MZ Header

Rich Header

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Sections

Data Directory

StringTable 040904e4

VS_FIXEDFILEINFO

offsetsizetypecomment
0161280EXE12/15/2018 22:26:14#
15c115HTM#
1d90815770PNG(256 x 256)#
5a16b71005PNG(72 x 72)#
5a3964139PNG(16 x 16)#
5a39ef190PNG(32 x 32)#
5a3aad270PNG(23 x 23)#
5a3bbb516PNG(46 x 46)#
5a3dbf40375619BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 46289666 bytes (45 MiB)


--
Type = Nsis
Physical Size = 46289666
Method = Deflate
Solid = -
Headers Size = 185188
Embedded Stub Size = 161280
SubType = NSIS-3 Unicode BadCmd=11

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
                    .....                      6931  $PLUGINSDIR/System.dll
                    .....                     45608  $PLUGINSDIR/StdUtils.dll
                    .....                      8018  $PLUGINSDIR/UAC.dll
                    .....                      4684  $PLUGINSDIR/nsDialogs.dll
2019-06-17 19:21:30 .....                      1899  $PLUGINSDIR/modern-wizard.bmp
                    .....                      2027  $PLUGINSDIR/nsProcess.dll
                    .....                      3299  $PLUGINSDIR/nsExec.dll
2020-06-22 02:56:00 .....     45610355     45610355  $PLUGINSDIR/app-64.7z
                    .....                    242382  $PLUGINSDIR/nsis7z.dll
2020-06-22 02:56:16 .....                    160167  Uninstall repl.it.exe
                    .....                      1080  $PLUGINSDIR/WinShell.dll
------------------- ----- ------------ ------------  ------------------------
2020-06-22 02:56:16           45610355     46086450  11 files
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[?] ignoring invalid PEdump::BITMAPINFOHEADER