filenameDaVinci_Deluxe_122.exe
size19561984 (0x12a7e00)
md5556fbfe660f1aabc0bd8d2c5921f8d08
typePE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0xbfbe0ed5
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x12e
Magic0x10b
LinkerVersion48.0
SizeOfCode0x4ec000
SizeOfInitializedData0x3fa00
SizeOfUninitializedData0
AddressOfEntryPoint0x4eca0e
BaseOfCode0x2000
BaseOfData0x4ee000
ImageBase0x270000
SectionAlignment0x2000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0x12b0000
SizeOfHeaders0x400
CheckSum0x12b1980
Subsystem2
DllCharacteristics0x8060
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C# / Basic .NET

Sections

namevavsizeraw sizeflags
0x20000x4ec0000x4eac00R-X CODE
0x4ee0000x400000x3fa00R-- IDATA
0x52e0000x20000R-- IDATA DISCARDABLE
.rsrc0x5300000x400000x3fa00R-- IDATA
0x5700000xa7c0000xa7b200R-X IDATA
.data0xfec0000x2c40000x2c2800R-X IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x4ec9c00x4b
RESOURCE0x5300000x3f828
EXCEPTION00
SECURITY00
BASERELOC0xfef0000xc
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header0x20080x48
typenamesizecp
ICON#12580401252
GROUP_ICON#32512201252
VERSION#110521252
MANIFEST#17201252
module_namehintordfunction_name
mscoree.dll_CorExeMain

StringTable 040904B0

CompanyNameBackGroup Software & Solutions
FileDescriptionDPF DTC EGR Remover
FileVersion1.0.32.0
InternalNameDaVinci_Deluxe.exe
LegalCopyrightCopyrights (C) 2020-2022 Ali Zaidi
LegalTrademarksTrademarks (R) 2020-2022 Ali Zaidi
OriginalFilenameDaVinci_Deluxe.exe
ProductNameDaVinci DPF EGR DTC
ProductVersion1.0.32.0
Commentshttps://www.facebook.com/DaVinciDeluxe/

VS_FIXEDFILEINFO

FileVersion1.0.32.0
ProductVersion1.0.32.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0x20
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
15c115HTM#
2296dd2457PNG(592 x 589)#
269228919PNG(64 x 64)#
269662972PNG(24 x 24)#
269ad1922PNG(64 x 64)#
269f0e142763PNG(1862 x 1058)#
28cd5c1870PNG(32 x 32)#
28d54d2457PNG(592 x 589)#
404f032457PNG(592 x 589)#
478d8f972PNG(24 x 24)#
4791fe1322PNG(32 x 32)#
4799222457PNG(592 x 589)#
4a4c6b2457PNG(592 x 589)#
4a56a73908PNG(48 x 48)#
4a668e1801PNG(48 x 48)#
4a860d16457PNG(544 x 674)#
4e1aad3226PNG(512 x 512)#
6860d41536DLL06/19/1992 22:22:17#
6a7ecc2358BMP(48 x 16)#
6a88042358BMP(48 x 16)#
f3240015872DLL06/19/1992 22:22:17#
f3c40015872DLL06/19/1992 22:22:17#
f4640015872DLL06/19/1992 22:22:17#
f5040016896DLL06/19/1992 22:22:17#
f5a40015360DLL06/19/1992 22:22:17#
f6440016384DLL06/19/1992 22:22:17#
f6e40014848DLL06/19/1992 22:22:17#
f7840015360DLL06/19/1992 22:22:17#
f8240016384DLL06/19/1992 22:22:17#
f8c40015872DLL06/19/1992 22:22:17#
f9640015360DLL06/19/1992 22:22:17#
fa040015360DLL06/19/1992 22:22:17#
faa40014848DLL06/19/1992 22:22:17#
fb440014848DLL06/19/1992 22:22:17#
fbe40014848DLL06/19/1992 22:22:17#
fc840015872DLL06/19/1992 22:22:17#
fd240015872DLL06/19/1992 22:22:17#
fdc40016384DLL06/19/1992 22:22:17#
fe04002914816BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK