MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

TLS

StringTable 000004e4

VS_FIXEDFILEINFO

offsetsizetypecomment
0560640EXE11/25/2017 13:34:29#
15c115HTM#
88e0011350370ZIP#
Scanning the drive for archives:
1 file, 11911010 bytes (12 MiB)


--
Type = zip
Offset = 560640
Physical Size = 11350370
Comment = This archive contains Dr.Web AV-Desk agent

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2021-01-26 09:21:00 .....          140          122  cmdline.txt
2021-01-26 09:21:00 .....     12874944     11349606  drwinst.exe
2021-01-26 09:21:00 .....          223          180  drwcsd.pub
------------------- ----- ------------ ------------  ------------------------
2021-01-26 09:21:00           12875307     11349908  3 files
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] can't find file_offset of VA 0x40184