Test4.exe

info
MZ
foremost
7zip
hexdump
log
discuss
donate

filename	Test4.exe
size	7730 (0x1e32)
md5	bf3888c2a2d23d67ae790f4b2d3e052c

type	MS-DOS executable, COFF for MS-DOS, DJGPP go32 DOS extender
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0
blocks_in_file	4
num_relocs	0
header_paragraphs	0x20
min_extra_paragraphs	0x27
max_extra_paragraphs	0xffff
ss	0
sp	0x760
checksum	0
ip	0x54
cs	0
reloc_table_offset	0
overlay_number	0
reserved0	0x682e627574730a0d
oem_id	0x6720
oem_info	0x6e65
reserved2	0x74617265
reserved3	0x66206465
reserved4	0x206d6f72
reserved5	0x62757473
reserved6	0x6d73612e
lfanew	0x20796220

DOS stub

00000000: 67 6f 33 32 73 74 75 62  2c 20 76 20 32 2e 30 32  |go32stub, v 2.02|
00000010: 54 00 00 00 00 00 08 00  00 00 00 00 00 00 00 00  |T...............|
00000020: 00 40 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |.@..............|
00000030: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
00000040: 00 00 00 00 43 57 53 44  50 4d 49 2e 45 58 45 00  |....CWSDPMI.EXE.|
00000050: 00 00 00 00 0e 1f 8c 1e  24 00 8c 06 60 07 fc b4  |........$...`...|
00000060: 30 cd 21 3c 03 73 08 b0  6d ba a7 05 e9 d4 03 a2  |0.!<.s..m.......|
00000070: 69 08 be 20 00 8b 04 09  c0 75 02 b4 fe bb 70 08  |i.. .....u....p.|
00000080: 39 c3 73 02 89 c3 89 1c  fe c7 b9 04 ff d3 eb b4  |9.s.............|
00000090: 4a cd 21 73 08 d3 e3 fe  cf 89 1c eb d8 26 8e 06  |J.!s.........&..|
000000a0: 2c 00 31 ff 30 c0 a9 f2  ae 26 81 3d 50 41 75 15  |,.1.0....&.=PAu.|
000000b0: af 26 81 3d 54 48 75 0d  af 26 80 3d 3d 75 06 47  |.&.=THu..&.==u.G|
000000c0: 89 3e 8c 04 4f ae 75 df  af b4 3e bb 13 00 cd 21  |.>..O.u...>....!|
000000d0: b4 3e bb 12 00 cd 21 06  57 31 c9 74 12 b0 6e ba  |.>....!.W1.t..n.|
000000e0: 7e 05 e9 5e 03 09 c9 75  f4 41 e8 a1 03 72 ee b8  |~..^...u.A...r..|
000000f0: 87 16 cd 2f 09 c0 75 ed  80 e3 01 74 e8 89 3e 00  |.../..u....t..>.|
00000100: 06 8c 06 02 06 89 36 04  06 5f 07 e8 d3 02 89 3e  |......6.._.....>|
00000110: 2a 00 89 36 62 07 80 3e  2c 00 00 74 23 b9 08 00  |*..6b..>,..t#...|
00000120: bf 2c 00 8a 05 47 08 c0  74 05 88 07 43 e2 f4 66  |.,...G..t...C..f|
00000130: c7 07 2e 45 58 45 83 c3  04 c6 07 00 89 1e 62 07  |...EXE........b.|
00000140: b8 00 3d ba 64 07 cd 21  0f 82 b3 02 a3 06 06 89  |..=.d..!........|
00000150: c3 b9 06 00 ba b5 07 b4  3f cd 21 31 d2 31 c9 a1  |........?.!1.1..|
00000160: b5 07 3d 4c 01 74 1b 3d  4d 5a 0f 85 98 02 8b 16  |..=L.t.=MZ......|
00000170: b9 07 c1 e2 09 8b 1e b7  07 09 db 74 05 80 ee 02  |...........t....|
00000180: 01 da 89 16 bb 07 89 0e  bd 07 b8 00 42 8b 1e 06  |............B...|
00000190: 06 cd 21 b9 a8 00 ba bf  07 b4 3f cd 21 3d a8 00  |..!.......?.!=..|
000001a0: 75 06 81 3e bf 07 4c 01  0f 85 61 02 66 a1 e3 07  |u..>..L...a.f...|
000001b0: 66 a3 10 06 66 8b 0e bb  07 66 a1 03 08 66 01 c8  |f...f....f...f..|
000001c0: 66 a3 08 06 66 a1 2b 08  66 01 c8 66 a3 0c 06 66  |f...f.+.f..f...f|
000001d0: 8b 1e 4b 08 66 a1 4f 08  66 01 c3 66 b8 01 00 01  |..K.f.O.f..f....|
000001e0: 00 66 39 c3 73 03 66 89  c3 66 81 c3 ff ff 00 00  |.f9.s.f..f......|
000001f0: 31 db 66 89 1e 1c 00 e8  f5 02 8b 1e 04 06 09 db  |1.f.............|
00000200: 74 0a b4 48 cd 21 0f 82  15 02 8e c0 e8 08 03 b8  |t..H.!..........|
00000210: 01 00 ff 1e 00 06 0f 82  0f 02 8c 06 26 00 8c 0e  |............&...|
00000220: 28 00 8c d8 a3 22 00 8e  c0 31 c0 b9 01 00 cd 31  |(...."...1.....1|
00000230: 72 07 a3 14 06 31 c0 cd  31 0f 82 f3 01 a3 16 06  |r....1..1.......|
00000240: 66 8b 0e 1c 00 b8 01 05  8b 1e 1e 00 cd 31 0f 82  |f............1..|
00000250: e5 01 89 1e 1a 06 89 0e  18 06 89 36 1a 00 89 3e  |...........6...>|
00000260: 18 00 b8 07 00 8b 1e 14  06 8b 0e 1a 06 8b 16 18  |................|
00000270: 06 cd 31 b8 09 00 8c c9  83 e1 03 c1 e1 05 51 81  |..1...........Q.|
00000280: c9 9b c0 cd 31 b8 08 00  8b 0e 1e 00 49 ba ff ff  |....1.......I...|
00000290: cd 31 b8 07 00 8b 1e 16  06 8b 0e 1a 06 8b 16 18  |.1..............|
000002a0: 06 cd 31 b8 09 00 59 81  c9 93 c0 cd 31 b8 08 00  |..1...Y.....1...|
000002b0: 8b 0e 1e 00 49 ba ff ff  cd 31 b8 00 01 bb 00 0f  |....I....1......|
000002c0: cd 31 73 10 3d 08 00 0f  85 73 01 b8 00 01 cd 31  |.1s.=....s.....1|
000002d0: 0f 82 6a 01 a3 1c 06 89  16 1e 06 c1 e3 04 89 1e  |..j.............|
000002e0: 20 06 66 8b 36 08 06 66  8b 3e fb 07 66 8b 0e ff  | .f.6..f.>..f...|
000002f0: 07 e8 49 00 66 8b 36 0c  06 66 8b 3e 23 08 66 8b  |..I.f.6..f.>#.f.|
00000300: 0e 27 08 e8 37 00 8e 06  16 06 66 8b 3e 4b 08 66  |.'..7.....f.>K.f|
00000310: 8b 0e 4f 08 66 31 c0 66  c1 e9 02 67 f3 66 ab b4  |..O.f1.f...g.f..|
00000320: 3e 8b 1e 06 06 cd 21 b8  01 01 8b 16 1e 06 cd 31  |>.....!........1|
00000330: 1e 0f a1 8e 1e 16 06 66  64 ff 2e 10 06 66 89 f0  |.......fd....f..|
00000340: 66 25 ff 01 00 00 66 01  c1 29 c6 66 29 c7 66 89  |f%....f..).f).f.|
00000350: 0e 26 06 66 89 3e 22 06  e8 0f 01 89 36 3e 06 66  |.&.f.>".....6>.f|
00000360: c1 ee 10 89 36 42 06 8b  1e 06 06 89 1e 3a 06 c7  |....6B.......:..|
00000370: 06 46 06 00 42 e8 03 01  a1 1c 06 a3 4e 06 c7 06  |.F..B.......N...|
00000380: 3e 06 00 00 c6 06 47 06  3f a1 28 06 09 c0 75 09  |>.....G.?.(...u.|
00000390: a1 26 06 3b 06 20 06 76  03 a1 20 06 a3 42 06 e8  |.&.;. .v.. ..B..|
000003a0: d9 00 66 31 c9 8b 0e 46  06 66 8b 3e 22 06 66 01  |..f1...F.f.>".f.|
000003b0: 0e 22 06 66 29 0e 26 06  66 31 f6 c1 e9 02 1e 06  |.".f).&.f1......|
000003c0: 8e 06 16 06 8e 1e 1e 06  67 f3 66 a5 07 1f 66 03  |........g.f...f.|
000003d0: 0e 26 06 75 af c3 3c 3a  74 06 3c 2f 74 02 3c 5c  |.&.u..<:t......;.A.|
000004a0: 81 fe 64 07 74 12 8a 44  ff e8 2a ff 74 04 c6 04  |..d.t..D..*.t...|
000004b0: 5c 46 e8 03 00 72 e4 c3  e8 34 00 bb 44 00 8a 07  |\F...r...4..D...|
000004c0: 88 04 43 46 08 c0 75 f6  06 57 1e 07 e8 9b ff bb  |..CF..u..W......|
