comments powered byDisqus

MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904e4

VS_FIXEDFILEINFO

offsetsizetypecomment
02863104EXE08/14/2013 04:06:51#
171764611505ZIP#
Path = .rsrc/1033/IDR_ZIP/170
Size = 630443
Packed Size = 630443
--
Path = .rsrc/1033/IDR_ZIP/170
Type = 7z
Method = LZMA BCJ
Solid = -
Blocks = 2
Physical Size = 630443
Headers Size = 206

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2012-09-12 21:47:04 ....A         1267          830  _ReadMe_AntiRecovery.txt
2013-08-20 14:56:20 ....A      1716224       629407  AntiRecovery.exe
------------------- ----- ------------ ------------  ------------------------
                               1717491       630237  2 files, 0 folders
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

everything is OK