MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 000004e4

VS_FIXEDFILEINFO

Signers (1)

issuer: /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO Code Signing CA 2
serial: 6D398872131657667B476252BA58C3F3

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
        Validity
            Not Before: May 10 00:00:00 2010 GMT
            Not After : May 10 23:59:59 2015 GMT
        Subject: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Time Stamping Signer
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:35:a0:36:70:22:81:11:c3:b2:83:b9:d3:28:
                    c6:36:cd:25:6b:a9:7b:b2:1c:f6:9b:51:9c:ef:35:
                    f4:ed:08:8e:5e:38:08:f8:77:3c:0a:42:e0:f3:70:
                    dc:a3:d7:ca:f5:4c:0b:cf:ff:22:9c:0a:7e:68:d6:
                    09:a2:2a:84:7b:a6:9d:b4:a9:c1:33:e2:ef:1f:17:
                    48:ca:3a:cd:46:e6:c5:aa:77:bd:e3:77:9a:fa:47:
                    53:40:28:59:43:93:f1:a4:81:ea:ef:80:b5:4f:a7:
                    08:ce:ba:6e:bc:ca:76:0c:97:64:59:86:24:bb:3d:
                    82:90:a8:55:b1:92:d3:a0:a7:05:ac:9f:53:25:08:
                    10:47:99:cd:98:de:68:e5:b4:50:78:a3:af:01:cc:
                    59:43:58:e4:76:6e:7e:ac:c7:e2:9e:1f:4f:b0:47:
                    2d:c8:0c:a3:49:27:80:75:8c:bb:06:91:65:0f:90:
                    9b:f4:ba:d1:81:c8:5c:6a:ec:14:e9:25:09:bf:23:
                    16:f4:95:46:40:40:21:bb:83:96:fd:86:1f:7a:c8:
                    0d:10:8e:a2:f8:19:07:58:7f:9f:bd:37:02:60:f2:
                    a4:e9:9d:44:3f:30:05:e4:a7:70:99:51:9a:e8:17:
                    f1:55:ca:b2:61:89:65:46:a7:6a:f2:58:46:7e:aa:
                    a0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:DA:ED:64:74:14:9C:14:3C:AB:DD:99:A9:BD:5B:28:4D:8B:3C:C9:D8

            X509v3 Subject Key Identifier: 
                2E:2D:B0:0A:44:4A:D3:87:C0:02:07:CE:97:7D:50:62:20:FD:0F:83
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.usertrust.com/UTN-USERFirst-Object.crl

            Authority Information Access: 
                OCSP - URI:http://ocsp.usertrust.com

    Signature Algorithm: sha1WithRSAEncryption
         c8:fb:63:f8:0b:75:75:2c:3a:f1:f2:13:a7:2d:b6:a3:1a:9c:
         ad:01:07:d3:34:8e:77:e0:c2:6e:ae:02:5d:48:4f:a4:d2:21:
         b6:36:fd:2a:35:43:7c:6b:df:80:87:0b:15:f0:76:32:00:b4:
         ce:b5:67:a4:2f:2f:20:1b:9c:54:9e:83:3f:1f:5f:14:95:62:
         82:0f:22:41:22:1f:70:b3:f3:f7:42:de:6c:51:cd:4b:f8:21:
         ac:9b:3b:8c:b1:e5:e6:28:8f:ce:2a:8a:f9:aa:52:4d:8c:5b:
         77:ba:4d:5a:58:db:bb:6a:04:cc:52:1e:9d:e2:28:37:0e:bb:
         e7:0e:91:c7:f8:db:f1:81:98:eb:cd:37:b3:0e:ab:65:d3:62:
         ec:3a:a5:76:eb:13:a8:35:93:c9:2e:0a:01:ec:c0:e8:cc:3d:
         7e:b6:eb:e2:c1:ec:d3:14:92:82:66:87:50:dc:fd:50:97:ac:
         b3:4a:76:73:06:c4:86:11:3a:b3:5f:43:04:52:6f:ea:b3:d0:
         74:36:4c:ca:f1:1b:79:84:37:70:63:ad:74:b9:aa:0e:f3:98:
         b0:86:08:eb:db:e0:1f:8c:10:f2:39:64:9b:ae:4f:0a:2c:92:
         8a:4f:18:b5:91:e5:8d:1a:93:5f:1f:ae:f1:a6:f0:2e:97:d0:
         d2:f6:2b:3c

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:39:88:72:13:16:57:66:7b:47:62:52:ba:58:c3:f3
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Code Signing CA 2
        Validity
            Not Before: Jan 19 00:00:00 2012 GMT
            Not After : Jan 18 23:59:59 2015 GMT
        Subject: C=US/postalCode=98052, ST=WA, L=Redmond/street=15724 NE 53rd Street, O=Eric Lawrence, CN=Eric Lawrence
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cd:b9:f8:ec:f8:f8:f4:83:39:8e:15:8a:1d:
                    cc:58:c0:d1:f6:a0:bf:d7:72:ea:ff:be:a9:89:9d:
                    a4:91:e7:cf:6d:bc:ba:cf:fd:71:12:01:ec:e4:3d:
                    4a:35:a7:32:a6:cc:85:c1:0b:13:45:22:13:1a:7f:
                    11:ac:af:82:b9:df:6f:16:0e:27:d5:ab:6f:4e:52:
                    32:00:bb:d4:5a:5a:a7:b7:74:33:04:98:96:6d:e5:
                    62:5b:74:93:26:6d:bf:08:8a:5d:07:79:03:11:e4:
                    e5:3c:ba:f7:22:ee:4e:44:67:4f:a8:65:56:3c:53:
                    16:9f:64:71:1b:c1:66:4d:e5:e9:db:98:c0:81:28:
                    08:7f:62:ae:49:76:17:1d:1b:1b:d8:39:e4:0f:dc:
                    b8:a5:b3:e1:e5:48:c7:76:38:08:75:43:5a:54:80:
                    e9:8c:ab:85:5d:18:a8:d0:bf:09:b1:7d:08:81:31:
                    3d:44:0b:44:67:ad:ef:58:e2:bd:b7:cf:86:b5:85:
                    1a:16:15:5b:b2:86:3e:a2:dd:25:81:f4:02:14:16:
                    21:96:8c:ab:24:6c:09:06:8e:af:51:85:58:19:9a:
                    78:5b:85:87:00:ba:20:37:9d:30:55:11:57:1f:d6:
                    0c:e9:6b:f7:41:95:ec:a2:ae:f8:a4:7c:8c:32:f8:
                    96:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                keyid:1E:C5:B1:2C:7D:87:DA:02:68:7C:25:BC:0C:07:84:3F:B6:CF:DE:F1

            X509v3 Subject Key Identifier: 
                E7:6E:0F:E6:52:C6:BC:62:F8:C8:4A:8A:3B:AE:9B:12:5B:E9:76:95
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                Code Signing
            Netscape Cert Type: 
                Object Signing
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.1.3.2
                  CPS: https://secure.comodo.net/CPS

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.comodoca.com/COMODOCodeSigningCA2.crl

            Authority Information Access: 
                CA Issuers - URI:http://crt.comodoca.com/COMODOCodeSigningCA2.crt
                OCSP - URI:http://ocsp.comodoca.com

