When I scan few executables in my windows directory with ProtectionID, I happened to scan Windows Explorer. And the results are given below.
Scanning -> C:\Windows\explorer.exe File Type : 64-Bit Exe (Subsystem : Win GUI / 2), Size : 2871808 (02BD200h) Byte(s) [!] Warning : Cpu is AMD, this file is for IA64 (incompatible) [x] Warning - FileAlignment seems wrong.. no solution calculated (using NULL) [File Heuristics] -> Flag : 00000000000001001101000000000000 (0x0004D000) [CompilerDetect] -> Visual C++ 9.0 (Visual Studio 2008) [!] File appears to have no protection or is using an unknown protection - Scan Took : 0.548 Second(s)
I know that my processor is Core 2 Duo and it's x64 architecture as resulted in warning flag. But the OS I've installed is Windows 7 x64. The above results raise me a question that my OS is x64 or IA64? How can I find that?
Update In the latest build of ProtectionID this false warning seems fixed.