comments powered byDisqus
offsetsizetypecomment
073600OLE#
14fb28872JPG#
8de618700ZIP#
Type = Compound
Cluster Size = 512
Sector Size = 64

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------------------
                    .....         4241         4608  WordDocument
2018-11-07 06:22:17 D....                            Macros
                    .....         9710         9728  1Table
                    .....        29123        29184  Data
                    .....          114          128  [1]CompObj
                    .....          396          448  Macros/PROJECT
2018-11-07 06:22:17 D....                            Macros/VBA
                    .....          103          128  Macros/VBA/__SRP_3
                    .....         1193         1216  Macros/VBA/__SRP_0
                    .....          513          576  Macros/VBA/dir
                    .....          304          320  Macros/VBA/__SRP_2
                    .....          102          128  Macros/VBA/__SRP_1
                    .....         2711         2752  Macros/VBA/wnlNlcVKoXP
                    .....         3742         3776  Macros/VBA/_VBA_PROJECT
                    .....           38           64  Macros/PROJECTwm
                    .....         4096         4096  [5]DocumentSummaryInformation
                    .....          412          448  [5]SummaryInformation
------------------- ----- ------------ ------------  ------------------------
                                 56798        57600  15 files, 2 folders
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

[!] no MZ signature. want: 'MZ' or 'ZM', got: "\xD0\xCF". (not forced)

[!] NULL PE offset (e_lfanew). cannot continue.

[!] no MZ signature. want: 'MZ' or 'ZM', got: "\x02\x00". (not forced)

[!] NULL PE offset (e_lfanew). cannot continue.

[!] no MZ signature. want: 'MZ' or 'ZM', got: "\xFF\xFF". (not forced)

[!] NULL NE offset (e_lfanew).

[!] no MZ signature. want: 'MZ' or 'ZM', got: "\xFF\xFF". (not forced)

[!] NULL PE offset (e_lfanew). cannot continue.

[!] no MZ signature. want: 'MZ' or 'ZM', got: "\xFF\xFF". (not forced)

[!] NULL PE offset (e_lfanew). cannot continue.

[!] no MZ signature. want: 'MZ' or 'ZM', got: "\xFF\xFF". (not forced)

[!] NULL PE offset (e_lfanew). cannot continue.

[!] no MZ signature. want: 'MZ' or 'ZM', got: "\xFF\xFF". (not forced)

[!] NULL PE offset (e_lfanew). cannot continue.

[!] no MZ signature. want: 'MZ' or 'ZM', got: "\xFF\xFF". (not forced)

[!] no MZ signature. want: 'MZ' or 'ZM', got: "\xEC\xA5". (not forced)

[!] NULL PE offset (e_lfanew). cannot continue.

[!] no MZ signature. want: 'MZ' or 'ZM', got: ".\x10". (not forced)

[!] NULL PE offset (e_lfanew). cannot continue.

[!] no MZ signature. want: 'MZ' or 'ZM', got: "\x00\x00". (not forced)

[!] NULL PE offset (e_lfanew). cannot continue.

[!] no MZ signature. want: 'MZ' or 'ZM', got: "\x00\x00". (not forced)

[!] NULL PE offset (e_lfanew). cannot continue.

[!] no MZ signature. want: 'MZ' or 'ZM', got: "\x00\x00". (not forced)

[!] NULL PE offset (e_lfanew). cannot continue.

[!] no MZ signature. want: 'MZ' or 'ZM', got: "\x00\x00". (not forced)

[!] NULL PE offset (e_lfanew). cannot continue.

[!] no MZ signature. want: 'MZ' or 'ZM', got: "\x00\x00". (not forced)

[!] NULL PE offset (e_lfanew). cannot continue.

[!] no MZ signature. want: 'MZ' or 'ZM', got: "\x00\x00". (not forced)

[!] NULL PE offset (e_lfanew). cannot continue.

[!] no MZ signature. want: 'MZ' or 'ZM', got: "\x00\x00". (not forced)

[!] NULL PE offset (e_lfanew). cannot continue.

[!] no MZ signature. want: 'MZ' or 'ZM', got: "\x00\x00". (not forced)

[!] NULL PE offset (e_lfanew). cannot continue.

[!] no MZ signature. want: 'MZ' or 'ZM', got: "\x00\x00". (not forced)

[!] NULL PE offset (e_lfanew). cannot continue.

[!] no MZ signature. want: 'MZ' or 'ZM', got: "\x00\x00". (not forced)

[!] NULL PE offset (e_lfanew). cannot continue.

[!] no MZ signature. want: 'MZ' or 'ZM', got: "\x00\x00". (not forced)

[!] NULL PE offset (e_lfanew). cannot continue.

[!] no MZ signature. want: 'MZ' or 'ZM', got: "\x00\x00". (not forced)

[!] NULL PE offset (e_lfanew). cannot continue.

[!] no MZ signature. want: 'MZ' or 'ZM', got: "\x00\x00". (not forced)

[!] NULL PE offset (e_lfanew). cannot continue.

[!] no MZ signature. want: 'MZ' or 'ZM', got: "\x00\x00". (not forced)

[!] NULL PE offset (e_lfanew). cannot continue.

[!] no MZ signature. want: 'MZ' or 'ZM', got: "\x00\x00". (not forced)

[!] NULL PE offset (e_lfanew). cannot continue.

[!] no MZ signature. want: 'MZ' or 'ZM', got: "\x00\x00". (not forced)

[!] NULL PE offset (e_lfanew). cannot continue.