VA 0x348618

[?] can't find file_offset of VA 0x348934

[?] can't find file_offset of VA 0x348c10

[?] can't find file_offset of VA 0x348c9c

[?] can't find file_offset of VA 0x348d48

[?] can't find file_offset of VA 0x348e28

[?] can't find file_offset of VA 0x3492ec

[?] can't find file_offset of VA 0x349550

[?] can't find file_offset of VA 0x34957c

[?] can't find file_offset of VA 0x3495c0

[?] can't find file_offset of VA 0x3495e4

[?] can't find file_offset of VA 0x3495f8

[?] can't find file_offset of VA 0x34960c

[?] can't find file_offset of VA 0x349620

[?] can't find file_offset of VA 0x349634

[?] can't find file_offset of VA 0x349648

[?] can't find file_offset of VA 0x34965c

[?] can't find file_offset of VA 0x349670

[?] can't find file_offset of VA 0x349684

[?] can't find file_offset of VA 0x349698

[?] can't find file_offset of VA 0x3496ac

[?] can't find file_offset of VA 0x3496c0

[?] can't find file_offset of VA 0x3496d4

[?] can't find file_offset of VA 0x3496e8

[?] invalid VS_VERSIONINFO child type "t\x00r\x00i\x00"