ssdlife.exe - SSDLife

info
MZ
PE
resources
strings
imports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	ssdlife.exe
size	4147464 (0x3f4908)
md5	e76465a76e7d26ef27d5b074ba389966

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	scan pending
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0xe3f6f
reserved6	0xfff1c090
lfanew	0x140

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|
00000040: b5 f0 31 7a f1 91 5f 29  f1 91 5f 29 f1 91 5f 29  |..1z.._).._).._)|
00000050: f8 e9 db 29 f3 91 5f 29  f8 e9 dc 29 e0 91 5f 29  |...).._)...).._)|
00000060: fc c3 be 29 b3 91 5f 29  fc c3 80 29 c3 91 5f 29  |...).._)...).._)|
00000070: fc c3 bf 29 20 91 5f 29  b7 c0 be 29 b9 90 5f 29  |...) ._)...).._)|
00000080: ea 0c f4 29 f4 91 5f 29  f8 e9 cc 29 d8 91 5f 29  |...).._)...).._)|
00000090: f1 91 5e 29 99 92 5f 29  9e e7 f5 29 e0 91 5f 29  |..^).._)...).._)|
000000a0: d4 e6 ba 29 dc 91 5f 29  fc c3 84 29 f0 91 5f 29  |...).._)...).._)|
000000b0: f1 91 c8 29 f0 91 5f 29  d4 e6 81 29 f0 91 5f 29  |...).._)...).._)|
000000c0: 52 69 63 68 f1 91 5f 29  00 00 00 00 00 00 00 00  |Rich.._)........|
000000d0: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
000000e0: 0a 04 78 44 00 7d dc df  7c 3a 1c 42 39 0f 30 6c  |..xD.}..|:.B9.0l|
000000f0: ff ae 11 3a d8 00 00 00  00 00 00 00 20 01 00 00  |...:........ ...|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	8
TimeDateStamp	0x54056397
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x103
Magic	0x10b
LinkerVersion	83.82
SizeOfCode	0xca000
SizeOfInitializedData	0x328000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x374000
BaseOfCode	0x2b4000
BaseOfData	0x384000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	5.1
ImageVersion	0.0
SubsystemVersion	5.1
Reserved1	0
SizeOfImage	0x6d8000
SizeOfHeaders	0x1000
CheckSum	0x3ff19c
Subsystem	2
DllCharacteristics	0x8000
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

Armadillo v4.x

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x22483d	0	R-X CODE
.rdata	0x226000	0x7ccf8	0	R-- IDATA
.data	0x2a3000	0x10c4c	0	RW- IDATA
.text1	0x2b4000	0xc0000	0xbd000	RWX CODE
.adata	0x374000	0x10000	0xd000	RWX CODE
.data1	0x384000	0x40000	0x21000	RW- IDATA
.pdata	0x3c4000	0x230000	0x223000	RW- IDATA
.rsrc	0x5f4000	0xe4000	0xe4000	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x3a34a8	0x78
RESOURCE	0x5f4000	0xe3f70
EXCEPTION	0	0
SECURITY	0x3f3000	0x1908
BASERELOC	0	0
DEBUG	0x226e90	0x38
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x384000	0x3b4
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
LANGAGENT	#160	45902
PNG	#130	6805
PNG	#131	5682
PNG	#132	7051
PNG	#133	6593
PNG	#136	7220
PNG	#137	7899
PNG	#138	5545
PNG	#139	4228
PNG	#150	10045
PNG	#151	8945
PNG	#153	10376
PNG	#154	8919
PNG	#155	9746
PNG	#156	10750
PNG	#157	4227
PNG	#158	4403
PNG	#159	9769
PNG	#161	2572
PNG	#162	7612
PNG	#163	9016
PNG	#164	7322
PNG	#165	5377
PNG	#166	9879
PNG	#167	4091
PNG	#168	10050
PNG	#169	8047
PNG	#170	2443
PNG	#171	1813
PNG	#172	2305
PNG	#173	2572
PNG	#174	1870
PNG	#175	2567
PNG	#176	2472
PNG	#177	1988
PNG	#178	2438
PNG	#179	1082
PNG	#180	1698
PNG	#181	2124
PNG	#182	2169
PNG	#183	2516
PNG	#185	3557
PNG	#186	8330
PNG	#187	2572
PNG	#188	10572
PNG	#189	8709
PNG	#190	7186
PNG	#191	9783
PNG	#192	5615
PNG	#193	9727
PNG	#194	8177
PNG	#195	9183
PNG	#200	10906
PNG	#201	5062
PNG	#202	6957
PNG	#203	7497
PNG	#204	9052
PNG	#205	8365
PNG	#206	17465
PNG	#209	3180
PNG	#210	3109
PNG	#211	4271
PNG	#212	2011
PNG	#213	5497
PNG	#214	5150
PNG	#215	6650
PNG	#216	12876
PNG	#217	6279
PNG	#218	8649
PNG	#219	8103
PNG	#220	10131
PNG	#221	9092
PNG	#222	8534
PNG	#223	8997
PNG	#224	9041
PNG	#225	8184
PNG	#226	10570
PNG	#227	4777
PNG	#228	10032
PNG	#229	8465
PNG	#230	10045
PNG	#231	11790
PNG	#233	5725
PNG	#234	10528
PNG	#235	5218
PNG	#236	8861
PNG	#237	29512
PNG	#238	9514
PNG	#239	12734
PNG	#240	12144
PNG	#241	5806
PNG	#242	6299
PNG	#243	10500
CURSOR	#32	308
CURSOR	#33	180
CURSOR	#34	308
CURSOR	#35	308
CURSOR	#36	308
CURSOR	#37	308
CURSOR	#38	308
CURSOR	#39	308
CURSOR	#40	308
CURSOR	#41	308
CURSOR	#42	308
CURSOR	#43	308
CURSOR	#44	308
CURSOR	#45	308
CURSOR	#46	308
CURSOR	#47	308
BITMAP	#134	4136
BITMAP	#135	2088
BITMAP	#160	85880
BITMAP	#30994	184
BITMAP	#30996	324
ICON	#1	296
ICON	#2	744
ICON	#3	1640
ICON	#4	1384
ICON	#5	2216
ICON	#6	3752
ICON	#7	1128
ICON	#8	4264
ICON	#9	9640
ICON	#10	25795
ICON	#11	1736
ICON	#12	2440
ICON	#13	1736
ICON	#14	2440
ICON	#15	1736
ICON	#16	2440
ICON	#17	1736
ICON	#18	2440
ICON	#19	1736
ICON	#20	2440
ICON	#21	1736
ICON	#22	2440
ICON	#23	1736
ICON	#24	2440
ICON	#25	1736
ICON	#26	2440
ICON	#27	488
ICON	#28	1736
ICON	#29	2440
ICON	#30	1736
ICON	#31	2440
DIALOG	#100	788
DIALOG	#102	492
DIALOG	#129	1518
DIALOG	#146	1596
DIALOG	#148	408
DIALOG	#170	308
DIALOG	#172	496
DIALOG	#198	1004
DIALOG	#1201	402
DIALOG	#1202	160
DIALOG	#1203	280
DIALOG	#1205	128
DIALOG	#1206	392
DIALOG	#1207	520
DIALOG	#1208	464
DIALOG	#1209	526
DIALOG	#1210	316
DIALOG	#1211	260
DIALOG	#30721	232
DIALOG	#30734	52
STRING	#7	66
STRING	#12	2634
STRING	#13	58
STRING	#3841	130
STRING	#3842	42
STRING	#3843	388
STRING	#3857	1254
STRING	#3858	612
STRING	#3859	730
STRING	#3860	138
STRING	#3865	172
STRING	#3866	222
STRING	#3867	1192
STRING	#3868	552
STRING	#3869	44
STRING	#3887	1340
GROUP_CURSOR	#30977	34
GROUP_CURSOR	#30998	20
GROUP_CURSOR	#30999	20
GROUP_CURSOR	#31000	20
GROUP_CURSOR	#31001	20
GROUP_CURSOR	#31002	20
GROUP_CURSOR	#31003	20
GROUP_CURSOR	#31004	20
GROUP_CURSOR	#31005	20
GROUP_CURSOR	#31006	20
GROUP_CURSOR	#31007	20
GROUP_CURSOR	#31008	20
GROUP_CURSOR	#31009	20
GROUP_CURSOR	#31010	20
GROUP_CURSOR	#31011	20
GROUP_ICON	#128	146
GROUP_ICON	#140	34
GROUP_ICON	#141	34
GROUP_ICON	#142	34
GROUP_ICON	#143	34
GROUP_ICON	#144	34
GROUP_ICON	#145	34
GROUP_ICON	#147	34
GROUP_ICON	#171	34
GROUP_ICON	#184	48
GROUP_ICON	#232	34
VERSION	#1	724
MANIFEST	#1	1639

