| parent | zoek.exe | |
|---|---|---|
| filename | zoek.unpacked.exe | |
| size | 2061795 (0x1f75e3) | |
| md5 | 01d066ec68381391c2dd1cf9e6d59c8f | |
| type | PE32 executable (GUI) Intel 80386, for MS Windows | |
| mimetype | application/x-dosexec | |
| clamav | Win.Worm.Autorun-5892 FOUND | |
| virustotal | → scan with virustotal.com | |
| histogram | ||
MZ Header
| signature | MZ |
| bytes_in_last_block | 0x50 |
| blocks_in_file | 2 |
| num_relocs | 0 |
| header_paragraphs | 4 |
| min_extra_paragraphs | 0xf |
| max_extra_paragraphs | 0xffff |
| ss | 0 |
| sp | 0xb8 |
| checksum | 0 |
| ip | 0 |
| cs | 0 |
| reloc_table_offset | 0x40 |
| overlay_number | 0x1a |
| reserved0 | 0 |
| oem_id | 0 |
| oem_info | 0 |
| reserved2 | 0 |
| reserved3 | 0 |
| reserved4 | 0 |
| reserved5 | 0 |
| reserved6 | 0 |
| lfanew | 0x200 |
DOS stub
00000000: ba 10 00 0e 1f b4 09 cd 21 b8 01 4c cd 21 90 90 |........!..L.!..| 00000010: 54 68 69 73 20 70 72 6f 67 72 61 6d 20 6d 75 73 |This program mus| 00000020: 74 20 62 65 20 72 75 6e 20 75 6e 64 65 72 20 57 |t be run under W| 00000030: 69 6e 33 32 0d 0a 24 37 00 00 00 00 00 00 00 00 |in32..$7........| 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| * 000001c0:
PE Header
Packer / Compiler
Sections
| name | va | vsize | raw size | flags | |
|---|---|---|---|---|---|
| .text | 0x1000 | 0x9000 | 0x8a00 | R-X CODE | |
| .data | 0xa000 | 0xf000 | 0xa00 | RW- IDATA | |
| .idata | 0x19000 | 0x1000 | 0xe00 | R-- IDATA | |
| .rsrc | 0x1a000 | 0x3000 | 0x2c00 | R-- IDATA |
Data Directory
| type | va | size | |
|---|---|---|---|
| EXPORT | 0 | 0 | |
| IMPORT | 0x19000 | 0xd10 | |
| RESOURCE | 0x1a000 | 0x2c00 | |
| EXCEPTION | 0 | 0 | |
| SECURITY | 0 | 0 | |
| BASERELOC | 0 | 0 | |
| DEBUG | 0 | 0 | |
| ARCHITECTURE | 0 | 0 | |
| GLOBALPTR | 0 | 0 | |
| TLS | 0 | 0 | |
| LOAD_CONFIG | 0 | 0 | |
| Bound_IAT | 0 | 0 | |
| IAT | 0 | 0 | |
| Delay_IAT | 0 | 0 | |
| CLR_Header | 0 | 0 |
| id | lang | string |
|---|---|---|
| 100 | 1049 | Select destination folder |
| 101 | 1049 | Extracting %s |
| 102 | 1049 | Skipping %s |
| 103 | 1049 | Unexpected end of archive |
| 104 | 1049 | The file "%s" header is corrupt |
| 105 | 1049 | The archive comment header is corrupt |
| 106 | 1049 | The archive comment is corrupt |
| 107 | 1049 | Not enough memory |
| 108 | 1049 | Unknown method in %s |
| 109 | 1049 | Cannot open %s |
| 110 | 1049 | Cannot create %s |
| 111 | 1049 | Cannot create folder %s |
| 112 | 1049 | CRC failed in the encrypted file %s (wrong password ?) |
| 113 | 1049 | CRC failed in %s |
| 114 | 1049 | Packed data CRC failed in %s |
| 115 | 1049 | Wrong password for %s |
| 116 | 1049 | Write error. Probably the disk is full |
| 117 | 1049 | Read error |
| 118 | 1049 | File close error |
| 119 | 1049 | The required volume is absent |
| 120 | 1049 | The archive is either in unknown format or damaged |
| 121 | 1049 | Extracting from %s |
| 122 | 1049 | Cannot find the next volume. Insert disk with %s |
| 123 | 1049 | Next volume |
| 124 | 1049 | The archive header is corrupt |
| 125 | 1049 | Close |
| 126 | 1049 | Error |
| 127 | 1049 | Errors encountered while performing the operation Look at the information window for more details |
| 128 | 1049 | bytes |
| 129 | 1049 | modified on |
| 130 | 1049 | folder is not accessible |
| 131 | 1049 | Some files could not be created. Please close all applications, reboot Windows and restart this installation |
| 132 | 1049 | Some installation files are corrupt. Please download a fresh copy and retry the installation |
| 150 | 1049 | Press <b>Install</b> button to start extraction. |
| 151 | 1049 | Use <b>Browse</b> button to select the destination |
| 152 | 1049 | folder from the folders tree. It can be also entered |
| 153 | 1049 | manually. |
| 154 | 1049 | If the destination folder does not exist, it will be |
| 155 | 1049 | created automatically before extraction. |
Scanning the drive for archives: 1 file, 2061795 bytes (2014 KiB) -- Type = zip Offset = 23040 Physical Size = 2038755 Embedded Stub Size = 31232 Comment = ;The comment below contains SFX script commands Setup=pevz.exe exec cmd.exe /c zoek-install.bat TempMode Silent=1 Overwrite=1 Date Time Attr Size Compressed Name ------------------- ----- ------------ ------------ ------------------------ 2012-06-16 23:48:24 ....A 719 334 z0.scf 2018-02-21 21:18:04 ....A 13869 2658 z1.scf 2018-05-10 11:07:18 ....A 818116 125573 z2.scf 2012-02-09 09:41:04 ....A 161792 151538 z3.scf 2012-02-09 09:41:04 ....A 154232 76434 z5.scf 2011-01-12 12:51:14 ....A 69632 35692 z6.scf 2018-02-05 01:47:00 ....A 6754 1988 z7.scf 2014-02-13 23:59:26 ....A 24064 21483 z8.scf 2012-02-09 09:41:04 ....A 30720 28139 z9.scf 2000-08-31 09:00:00 ....A 98816 44581 za.scf 2012-09-25 19:06:28 ....A 217088 102561 zb.scf 2006-05-14 10:25:10 ....A 476672 235763 zc.scf 2014-02-11 22:10:18 ....A 388608 305772 zd.scf 2005-07-04 02:11:00 ....A 57344 20839 ze.scf 2012-02-09 09:41:04 ....A 256512 254589 PEVZ.EXE 2018-05-10 11:41:28 ....A 6073 1691 zoek-install.bat 2007-02-03 09:40:16 ....A 10134 3943 zf.scf 2015-02-12 23:16:44 ....A 20480 8061 zg.scf 2018-04-15 22:57:10 ....A 533851 127746 zh.scf 2018-04-06 19:25:20 ....A 167936 78388 zi.scf 2006-05-14 11:25:10 ....A 476672 235763 zj.scf 2009-11-10 20:09:46 ....A 157184 79559 zk.scf 2014-05-20 14:11:28 ....A 68096 62217 ZAScan.exe ------------------- ----- ------------ ------------ ------------------------ 2018-05-10 11:41:28 4215364 2005312 23 files
 |
| Please donate some bucks to keep this site up and running: | |
| Ko-fi | |
|---|---|
| Yandex.Money | |
| Thank you! | |
everything is OK