filenamePatch JB 2023.x.x.exe
size10264995 (0x9ca1a3)
md52225a9180e142415ae27486fc2631809
typePE32+ executable (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x50
blocks_in_file2
num_relocs0
header_paragraphs4
min_extra_paragraphs0xf
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0x1a
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 36 34 0d 0a 24 37  00 00 00 00 00 00 00 00  |in64..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

SignaturePE
Machine0x8664
NumberOfSections0xa
TimeDateStamp0x61231c0a
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x23
Magic0x20b
LinkerVersion8.0
SizeOfCode0x5cc00
SizeOfInitializedData0x25c00
SizeOfUninitializedData0
AddressOfEntryPoint0x5d1a0
BaseOfCode0x1000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.2
ImageVersion5.2
SubsystemVersion5.2
Reserved10
SizeOfImage0x94000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x4000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x2000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x5ca100x5cc00R-X CODE
.data0x5e0000xd7480xd800RW- IDATA
.bss0x6c0000x95300RW-
.idata0x760000x15320x1600RW- IDATA
.didata0x780000x18c0x200RW- IDATA
.edata0x790000x960x200R-- IDATA
.tls0x7a0000x1a00RW-
.rdata0x7b0000x280x200R-- IDATA
.pdata0x7c0000x53280x5400R-- IDATA
.rsrc0x820000x113b80x11400R-- IDATA