id	lang	string
101	1033	&About SSDlife...
177	1033	Registration name error. Activation system can't find user (purchaser, order?) with registration name: #name#. Please, check does you enter name correctly? If error persists - report (call?) to support.
178	1033	Registration key error. Please, check does you enter it correctly?
179	1033	Hardware ID "#hid#" is incorrect. Please, restart computer, turn off antivirus and firewall and try to activate again.
180	1033	Error - Unknown software ID. Please, restart computer, turn off antivirus and firewall and try to activate again.
181	1033	User with registration name "#name#" are absent (don't exist?). Please, check does you enter name correctly? If error persists - report to support.
182	1033	Your order is not active. Please, report (call) to support to know details.
183	1033	Error with software license. Please, report (call) to support to know details.
184	1033	To many activation from this IP in half year
185	1033	To many activation from this IP in a month
186	1033	To many activation from this IP in a last week
187	1033	You're out of activation limit. Please, report (call) to support to know details.
188	1033	You're out of activation limit. Please, report (call) to support to know details.
189	1033	You're out of activation limit. Please, report (call) to support to know details.
190	1033	There is no order with this reg name and code
191	1033	There is a problem with key generation. Please, try again in next minutes after.
192	1033	Unknown error
61440	1033	Open
61441	1033	Save As
61442	1033	All Files (.)
61443	1033	Untitled
61446	1033	an unnamed file
61457	1033	&Hide
61472	1033	No error message is available.
61473	1033	Attempted an unsupported operation.
61474	1033	A required resource was unavailable.
61475	1033	Out of memory.
61476	1033	An unknown error has occurred.
61477	1033	Encountered an improper argument.
61696	1033	Incorrect filename.
61697	1033	Failed to open document.
61698	1033	Failed to save document.
61699	1033	Save changes to %1?
61700	1033	Failed to create empty document.
61701	1033	The file is too large to open.
61702	1033	Could not start print job.
61703	1033	Failed to launch help.
61704	1033	Internal application error.
61705	1033	Command failed.
61706	1033	Insufficient memory to perform operation.
61707	1033	System registry entries have been removed and the INI file (if any) was deleted.
61708	1033	Not all of the system registry entries (or INI file) were removed.
61709	1033	This program requires the file %s, which was not found on this system.
61710	1033	This program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
61712	1033	Enter an integer.
61713	1033	Enter a number.
61714	1033	Enter an integer between %1 and %2.
61715	1033	Enter a number between %1 and %2.
61716	1033	Enter no more than %1 characters.
61717	1033	Select a button.
61718	1033	Enter an integer between 0 and 255.
61719	1033	Enter a positive integer.
61720	1033	Enter a date and/or time.
61721	1033	Enter a currency.
61722	1033	Enter a GUID.
61723	1033	Enter a time.
61724	1033	Enter a date.
61728	1033	Unexpected file format.
61729	1033	%1 Cannot find this file. Verify that the correct path and file name are given.
61730	1033	Destination disk drive is full.
61731	1033	Unable to read from %1, it is opened by someone else.
61732	1033	Unable to write to %1, it is read-only or opened by someone else.
61733	1033	Encountered an unexpected error while reading %1.
61734	1033	Encountered an unexpected error while writing %1.
61744	1033	%1: %2 Continue running script?
61745	1033	Dispatch exception: %1
61836	1033	Unable to read write-only property.
61837	1033	Unable to write read-only property.
61840	1033	Unable to load mail system support.
61841	1033	Mail system DLL is invalid.
61842	1033	Send Mail failed to send message.
61856	1033	No error occurred.
61857	1033	An unknown error occurred while accessing %1.
61858	1033	%1 was not found.
61859	1033	%1 contains an incorrect path.
61860	1033	Could not open %1 because there are too many open files.
61861	1033	Access to %1 was denied.
61862	1033	An incorrect file handle was associated with %1.
61863	1033	Could not remove %1 because it is the current directory.
61864	1033	Could not create %1 because the directory is full.
61865	1033	Seek failed on %1
61866	1033	Encountered a hardware I/O error while accessing %1.
61867	1033	Encountered a sharing violation while accessing %1.
61868	1033	Encountered a locking violation while accessing %1.
61869	1033	Disk full while accessing %1.
61870	1033	Attempted to access %1 past its end.
61872	1033	No error occurred.
61873	1033	An unknown error occurred while accessing %1.
61874	1033	Attempted to write to the reading %1.
61875	1033	Attempted to access %1 past its end.
61876	1033	Attempted to read from the writing %1.
61877	1033	%1 has a bad format.
61878	1033	%1 contained an unexpected object.
61879	1033	%1 contains an incorrect schema.
61888	1033	pixels
62177	1033	Uncheck
62178	1033	Check
62179	1033	Mixed
62180	1033	One or more auto-saved documents were found.
62181	1033	These are more recently saved than the currently open documents and contain changes that were made before the application closed.
62182	1033	Do you want to recover these auto-saved documents?
62183	1033	Note that if you choose to recover the auto-saved documents, you must explicitly save them to overwrite the original documents. If you choose to not recover the auto-saved versions, they will be deleted.
62184	1033	Recover the auto-saved documents Open the auto-saved versions instead of the explicitly saved versions
62185	1033	Don't recover the auto-saved documents Use the last explicitly saved versions of the documents
62186	1033	%s [Recovered]

