MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Packer / Compiler

Sections

Data Directory

offsetsizetypecomment
0193536EXE05/28/2011 16:04:29#
15c115HTM#
2f4005469034RAR#
Scanning the drive for archives:
1 file, 5662570 bytes (5530 KiB)


--
Type = Rar
Offset = 193536
Physical Size = 5469034
Solid = -
Blocks = 6
Multivolume = -
Volumes = 1

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
2012-01-11 15:03:47 ....A         4096         1464  Patch.exe
2012-01-11 17:36:03 ....A      3008360      2940641  003.exe
2011-11-03 00:04:24 ....A      1087797      1075966  для веса/ComputerDesktopWallpapersCollection271_107.jpg
2011-11-03 00:04:16 ....A       767824       754274  для веса/ComputerDesktopWallpapersCollection271_108.jpg
2011-12-19 01:35:23 D....            0            0  для веса
2012-03-14 21:04:17 ....A      1672145       696056  autorun.exe
------------------- ----- ------------ ------------  ------------------------
2012-03-14 21:04:17            6540222      5468401  5 files, 1 folders
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] can't find file_offset of VA 0x0