000004d0: 2a 06 8c 5f 04 89 5f 02  ba 64 07 b8 00 4b cd 21  |*.._.._..d...K.!|
000004e0: 5f 07 72 09 b4 4d cd 21  2d 00 03 f7 d8 eb 28 80  |_.r..M.!-.....(.|
000004f0: 3e 69 08 05 72 20 b8 00  58 cd 21 a2 67 08 b8 02  |>i..r ..X.!.g...|
00000500: 58 cd 21 a2 68 08 b8 01  58 bb 80 00 cd 21 b8 03  |X.!.h...X....!..|
00000510: 58 bb 01 00 cd 21 c3 9c  80 3e 69 08 05 72 1a 50  |X....!...>i..r.P|
00000520: 53 b8 03 58 8a 1e 68 08  30 ff cd 21 b8 01 58 8a  |S..X..h.0..!..X.|
00000530: 1e 67 08 30 ff cd 21 5b  58 9d c3 4c 6f 61 64 20  |.g.0..![X..Load |
00000540: 65 72 72 6f 72 3a 20 24  3a 20 63 61 6e 27 74 20  |error: $: can't |
00000550: 6f 70 65 6e 24 3a 20 6e  6f 74 20 45 58 45 24 3a  |open$: not EXE$:|
00000560: 20 6e 6f 74 20 43 4f 46  46 20 28 43 68 65 63 6b  | not COFF (Check|
00000570: 20 66 6f 72 20 76 69 72  75 73 65 73 29 24 6e 6f  | for viruses)$no|
00000580: 20 44 50 4d 49 20 2d 20  47 65 74 20 63 73 64 70  | DPMI - Get csdp|
00000590: 6d 69 2a 62 2e 7a 69 70  24 6e 6f 20 44 4f 53 20  |mi*b.zip$no DOS |
000005a0: 6d 65 6d 6f 72 79 24 6e  65 65 64 20 44 4f 53 20  |memory$need DOS |
000005b0: 33 24 63 61 6e 27 74 20  73 77 69 74 63 68 20 6d  |3$can't switch m|
000005c0: 6f 64 65 24 6e 6f 20 44  50 4d 49 20 73 65 6c 65  |ode$no DPMI sele|
000005d0: 63 74 6f 72 73 24 6e 6f  20 44 50 4d 49 20 6d 65  |ctors$no DPMI me|
000005e0: 6d 6f 72 79 24 90 90 90  90 90 90 90 90 90 90 90  |mory$...........|
000005f0: 90 90 90 90 90 90 90 90  90 90 90 90 90 90 90 90  |................|
00000600: 4c 01 03 00 00 00 00 00  14 14 00 00 17 00 00 00  |L...............|
00000610: 1c 00 07 01 0b 01 00 00  58 01 00 00 00 02 00 00  |........X.......|
00000620: 00 00 00 00 a8 18 00 00  a8 18 00 00 00 1a 00 00  |................|
00000630: 2e 74 65 78 74 00 00 00  a8 18 00 00 a8 18 00 00  |.text...........|
00000640: 58 01 00 00 a8 10 00 00  00 00 00 00 00 00 00 00  |X...............|
00000650: 00 00 00 00 20 00 00 00  2e 64 61 74 61 00 00 00  |.... ....data...|
00000660: 00 1a 00 00 00 1a 00 00  00 02 00 00 00 12 00 00  |................|
00000670: 00 00 00 00 00 00 00 00  00 00 00 00 40 00 00 00  |............@...|
00000680: 2e 63 6f 6d 6d 65 6e 74  00 00 00 00 00 00 00 00  |.comment........|
00000690: 14 00 00 00 00 14 00 00  00 00 00 00 00 00 00 00  |................|
000006a0: 00 00 00 00 00 02 00 00  00 00 00 00 00 00 00 00  |................|
000006b0: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
00001000:

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	2146	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 7730 bytes (8 KiB)



Errors: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[!] PE offset beyond EOF. cannot continue.

[!] NE offset beyond EOF.

[!] PE offset beyond EOF. cannot continue.

[?] DOS stub size too big (544825376), limiting to 0x1000

[!] PE offset beyond EOF. cannot continue.