module_name	hint	function_name
KERNEL32.dll	1264	VirtualProtectEx
KERNEL32.dll	514	GetLastError
KERNEL32.dll	155	CreateMutexA
KERNEL32.dll	103	ContinueDebugEvent
KERNEL32.dll	1043	ResumeThread
KERNEL32.dll	905	OutputDebugStringA
KERNEL32.dll	906	OutputDebugStringW
KERNEL32.dll	1169	SetThreadContext
KERNEL32.dll	646	GetThreadContext
KERNEL32.dll	1270	WaitForDebugEvent
KERNEL32.dll	1326	WriteProcessMemory
KERNEL32.dll	1238	UnmapViewOfFile
KERNEL32.dll	738	InitializeCriticalSection
KERNEL32.dll	351	FreeConsole
KERNEL32.dll	181	CreateThread
KERNEL32.dll	1210	SuspendThread
KERNEL32.dll	197	DebugActiveProcess
KERNEL32.dll	1110	SetEnvironmentVariableA
KERNEL32.dll	449	GetCurrentProcessId
KERNEL32.dll	855	MapViewOfFile
KERNEL32.dll	232	DuplicateHandle
KERNEL32.dll	448	GetCurrentProcess
KERNEL32.dll	137	CreateFileMappingA
KERNEL32.dll	675	GetVersionExA
KERNEL32.dll	581	GetProcAddress
KERNEL32.dll	828	LoadLibraryA
KERNEL32.dll	475	GetEnvironmentVariableA
KERNEL32.dll	1263	VirtualProtect
KERNEL32.dll	1257	VirtualAlloc
KERNEL32.dll	1139	SetLastError
KERNEL32.dll	1018	ReleaseMutex
KERNEL32.dll	1273	WaitForSingleObject
KERNEL32.dll	892	OpenMutexA
KERNEL32.dll	1112	SetErrorMode
KERNEL32.dll	608	GetShortPathNameA
KERNEL32.dll	531	GetModuleFileNameA
KERNEL32.dll	609	GetShortPathNameW
KERNEL32.dll	532	GetModuleFileNameW
KERNEL32.dll	709	GlobalUnlock
KERNEL32.dll	702	GlobalLock
KERNEL32.dll	691	GlobalAlloc
KERNEL32.dll	1297	WideCharToMultiByte
KERNEL32.dll	759	IsBadReadPtr
KERNEL32.dll	689	GlobalAddAtomA
KERNEL32.dll	690	GlobalAddAtomW
KERNEL32.dll	698	GlobalFree
KERNEL32.dll	699	GlobalGetAtomNameA
KERNEL32.dll	693	GlobalDeleteAtom
KERNEL32.dll	700	GlobalGetAtomNameW
KERNEL32.dll	1126	SetFilePointer
KERNEL32.dll	136	CreateFileA
KERNEL32.dll	281	ExitProcess
KERNEL32.dll	515	GetLocalTime
KERNEL32.dll	871	MultiByteToWideChar
KERNEL32.dll	1052	SearchPathA
KERNEL32.dll	644	GetTempPathA
KERNEL32.dll	645	GetTempPathW
KERNEL32.dll	642	GetTempFileNameA
KERNEL32.dll	643	GetTempFileNameW
KERNEL32.dll	686	GetWindowsDirectoryA
KERNEL32.dll	577	GetPrivateProfileStringA
KERNEL32.dll	238	EnterCriticalSection
KERNEL32.dll	211	DeleteFileA
KERNEL32.dll	862	MoveFileA
KERNEL32.dll	164	CreateProcessA
KERNEL32.dll	610	GetStartupInfoA
KERNEL32.dll	390	GetCommandLineA
KERNEL32.dll	453	GetCurrentThreadId
KERNEL32.dll	960	ReadFile
KERNEL32.dll	496	GetFileSize
KERNEL32.dll	586	GetProcessHeap
KERNEL32.dll	343	FlushFileBuffers
KERNEL32.dll	1316	WriteConsoleW
KERNEL32.dll	1159	SetStdHandle
KERNEL32.dll	428	GetConsoleMode
KERNEL32.dll	410	GetConsoleCP
KERNEL32.dll	722	HeapReAlloc
KERNEL32.dll	617	GetStringTypeW
KERNEL32.dll	780	IsValidLocale
KERNEL32.dll	269	EnumSystemLocalesA
KERNEL32.dll	516	GetLocaleInfoA
KERNEL32.dll	667	GetUserDefaultLCID
KERNEL32.dll	664	GetTimeZoneInformation
KERNEL32.dll	831	LoadLibraryW
KERNEL32.dll	354	FreeLibrary
KERNEL32.dll	1069	SetConsoleCtrlHandler
KERNEL32.dll	288	FatalAppExitA
KERNEL32.dll	778	IsValidCodePage
KERNEL32.dll	567	GetOEMCP
KERNEL32.dll	360	GetACP
KERNEL32.dll	935	QueryPerformanceCounter
KERNEL32.dll	718	HeapDestroy
KERNEL32.dll	717	HeapCreate
KERNEL32.dll	499	GetFileType
KERNEL32.dll	739	InitializeCriticalSectionAndSpinCount
KERNEL32.dll	1135	SetHandleCount
KERNEL32.dll	474	GetEnvironmentStringsW
KERNEL32.dll	353	FreeEnvironmentStringsW
KERNEL32.dll	724	HeapSize
KERNEL32.dll	518	GetLocaleInfoW
KERNEL32.dll	612	GetStdHandle
KERNEL32.dll	1317	WriteFile
KERNEL32.dll	772	IsProcessorFeaturePresent
KERNEL32.dll	100	CompareStringW
KERNEL32.dll	768	IsDebuggerPresent
KERNEL32.dll	1189	SetUnhandledExceptionFilter
KERNEL32.dll	1235	UnhandledExceptionFilter
KERNEL32.dll	1216	TerminateProcess
KERNEL32.dll	1222	TlsFree
KERNEL32.dll	1224	TlsSetValue
KERNEL32.dll	1223	TlsGetValue
KERNEL32.dll	1221	TlsAlloc
KERNEL32.dll	370	GetCPInfo
KERNEL32.dll	813	LCMapStringW
KERNEL32.dll	715	HeapAlloc
KERNEL32.dll	454	GetDateFormatA
KERNEL32.dll	661	GetTimeFormatA
KERNEL32.dll	536	GetModuleHandleW
KERNEL32.dll	719	HeapFree
KERNEL32.dll	633	GetSystemTimeAsFileTime
KERNEL32.dll	611	GetStartupInfoW
KERNEL32.dll	945	RaiseException
KERNEL32.dll	1048	RtlUnwind
KERNEL32.dll	963	ReadProcessMemory
KERNEL32.dll	825	LeaveCriticalSection
KERNEL32.dll	479	GetExitCodeProcess
KERNEL32.dll	452	GetCurrentThread
KERNEL32.dll	1177	SetThreadPriority
KERNEL32.dll	1202	Sleep
KERNEL32.dll	659	GetTickCount
KERNEL32.dll	1266	VirtualQueryEx
KERNEL32.dll	130	CreateEventA
KERNEL32.dll	1113	SetEvent
KERNEL32.dll	82	CloseHandle
KERNEL32.dll	533	GetModuleHandleA
KERNEL32.dll	1322	WritePrivateProfileStringA
KERNEL32.dll	391	GetCommandLineW
KERNEL32.dll	349	FormatMessageA
KERNEL32.dll	840	LocalFree
KERNEL32.dll	751	InterlockedIncrement
KERNEL32.dll	747	InterlockedDecrement
KERNEL32.dll	745	InterlockedCompareExchange
KERNEL32.dll	748	InterlockedExchange
KERNEL32.dll	209	DeleteCriticalSection
KERNEL32.dll	1107	SetEndOfFile
KERNEL32.dll	1127	SetFilePointerEx
KERNEL32.dll	143	CreateFileW
KERNEL32.dll	302	FindClose
KERNEL32.dll	1027	RemoveDirectoryW
KERNEL32.dll	214	DeleteFileW
KERNEL32.dll	221	DeviceIoControl
KERNEL32.dll	507	GetFullPathNameW
KERNEL32.dll	313	FindFirstFileW
KERNEL32.dll	325	FindNextFileW
KERNEL32.dll	490	GetFileAttributesW
KERNEL32.dll	126	CreateDirectoryExW
KERNEL32.dll	117	CopyFileW
KERNEL32.dll	447	GetCurrentDirectoryW
KERNEL32.dll	1101	SetCurrentDirectoryW
KERNEL32.dll	492	GetFileInformationByHandle
KERNEL32.dll	487	GetFileAttributesExW
KERNEL32.dll	498	GetFileTime
KERNEL32.dll	1130	SetFileTime
KERNEL32.dll	864	MoveFileExW
KERNEL32.dll	462	GetDiskFreeSpaceExW
KERNEL32.dll	129	CreateDirectoryW
KERNEL32.dll	21	AreFileApisANSI
USER32.dll	14	BeginPaint
USER32.dll	220	EndPaint
USER32.dll	483	KillTimer
USER32.dll	263	GetAsyncKeyState
USER32.dll	148	DefDlgProcA
USER32.dll	205	DrawTextA
USER32.dll	98	CreateDialogParamA
USER32.dll	588	RegisterClassExA
USER32.dll	171	DialogBoxParamA
USER32.dll	417	GetWindowTextLengthA
USER32.dll	416	GetWindowTextA
USER32.dll	714	SetWindowTextA
USER32.dll	295	GetDlgItem
USER32.dll	95	CreateDialogIndirectParamA
USER32.dll	735	ShowWindow
USER32.dll	785	UpdateWindow
USER32.dll	435	InSendMessage
USER32.dll	772	UnpackDDElParam
USER32.dll	156	DefWindowProcW
USER32.dll	155	DefWindowProcA
USER32.dll	488	LoadCursorA
USER32.dll	590	RegisterClassW
USER32.dll	110	CreateWindowExW
USER32.dll	587	RegisterClassA
USER32.dll	109	CreateWindowExA
USER32.dll	420	GetWindowThreadProcessId
USER32.dll	636	SendMessageW
USER32.dll	562	PeekMessageA
USER32.dll	242	EnumWindows
USER32.dll	479	IsWindowUnicode
USER32.dll	558	PackDDElParam
USER32.dll	566	PostMessageW
USER32.dll	565	PostMessageA
USER32.dll	475	IsWindow
USER32.dll	505	LoadStringA
USER32.dll	506	LoadStringW
USER32.dll	247	FindWindowA
USER32.dll	166	DestroyWindow
USER32.dll	291	GetDesktopWindow
USER32.dll	382	GetSystemMetrics
USER32.dll	539	MoveWindow
USER32.dll	631	SendMessageA
USER32.dll	684	SetPropA
USER32.dll	239	EnumThreadWindows
USER32.dll	362	GetPropA
USER32.dll	806	WaitForInputIdle
USER32.dll	699	SetTimer
USER32.dll	345	GetMessageA
USER32.dll	764	TranslateMessage
USER32.dll	174	DispatchMessageA
USER32.dll	526	MessageBoxA
USER32.dll	254	FreeDDElParam
GDI32.dll	631	SelectObject
GDI32.dll	19	BitBlt
GDI32.dll	230	DeleteObject
GDI32.dll	73	CreatePalette
GDI32.dll	49	CreateDCA
GDI32.dll	632	SelectPalette
GDI32.dll	604	RealizePalette
GDI32.dll	54	CreateDIBitmap
GDI32.dll	227	DeleteDC
GDI32.dll	48	CreateCompatibleDC
COMDLG32.dll	11	GetOpenFileNameA
COMDLG32.dll	13	GetSaveFileNameA
SHELL32.dll	224	SHGetSpecialFolderPathA