    Signature Algorithm: sha1WithRSAEncryption
         37:92:d5:8e:d8:4d:05:2c:98:3d:7d:08:5b:92:3c:f3:38:3e:
         0c:dd:49:63:9a:c7:be:7f:7d:df:3d:f6:fc:75:8e:f4:8b:02:
         16:b8:4d:da:f5:5b:fd:27:ac:07:86:a3:84:53:16:54:da:c5:
         72:7f:42:2a:f6:cc:5d:63:06:76:37:b7:a7:6a:9e:12:ae:5b:
         dc:d5:f2:4d:16:65:3a:d4:a7:bf:56:81:25:d8:4f:f1:fb:1d:
         cd:b8:ad:14:5a:f4:7f:88:07:d4:63:3f:48:3c:6a:64:f2:e8:
         31:9c:cf:62:e8:e1:34:53:79:13:67:4d:04:ae:3e:69:08:26:
         87:a6:69:dc:76:cc:e9:aa:4b:17:ab:17:e3:c5:4c:7f:c8:6f:
         1a:b2:1b:b0:61:8c:6e:be:60:01:10:9d:61:05:53:b4:ed:53:
         b3:63:76:1c:40:f6:37:6b:8c:d7:76:83:ab:a8:97:08:c0:56:
         71:9c:07:f8:67:34:e7:82:50:dc:74:cc:fa:a8:e2:ea:9e:5a:
         d0:51:f5:b3:ce:6e:7e:46:0c:83:d6:9b:97:24:12:88:f8:8c:
         ec:84:b4:04:7f:79:f9:a3:06:cf:66:ec:d9:f3:66:be:86:2c:
         f8:79:65:8c:c4:10:9c:4c:42:bf:45:3f:ab:9d:c5:f6:c2:ec:
         a8:7a:1d:ae
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
        • SHA1
          • 4e 37 9b 3e 5e 80 68 5c  6b 2f 62 5f 7c 70 b5 19  |N7.>^.h\k/b_|p..|
            97 f4 ae f5                                       |....            |
    • Certificates
      • Certificate #0
        • 2
          • 47:8A:8E:FB:59:E1:D8:3F:0C:E1:42:D2:A2:87:07:BE
          • RSA-SHA1: nil
          • Issuer
            • C: US
            • ST: UT
            • L: Salt Lake City
            • O: The USERTRUST Network
            • OU: http://www.usertrust.com
            • CN: UTN-USERFirst-Object
          • 2010-05-10 00:00:00 UTC: 2015-05-10 23:59:59 UTC
          • Subject
            • C: GB
            • ST: Greater Manchester
            • L: Salford
            • O: COMODO CA Limited
            • CN: COMODO Time Stamping Signer
          • #5
            • rsaEncryption: nil
            • BC:35:A0:36:70:22:81:11:C3:B2:83:B9:D3:28:C6:36:
              CD:25:6B:A9:7B:B2:1C:F6:9B:51:9C:EF:35:F4:ED:08:
              8E:5E:38:08:F8:77:3C:0A:42:E0:F3:70:DC:A3:D7:CA:
              F5:4C:0B:CF:FF:22:9C:0A:7E:68:D6:09:A2:2A:84:7B:
              A6:9D:B4:A9:C1:33:E2:EF:1F:17:48:CA:3A:CD:46:E6:
              C5:AA:77:BD:E3:77:9A:FA:47:53:40:28:59:43:93:F1:
              A4:81:EA:EF:80:B5:4F:A7:08:CE:BA:6E:BC:CA:76:0C:
              97:64:59:86:24:BB:3D:82:90:A8:55:B1:92:D3:A0:A7:
              05:AC:9F:53:25:08:10:47:99:CD:98:DE:68:E5:B4:50:
              78:A3:AF:01:CC:59:43:58:E4:76:6E:7E:AC:C7:E2:9E:
              1F:4F:B0:47:2D:C8:0C:A3:49:27:80:75:8C:BB:06:91:
              65:0F:90:9B:F4:BA:D1:81:C8:5C:6A:EC:14:E9:25:09:
              BF:23:16:F4:95:46:40:40:21:BB:83:96:FD:86:1F:7A:
              C8:0D:10:8E:A2:F8:19:07:58:7F:9F:BD:37:02:60:F2:
              A4:E9:9D:44:3F:30:05:E4:A7:70:99:51:9A:E8:17:F1:
              55:CA:B2:61:89:65:46:A7:6A:F2:58:46:7E:AA:A0:07
              : 0x010001
          • #6
            • authorityKeyIdentifier:
              da ed 64 74 14 9c 14 3c  ab dd 99 a9 bd 5b 28 4d  |..dt...<.....[(M|
              8b 3c c9 d8                                       |.<..            |
            • subjectKeyIdentifier:
              2e 2d b0 0a 44 4a d3 87  c0 02 07 ce 97 7d 50 62  |.-..DJ.......}Pb|
              20 fd 0f 83                                       | ...            |
            • keyUsage: true, 0xc0
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: true, timeStamping
            • crlDistributionPoints: http://crl.usertrust.com/UTN-USERFirst-Object.crl
            • authorityInfoAccess
              • OCSP: http://ocsp.usertrust.com
        • RSA-SHA1:
          c8 fb 63 f8 0b 75 75 2c  3a f1 f2 13 a7 2d b6 a3  |..c..uu,:....-..|
          1a 9c ad 01 07 d3 34 8e  77 e0 c2 6e ae 02 5d 48  |......4.w..n..]H|
          4f a4 d2 21 b6 36 fd 2a  35 43 7c 6b df 80 87 0b  |O..!.6.*5C|k....|
          15 f0 76 32 00 b4 ce b5  67 a4 2f 2f 20 1b 9c 54  |..v2....g.// ..T|
          9e 83 3f 1f 5f 14 95 62  82 0f 22 41 22 1f 70 b3  |..?._..b.."A".p.|
          f3 f7 42 de 6c 51 cd 4b  f8 21 ac 9b 3b 8c b1 e5  |..B.lQ.K.!..;...|
          e6 28 8f ce 2a 8a f9 aa  52 4d 8c 5b 77 ba 4d 5a  |.(..*...RM.[w.MZ|
          58 db bb 6a 04 cc 52 1e  9d e2 28 37 0e bb e7 0e  |X..j..R...(7....|
          91 c7 f8 db f1 81 98 eb  cd 37 b3 0e ab 65 d3 62  |.........7...e.b|
          ec 3a a5 76 eb 13 a8 35  93 c9 2e 0a 01 ec c0 e8  |.:.v...5........|
          cc 3d 7e b6 eb e2 c1 ec  d3 14 92 82 66 87 50 dc  |.=~.........f.P.|
          fd 50 97 ac b3 4a 76 73  06 c4 86 11 3a b3 5f 43  |.P...Jvs....:._C|
          04 52 6f ea b3 d0 74 36  4c ca f1 1b 79 84 37 70  |.Ro...t6L...y.7p|
          63 ad 74 b9 aa 0e f3 98  b0 86 08 eb db e0 1f 8c  |c.t.............|
          10 f2 39 64 9b ae 4f 0a  2c 92 8a 4f 18 b5 91 e5  |..9d..O.,..O....|
          8d 1a 93 5f 1f ae f1 a6  f0 2e 97 d0 d2 f6 2b 3c  |..._..........+<|
      • Certificate #1
        • 2
          • 6D:39:88:72:13:16:57:66:7B:47:62:52:BA:58:C3:F3
          • RSA-SHA1: nil
          • Issuer
            • C: GB
            • ST: Greater Manchester
            • L: Salford
            • O: COMODO CA Limited
            • CN: COMODO Code Signing CA 2
          • 2012-01-19 00:00:00 UTC: 2015-01-18 23:59:59 UTC
          • Subject
            • C: US
            • postalCode: 98052
            • ST: WA
            • L: Redmond
            • street: 15724 NE 53rd Street
            • O: Eric Lawrence
            • CN: Eric Lawrence
          • #5
            • rsaEncryption: nil
            • B8:CD:B9:F8:EC:F8:F8:F4:83:39:8E:15:8A:1D:CC:58:
              C0:D1:F6:A0:BF:D7:72:EA:FF:BE:A9:89:9D:A4:91:E7:
              CF:6D:BC:BA:CF:FD:71:12:01:EC:E4:3D:4A:35:A7:32:
              A6:CC:85:C1:0B:13:45:22:13:1A:7F:11:AC:AF:82:B9:
              DF:6F:16:0E:27:D5:AB:6F:4E:52:32:00:BB:D4:5A:5A:
              A7:B7:74:33:04:98:96:6D:E5:62:5B:74:93:26:6D:BF:
              08:8A:5D:07:79:03:11:E4:E5:3C:BA:F7:22:EE:4E:44:
              67:4F:A8:65:56:3C:53:16:9F:64:71:1B:C1:66:4D:E5:
              E9:DB:98:C0:81:28:08:7F:62:AE:49:76:17:1D:1B:1B:
              D8:39:E4:0F:DC:B8:A5:B3:E1:E5:48:C7:76:38:08:75:
              43:5A:54:80:E9:8C:AB:85:5D:18:A8:D0:BF:09:B1:7D:
              08:81:31:3D:44:0B:44:67:AD:EF:58:E2:BD:B7:CF:86:
              B5:85:1A:16:15:5B:B2:86:3E:A2:DD:25:81:F4:02:14:
              16:21:96:8C:AB:24:6C:09:06:8E:AF:51:85:58:19:9A:
              78:5B:85:87:00:BA:20:37:9D:30:55:11:57:1F:D6:0C:
              E9:6B:F7:41:95:EC:A2:AE:F8:A4:7C:8C:32:F8:96:61
              : 0x010001
          • #6
            • authorityKeyIdentifier:
              1e c5 b1 2c 7d 87 da 02  68 7c 25 bc 0c 07 84 3f  |...,}...h|%....?|
              b6 cf de f1                                       |....            |
            • subjectKeyIdentifier:
              e7 6e 0f e6 52 c6 bc 62  f8 c8 4a 8a 3b ae 9b 12  |.n..R..b..J.;...|
              5b e9 76 95                                       |[.v.            |
            • keyUsage: true, 0x80
            • basicConstraints
              • true
              • nil
            • extendedKeyUsage: codeSigning
            • nsCertType: 0x10
            • certificatePolicies
              • 1.3.6.1.4.1.6449.1.2.1.3.2
                • id-qt-cps: https://secure.comodo.net/CPS
            • crlDistributionPoints: http://crl.comodoca.com/COMODOCodeSigningCA2.crl
            • authorityInfoAccess
              • #0
                • caIssuers: http://crt.comodoca.com/COMODOCodeSigningCA2.crt
                • OCSP: http://ocsp.comodoca.com
        • RSA-SHA1:
          37 92 d5 8e d8 4d 05 2c  98 3d 7d 08 5b 92 3c f3  |7....M.,.=}.[.<.|
          38 3e 0c dd 49 63 9a c7  be 7f 7d df 3d f6 fc 75  |8>..Ic....}.=..u|
          8e f4 8b 02 16 b8 4d da  f5 5b fd 27 ac 07 86 a3  |......M..[.'....|
          84 53 16 54 da c5 72 7f  42 2a f6 cc 5d 63 06 76  |.S.T..r.B*..]c.v|
          37 b7 a7 6a 9e 12 ae 5b  dc d5 f2 4d 16 65 3a d4  |7..j...[...M.e:.|
          a7 bf 56 81 25 d8 4f f1  fb 1d cd b8 ad 14 5a f4  |..V.%.O.......Z.|
          7f 88 07 d4 63 3f 48 3c  6a 64 f2 e8 31 9c cf 62  |....c?Hi.&..|
          69 dc 76 cc e9 aa 4b 17  ab 17 e3 c5 4c 7f c8 6f  |i.v...K.....L..o|
          1a b2 1b b0 61 8c 6e be  60 01 10 9d 61 05 53 b4  |....a.n.`...a.S.|
          ed 53 b3 63 76 1c 40 f6  37 6b 8c d7 76 83 ab a8  |.S.cv.@.7k..v...|
          97 08 c0 56 71 9c 07 f8  67 34 e7 82 50 dc 74 cc  |...Vq...g4..P.t.|
          fa a8 e2 ea 9e 5a d0 51  f5 b3 ce 6e 7e 46 0c 83  |.....Z.Q...n~F..|
          d6 9b 97 24 12 88 f8 8c  ec 84 b4 04 7f 79 f9 a3  |...$.........y..|
          06 cf 66 ec d9 f3 66 be  86 2c f8 79 65 8c c4 10  |..f...f..,.ye...|
          9c 4c 42 bf 45 3f ab 9d  c5 f6 c2 ec a8 7a 1d ae  |.LB.E?.......z..|
    • Signer
      • 1
      • unnamed
        • #0
          • C: GB
          • ST: Greater Manchester
          • L: Salford
          • O: COMODO CA Limited
          • CN: COMODO Code Signing CA 2
        • 6D:39:88:72:13:16:57:66:7B:47:62:52:BA:58:C3:F3
      • SHA1: nil
      • #3
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • 1.3.6.1.4.1.311.2.1.11: msCodeInd
        • messageDigest:
          a3 bb 5b b5 be 9f 40 9f  b7 16 ee 5a 46 76 ac 17  |..[...@....ZFv..|
          41 a6 d9 fb                                       |A...            |
        • 1.3.6.1.4.1.311.2.1.12
          • 00 46 00 69 00 64 00 64  00 6c 00 65 00 72 00 32  |.F.i.d.d.l.e.r.2|
            00 20 00 57 00 65 00 62  00 20 00 44 00 65 00 62  |. .W.e.b. .D.e.b|
            00 75 00 67 00 67 00 65  00 72                    |.u.g.g.e.r      |
            : http://www.fiddler2.com/fiddler2/
      • rsaEncryption:
        b8 9e 81 1e d9 7f 42 6a  44 c7 94 be 34 9b 16 04  |......BjD...4...|
