| filename | RadioTochkaPlus4.6_SetupRU.exe | |
|---|---|---|
| size | 350448 (0x558f0) | |
| md5 | e9821e056ec3748e940cc8cf41da0e44 | |
| type | MS-DOS executable PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows | |
| mimetype | application/x-dosexec | |
| clamav | OK | |
| virustotal | → scan with virustotal.com | |
| histogram | ||
MZ Header
| signature | MZ |
| bytes_in_last_block | 0x454b |
| blocks_in_file | 0x4e52 |
| num_relocs | 0x4c45 |
| header_paragraphs | 0x3233 |
| min_extra_paragraphs | 0x442e |
| max_extra_paragraphs | 0x4c4c |
| ss | 0 |
| sp | 0x4550 |
| checksum | 0 |
| ip | 0x14c |
| cs | 3 |
| reloc_table_offset | 0xb0be |
| overlay_number | 0x4011 |
| reserved0 | 0x7ceb3476ff50ad00 |
| oem_id | 0x148 |
| oem_info | 0x103 |
| reserved2 | 0x6f4c010b |
| reserved3 | 0x694c6461 |
| reserved4 | 0x72617262 |
| reserved5 | 0x4179 |
| reserved6 | 0x1018 |
| lfanew | 0x10 |
PE Header
Packer / Compiler
Sections
| name | va | vsize | raw size | flags | |
|---|---|---|---|---|---|
| PS������ | 0x1000 | 0x9c000 | 0x1f0 | RWX CODE IDATA | |
| @ �SM | 0x9d000 | 0x40000 | 0x384f0 | RWX CODE IDATA | |
| c�I �@ | 0xdd000 | 0x1000 | 0x1f0 | RWX CODE IDATA |
Data Directory
TLS
| raw start | raw end | index | callbks | zero fill | flags | |
|---|---|---|---|---|---|---|
| 0x48e000 | 0x48e020 | 0x48e020 | 0 | 0 | 0 |
StringTable 000004b0
| Comments | This installation was built with Inno Setup. |
| CompanyName | Radiotochki.net |
| FileDescription | Радиоточка Плюс Setup |
| FileVersion | |
| LegalCopyright | |
| ProductName | Радиоточка Плюс |
| ProductVersion | 4.6 |
VS_FIXEDFILEINFO
| FileVersion | 0.0.0.0 |
| ProductVersion | 0.0.0.0 |
| StrucVersion | 0x10000 |
| FileFlagsMask | 0x3f |
| FileFlags | 0 |
| FileOS | 4 |
| FileType | 1 |
| FileSubtype | 0 |
Scanning the drive for archives: 1 file, 350448 bytes (343 KiB) Errors: 1
 |
| Please donate some bucks to keep this site up and running: | |
| Ko-fi | |
|---|---|
| Yandex.Money | |
| Thank you! | |
[?] unusual size of IMAGE_OPTIONAL_HEADER = 328 (must be 224)
[?] 104 spare bytes after IMAGE_OPTIONAL_HEADER
[?] invalid DOS stub size -205600
[?] can't find file_offset of VA 0x84918
[?] can't find file_offset of VA 0x849dc
[?] can't find file_offset of VA 0x84aa8
[?] can't find file_offset of VA 0x84c1c
[?] can't find file_offset of VA 0x84fb8
[?] can't find file_offset of VA 0x85304
[?] can't find file_offset of VA 0x85598
[?] can't find file_offset of VA 0x83d04
[?] can't find file_offset of VA 0x8d880
[?] can't find file_offset of VA 0x83d7c
[?] can't find file_offset of VA 0x8e020
[?] non-empty last IMAGE_IMPORT_DESCRIPTOR: #<struct PEdump::IMAGE_IMPORT_DESCRIPTOR OriginalFirstThunk=4584, TimeDateStamp=0, ForwarderChain=0, Name=0, FirstThunk=196614, module_name=nil, original_first_thunk=nil, first_thunk=nil>
[?] invalid DOS stub size -205600
[?] can't find file_offset of VA 0xad3876ff
[?] can't find file_offset of VA 0x476ffa5
[?] can't find file_offset of VA 0x1cebabdf
[?] can't find file_offset of VA 0x50746547
[?] can't find file_offset of VA 0x65726464