StringTable 040904b0

CompanyName	Binarysense
FileDescription	SSDLife
FileVersion	2.5.0.82
InternalName	SSDlife.exe
LegalCopyright	(c) Binarysense. All rights reserved.
OriginalFilename	SSDlife.exe
ProductName	SSDLife
ProductVersion	2.5.0.82

VS_FIXEDFILEINFO

FileVersion	2.5.0.82
ProductVersion	2.5.0.82
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Code Signing 2010 CA

serial: 41AA37FEEE331D909FC53AD09F2CE320

Certificates (4)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
         03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
         4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
         6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
         11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
         d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
         40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
         3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
         7e:b6

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl

            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                keyid:5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD

    Signature Algorithm: sha1WithRSAEncryption
         78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
         18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
         dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
         33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
         c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
         bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
         29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
         0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
         69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
         13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
         15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
         88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
         eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
         3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
         1c:d8:04:75

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:aa:37:fe:ee:33:1d:90:9f:c5:3a:d0:9f:2c:e3:20
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Validity
            Not Before: May  7 00:00:00 2014 GMT
            Not After : Apr 15 23:59:59 2017 GMT
        Subject: C=US, ST=Virginia, L=Alexandria, O=BinarySense Inc, OU=Digital ID Class 3 - Microsoft Software Validation v2, CN=BinarySense Inc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d2:84:4c:3e:91:85:91:e3:91:b6:0a:59:a9:
                    08:0d:18:b6:19:9e:6a:97:23:41:c9:d9:0f:16:c3:
                    db:a3:a5:80:41:a0:9d:76:8a:07:25:bb:0b:5d:c4:
                    09:48:d7:f5:47:d9:7e:b7:98:4f:87:e5:e3:7a:65:
                    1e:db:2d:d1:33:bd:aa:63:38:bc:4c:4f:0a:d4:7d:
                    cd:d9:74:51:17:3d:13:93:ff:6d:fd:1f:37:d0:c1:
                    bf:2d:d8:8d:a0:91:35:86:be:29:d0:51:56:7f:b2:
                    cb:52:9f:31:e6:af:82:48:f7:36:f0:e1:ef:ee:c5:
                    8f:f2:c8:d0:87:4d:08:de:bf:c4:7c:e1:5d:3f:5c:
                    5f:d9:8c:75:2c:50:ed:b7:2a:91:f3:a5:da:86:c4:
                    53:a6:a1:3d:05:f4:ab:72:a4:3f:e6:eb:53:13:91:
                    3a:4b:89:54:62:28:ed:07:61:3b:4f:31:34:9c:d9:
                    a3:c3:90:91:c0:db:e3:d0:78:12:dd:5e:f7:3e:0b:
                    cf:0d:e1:ec:65:ef:cb:f4:c8:27:43:0e:32:00:8a:
                    df:6e:e3:2e:2a:7b:73:24:8d:50:31:f4:41:80:79:
                    51:d4:59:26:bc:a8:96:0e:bc:11:a7:5c:98:86:aa:
                    f9:c7:9c:eb:73:c5:1f:8b:e4:60:92:c0:09:35:4a:
                    59:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://csc3-2010-crl.verisign.com/CSC3-2010.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/rpa

            X509v3 Extended Key Usage: 
                Code Signing
            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com
                CA Issuers - URI:http://csc3-2010-aia.verisign.com/CSC3-2010.cer

            X509v3 Authority Key Identifier: 
                keyid:CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D

            Netscape Cert Type: 
                Object Signing
            1.3.6.1.4.1.311.2.1.27: 
                0.......
    Signature Algorithm: sha1WithRSAEncryption
         12:e2:df:77:b7:06:02:8e:60:24:85:d7:3c:a7:b7:50:0f:92:
         d1:53:63:25:07:d4:85:23:ec:86:3b:e1:23:3b:bb:87:59:2f:
         10:e8:73:ac:27:96:26:50:be:89:2e:96:cd:0b:a8:9c:7f:bb:
         9c:a9:54:fa:fa:1d:74:ce:13:74:5d:11:5d:5b:1c:ba:71:b3:
         c2:1a:74:c0:b3:fa:aa:1b:40:d8:76:23:e5:41:5d:bd:b4:dd:
         39:a3:0b:f0:05:2f:bc:3c:88:9d:42:8f:4f:1f:32:f1:98:a8:
         db:64:65:ad:9f:e2:e2:cd:48:42:50:8a:2a:a8:98:5d:27:47:
         69:29:8d:10:d3:1f:99:b9:e7:ce:3e:22:8e:73:d3:92:df:3c:
         16:6b:a0:e0:0f:7c:6b:d8:09:5e:c4:36:e4:4b:47:6a:0c:cd:
         1e:79:e3:1c:1f:db:b8:92:89:b8:5f:34:bb:65:be:3c:bf:7c:
         0b:d0:db:c8:8b:b4:ea:87:93:3a:2f:01:f2:7e:59:c5:00:4d:
         8b:47:a7:db:d7:3f:53:ec:71:d7:88:f6:25:c0:99:6c:85:52:
         d1:a9:1b:2b:cc:30:fb:d8:29:51:26:85:50:61:bd:d9:2a:95:
         ec:32:8f:64:11:7e:31:75:6a:21:1a:d7:73:4f:0b:71:2c:9f:
         8e:d6:af:76

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
        Validity
            Not Before: Feb  8 00:00:00 2010 GMT
            Not After : Feb  7 23:59:59 2020 GMT
        Subject: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Code Signing 2010 CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:23:4b:5e:a5:d7:8a:bb:32:e9:d4:57:f7:ef:
                    e4:c7:26:7e:ad:19:98:fe:a8:9d:7d:94:f6:36:6b:
                    10:d7:75:81:30:7f:04:68:7f:cb:2b:75:1e:cd:1d:
                    08:8c:df:69:94:a7:37:a3:9c:7b:80:e0:99:e1:ee:
                    37:4d:5f:ce:3b:14:ee:86:d4:d0:f5:27:35:bc:25:
                    0b:38:a7:8c:63:9d:17:a3:08:a5:ab:b0:fb:cd:6a:
                    62:82:4c:d5:21:da:1b:d9:f1:e3:84:3b:8a:2a:4f:
                    85:5b:90:01:4f:c9:a7:76:10:7f:27:03:7c:be:ae:
                    7e:7d:c1:dd:f9:05:bc:1b:48:9c:69:e7:c0:a4:3c:
                    3c:41:00:3e:df:96:e5:c5:e4:94:71:d6:55:01:c7:
                    00:26:4a:40:3c:b5:a1:26:a9:0c:a7:6d:80:8e:90:
                    25:7b:cf:bf:3f:1c:eb:2f:96:fa:e5:87:77:c6:b5:
                    56:b2:7a:3b:54:30:53:1b:df:62:34:ff:1e:d1:f4:
                    5a:93:28:85:e5:4c:17:4e:7e:5b:fd:a4:93:99:7f:
                    df:cd:ef:a4:75:ef:ef:15:f6:47:e7:f8:19:72:d8:
                    2e:34:1a:a6:b4:a7:4c:7e:bd:bb:4f:0c:3d:57:f1:
                    30:d6:a6:36:8e:d6:80:76:d7:19:2e:a5:cd:7e:34:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.113733.1.7.23.3
                  CPS: https://www.verisign.com/cps
                  User Notice:
                    Explicit Text: https://www.verisign.com/rpa

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            1.3.6.1.5.5.7.1.12: 
                0_.].[0Y0W0U..image/gif0!0.0...+..............k...j.H.,{..0%.#http://logo.verisign.com/vslogo.gif
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.verisign.com/pca3-g5.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.verisign.com

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Subject Alternative Name: 
                DirName:/CN=VeriSignMPKI-2-8
            X509v3 Subject Key Identifier: 
                CF:99:A9:EA:7B:26:F4:4B:C9:8E:8F:D7:F0:05:26:EF:E3:D2:A7:9D
            X509v3 Authority Key Identifier: 
                keyid:7F:D3:65:A7:C2:DD:EC:BB:F0:30:09:F3:43:39:FA:02:AF:33:31:33

    Signature Algorithm: sha1WithRSAEncryption
         56:22:e6:34:a4:c4:61:cb:48:b9:01:ad:56:a8:64:0f:d9:8c:
         91:c4:bb:cc:0c:e5:ad:7a:a0:22:7f:df:47:38:4a:2d:6c:d1:
         7f:71:1a:7c:ec:70:a9:b1:f0:4f:e4:0f:0c:53:fa:15:5e:fe:
         74:98:49:24:85:81:26:1c:91:14:47:b0:4c:63:8c:bb:a1:34:
         d4:c6:45:e8:0d:85:26:73:03:d0:a9:8c:64:6d:dc:71:92:e6:
         45:05:60:15:59:51:39:fc:58:14:6b:fe:d4:a4:ed:79:6b:08:
         0c:41:72:e7:37:22:06:09:be:23:e9:3f:44:9a:1e:e9:61:9d:
         cc:b1:90:5c:fc:3d:d2:8d:ac:42:3d:65:36:d4:b4:3d:40:28:
         8f:9b:10:cf:23:26:cc:4b:20:cb:90:1f:5d:8c:4c:34:ca:3c:
         d8:e5:37:d6:6f:a5:20:bd:34:eb:26:d9:ae:0d:e7:c5:9a:f7:
         a1:b4:21:91:33:6f:86:e8:58:bb:25:7c:74:0e:58:fe:75:1b:
         63:3f:ce:31:7c:9b:8f:1b:96:9e:c5:53:76:84:5b:9c:ad:91:
         fa:ac:ed:93:ba:5d:c8:21:53:c2:82:53:63:af:12:0d:50:87:
         11:1b:3d:54:52:96:8a:2c:9c:3d:92:1a:08:9a:05:2e:c7:93:
         a5:48:91:d3

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15
- :

SHA1

a1 d3 78 cc 5c 26 a7 10 d1 b6 da e8 13 02 0d 38 |..x.\&.........8| 3d 0b b9 c7 |=... |

Certificates
- Certificate #0
  - 2
    - 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
    - RSA-SHA1: nil
    - Issuer
      - C: ZA
      - ST: Western Cape
      - L: Durbanville
      - O: Thawte
      - OU: Thawte Certification
      - CN: Thawte Timestamping CA
    - 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services CA - G2
    - #5
      - rsaEncryption: nil
      - B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
        2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
        C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
        74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
        6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
        2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
        61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
        99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
        79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
        9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
        DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
        27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
        27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
        E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
        48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
        64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71: 0x010001
    - #6
      - subjectKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
      - authorityInfoAccess
        OCSP: http://ocsp.thawte.com
      - basicConstraints
        true
        true: 0
      - crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
      - extendedKeyUsage: timeStamping
      - keyUsage: true, 6
      - subjectAltName
        CN: TimeStamp-2048-1
  - RSA-SHA1:
```
03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
```
- Certificate #1
  - 2
    - 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services CA - G2
    - 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services Signer - G4
    - #5
      - rsaEncryption: nil
      - A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
        61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
        53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
        0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
        C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
        64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
        CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
        28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
        92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
        CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
        D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
        2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
        74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
        3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
        8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
        83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        nil
      - extendedKeyUsage: true, timeStamping
      - keyUsage: true, 0x80
      - authorityInfoAccess
        #0
        OCSP: http://ts-ocsp.ws.symantec.com
        caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
      - crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
      - subjectAltName
        CN: TimeStamp-2048-2
      - subjectKeyIdentifier:
        46 c6 69 a3 0e 4a 14 1e d5 4c da 52 63 17 3f 5e |F.i..J...L.Rc.?^| 36 bc 0d e6 |6... |
      - authorityKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
  - RSA-SHA1:
```
78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
```
- Certificate #2
  - 2
    - 41:AA:37:FE:EE:33:1D:90:9F:C5:3A:D0:9F:2C:E3:20
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)10
      - CN: VeriSign Class 3 Code Signing 2010 CA
    - 2014-05-07 00:00:00 UTC: 2017-04-15 23:59:59 UTC
    - Subject
      - C: US
      - ST: Virginia
      - L: Alexandria
      - O: BinarySense Inc
      - OU: Digital ID Class 3 - Microsoft Software Validation v2
      - CN: BinarySense Inc
    - #5
      - rsaEncryption: nil
      - 92:D2:84:4C:3E:91:85:91:E3:91:B6:0A:59:A9:08:0D:
        18:B6:19:9E:6A:97:23:41:C9:D9:0F:16:C3:DB:A3:A5:
        80:41:A0:9D:76:8A:07:25:BB:0B:5D:C4:09:48:D7:F5:
        47:D9:7E:B7:98:4F:87:E5:E3:7A:65:1E:DB:2D:D1:33:
        BD:AA:63:38:BC:4C:4F:0A:D4:7D:CD:D9:74:51:17:3D:
        13:93:FF:6D:FD:1F:37:D0:C1:BF:2D:D8:8D:A0:91:35:
        86:BE:29:D0:51:56:7F:B2:CB:52:9F:31:E6:AF:82:48:
        F7:36:F0:E1:EF:EE:C5:8F:F2:C8:D0:87:4D:08:DE:BF:
        C4:7C:E1:5D:3F:5C:5F:D9:8C:75:2C:50:ED:B7:2A:91:
        F3:A5:DA:86:C4:53:A6:A1:3D:05:F4:AB:72:A4:3F:E6:
        EB:53:13:91:3A:4B:89:54:62:28:ED:07:61:3B:4F:31:
        34:9C:D9:A3:C3:90:91:C0:DB:E3:D0:78:12:DD:5E:F7:
        3E:0B:CF:0D:E1:EC:65:EF:CB:F4:C8:27:43:0E:32:00:
        8A:DF:6E:E3:2E:2A:7B:73:24:8D:50:31:F4:41:80:79:
        51:D4:59:26:BC:A8:96:0E:BC:11:A7:5C:98:86:AA:F9:
        C7:9C:EB:73:C5:1F:8B:E4:60:92:C0:09:35:4A:59:0F: 0x010001
    - X509v3 extensions
      - basicConstraints
        nil
      - keyUsage: true, 0x80
      - crlDistributionPoints: http://csc3-2010-crl.verisign.com/CSC3-2010.crl
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        id-qt-cps: https://www.verisign.com/rpa
      - extendedKeyUsage: codeSigning
      - authorityInfoAccess
        #0
        OCSP: http://ocsp.verisign.com
        caIssuers: http://csc3-2010-aia.verisign.com/CSC3-2010.cer
      - authorityKeyIdentifier:
        cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... |
      - nsCertType: 0x10
      - 1.3.6.1.4.1.311.2.1.27
        false: true
  - RSA-SHA1:
```
12 e2 df 77 b7 06 02 8e  60 24 85 d7 3c a7 b7 50  |...w....`$..<..P|
0f 92 d1 53 63 25 07 d4  85 23 ec 86 3b e1 23 3b  |...Sc%...#..;.#;|
bb 87 59 2f 10 e8 73 ac  27 96 26 50 be 89 2e 96  |..Y/..s.'.&P....|
cd 0b a8 9c 7f bb 9c a9  54 fa fa 1d 74 ce 13 74  |........T...t..t|
5d 11 5d 5b 1c ba 71 b3  c2 1a 74 c0 b3 fa aa 1b  |].][..q...t.....|
40 d8 76 23 e5 41 5d bd  b4 dd 39 a3 0b f0 05 2f  |@.v#.A]...9..../|
bc 3c 88 9d 42 8f 4f 1f  32 f1 98 a8 db 64 65 ad  |.<..B.O.2....de.|
9f e2 e2 cd 48 42 50 8a  2a a8 98 5d 27 47 69 29  |....HBP.*..]'Gi)|
8d 10 d3 1f 99 b9 e7 ce  3e 22 8e 73 d3 92 df 3c  |........>".s...<|
16 6b a0 e0 0f 7c 6b d8  09 5e c4 36 e4 4b 47 6a  |.k...|k..^.6.KGj|
0c cd 1e 79 e3 1c 1f db  b8 92 89 b8 5f 34 bb 65  |...y........_4.e|
be 3c bf 7c 0b d0 db c8  8b b4 ea 87 93 3a 2f 01  |.<.|.........:/.|
f2 7e 59 c5 00 4d 8b 47  a7 db d7 3f 53 ec 71 d7  |.~Y..M.G...?S.q.|
88 f6 25 c0 99 6c 85 52  d1 a9 1b 2b cc 30 fb d8  |..%..l.R...+.0..|
29 51 26 85 50 61 bd d9  2a 95 ec 32 8f 64 11 7e  |)Q&.Pa..*..2.d.~|
31 75 6a 21 1a d7 73 4f  0b 71 2c 9f 8e d6 af 76  |1uj!..sO.q,....v|
```
- Certificate #3
  - 2
    - 52:00:E5:AA:25:56:FC:1A:86:ED:96:C9:D4:4B:33:C7
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: (c) 2006 VeriSign, Inc. - For authorized use only
      - CN: VeriSign Class 3 Public Primary Certification Authority - G5
    - 2010-02-08 00:00:00 UTC: 2020-02-07 23:59:59 UTC
    - Subject
      - C: US
      - O: VeriSign, Inc.
      - OU: VeriSign Trust Network
      - OU: Terms of use at https://www.verisign.com/rpa (c)10
      - CN: VeriSign Class 3 Code Signing 2010 CA
    - #5
      - rsaEncryption: nil
      - F5:23:4B:5E:A5:D7:8A:BB:32:E9:D4:57:F7:EF:E4:C7:
        26:7E:AD:19:98:FE:A8:9D:7D:94:F6:36:6B:10:D7:75:
        81:30:7F:04:68:7F:CB:2B:75:1E:CD:1D:08:8C:DF:69:
        94:A7:37:A3:9C:7B:80:E0:99:E1:EE:37:4D:5F:CE:3B:
        14:EE:86:D4:D0:F5:27:35:BC:25:0B:38:A7:8C:63:9D:
        17:A3:08:A5:AB:B0:FB:CD:6A:62:82:4C:D5:21:DA:1B:
        D9:F1:E3:84:3B:8A:2A:4F:85:5B:90:01:4F:C9:A7:76:
        10:7F:27:03:7C:BE:AE:7E:7D:C1:DD:F9:05:BC:1B:48:
        9C:69:E7:C0:A4:3C:3C:41:00:3E:DF:96:E5:C5:E4:94:
        71:D6:55:01:C7:00:26:4A:40:3C:B5:A1:26:A9:0C:A7:
        6D:80:8E:90:25:7B:CF:BF:3F:1C:EB:2F:96:FA:E5:87:
        77:C6:B5:56:B2:7A:3B:54:30:53:1B:DF:62:34:FF:1E:
        D1:F4:5A:93:28:85:E5:4C:17:4E:7E:5B:FD:A4:93:99:
        7F:DF:CD:EF:A4:75:EF:EF:15:F6:47:E7:F8:19:72:D8:
        2E:34:1A:A6:B4:A7:4C:7E:BD:BB:4F:0C:3D:57:F1:30:
        D6:A6:36:8E:D6:80:76:D7:19:2E:A5:CD:7E:34:2D:89: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        true: 0
      - certificatePolicies
        2.16.840.1.113733.1.7.23.3
        #0
        id-qt-cps: https://www.verisign.com/cps
        id-qt-unotice: https://www.verisign.com/rpa
      - keyUsage: true, 6
      - 1.3.6.1.5.5.7.1.12
        image/gif
        SHA1:
        8f e5 d3 1a 86 ac 8d 8e 6b c3 cf 80 6a d4 48 18 |........k...j.H.| 2c 7b 19 2e |,{.. |
        http://logo.verisign.com/vslogo.gif
      - crlDistributionPoints: http://crl.verisign.com/pca3-g5.crl
      - authorityInfoAccess
        OCSP: http://ocsp.verisign.com
      - extendedKeyUsage
        clientAuth: codeSigning
      - subjectAltName
        CN: VeriSignMPKI-2-8
      - subjectKeyIdentifier:
        cf 99 a9 ea 7b 26 f4 4b c9 8e 8f d7 f0 05 26 ef |....{&.K......&.| e3 d2 a7 9d |.... |
      - authorityKeyIdentifier:
        7f d3 65 a7 c2 dd ec bb f0 30 09 f3 43 39 fa 02 |..e......0..C9..| af 33 31 33 |.313 |
  - RSA-SHA1:
```
56 22 e6 34 a4 c4 61 cb  48 b9 01 ad 56 a8 64 0f  |V".4..a.H...V.d.|
d9 8c 91 c4 bb cc 0c e5  ad 7a a0 22 7f df 47 38  |.........z."..G8|
4a 2d 6c d1 7f 71 1a 7c  ec 70 a9 b1 f0 4f e4 0f  |J-l..q.|.p...O..|
0c 53 fa 15 5e fe 74 98  49 24 85 81 26 1c 91 14  |.S..^.t.I$..&...|
47 b0 4c 63 8c bb a1 34  d4 c6 45 e8 0d 85 26 73  |G.Lc...4..E...&s|
03 d0 a9 8c 64 6d dc 71  92 e6 45 05 60 15 59 51  |....dm.q..E.`.YQ|
39 fc 58 14 6b fe d4 a4  ed 79 6b 08 0c 41 72 e7  |9.X.k....yk..Ar.|
37 22 06 09 be 23 e9 3f  44 9a 1e e9 61 9d cc b1  |7"...#.?D...a...|
90 5c fc 3d d2 8d ac 42  3d 65 36 d4 b4 3d 40 28  |.\.=...B=e6..=@(|
8f 9b 10 cf 23 26 cc 4b  20 cb 90 1f 5d 8c 4c 34  |....#&.K ...].L4|
ca 3c d8 e5 37 d6 6f a5  20 bd 34 eb 26 d9 ae 0d  |.<..7.o. .4.&...|
e7 c5 9a f7 a1 b4 21 91  33 6f 86 e8 58 bb 25 7c  |......!.3o..X.%||
74 0e 58 fe 75 1b 63 3f  ce 31 7c 9b 8f 1b 96 9e  |t.X.u.c?.1|.....|
c5 53 76 84 5b 9c ad 91  fa ac ed 93 ba 5d c8 21  |.Sv.[........].!|
53 c2 82 53 63 af 12 0d  50 87 11 1b 3d 54 52 96  |S..Sc...P...=TR.|
8a 2c 9c 3d 92 1a 08 9a  05 2e c7 93 a5 48 91 d3  |.,.=.........H..|
```