        b8 57 c8 fe ef f7 de 1e  3e 5c 34 60 ef bd 9e a1  |.W......>\4`....|
        9b 65 ba 65 54 75 bf 81  bc f8 3a 3c 99 c5 f9 a4  |.e.eTu....:<....|
        97 0b 66 a6 d9 12 96 4a  a0 3b 79 6f 7e e4 13 9b  |..f....J.;yo~...|
        4d 13 fc f9 44 62 d7 59  b1 23 26 38 30 6c 88 77  |M...Db.Y.#&80l.w|
        c7 72 51 28 ce fd 9c 37  fc f8 8c 9c ef 12 4b 79  |.rQ(...7......Ky|
        39 83 d9 94 87 2f fc b4  2f 9e 89 86 62 b7 f3 93  |9..../../...b...|
        0e bd 8a 64 07 73 0c 52  44 37 27 04 69 99 21 14  |...d.s.RD7'.i.!.|
        10 6a a1 fc 9a c9 ed 59  74 86 e8 2b 00 0b 66 9a  |.j.....Yt..+..f.|
        c5 d3 28 99 07 19 7c 18  a1 c6 d1 f8 49 3a a0 99  |..(...|.....I:..|
        40 df 56 5a 14 84 4d 86  6f 56 53 a9 bf 32 5b 1e  |@.VZ..M.oVS..2[.|
        41 73 21 f8 68 9a dc 14  23 00 73 89 c2 80 17 ca  |As!.h...#.s.....|
        95 a7 18 72 65 77 f5 5a  5c 7c 94 28 16 c2 c2 06  |...rew.Z\|.(....|
        5b 83 5b 88 98 2c 39 c5  ef c6 d4 69 a1 9e f1 73  |[.[..,9....i...s|
        ff 2d 6a 5d 56 9c 78 a0  9d 7f c1 90 4e 51 0f 6a  |.-j]V.x.....NQ.j|
        f4 71 a6 f4 65 40 f0 05  1d ca e1 20 02 c1 b2 d8  |.q..e@..... ....|
      • countersignature
        • 0
          • unnamed
            • #0
              • C: US
              • ST: UT
              • L: Salt Lake City
              • O: The USERTRUST Network
              • OU: http://www.usertrust.com
              • CN: UTN-USERFirst-Object
            • 47:8A:8E:FB:59:E1:D8:3F:0C:E1:42:D2:A2:87:07:BE
          • SHA1: nil
          • #2
            • contentType: pkcs7-data
            • signingTime: 2013-08-15 21:14:51 UTC
            • messageDigest:
              bf a7 c8 f0 6e 73 27 0b  f7 2a c6 6c dc 61 2c 43  |....ns'..*.l.a,C|
              dc 5a 2e d1                                       |.Z..            |
          • rsaEncryption:
            20 43 e9 1a 3a 48 ba 22  d2 60 e2 91 ca 09 a1 21  | C..:H.".`.....!|
            60 b4 61 a6 40 3f 3d d1  fe e3 75 7f 90 7a f4 1f  |`.a.@?=...u..z..|
            9d 79 04 f9 d7 8d 7c b8  97 f9 26 5a 52 02 3f 91  |.y....|...&ZR.?.|
            5e b2 07 b5 2b d2 5f 68  47 57 0d f0 79 8c ad 70  |^...+._hGW..y..p|
            7d 86 ce 1e 46 3d 43 ce  4e 39 ba 43 cc aa e8 e5  |}...F=C.N9.C....|
            2d 21 b1 7f 77 00 0c 9b  4c a7 b3 63 af aa ac 14  |-!..w...L..c....|
            84 be a0 7b f2 d5 b8 58  f0 91 68 be a8 67 65 42  |...{...X..h..geB|
            54 07 ce 59 44 8f 50 d8  ae 6e 9c 99 31 96 08 6b  |T..YD.P..n..1..k|
            57 6c f5 4f ab 09 52 f6  4a fc 2e ec d0 f1 b8 0a  |Wl.O..R.J.......|
            e5 76 90 3c 6d 70 94 63  72 d9 3e aa f9 9a f0 af  |.v......|
            96 3f 9e 63 56 fb f2 2e  2e 13 9a 38 7a e6 1d d8  |.?.cV......8z...|
            a1 5a c3 4d 19 80 f4 52  1f 35 65 8a 97 59 64 12  |.Z.M...R.5e..Yd.|
            ad 12 f7 2a 07 b1 b3 5e  6d cc 42 7d f7 b3 2f a6  |...*...^m.B}../.|
            a9 9e d3 e5 80 36 48 03  48 cb e9 cc da 6f 57 9c  |.....6H.H....oW.|
            1f 2c d3 30 ce 1a 7a 5a  64 df 5a 85 1b c3 a3 ce  |.,.0..zZd.Z.....|
            fe b9 b6 90 ff e0 02 9a  75 57 91 1f dc 42 47 64  |........uW...BGd|
offsetsizetypecomment
051712EXE12/05/2009 22:50:46#
15c115HTM#
ca00705872BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 757584 bytes (740 KiB)


--
Type = PE
Physical Size = 757584
CPU = x86
Characteristics = Executable 32-bit NoRelocs NoLineNums NoLocalSyms
Created = 2009-12-05 22:50:46
Headers Size = 1024
Checksum = 767510
Image Size = 208896
Section Alignment = 4096
File Alignment = 512
Code Size = 23552
Initialized Data Size = 119808
Uninitialized Data Size = 1024
Linker Version = 6.0
OS Version = 4.0
Image Version = 6.0
Subsystem Version = 4.0
Subsystem = Windows GUI
DLL Characteristics = TerminalServerAware
Stack Reserve = 1048576
Stack Commit = 4096
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
Comment = FileVersion: 2.4.5.0
ProductVersion: 2.4.5.0
Comments: http://www.fiddler2.com/
CompanyName: Telerik
FileDescription: Installer for Fiddler Web Debugger
LegalCopyright: ©2013 Telerik. All rights reserved.
ProductName: Fiddler Setup
----
Path = [0]
Size = 702024
Packed Size = 702024
Virtual Size = 702024
Offset = 51712
--
Path = [0]
Type = Nsis
Physical Size = 702018
Tail Size = 6
Method = LZMA:23
Solid = +
Headers Size = 27018
Embedded Stub Size = 0
SubType = NSIS-2

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2013-08-15 21:14:42 .....        39160       702014  UpdateFiddler.exe
2013-08-15 21:14:42 .....        39160               UpdateFiddler2.exe
2013-08-15 21:14:40 .....       958216               Fiddler.exe
2013-08-15 21:14:46 .....        15120               TrustCert.exe
2011-12-30 20:49:24 .....          111               fiddler.exe.config
2012-12-04 16:37:06 .....         1241               credits.txt
2009-07-15 05:10:42 .....        55632               makecert.exe
2000-07-17 05:28:02 .....         1406               Countdown.wav
2012-08-13 22:30:28 .....        13090               Screenshot.wav
2012-07-30 01:13:38 .....         4781               LoadScript.wav
2012-07-30 00:56:34 .....         1490               LoadScriptError.wav
2013-03-13 17:18:38 .....         4302               IE_Toolbar.ico
2008-08-02 01:06:08 .....        11502               saz.ico
2013-01-10 16:50:00 .....       135168               Xceed.FileSystem.dll
2013-01-10 16:50:56 .....       319488               Xceed.Zip.dll
2013-01-10 16:49:46 .....       233472               Xceed.Compression.dll
2013-01-10 16:50:32 .....        81920               Xceed.Compression.Formats.dll
2013-05-17 14:17:06 .....         6656               ExecAction.exe
2013-02-14 21:14:58 .....         6144               ForceCPU.exe
2013-08-15 21:14:04 .....       204800               Inspectors/Standard.dll
2013-04-04 17:32:02 .....        47616               Inspectors/Be.Windows.Forms.HexBox.dll
2013-08-10 17:21:14 .....        20444               Scripts/SampleRules.js
2013-08-12 21:22:38 .....        71680               Scripts/SimpleFilter.dll
2013-08-12 21:22:38 .....        29184               Scripts/Timeline.dll
2013-08-12 21:22:36 .....        51712               ImportExport/BasicFormats.dll
2013-08-12 21:22:36 .....        36352               ImportExport/VSWebTestExport.dll
2013-01-25 16:51:38 .....          433               ResponseTemplates/200_FiddlerGif.dat
2013-01-25 16:51:46 .....          150               ResponseTemplates/200_SimpleHTML.dat
2013-01-25 16:51:22 .....          173               ResponseTemplates/200_TransPixel.dat
2013-01-25 16:50:58 .....          106               ResponseTemplates/204_NoContent.dat
2013-01-25 16:50:54 .....          165               ResponseTemplates/302_Redirect.dat
2013-01-25 16:50:52 .....          175               ResponseTemplates/303_RedirectWithGet.dat
2013-01-25 16:50:48 .....          108               ResponseTemplates/304_NotModified.dat
2013-01-25 16:50:42 .....          183               ResponseTemplates/307_RedirectWithMethod.dat
2013-01-25 16:50:38 .....          707               ResponseTemplates/401_AuthBasic.dat
2013-01-25 16:50:34 .....          822               ResponseTemplates/401_AuthDigest.dat
2013-01-25 16:50:30 .....          631               ResponseTemplates/403_AuthDeny.dat
2013-01-25 16:50:28 .....          652               ResponseTemplates/404_Plain.dat
2013-01-25 16:50:24 .....          719               ResponseTemplates/407_ProxyAuthBasic.dat
2013-01-25 16:50:22 .....          661               ResponseTemplates/502_Unreachable.dat
                    .....        11264               $PLUGINSDIR/System.dll
2009-03-10 20:18:04 .....          290               FiddlerHook/chrome.manifest
2013-05-23 16:36:58 .....         1123               FiddlerHook/install.rdf
2012-09-15 20:51:32 .....         1798               FiddlerHook/Content/about.xul
2009-03-13 21:23:36 .....         1085               FiddlerHook/Content/fiddlerhook.png
2013-03-27 20:43:06 .....         4484               FiddlerHook/Content/firefoxOverlay.xul
2013-03-27 21:45:54 .....        20926               FiddlerHook/Content/overlay.js
2009-09-02 18:02:52 .....          723               FiddlerHook/defaults/preferences/fiddlerhook.js
2009-03-10 20:18:04 .....          123               FiddlerHook/locale/en-US/about.dtd
2013-03-27 21:53:12 .....          717               FiddlerHook/locale/en-US/fiddlerhook.dtd
2009-03-12 01:51:24 .....           76               FiddlerHook/locale/en-US/fiddlerhook.properties
2009-03-12 01:51:52 .....          514               FiddlerHook/skin/overlay.css
2009-03-13 21:26:12 .....         1117               FiddlerHook/skin/toolbar-button.png
                    .....                            uninst.exe.nsis
------------------- ----- ------------ ------------  ------------------------
2013-08-15 21:14:46            2439772       702014  54 files
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

everything is OK