MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 000004e4

VS_FIXEDFILEINFO

Signers (1)

issuer: /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO Code Signing CA 2
serial: 6D398872131657667B476252BA58C3F3

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: May 10 00:00:00 2010 GMT
            Not After : May 10 23:59:59 2015 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping Signer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:35:a0:36:70:22:81:11:c3:b2:83:b9:d3:28:
                    c6:36:cd:25:6b:a9:7b:b2:1c:f6:9b:51:9c:ef:35:
                    f4:ed:08:8e:5e:38:08:f8:77:3c:0a:42:e0:f3:70:
                    dc:a3:d7:ca:f5:4c:0b:cf:ff:22:9c:0a:7e:68:d6:
                    09:a2:2a:84:7b:a6:9d:b4:a9:c1:33:e2:ef:1f:17:
                    48:ca:3a:cd:46:e6:c5:aa:77:bd:e3:77:9a:fa:47:
                    53:40:28:59:43:93:f1:a4:81:ea:ef:80:b5:4f:a7:
                    08:ce:ba:6e:bc:ca:76:0c:97:64:59:86:24:bb:3d:
                    82:90:a8:55:b1:92:d3:a0:a7:05:ac:9f:53:25:08:
                    10:47:99:cd:98:de:68:e5:b4:50:78:a3:af:01:cc:
                    59:43:58:e4:76:6e:7e:ac:c7:e2:9e:1f:4f:b0:47:
                    2d:c8:0c:a3:49:27:80:75:8c:bb:06:91:65:0f:90:
                    9b:f4:ba:d1:81:c8:5c:6a:ec:14:e9:25:09:bf:23:
                    16:f4:95:46:40:40:21:bb:83:96:fd:86:1f:7a:c8:
                    0d:10:8e:a2:f8:19:07:58:7f:9f:bd:37:02:60:f2:
                    a4:e9:9d:44:3f:30:05:e4:a7:70:99:51:9a:e8:17:
                    f1:55:ca:b2:61:89:65:46:a7:6a:f2:58:46:7e:aa:
                    a0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8

            X509v3 Subject Key Identifier: 
                2E:2D:B0:0A:44:4A:D3:87:C0:02:07:CE:97:7D:50:62:20:FD:0F:83
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.usertrust.com

    Signature Algorithm: sha1WithRSAEncryption
         c8:fb:63:f8:0b:75:75:2c:3a:f1:f2:13:a7:2d:b6:a3:1a:9c:
         ad:01:07:d3:34:8e:77:e0:c2:6e:ae:02:5d:48:4f:a4:d2:21:
         b6:36:fd:2a:35:43:7c:6b:df:80:87:0b:15:f0:76:32:00:b4:
         ce:b5:67:a4:2f:2f:20:1b:9c:54:9e:83:3f:1f:5f:14:95:62:
         82:0f:22:41:22:1f:70:b3:f3:f7:42:de:6c:51:cd:4b:f8:21:
         ac:9b:3b:8c:b1:e5:e6:28:8f:ce:2a:8a:f9:aa:52:4d:8c:5b:
         77:ba:4d:5a:58:db:bb:6a:04:cc:52:1e:9d:e2:28:37:0e:bb:
         e7:0e:91:c7:f8:db:f1:81:98:eb:cd:37:b3:0e:ab:65:d3:62:
         ec:3a:a5:76:eb:13:a8:35:93:c9:2e:0a:01:ec:c0:e8:cc:3d:
         7e:b6:eb:e2:c1:ec:d3:14:92:82:66:87:50:dc:fd:50:97:ac:
         b3:4a:76:73:06:c4:86:11:3a:b3:5f:43:04:52:6f:ea:b3:d0:
         74:36:4c:ca:f1:1b:79:84:37:70:63:ad:74:b9:aa:0e:f3:98:
         b0:86:08:eb:db:e0:1f:8c:10:f2:39:64:9b:ae:4f:0a:2c:92:
         8a:4f:18:b5:91:e5:8d:1a:93:5f:1f:ae:f1:a6:f0:2e:97:d0:
         d2:f6:2b:3c

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:39:88:72:13:16:57:66:7b:47:62:52:ba:58:c3:f3
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Code Signing CA 2
        Validity
