MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040204B0

StringTable 040704B0

StringTable 040904B0

StringTable 040B04B0

StringTable 041E04B0

StringTable 041F04B0

VS_FIXEDFILEINFO

offsetsizetypecomment
0534528EXE10/14/2013 05:50:27#
15c115HTM#
901011794AVI#
ee0c55762PNG(256 x 256)#
Scanning the drive for archives:
1 file, 534528 bytes (522 KiB)


--
Type = PE
Physical Size = 534528
CPU = x86
Characteristics = Executable 32-bit
Created = 2013-10-14 05:50:27
Headers Size = 1024
Checksum = 574378
Name = WEXTRACT.EXE            .MUI
Image Size = 557056
Section Alignment = 4096
File Alignment = 512
Code Size = 26112
Initialized Data Size = 507392
Uninitialized Data Size = 0
Linker Version = 11.0
OS Version = 6.3
Image Version = 6.3
Subsystem Version = 5.1
Subsystem = Windows GUI
DLL Characteristics = Relocated NX-Compatible TerminalServerAware
Stack Reserve = 262144
Stack Commit = 8192
Heap Reserve = 1048576
Heap Commit = 4096
Image Base = 4194304
Comment = FileVersion: 11.0.9600.16428
FileVersion: 11.00.9600.16428 (winblue_gdr.131013-1700)
ProductVersion: 11.0.9600.16428
ProductVersion: 11.00.9600.16428
CompanyName: Microsoft Corporation
FileDescription: Програма за саморазархивиране на кабинетни файлове за Win32                                           
FileDescription: Win32 Cabinet Self-Extractor                                           
FileDescription: Win32 Cab-tiedostojen purkaminen           
FileDescription: Win32 Kabin Ayıklayıcısı                                           
InternalName: Wextract                
LegalCopyright: © Microsoft Corporation. Всички права запазени.
LegalCopyright: © Microsoft Corporation. Alle Rechte vorbehalten.
LegalCopyright: © Microsoft Corporation. All rights reserved.
LegalCopyright: © Microsoft Corporation. Kaikki oikeudet pidätetään.
LegalCopyright: © Microsoft Corporation สงวนลิขสิทธิ์
LegalCopyright: © Microsoft Corporation. Tüm hakları saklıdır.
OriginalFilename: WEXTRACT.EXE            .MUI
ProductName: Internet Explorer
----
Path = .rsrc/1035/RCDATA/CABINET
Size = 330951
Packed Size = 330951
--
Path = .rsrc/1035/RCDATA/CABINET
Type = Cab
Physical Size = 330951
Method = LZX:21
Blocks = 1
Volumes = 1
Volume Index = 0
ID = 24243

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2016-01-26 17:42:14 ....A          158               ALA.BMP
2016-01-07 17:23:20 ....A          770               ASI14.DBF
2016-01-26 17:42:14 ....A         3995               CODE128.dmf
2016-01-26 17:42:14 ....A         8011               CODE128.PRG
2016-01-26 17:42:14 ....A          206               E1.BMP
2016-01-26 17:42:14 ....A          206               E2.BMP
2016-01-26 19:52:42 ....A            0               err.bak
2016-01-26 17:42:14 ....A         1340               ERRMSG.DAT
2016-01-30 04:27:12 ....A           16               esik.dat
2016-01-26 17:42:14 ....A          279               EXCEPT.dmf
2016-01-26 17:42:14 ....A          486               EXCEPT.PRG
2016-01-26 17:42:14 ....A         7293               F9.dmf
2016-01-30 04:09:10 ....A        22545               F9.PRG
2016-01-30 04:26:12 ....A         4133               F10.DMF
2016-01-30 04:26:12 ....A        10939               F10.PRG
2016-01-30 03:57:58 ....A       352710               HELP.BMP
2016-01-26 17:42:14 ....A         1375               LISAA.dmf
2016-01-26 17:42:14 ....A         3090               LISAA.PRG
2016-01-26 17:42:14 ....A         3852               MDEB.dmf
2016-01-26 17:42:14 ....A         8126               MDEB.PRG
2016-01-26 17:42:14 ....A        30720               MIKDLL.DLL
2016-01-26 17:42:14 ....A         2914               MIKKO.DH
2016-01-26 17:42:14 ....A       548864               MIKKO.EXE
2016-01-26 17:42:14 ....A         7685               MUOTO.dmf
2016-01-30 04:11:02 ....A        24480               MUOTO.PRG
2016-01-26 17:42:14 ....A          487               MUOTO3.dmf
2016-01-30 04:11:28 ....A          716               MUOTO3.PRG
2016-01-25 18:34:48 ....A          630               OK.BMP
2016-01-26 17:42:14 ....A          630               PERUUTA.BMP
2016-01-26 17:42:14 ....A          329               POSTI2.DAT
2016-01-26 17:42:14 ....A          582               PRINTTAA.BMP
2016-01-26 17:42:14 ....A          206               T1.BMP
2016-01-26 17:42:14 ....A          206               T2.BMP
2016-01-26 17:42:14 ....A          158               YLO.BMP
2016-01-26 17:42:14 ....A          825               shortcut.vbs
2016-01-26 17:42:14 ....A         1676               tarrat.dmf
2016-01-26 20:01:16 ....A         2606               tarrat.PRG
------------------- ----- ------------ ------------  ------------------------
2016-01-30 04:27:12            1053244       534528  37 files
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] ignoring invalid PEdump::BITMAPINFOHEADER