Signer

1
unnamed
- #0
  - C: US
  - O: VeriSign, Inc.
  - OU: VeriSign Trust Network
  - OU: Terms of use at https://www.verisign.com/rpa (c)10
  - CN: VeriSign Class 3 Code Signing 2010 CA
- 41:AA:37:FE:EE:33:1D:90:9F:C5:3A:D0:9F:2C:E3:20
SHA1: nil

1.3.6.1.4.1.311.2.1.12
- nil
contentType: 1.3.6.1.4.1.311.2.1.4
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

3e 32 4f 21 30 28 25 b8  a1 c9 fa cd 59 c6 91 93  |>2O!0(%.....Y...|
b2 49 e9 e9                                       |.I..            |

rsaEncryption:

67 ad 5d ba b9 5c 60 bd  2e 71 6a 92 69 c2 aa 22  |g.]..\`..qj.i.."|
2c ca 70 65 83 5e db e6  95 58 34 80 46 47 3a fb  |,.pe.^...X4.FG:.|
60 68 8d d1 e1 3b 1a f9  71 0c 13 80 5b 06 38 e9  |`h...;..q...[.8.|
ed 1b 0f ed ee a8 36 13  5f 60 ae e6 54 23 b8 2d  |......6._`..T#.-|
f6 5e 52 d9 5d 07 b8 9a  cf a1 75 e1 78 0c f6 fb  |.^R.].....u.x...|
e6 dd ae 0c ce 38 b5 de  49 8c ae 67 4d f5 80 74  |.....8..I..gM..t|
fe 3a 93 7e 85 18 e2 ee  7c c8 3f 45 0c f4 50 8a  |.:.~....|.?E..P.|
c5 ed 29 a9 df a0 0e 63  5d ba a8 39 e2 d2 07 5d  |..)....c]..9...]|
d6 81 d0 d7 dc a6 08 a1  ee 8b 82 a7 ea 34 f9 84  |.............4..|
84 e7 b8 88 31 94 05 44  60 93 fa 4c 89 ee e1 b8  |....1..D`..L....|
d5 e7 86 3d 95 02 35 7d  f5 21 3e 44 3f b9 77 20  |...=..5}.!>D?.w |
dd 1c 2a d6 4c 83 f4 49  d7 d5 98 d1 34 46 f9 09  |..*.L..I....4F..|
4b 31 8d 35 40 da 3c 89  81 43 40 81 a6 c9 15 e1  |K1.5@.<..C@.....|
74 86 71 7b ca 05 7d 90  94 7f 7b 70 69 06 8b 26  |t.q{..}...{pi..&|
0c 65 c6 53 b4 15 de 00  af 39 e5 72 ed 2f dd ab  |.e.S.....9.r./..|
ed 9f 80 4f 4a 08 f2 7c  a7 69 cd f9 c1 0e 84 eb  |...OJ..|.i......|

countersignature

unnamed
- #0
  - C: US
  - O: Symantec Corporation
  - CN: Symantec Time Stamping Services CA - G2
- 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
SHA1: nil

contentType: pkcs7-data
signingTime: 2014-09-02 06:29:06 UTC

messageDigest:

54 5d f9 7a e7 c7 5d 8f  e0 0f f9 76 2e 11 62 00  |T].z..]....v..b.|
b9 21 96 2b                                       |.!.+            |

rsaEncryption:

83 04 87 5b ae ae 40 cb  e9 55 6e 3b 81 11 7c ff  |...[..@..Un;..|.|
8b 56 9a 30 4e 1c 66 c9  a4 a3 ea e9 68 23 29 e7  |.V.0N.f.....h#).|
c7 13 3c e5 ea b3 6a f6  5e 67 88 48 e7 5d a4 09  |..<...j.^g.H.]..|
81 d6 07 21 60 a7 48 4c  63 64 ef fb b6 bb 8c 28  |...!`.HLcd.....(|
09 45 cc a0 74 aa 7e a4  f0 72 cf 33 5e d8 1f 34  |.E..t.~..r.3^..4|
52 9e 25 21 d7 a3 ab 5a  c6 42 a6 9b 11 31 ba 41  |R.%!...Z.B...1.A|
63 15 ad 34 15 33 d5 82  fa 00 38 2b 26 a4 69 fd  |c..4.3....8+&.i.|
3e 86 43 00 41 7d 25 c5  80 3a c5 b2 57 f3 9e da  |>.C.A}%..:..W...|
3f 94 77 b5 80 72 5b 68  81 0b ff 7e 79 0f b9 ff  |?.w..r[h...~y...|
84 e6 ec 63 40 3a 6a 66  3b 94 0e cd e4 da 0c 5a  |...c@:jf;......Z|
4e 17 6e 53 ad 32 4b 4f  b6 08 55 6d b4 6d 21 c6  |N.nS.2KO..Um.m!.|
fc 82 e8 3a 52 62 b5 38  eb 7e b9 3c 97 40 4a 1f  |...:Rb.8.~.<.@J.|
a7 7c ab f4 66 d4 e4 f6  7e 1f 97 4d 28 e9 b5 19  |.|..f...~..M(...|
0c 35 74 f0 64 74 76 cd  d8 d8 e1 33 36 cf 13 34  |.5t.dtv....36..4|
c8 c9 41 29 81 ab e0 89  d9 fc 65 64 d7 be 89 c5  |..A)......ed....|
dc 33 7c 17 55 bb d9 71  f1 47 07 d4 f6 ab ed 54  |.3|.U..q.G.....T|

show previews

offset	size	type	comment
0	4141056	EXE	09/02/2014 06:28:39	#
15c1	15	HTM		#
311870	12734	PNG	(100 x 80)	#
314a30	6805	PNG	(64 x 64)	#
3164c8	5682	PNG	(64 x 64)	#
317b00	7051	PNG	(64 x 64)	#
319690	6593	PNG	(64 x 64)	#
31b058	7220	PNG	(100 x 80)	#
31cc90	7899	PNG	(100 x 73)	#
31eb70	5545	PNG	(130 x 80)	#
320120	4228	PNG	(130 x 79)	#
3211a8	10045	PNG	(100 x 68)	#
3238e8	8945	PNG	(100 x 73)	#
325be0	10376	PNG	(100 x 77)	#
328468	8919	PNG	(130 x 80)	#
32a740	9746	PNG	(95 x 80)	#
32cd58	10750	PNG	(100 x 80)	#
32f758	4227	PNG	(130 x 80)	#
3307e0	4403	PNG	(130 x 80)	#
331918	9769	PNG	(100 x 78)	#
333f48	7612	PNG	(130 x 80)	#
335d08	9016	PNG	(131 x 80)	#
338040	7322	PNG	(130 x 80)	#
339ce0	5377	PNG	(130 x 80)	#
33b1e8	9879	PNG	(100 x 80)	#
33d880	4091	PNG	(100 x 80)	#
33e880	10050	PNG	(100 x 80)	#
340fc8	8047	PNG	(100 x 80)	#
342f38	1870	PNG	(32 x 32)	#
343688	2572	PNG	(32 x 32)	#
344098	2305	PNG	(32 x 32)	#
3449a0	1813	PNG	(32 x 32)	#
3450b8	2443	PNG	(32 x 32)	#
345a48	2567	PNG	(32 x 32)	#
346450	2472	PNG	(32 x 32)	#
346df8	1988	PNG	(32 x 32)	#
3475c0	2438	PNG	(32 x 32)	#
347f48	1082	PNG	(32 x 32)	#
348388	1698	PNG	(32 x 32)	#
348a30	2124	PNG	(32 x 32)	#
349280	2169	PNG	(32 x 32)	#
349b00	2516	PNG	(32 x 32)	#
34a4d8	2572	PNG	(32 x 32)	#
34aee8	3557	PNG	(130 x 80)	#
34bcd0	8330	PNG	(100 x 80)	#
34dd60	2572	PNG	(32 x 32)	#
34e770	10572	PNG	(100 x 81)	#
3510c0	8709	PNG	(100 x 80)	#
3532c8	7186	PNG	(100 x 80)	#
354ee0	9783	PNG	(100 x 80)	#
357518	5615	PNG	(130 x 80)	#
358b08	9727	PNG	(100 x 80)	#
35b108	8177	PNG	(100 x 80)	#
35d100	9183	PNG	(130 x 80)	#
35f4e0	10906	PNG	(100 x 80)	#
361f80	5062	PNG	(100 x 80)	#
363348	6957	PNG	(100 x 80)	#
364e78	7497	PNG	(100 x 80)	#
366bc8	9052	PNG	(100 x 80)	#
368f28	8365	PNG	(100 x 80)	#
36afd8	17465	PNG	(378 x 89)	#
36f418	3180	PNG	(130 x 80)	#
370088	3109	PNG	(130 x 80)	#
370cb0	4271	PNG	(130 x 80)	#
371d60	2011	PNG	(130 x 80)	#
372540	5497	PNG	(100 x 80)	#
373ac0	5150	PNG	(100 x 80)	#
374ee0	6650	PNG	(100 x 80)	#
3768e0	12876	PNG	(100 x 80)	#
379b30	6279	PNG	(130 x 80)	#
37b3b8	8649	PNG	(100 x 80)	#
37d588	8103	PNG	(100 x 80)	#
37f530	10131	PNG	(100 x 80)	#
381cc8	9092	PNG	(100 x 80)	#
384050	8534	PNG	(100 x 80)	#
3861a8	8997	PNG	(100 x 80)	#
3884d0	9041	PNG	(100 x 80)	#
38a828	8184	PNG	(100 x 80)	#
38c820	10570	PNG	(100 x 80)	#
38f170	4777	PNG	(130 x 80)	#
390420	10032	PNG	(100 x 80)	#
392b50	8465	PNG	(100 x 80)	#
394c68	10045	PNG	(100 x 80)	#
3973a8	11790	PNG	(100 x 83)	#
39a1b8	5725	PNG	(130 x 80)	#
39b818	10528	PNG	(100 x 80)	#
39e138	5218	PNG	(100 x 80)	#
39f5a0	8861	PNG	(100 x 80)	#
3a1840	29512	PNG	(100 x 80)	#
3a8b88	9514	PNG	(101 x 80)	#
3ab0b8	12144	PNG	(100 x 80)	#
3ae028	5806	PNG	(100 x 80)	#
3af6d8	6299	PNG	(100 x 80)	#
3b0f78	10500	PNG	(100 x 80)	#
3bc1d8	25795	PNG	(256 x 256)	#
3f3000	6408	PKCS7	Authenticode Signature	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[!] non-zero dos stub after rich_hdr: "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x04xD\x00}\xDC\xDF|:\x1CB9\x0F0l\xFF\xAE\x11:\xD8\x00\x00\x00\x00\x00\x00\x00 \x01\x00\x00"

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0x226e90

ssdlife.exe- SSDLife