Data Directory

typevasize
EXPORT0x790000x96
IMPORT0x760000x1532
RESOURCE0x820000x113b8
EXCEPTION0x7c0000x5328
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS0x7b0000x28
LOAD_CONFIG00
Bound_IAT00
IAT0x765d00x4e0
Delay_IAT0x780000x18c
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x47a0000x47a1a00x4604140x47b02000
typenamesizecp
ICON#196401252
STRING#40896881252
STRING#40907721252
STRING#40912081252
STRING#40921841252
STRING#40936641252
STRING#40949681252
STRING#40958241252
STRING#40967201252
RCDATAOPT481252
RCDATAPLATFORMTARGETS21252
RCDATASRC540481252
GROUP_ICONMAINICON201252
MANIFEST#19201252
idlangstring
654080Windows Server 2008
654090Windows 7
654100Windows Server 2008 R2
654110Windows 2000
654120Windows XP
654130Windows Server 2003
654140Windows Server 2003 R2
654150Windows Server 2012
654160Windows 8
654170cmdln
654180MYFILES
654190Error loading resources.
654200Could not create process.
654210Quick Batch File Compiler Runtime Module Version 5.x Copyright (C) 2004-2021 Abyss Media Company, https://www.abyssmedia.com
654240Cannot assign a %s to a %s
654250Cannot create file "%s". %s
654260Cannot open file "%s". %s
654270Invalid file name - %s
654280%s.Seek not implemented
654290Stream write error
654300The specified file was not found
654310Argument out of range
654320Item not found
654330Duplicates not allowed
654340%s (Version %d.%d, Build %d, %5:s)
654350%s Service Pack %4:d (Version %1:d.%2:d, Build %3:d, %5:s)
65436032-bit Edition
65437064-bit Edition
654380Windows
654390Windows Vista
654400November
654410December
654420Sun
654430Mon
654440Tue
654450Wed
654460Thu
654470Fri
654480Sat
654490Sunday
654500Monday
654510Tuesday
654520Wednesday
654530Thursday
654540Friday
654550Saturday
654560Jul
654570Aug
654580Sep
654590Oct
654600Nov
654610Dec
654620January
654630February
654640March
654650April
654660May
654670June
654680July
654690August
654700September
654710October
654720Exception in safecall method
654730Object lock not owned
654740Monitor support function not initialized
654750Feature not implemented
654760Method called on disposed object
654770%s (%s, line %d)
654780Abstract Error
654790Access violation at address %p in module '%s'. %s of address %p
654800System Error. Code: %d. %s%s
654810A call to an OS function failed
654820Jan
654830Feb
654840Mar
654850Apr
654860May
654870Jun
654880Variant or safe array index out of bounds
654890Variant or safe array is locked
654900Invalid variant type conversion
654910Invalid variant operation
654920Invalid NULL variant operation
654930Invalid variant operation (%s%.8x) %s
654940Could not convert variant of type (%s) into type (%s)
654950Overflow while converting variant of type (%s) into type (%s)
654960Variant overflow
654970Invalid argument
654980Invalid variant type
654990Operation not supported
655000Unexpected variant error
655010External exception %x
655020Assertion failed
655030Interface not supported
655040Floating point underflow
655050Invalid pointer operation
655060Invalid class typecast
655070Access violation at address %p. %s of address %p
655080Access violation
655090Stack overflow
655100Control-C hit
655110Privileged instruction
655120Exception %s in module %s at %p. %s%s
655130Application Error
655140Format '%s' invalid or incompatible with argument
655150No argument for format '%s'
655160Variant method calls not supported
655170Read
655180Write
655190Error creating variant or safe array
655200'%d.%d' is not a valid timestamp
655210Invalid argument to time encode
655220Invalid argument to date encode
655230Out of memory
655240I/O error %d
655250Too many open files
655260File access denied
655270Read beyond end of file
655280Disk full
655290Invalid numeric input
655300Division by zero
655310Range check error
655320Integer overflow
655330Invalid floating point operation
655340Floating point division by zero
655350Floating point overflow
module_namehintordfunction_name
oleaut32.dllSysFreeString
oleaut32.dllSysReAllocStringLen
oleaut32.dllSysAllocStringLen
advapi32.dllRegQueryValueExW
advapi32.dllRegOpenKeyExW
advapi32.dllRegCloseKey
user32.dllMessageBoxA
user32.dllCharNextW
user32.dllLoadStringW
kernel32.dllSleep
kernel32.dllVirtualFree
kernel32.dllVirtualAlloc
kernel32.dllHeapFree
kernel32.dllHeapAlloc
kernel32.dllGetProcessHeap
kernel32.dlllstrlenW
kernel32.dllVirtualQuery
kernel32.dllQueryPerformanceCounter
kernel32.dllGetTickCount