            Not Before: Jan 19 00:00:00 2012 GMT
            Not After : Jan 18 23:59:59 2015 GMT
        Subject: C=US/postalCode=98052, ST=WA, L=Redmond/street=15724 NE 53rd Street, O=Eric Lawrence, CN=Eric Lawrence
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cd:b9:f8:ec:f8:f8:f4:83:39:8e:15:8a:1d:
                    cc:58:c0:d1:f6:a0:bf:d7:72:ea:ff:be:a9:89:9d:
                    a4:91:e7:cf:6d:bc:ba:cf:fd:71:12:01:ec:e4:3d:
                    4a:35:a7:32:a6:cc:85:c1:0b:13:45:22:13:1a:7f:
                    11:ac:af:82:b9:df:6f:16:0e:27:d5:ab:6f:4e:52:
                    32:00:bb:d4:5a:5a:a7:b7:74:33:04:98:96:6d:e5:
                    62:5b:74:93:26:6d:bf:08:8a:5d:07:79:03:11:e4:
                    e5:3c:ba:f7:22:ee:4e:44:67:4f:a8:65:56:3c:53:
                    16:9f:64:71:1b:c1:66:4d:e5:e9:db:98:c0:81:28:
                    08:7f:62:ae:49:76:17:1d:1b:1b:d8:39:e4:0f:dc:
                    b8:a5:b3:e1:e5:48:c7:76:38:08:75:43:5a:54:80:
                    e9:8c:ab:85:5d:18:a8:d0:bf:09:b1:7d:08:81:31:
                    3d:44:0b:44:67:ad:ef:58:e2:bd:b7:cf:86:b5:85:
                    1a:16:15:5b:b2:86:3e:a2:dd:25:81:f4:02:14:16:
                    21:96:8c:ab:24:6c:09:06:8e:af:51:85:58:19:9a:
                    78:5b:85:87:00:ba:20:37:9d:30:55:11:57:1f:d6:
                    0c:e9:6b:f7:41:95:ec:a2:ae:f8:a4:7c:8c:32:f8:
                    96:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:1E:C5:B1:2C:7D:87:DA:02:68:7C:25:BC:0C:07:84:3F:B6:CF:DE:F1

            X509v3 Subject Key Identifier: 
                E7:6E:0F:E6:52:C6:BC:62:F8:C8:4A:8A:3B:AE:9B:12:5B:E9:76:95
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                Code Signing
            Netscape Cert Type: 
                Object Signing
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.1.3.2
                  CPS: https://secure.comodo.net/CPS

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.comodoca.com/COMODOCodeSigningCA2.crl

            Authority Information Access: 
                CA Issuers - URI:http://crt.comodoca.com/COMODOCodeSigningCA2.crt
                OCSP - URI:http://ocsp.comodoca.com

    Signature Algorithm: sha1WithRSAEncryption
         37:92:d5:8e:d8:4d:05:2c:98:3d:7d:08:5b:92:3c:f3:38:3e:
         0c:dd:49:63:9a:c7:be:7f:7d:df:3d:f6:fc:75:8e:f4:8b:02:
         16:b8:4d:da:f5:5b:fd:27:ac:07:86:a3:84:53:16:54:da:c5:
         72:7f:42:2a:f6:cc:5d:63:06:76:37:b7:a7:6a:9e:12:ae:5b:
         dc:d5:f2:4d:16:65:3a:d4:a7:bf:56:81:25:d8:4f:f1:fb:1d:
         cd:b8:ad:14:5a:f4:7f:88:07:d4:63:3f:48:3c:6a:64:f2:e8:
         31:9c:cf:62:e8:e1:34:53:79:13:67:4d:04:ae:3e:69:08:26:
         87:a6:69:dc:76:cc:e9:aa:4b:17:ab:17:e3:c5:4c:7f:c8:6f:
         1a:b2:1b:b0:61:8c:6e:be:60:01:10:9d:61:05:53:b4:ed:53:
         b3:63:76:1c:40:f6:37:6b:8c:d7:76:83:ab:a8:97:08:c0:56:
         71:9c:07:f8:67:34:e7:82:50:dc:74:cc:fa:a8:e2:ea:9e:5a:
         d0:51:f5:b3:ce:6e:7e:46:0c:83:d6:9b:97:24:12:88:f8:8c:
         ec:84:b4:04:7f:79:f9:a3:06:cf:66:ec:d9:f3:66:be:86:2c:
         f8:79:65:8c:c4:10:9c:4c:42:bf:45:3f:ab:9d:c5:f6:c2:ec:
         a8:7a:1d:ae
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
        • SHA1
          • 95 7d fb 68 57 7b 22 c9  1f 1c 49 d5 22 9e bc 03  |.}.hW{"...I."...|
            49 14 cf 8c                                       |I...            |
    • Certificates
      • Certificate #0
        • 2
          • 47:8A:8E:FB:59:E1:D8:3F:0C:E1:42:D2:A2:87:07:BE
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • ST: UT
            • L: Salt Lake City
            • O: The USERTRUST Network
            • OU: http://www.usertrust.com
            • CN: UTN-USERFirst-Object
          • 2010-05-10 00:00:00 UTC: 2015-05-10 23:59:59 UTC
          • Subject
            • C: GB
            • ST: Greater Manchester
            • L: Salford
            • O: COMODO CA Limited
            • CN: COMODO Time Stamping Signer
          • #5
            • rsaEncryption: nil
            • BC:35:A0:36:70:22:81:11:C3:B2:83:B9:D3:28:C6:36:
              CD:25:6B:A9:7B:B2:1C:F6:9B:51:9C:EF:35:F4:ED:08:
              8E:5E:38:08:F8:77:3C:0A:42:E0:F3:70:DC:A3:D7:CA:
              F5:4C:0B:CF:FF:22:9C:0A:7E:68:D6:09:A2:2A:84:7B:
              A6:9D:B4:A9:C1:33:E2:EF:1F:17:48:CA:3A:CD:46:E6:
              C5:AA:77:BD:E3:77:9A:FA:47:53:40:28:59:43:93:F1:
              A4:81:EA:EF:80:B5:4F:A7:08:CE:BA:6E:BC:CA:76:0C:
              97:64:59:86:24:BB:3D:82:90:A8:55:B1:92:D3:A0:A7:
              05:AC:9F:53:25:08:10:47:99:CD:98:DE:68:E5:B4:50:
              78:A3:AF:01:CC:59:43:58:E4:76:6E:7E:AC:C7:E2:9E:
              1F:4F:B0:47:2D:C8:0C:A3:49:27:80:75:8C:BB:06:91:
              65:0F:90:9B:F4:BA:D1:81:C8:5C:6A:EC:14:E9:25:09:
              BF:23:16:F4:95:46:40:40:21:BB:83:96:FD:86:1F:7A:
              C8:0D:10:8E:A2:F8:19:07:58:7F:9F:BD:37:02:60:F2:
              A4:E9:9D:44:3F:30:05:E4:A7:70:99:51:9A:E8:17:F1:
              55:CA:B2:61:89:65:46:A7:6A:F2:58:46:7E:AA:A0:07
              : 0x010001
          • #6
            • authorityKeyIdentifier:
              da ed 64 74 14 9c 14 3c  ab dd 99 a9 bd 5b 28 4d  |..dt...<.....[(M|
              8b 3c c9 d8                                       |.<..            |
            • subjectKeyIdentifier:
              2e 2d b0 0a 44 4a d3 87  c0 02 07 ce 97 7d 50 62  |.-..DJ.......}Pb|
              20 fd 0f 83                                       | ...            |
            • keyUsage: true, 0xc0
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: true, timeStamping
            • crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
            • authorityInfoAccess
              • OCSP: http://ocsp.usertrust.com
        • RSA-SHA1:
          c8 fb 63 f8 0b 75 75 2c  3a f1 f2 13 a7 2d b6 a3  |..c..uu,:....-..|
          1a 9c ad 01 07 d3 34 8e  77 e0 c2 6e ae 02 5d 48  |......4.w..n..]H|
          4f a4 d2 21 b6 36 fd 2a  35 43 7c 6b df 80 87 0b  |O..!.6.*5C|k....|
          15 f0 76 32 00 b4 ce b5  67 a4 2f 2f 20 1b 9c 54  |..v2....g.// ..T|
          9e 83 3f 1f 5f 14 95 62  82 0f 22 41 22 1f 70 b3  |..?._..b.."A".p.|
          f3 f7 42 de 6c 51 cd 4b  f8 21 ac 9b 3b 8c b1 e5  |..B.lQ.K.!..;...|
          e6 28 8f ce 2a 8a f9 aa  52 4d 8c 5b 77 ba 4d 5a  |.(..*...RM.[w.MZ|
          58 db bb 6a 04 cc 52 1e  9d e2 28 37 0e bb e7 0e  |X..j..R...(7....|
          91 c7 f8 db f1 81 98 eb  cd 37 b3 0e ab 65 d3 62  |.........7...e.b|
          ec 3a a5 76 eb 13 a8 35  93 c9 2e 0a 01 ec c0 e8  |.:.v...5........|
          cc 3d 7e b6 eb e2 c1 ec  d3 14 92 82 66 87 50 dc  |.=~.........f.P.|
          fd 50 97 ac b3 4a 76 73  06 c4 86 11 3a b3 5f 43  |.P...Jvs....:._C|
          04 52 6f ea b3 d0 74 36  4c ca f1 1b 79 84 37 70  |.Ro...t6L...y.7p|
          63 ad 74 b9 aa 0e f3 98  b0 86 08 eb db e0 1f 8c  |c.t.............|
          10 f2 39 64 9b ae 4f 0a  2c 92 8a 4f 18 b5 91 e5  |..9d..O.,..O....|
          8d 1a 93 5f 1f ae f1 a6  f0 2e 97 d0 d2 f6 2b 3c  |..._..........+<|
      • Certificate #1
        • 2
          • 6D:39:88:72:13:16:57:66:7B:47:62:52:BA:58:C3:F3
          • RSA-SHA1: nil
          • Issuer
            • C: GB
            • ST: Greater Manchester
            • L: Salford
            • O: COMODO CA Limited
            • CN: COMODO Code Signing CA 2
          • 2012-01-19 00:00:00 UTC: 2015-01-18 23:59:59 UTC
          • Subject
            • C: US
            • postalCode: 98052
            • ST: WA
            • L: Redmond
            • street: 15724 NE 53rd Street
            • O: Eric Lawrence
            • CN: Eric Lawrence
          • #5
            • rsaEncryption: nil
            • B8:CD:B9:F8:EC:F8:F8:F4:83:39:8E:15:8A:1D:CC:58:
              C0:D1:F6:A0:BF:D7:72:EA:FF:BE:A9:89:9D:A4:91:E7:
              CF:6D:BC:BA:CF:FD:71:12:01:EC:E4:3D:4A:35:A7:32:
              A6:CC:85:C1:0B:13:45:22:13:1A:7F:11:AC:AF:82:B9:
              DF:6F:16:0E:27:D5:AB:6F:4E:52:32:00:BB:D4:5A:5A:
              A7:B7:74:33:04:98:96:6D:E5:62:5B:74:93:26:6D:BF:
              08:8A:5D:07:79:03:11:E4:E5:3C:BA:F7:22:EE:4E:44:
              67:4F:A8:65:56:3C:53:16:9F:64:71:1B:C1:66:4D:E5:
              E9:DB:98:C0:81:28:08:7F:62:AE:49:76:17:1D:1B:1B:
              D8:39:E4:0F:DC:B8:A5:B3:E1:E5:48:C7:76:38:08:75:
              43:5A:54:80:E9:8C:AB:85:5D:18:A8:D0:BF:09:B1:7D:
              08:81:31:3D:44:0B:44:67:AD:EF:58:E2:BD:B7:CF:86:
              B5:85:1A:16:15:5B:B2:86:3E:A2:DD:25:81:F4:02:14:
              16:21:96:8C:AB:24:6C:09:06:8E:AF:51:85:58:19:9A:
              78:5B:85:87:00:BA:20:37:9D:30:55:11:57:1F:D6:0C:
              E9:6B:F7:41:95:EC:A2:AE:F8:A4:7C:8C:32:F8:96:61
              : 0x010001
          • #6
            • authorityKeyIdentifier:
              1e c5 b1 2c 7d 87 da 02  68 7c 25 bc 0c 07 84 3f  |...,}...h|%....?|
              b6 cf de f1                                       |....            |
            • subjectKeyIdentifier:
              e7 6e 0f e6 52 c6 bc 62  f8 c8 4a 8a 3b ae 9b 12  |.n..R..b..J.;...|
              5b e9 76 95                                       |[.v.            |
            • keyUsage: true, 0x80
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: codeSigning
            • nsCertType: 0x10
            • certificatePolicies
              • 1.3.6.1.4.1.6449.1.2.1.3.2
                • id-qt-cps: https://secure.comodo.net/CPS
            • crlDistributionPoints: http://crl.comodoca.com/COMODOCodeSigningCA2.crl
            • authorityInfoAccess
              • #0
                • caIssuers: http://crt.comodoca.com/COMODOCodeSigningCA2.crt
                • OCSP: http://ocsp.comodoca.com
        • RSA-SHA1:
          37 92 d5 8e d8 4d 05 2c  98 3d 7d 08 5b 92 3c f3  |7....M.,.=}.[.<.|
          38 3e 0c dd 49 63 9a c7  be 7f 7d df 3d f6 fc 75  |8>..Ic....}.=..u|
          8e f4 8b 02 16 b8 4d da  f5 5b fd 27 ac 07 86 a3  |......M..[.'....|
          84 53 16 54 da c5 72 7f  42 2a f6 cc 5d 63 06 76  |.S.T..r.B*..]c.v|
          37 b7 a7 6a 9e 12 ae 5b  dc d5 f2 4d 16 65 3a d4  |7..j...[...M.e:.|
          a7 bf 56 81 25 d8 4f f1  fb 1d cd b8 ad 14 5a f4  |..V.%.O.......Z.|
          7f 88 07 d4 63 3f 48 3c  6a 64 f2 e8 31 9c cf 62  |....c?Hi.&..|
          69 dc 76 cc e9 aa 4b 17  ab 17 e3 c5 4c 7f c8 6f  |i.v...K.....L..o|
          1a b2 1b b0 61 8c 6e be  60 01 10 9d 61 05 53 b4  |....a.n.`...a.S.|
          ed 53 b3 63 76 1c 40 f6  37 6b 8c d7 76 83 ab a8  |.S.cv.@.7k..v...|
          97 08 c0 56 71 9c 07 f8  67 34 e7 82 50 dc 74 cc  |...Vq...g4..P.t.|
          fa a8 e2 ea 9e 5a d0 51  f5 b3 ce 6e 7e 46 0c 83  |.....Z.Q...n~F..|
          d6 9b 97 24 12 88 f8 8c  ec 84 b4 04 7f 79 f9 a3  |...$.........y..|
          06 cf 66 ec d9 f3 66 be  86 2c f8 79 65 8c c4 10  |..f...f..,.ye...|
          9c 4c 42 bf 45 3f ab 9d  c5 f6 c2 ec a8 7a 1d ae  |.LB.E?.......z..|
    • Signer
      • 1
      • unnamed
        • #0
          • C: GB
          • ST: Greater Manchester
          • L: Salford
          • O: COMODO CA Limited
          • CN: COMODO Code Signing CA 2
        • 6D:39:88:72:13:16:57:66:7B:47:62:52:BA:58:C3:F3
      • SHA1: nil
      • #3
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest:
          31 f4 b1 cd 55 fd db 7f  62 41 73 3d 61 93 bc 2b  |1...U...bAs=a..+|
          df 50 7c ef                                       |.P|.            |
        • 1.3.6.1.4.1.311.2.1.12
          • 00 46 00 69 00 64 00 64  00 6c 00 65 00 72 00 32  |.F.i.d.d.l.e.r.2|
            00 20 00 57 00 65 00 62  00 20 00 44 00 65 00 62  |. .W.e.b. .D.e.b|
            00 75 00 67 00 67 00 65  00 72                    |.u.g.g.e.r      |
            : http://www.fiddler2.com/fiddler2/
      • rsaEncryption:
        9c 28 4d 17 da 07 e1 48  f5 3d f5 c0 f8 29 a0 0a  |.(M....H.=...)..|
        f2 20 cd 59 f4 f5 7c 89  61 68 f2 a8 21 3d 07 78  |. .Y..|.ah..!=.x|
        78 00 86 4b 53 2a b4 b4  2b 59 76 fa 44 f1 23 c5  |x..KS*..+Yv.D.#.|
        f4 09 b2 f9 21 e6 8f c7  87 bf 7d a5 5c 87 7c fc  |....!.....}.\.|.|
        56 a2 3e 43 ee b9 9b 9d  bd 9d e4 f3 f7 72 c3 e7  |V.>C.........r..|
        76 1a 0a e7 0c 1b 28 ff  09 b8 eb 73 a4 ab 36 96  |v.....(....s..6.|
        a4 cf e6 d2 2d de 8c e4  90 fc 26 5d 36 63 2e b5  |....-.....&]6c..|
        2d d2 c3 6a 13 5b e2 35  71 98 6b 06 d7 fb fb 26  |-..j.[.5q.k....&|
        b3 c7 ab 1a 78 5a 3f 98  91 9a 68 5c 00 62 94 0e  |....xZ?...h\.b..|
        ea d0 d8 0b 6e 8c 4b d1  5f bc a4 23 a0 06 24 4e  |....n.K._..#..$N|
        24 c2 56 68 be 1d 06 19  36 39 6d 59 9e 4f 5d e6  |$.Vh....69mY.O].|
        45 da 82 a2 44 ed b2 c2  89 74 d5 8e 5a f6 8f c5  |E...D....t..Z...|
        8f 0c c6 c9 f1 2f 1c f6  1b 85 a8 3d 32 d6 bf 2f  |...../.....=2../|
        64 92 a5 27 53 c0 ca 42  22 66 41 51 be 12 22 f9  |d..'S..B"fAQ..".|
        4d f9 df 76 ac 40 83 f3  6c 85 b7 43 90 18 9e 3b  |M..v.@..l..C...;|
        5a f8 03 ad 71 b9 da b6  91 90 4e d4 e8 da cc cc  |Z...q.....N.....|
      • countersignature
        • 0
          • unnamed
            • #0
              • C: US
              • ST: UT
              • L: Salt Lake City
              • O: The USERTRUST Network
              • OU: http://www.usertrust.com
              • CN: UTN-USERFirst-Object
            • 47:8A:8E:FB:59:E1:D8:3F:0C:E1:42:D2:A2:87:07:BE
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2014-11-25 20:32:09 UTC
            • messageDigest:
              e8 57 ae 3c 88 39 18 a1  82 ab e5 a6 4d 54 9e 88  |.W.<.9......MT..|
              50 e9 95 65                                       |P..e            |
          • rsaEncryption:
            9f 08 92 f5 b5 bc ec 96  63 72 cf 1a d4 7b 79 7b  |........cr...{y{|
            9c 65 5a fb 8d 64 b5 01  87 5d b6 68 ec 38 dd cb  |.eZ..d...].h.8..|
            db e1 fc 29 ec 9d 75 09  2c 6d c6 35 78 4e 96 dc  |...)..u.,m.5xN..|
            ac 30 04 8e 6e 45 c1 65  33 03 06 3f a3 16 25 d6  |.0..nE.e3..?..%.|
            1e b8 83 2a 3b 89 85 75  9d 8d a4 81 11 43 1d 1a  |...*;..u.....C..|
            26 b7 89 cb 55 4d e0 b8  16 fd 8b 11 f6 35 16 39  |&...UM.......5.9|
            15 8e e3 55 54 bd 46 b3  b1 da c1 80 67 62 8b 3b  |...UT.F.....gb.;|
            96 78 dd db d7 20 f4 9c  d9 56 2b ad 29 44 8e 2f  |.x... ...V+.)D./|
            52 33 75 e4 51 10 01 6a  ac 08 f6 6f 82 e2 f1 c3  |R3u.Q..j...o....|
            9d 22 e1 68 c2 90 77 a7  da d9 e9 4d 46 b8 f9 9c  |.".h..w....MF...|
            a5 6e 5b ae e3 7b f3 28  c3 5c 2d ad b1 4d 0a 77  |.n[..{.(.\-..M.w|
            72 55 56 5a 30 92 af 1d  98 dd 0e c1 94 ea cf 27  |rUVZ0..........'|
            65 39 21 77 02 6e 4a 92  89 f7 2c 4f 75 a0 e0 76  |e9!w.nJ...,Ou..v|
            b5 5c 68 91 d9 7a 42 d4  98 22 9b 7b ea 16 1a ab  |.\h..zB..".{....|
            c4 ee 1e 1b b5 1a d2 07  6d 6a 8a ad ba 48 2c b9  |........mj...H,.|
            45 55 b1 95 bc d7 fb ba  4d be 75 b2 22 f8 d9 41  |EU......M.u."..A|
offsetsizetypecomment
052736EXE12/05/2009 22:50:46#
15c115HTM#
ce001075328BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 1128064 bytes (1102 KiB)


--
Type = PE
Physical Size = 1128064
CPU = x86
Characteristics = Executable 32-bit NoRelocs NoLineNums NoLocalSyms
Created = 2009-12-05 22:50:46
Headers Size = 1024
Checksum = 1138228
Image Size = 208896
Section Alignment = 4096
File Alignment = 512
Code Size = 23552
Initialized Data Size = 119808
Uninitialized Data Size = 1024
Linker Version = 6.0
OS Version = 4.0
Image Version = 6.0
Subsystem Version = 4.0
Subsystem = Windows GUI
DLL Characteristics = TerminalServerAware
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
Comment = FileVersion: 2.4.9.7
ProductVersion: 2.4.9.7
Comments: http://www.fiddler2.com/
CompanyName: Telerik
FileDescription: Installer for Fiddler Web Debugger
LegalCopyright: ©2014 Telerik. All rights reserved.
ProductName: Fiddler Setup
----
Path = [0]
Size = 1071480
Packed Size = 1071480
Virtual Size = 1071480
Offset = 52736
--
Path = [0]
Type = Nsis
Physical Size = 1071476
Tail Size = 4
Method = LZMA:23
Solid = +
Headers Size = 28489
Embedded Stub Size = 0
SubType = NSIS-2

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2014-11-25 20:31:58 .....        39672      1071472  UpdateFiddler.exe
2014-11-25 20:31:58 .....        39672               UpdateFiddler2.exe
2014-11-25 20:31:56 .....      1078024               Fiddler.exe
2014-11-25 20:32:02 .....        15120               TrustCert.exe
2011-12-30 20:49:24 .....          111               fiddler.exe.config
2014-07-08 20:26:20 .....         2931               credits.txt
2014-11-18 20:49:20 .....        55632               makecert.exe
2000-07-17 05:28:02 .....         1406               Countdown.wav
2012-08-13 22:30:28 .....        13090               Screenshot.wav
2012-07-30 01:13:38 .....         4781               LoadScript.wav
2012-07-30 00:56:34 .....         1490               LoadScriptError.wav
2014-01-31 17:43:54 .....         3158               IE_Toolbar.ico
2014-02-04 16:55:52 .....        11502               saz.ico
2014-10-07 18:26:02 .....       135168               Xceed.FileSystem.dll
2014-10-07 18:26:02 .....       319488               Xceed.Zip.dll
2014-10-07 18:26:02 .....       233472               Xceed.Compression.dll
2014-10-07 18:26:02 .....        86016               Xceed.Compression.Formats.dll
2014-10-07 18:26:02 .....         6656               ExecAction.exe
2014-11-18 20:49:20 .....         6144               ForceCPU.exe
2014-11-25 20:23:00 .....       221184               Inspectors/Standard.dll
2014-11-18 21:12:14 .....        47616               Inspectors/Be.Windows.Forms.HexBox.dll
2014-11-10 15:37:24 .....       136440               Tools/Zopfli.exe
2014-10-07 18:26:02 .....       232448               Tools/dwebp.exe
2014-11-07 21:51:08 .....        16896               Tools/PngDistill.exe
2014-11-25 20:19:40 .....        20815               Scripts/SampleRules.js
2014-11-25 16:29:14 .....        97792               Scripts/SimpleFilter.dll
2014-11-25 16:29:12 .....        29696               Scripts/Timeline.dll
2014-10-07 18:26:02 .....       631808               Scripts/Geoedge.dll
2014-11-25 16:29:10 .....        88576               ImportExport/BasicFormats.dll
2014-11-25 16:29:10 .....        37888               ImportExport/VSWebTestExport.dll
2013-01-25 16:51:38 .....          433               ResponseTemplates/200_FiddlerGif.dat
2013-01-25 16:51:46 .....          150               ResponseTemplates/200_SimpleHTML.dat
2013-01-25 16:51:22 .....          173               ResponseTemplates/200_TransPixel.dat
2013-01-25 16:50:58 .....          106               ResponseTemplates/204_NoContent.dat
2013-01-25 16:50:54 .....          165               ResponseTemplates/302_Redirect.dat
2013-01-25 16:50:52 .....          175               ResponseTemplates/303_RedirectWithGet.dat
2013-01-25 16:50:48 .....          108               ResponseTemplates/304_NotModified.dat
2013-01-25 16:50:42 .....          183               ResponseTemplates/307_RedirectWithMethod.dat
2013-01-25 16:50:38 .....          707               ResponseTemplates/401_AuthBasic.dat
2014-08-15 17:35:58 .....          823               ResponseTemplates/401_AuthDigest.dat
2013-01-25 16:50:30 .....          631               ResponseTemplates/403_AuthDeny.dat
2013-01-25 16:50:28 .....          652               ResponseTemplates/404_Plain.dat
2013-01-25 16:50:24 .....          719               ResponseTemplates/407_ProxyAuthBasic.dat
2013-01-25 16:50:22 .....          661               ResponseTemplates/502_Unreachable.dat
                    .....        11264               $PLUGINSDIR/System.dll
2009-03-10 20:18:04 .....          290               FiddlerHook/chrome.manifest
2014-11-22 02:57:48 .....         1109               FiddlerHook/install.rdf
2012-09-15 20:51:32 .....         1798               FiddlerHook/Content/about.xul
2009-03-13 21:23:36 .....         1085               FiddlerHook/Content/fiddlerhook.png
2014-08-02 19:07:10 .....         4807               FiddlerHook/Content/firefoxOverlay.xul
2014-11-22 02:57:30 .....        21518               FiddlerHook/Content/overlay.js
2009-09-02 18:02:52 .....          723               FiddlerHook/defaults/preferences/fiddlerhook.js
2009-03-10 20:18:04 .....          123               FiddlerHook/locale/en-US/about.dtd
2013-03-27 21:53:12 .....          717               FiddlerHook/locale/en-US/fiddlerhook.dtd
2009-03-12 01:51:24 .....           76               FiddlerHook/locale/en-US/fiddlerhook.properties
2009-03-12 01:51:52 .....          514               FiddlerHook/skin/overlay.css
2009-03-13 21:26:12 .....         1117               FiddlerHook/skin/toolbar-button.png
                    .....                            uninst.exe.nsis
------------------- ----- ------------ ------------  ------------------------
2014-11-25 20:32:02            3665519      1071472  58 files
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

everything is OK