ILSpy.exe - ILSpy

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	ILSpy.exe
size	540672 (0x84000)
md5	70d970657dc9b9ac25fec4da2215bd7f

type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	3
TimeDateStamp	0x4e21c133
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	8.0
SizeOfCode	0x6c000
SizeOfInitializedData	0x17000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x6d86e
BaseOfCode	0x2000
BaseOfData	0x6e000
ImageBase	0x400000
SectionAlignment	0x2000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x86000
SizeOfHeaders	0x1000
CheckSum	0
Subsystem	2
DllCharacteristics	0x8540
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C# / Basic .NET

Sections

name	va	vsize	raw size	flags
.text	0x2000	0x6b874	0x6c000	R-X CODE
.rsrc	0x6e000	0x15900	0x16000	R-- IDATA
.reloc	0x84000	0xc	0x1000	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x6d814	0x57
RESOURCE	0x6e000	0x15900
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x84000	0xc
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x2000	8
Delay_IAT	0	0
CLR_Header	0x2008	0x48

show previews

type	name	size
ICON	#2	67624
ICON	#3	9640
ICON	#4	4264
ICON	#5	2216
ICON	#6	1128
ICON	#7	1384
GROUP_ICON	#32512	90
VERSION	#1	928
MANIFEST	#1	490

module_name	hint	ord	function_name
mscoree.dll			_CorExeMain

StringTable 000004b0

Comments	.NET assembly inspector and decompiler
CompanyName	ic#code
FileDescription	ILSpy
FileVersion	1.0.0.1000
InternalName	ILSpy.exe
LegalCopyright	Copyright 2011 AlphaSierraPapa for the SharpDevelop Team
OriginalFilename	ILSpy.exe
ProductName	ILSpy
ProductVersion	1.0.0.1000-0197189d
Assembly Version	1.0.0.1000

VS_FIXEDFILEINFO

FileVersion	1.0.0.1000
ProductVersion	1.0.0.1000
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	540672	EXE	07/16/2011 16:49:55	#
15c1	15	HTM		#
1b615	466	PNG	(16 x 16)	#
1b7ec	448	PNG	(16 x 16)	#
1b9b1	666	PNG	(16 x 16)	#
1bc50	923	PNG	(16 x 16)	#
1bff0	470	PNG	(16 x 16)	#
1c1cb	1257	PNG	(11 x 11)	#
1c6b9	468	PNG	(16 x 16)	#
1c892	1448	PNG	(16 x 16)	#
1ce3f	584	PNG	(16 x 16)	#
1d08c	1339	PNG	(16 x 16)	#
1d5cc	631	PNG	(16 x 16)	#
1d848	494	PNG	(16 x 16)	#
1da3b	567	PNG	(16 x 16)	#
1dc77	411	PNG	(16 x 16)	#
1de17	404	PNG	(16 x 16)	#
1dfb0	714	PNG	(16 x 16)	#
1e27f	689	PNG	(16 x 16)	#
1e535	658	PNG	(16 x 16)	#
1e7cc	689	PNG	(16 x 16)	#
1ea82	879	PNG	(16 x 16)	#
33f51	500	PNG	(16 x 16)	#
3414a	1332	PNG	(16 x 16)	#
34683	262	PNG	(16 x 16)	#
3478e	586	PNG	(16 x 16)	#
349dd	532	PNG	(16 x 16)	#
34bf6	460	PNG	(16 x 16)	#
34dc7	958	PNG	(16 x 16)	#
3518a	1148	PNG	(16 x 16)	#
3560b	526	PNG	(16 x 16)	#
3581e	1292	PNG	(16 x 16)	#
35d2f	401	PNG	(16 x 16)	#
35ec5	351	PNG	(16 x 16)	#
36029	440	PNG	(16 x 16)	#
361e6	310	PNG	(16 x 16)	#
36321	630	PNG	(16 x 16)	#
3659c	625	PNG	(16 x 16)	#
36812	746	PNG	(16 x 16)	#
36b01	1148	PNG	(16 x 16)	#
36f82	1148	PNG	(16 x 16)	#
37403	1063	PNG	(16 x 16)	#
3782f	562	PNG	(16 x 16)	#
37a66	803	PNG	(16 x 16)	#
37d8e	1391	PNG	(16 x 16)	#
38302	465	PNG	(16 x 16)	#
384d8	1398	PNG	(16 x 16)	#
38a53	1357	PNG	(16 x 16)	#
38fa5	501	PNG	(16 x 16)	#
3919f	510	PNG	(12 x 12)	#
393a2	569	PNG	(16 x 16)	#
395e0	564	PNG	(16 x 16)	#
39819	1303	PNG	(16 x 16)	#
39d35	1306	PNG	(16 x 16)	#
3a254	275	PNG	(16 x 16)	#
3a36c	412	PNG	(16 x 16)	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

ILSpy.exe- ILSpy

MZ Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 000004b0

VS_FIXEDFILEINFO

ILSpy.exe
- ILSpy