kernel32.dllGetSystemInfo
kernel32.dllGetVersion
kernel32.dllCompareStringW
kernel32.dllIsValidLocale
kernel32.dllSetThreadLocale
kernel32.dllGetSystemDefaultUILanguage
kernel32.dllGetUserDefaultUILanguage
kernel32.dllGetLocaleInfoW
kernel32.dllWideCharToMultiByte
kernel32.dllMultiByteToWideChar
kernel32.dllGetACP
kernel32.dllLoadLibraryExW
kernel32.dllGetStartupInfoW
kernel32.dllGetProcAddress
kernel32.dllGetModuleHandleW
kernel32.dllGetModuleFileNameW
kernel32.dllGetCommandLineW
kernel32.dllFreeLibrary
kernel32.dllGetLastError
kernel32.dllUnhandledExceptionFilter
kernel32.dllRtlUnwindEx
kernel32.dllRtlUnwind
kernel32.dllRaiseException
kernel32.dllExitProcess
kernel32.dllSwitchToThread
kernel32.dllGetCurrentThreadId
kernel32.dllDeleteCriticalSection
kernel32.dllLeaveCriticalSection
kernel32.dllEnterCriticalSection
kernel32.dllInitializeCriticalSection
kernel32.dllFindFirstFileW
kernel32.dllFindClose
kernel32.dllWriteFile
kernel32.dllGetStdHandle
kernel32.dllCloseHandle
kernel32.dllGetProcAddress
kernel32.dllRaiseException
kernel32.dllLoadLibraryA
kernel32.dllGetLastError
kernel32.dllTlsSetValue
kernel32.dllTlsGetValue
kernel32.dllLocalFree
kernel32.dllLocalAlloc
kernel32.dllGetModuleHandleW
kernel32.dllFreeLibrary
user32.dllOemToCharW
user32.dllMessageBoxW
user32.dllLoadStringW
user32.dllGetSystemMetrics
user32.dllCharUpperW
user32.dllCharLowerBuffW
kernel32.dllWriteFile
kernel32.dllWideCharToMultiByte
kernel32.dllWaitForSingleObject
kernel32.dllVirtualQueryEx
kernel32.dllVirtualQuery
kernel32.dllVirtualFree
kernel32.dllUnmapViewOfFile
kernel32.dllSwitchToThread
kernel32.dllSizeofResource
kernel32.dllSetLastError
kernel32.dllSetFileTime
kernel32.dllSetFilePointer
kernel32.dllSetEvent
kernel32.dllSetEnvironmentVariableW
kernel32.dllSetEndOfFile
kernel32.dllResetEvent
kernel32.dllRemoveDirectoryW
kernel32.dllReadFile
kernel32.dllMapViewOfFile
kernel32.dllLockResource
kernel32.dllLocalFree
kernel32.dllLocalFileTimeToFileTime
kernel32.dllLoadResource
kernel32.dllLeaveCriticalSection
kernel32.dllIsValidLocale
kernel32.dllInitializeCriticalSection
kernel32.dllGetVersionExW
kernel32.dllGetTickCount
kernel32.dllGetThreadLocale
kernel32.dllGetTempPathW
kernel32.dllGetStdHandle
kernel32.dllGetProcAddress
kernel32.dllGetModuleHandleW
kernel32.dllGetModuleFileNameW
kernel32.dllGetLocaleInfoW
kernel32.dllGetLocalTime
kernel32.dllGetLastError
kernel32.dllGetFullPathNameW
kernel32.dllGetFileSize
kernel32.dllGetFileAttributesW
kernel32.dllGetExitCodeProcess
kernel32.dllGetDiskFreeSpaceW
kernel32.dllGetDateFormatW
kernel32.dllGetCurrentThreadId
kernel32.dllGetCurrentProcessId
kernel32.dllGetCurrentProcess
kernel32.dllGetCommandLineW
kernel32.dllGetCPInfo
kernel32.dllFreeResource
kernel32.dllFreeLibrary
kernel32.dllFormatMessageW
kernel32.dllFindResourceW
kernel32.dllEnumCalendarInfoW
kernel32.dllEnterCriticalSection
kernel32.dllDosDateTimeToFileTime
kernel32.dllDeleteFileW
kernel32.dllDeleteCriticalSection
kernel32.dllCreateProcessW
kernel32.dllCreateFileMappingW
kernel32.dllCreateFileW
kernel32.dllCreateEventW
kernel32.dllCreateDirectoryW
kernel32.dllCompareStringW
kernel32.dllCloseHandle
SHFolder.dllSHGetFolderPathW
kernel32.dllSleep
oleaut32.dllSafeArrayPtrOfIndex
oleaut32.dllSafeArrayGetUBound
oleaut32.dllSafeArrayGetLBound
oleaut32.dllSafeArrayCreate
oleaut32.dllVariantChangeType
oleaut32.dllVariantCopy
oleaut32.dllVariantClear
oleaut32.dllVariantInit
msvcrt.dllmemcpy
ordentry_vafunction_name
10x70d68dbkFCallWrapperAddr
20xe370__dbk_fcall_wrapper
30x3c910TMethodImplementationIntercept
module_namestub.exe
flags0
timestamp0
version0.0
ordinal_base1
nFunctions3
nNames3
Names(3)0x79034
Functions(3)0x79028
NameOrdinals(3)0x79040
offsetsizetypecomment
15c115HTM#
82c009729443ZIP#
Scanning the drive for archives:
1 file, 10264995 bytes (10025 KiB)


--
Type = zip
Physical Size = 10264995
Embedded Stub Size = 535552

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2023-03-29 21:26:00 .....      1290308      1275200  7z2201.exe
2023-06-27 20:11:00 .....           50           44  cnf
2023-04-04 20:35:34 .....        68848        68873  jb.7z
2023-04-04 20:36:26 .....         7231         7236  jbk.7z
2023-04-04 23:08:34 .....      8375073      8377628  jbl.7z
------------------- ----- ------------ ------------  ------------------------
2023-06-27 20:11:00            9741510      9728981  5 files
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK