file.exe - fergerE.exe

info
MZ
PE
resources
strings
imports
foremost
7zip
version info
hexdump
disasm
log
discuss
donate

filename	file.exe
size	246338 (0x3c242)
md5	36344069c03c72f06df26706ec6412e3

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf0

Rich Header

lib id	version	times used
93	4035	8
14	7299	1
10	8047	11
4	8047	2
11	9782	3
4	9782	3
1	0	252
11	8168	5
6	1735	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	6
TimeDateStamp	0x53dfbb45
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10e
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0x6b00
SizeOfInitializedData	0x36000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1f9d
BaseOfCode	0x1000
BaseOfData	0x6000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x3c000
SizeOfHeaders	0x1000
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x411a	0x6b00	R-X CODE
.rdata	0x6000	0x919	0x1000	R-- IDATA
.data	0x7000	0xe10	0x1000	RW- IDATA
.idata	0x8000	0xbde	0x1000	RW- IDATA
.rsrc	0x9000	0x31c94	0x32000	R-- IDATA
.reloc	0x3b000	0x67c	0x1000	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x8000	0x8c
RESOURCE	0x9000	0x101c94
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x3b000	0x808
DEBUG	0x6000	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x8494	0x608
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
BITMAP	#128	1064	1252
ICON	#1	9640	1252
MENU	#128	590	1252
DIALOG	#19	188424	1252
DIALOG	#100	206	1252
STRING	#9	112	1252
STRING	#2049	136	1252
STRING	#3585	44	1252
STRING	#3601	244	1252
STRING	#3602	192	1252
STRING	#3603	310	1252
STRING	#3604	60	1252
STRING	#3605	96	1252
STRING	#3606	84	1252
STRING	#3697	58	1252
STRING	#3713	88	1252
STRING	#3825	164	1252
STRING	#3826	62	1252
STRING	#3841	58	1252
ACCELERATORS	#128	112	1252
GROUP_ICON	#1	20	1252
VERSION	#1	780	1252
#241	#128	30	1252

id	lang	string
128	2052	TUKE TUKE TUKE.Document TUKE Document
32771	2052	点击这里开始生成凸壳!! 生成凸壳!
32772	2052	清除凸壳以便再次生成凸壳!! 清除凸壳!
32774	2052	清除屏幕以便重花!! 清屏!
57344	2052	TUKE
57345	2052	就绪
57600	2052	点击这里获得提示!! 开始!
57601	2052	读文件!! 显示离散点!
57602	2052	关闭活动文档关闭
57603	2052	保存活动文档保存
57604	2052	将活动文档以一个新文件名保存另存为
57605	2052	改变打印选项页面设置
57606	2052	改变打印机及打印选项打印设置
57607	2052	打印活动文档打印
57609	2052	显示整页打印预览
57616	2052	打开该文档
57617	2052	打开该文档
57618	2052	打开该文档
57619	2052	打开该文档
57620	2052	打开该文档
57621	2052	打开该文档
57622	2052	打开该文档
57623	2052	打开该文档
57624	2052	打开该文档
57625	2052	打开该文档
57626	2052	打开该文档
57627	2052	打开该文档
57628	2052	打开该文档
57629	2052	打开该文档
57630	2052	打开该文档
57631	2052	打开该文档
57632	2052	删除被选对象删除
57633	2052	全部删除全部删除
57634	2052	复制被选对象并将其置于剪贴板上复制
57635	2052	剪切被选对象并将其置于剪贴板上剪切
57636	2052	查找指定的正文查找
57637	2052	插入剪贴板内容粘贴
57640	2052	重复上一步操作重复
57641	2052	用不同的正文替换指定的正文替换
57642	2052	选择整个文档选择全部
57643	2052	撤消最后一步操作撤消
57644	2052	重新执行先前已撤消的操作重新执行
57653	2052	将活动的窗口分隔成窗格分隔
57664	2052	显示程序信息，版本号和版权关于
57665	2052	退出应用程序；提示保存文档退出
57680	2052	切换到下一个窗格下一窗格
57681	2052	切换回前一个窗格前一窗格
59136	2052	扩展名
59137	2052	大写
59138	2052	数字
59139	2052	滚动
59140	2052	改写
59141	2052	记录
59392	2052	显示或隐藏工具栏显隐工具栏
59393	2052	显示或隐藏状态栏显隐状态栏
61184	2052	改变窗口大小
61185	2052	改变窗口位置
61186	2052	将窗口缩小成图标
61187	2052	把窗口放大到最大尺寸
61188	2052	切换到下一个文档窗口
61189	2052	切换到先前的文档窗口
61190	2052	关闭活动的窗口并提示保存所有文档
61202	2052	把窗口恢复到正常大小
61203	2052	激活任务表
61445	2052	关闭打印预览模式取消预阅

module_name	hint	ord	function_name
MFC42.DLL		4077
MFC42.DLL		1776
MFC42.DLL		4407
MFC42.DLL		5237
MFC42.DLL		2385
MFC42.DLL		5163
MFC42.DLL		6374
MFC42.DLL		4353
MFC42.DLL		5282
MFC42.DLL		2649
MFC42.DLL		1665
MFC42.DLL		3798
MFC42.DLL		4837
MFC42.DLL		4436
MFC42.DLL		2648
MFC42.DLL		2055
MFC42.DLL		6376
MFC42.DLL		3749
MFC42.DLL		5065
MFC42.DLL		1727
MFC42.DLL		2446
MFC42.DLL		2124
MFC42.DLL		5277
MFC42.DLL		2982
MFC42.DLL		3147
MFC42.DLL		3259
MFC42.DLL		4465
MFC42.DLL		3136
MFC42.DLL		3262
MFC42.DLL		2985
MFC42.DLL		3081
MFC42.DLL		2976
MFC42.DLL		3830
MFC42.DLL		3831
MFC42.DLL		3825
MFC42.DLL		3079
MFC42.DLL		4080
MFC42.DLL		4627
MFC42.DLL		4427
MFC42.DLL		796
MFC42.DLL		674
MFC42.DLL		554
MFC42.DLL		529
MFC42.DLL		366
MFC42.DLL		807
MFC42.DLL		2494
MFC42.DLL		2627
MFC42.DLL		2626
MFC42.DLL		6000
MFC42.DLL		2117
MFC42.DLL		6625
MFC42.DLL		4457
MFC42.DLL		5252
MFC42.DLL		825
MFC42.DLL		4163
MFC42.DLL		4615
MFC42.DLL		4612
MFC42.DLL		4610
MFC42.DLL		4274
MFC42.DLL		815
MFC42.DLL		6375
MFC42.DLL		4486
MFC42.DLL		2554
MFC42.DLL		2512
MFC42.DLL		5731
MFC42.DLL		3922
MFC42.DLL		1089
MFC42.DLL		5199
MFC42.DLL		2396
MFC42.DLL		3346
MFC42.DLL		5300
MFC42.DLL		5302
MFC42.DLL		2725
MFC42.DLL		4079
MFC42.DLL		4698
MFC42.DLL		5307
MFC42.DLL		5289
MFC42.DLL		5714
MFC42.DLL		4622
MFC42.DLL		4424
MFC42.DLL		3738
MFC42.DLL		561
MFC42.DLL		6215
MFC42.DLL		617
MFC42.DLL		5301
MFC42.DLL		5214
MFC42.DLL		296
MFC42.DLL		986
MFC42.DLL		520
MFC42.DLL		6055
MFC42.DLL		6117
MFC42.DLL		2621
MFC42.DLL		1134
MFC42.DLL		5265
MFC42.DLL		4376
MFC42.DLL		4853
MFC42.DLL		4998
MFC42.DLL		4710
MFC42.DLL		2514
MFC42.DLL		6052
MFC42.DLL		4078
MFC42.DLL		1775
MFC42.DLL		5241
MFC42.DLL		5280
MFC42.DLL		4441
MFC42.DLL		5261
MFC42.DLL		4425
MFC42.DLL		3597
MFC42.DLL		324
MFC42.DLL		641
MFC42.DLL		4234
MFC42.DLL		1825
MFC42.DLL		4238
MFC42.DLL		4696
MFC42.DLL		3058
MFC42.DLL		3065
MFC42.DLL		6336
MFC42.DLL		2510
MFC42.DLL		2542
MFC42.DLL		5243
MFC42.DLL		5740
MFC42.DLL		1746
MFC42.DLL		5577
MFC42.DLL		3172
MFC42.DLL		5653
MFC42.DLL		4420
MFC42.DLL		4953
MFC42.DLL		4858
MFC42.DLL		2399
MFC42.DLL		4387
MFC42.DLL		3454
MFC42.DLL		3198
MFC42.DLL		6080
MFC42.DLL		6175
MFC42.DLL		4623
MFC42.DLL		4426
MFC42.DLL		338
MFC42.DLL		652
MFC42.DLL		4823
MFC42.DLL		4614
MFC42.DLL		4613
MFC42.DLL		1945
MFC42.DLL		4273
MFC42.DLL		4589
MFC42.DLL		4899
MFC42.DLL		5076
MFC42.DLL		4341
MFC42.DLL		4349
MFC42.DLL		4723
MFC42.DLL		4890
MFC42.DLL		4531
MFC42.DLL		4545
MFC42.DLL		4543
MFC42.DLL		4526
MFC42.DLL		4529
MFC42.DLL		4524
MFC42.DLL		4964
MFC42.DLL		4961
MFC42.DLL		4108
MFC42.DLL		5240
MFC42.DLL		5290
MFC42.DLL		3748
MFC42.DLL		1726
MFC42.DLL		4432
MFC42.DLL		813
MFC42.DLL		560
MFC42.DLL		5260
MFC42.DLL		2535
MFC42.DLL		613
MFC42.DLL		289
MFC42.DLL		3663
MFC42.DLL		5450
MFC42.DLL		6394
MFC42.DLL		5440
MFC42.DLL		6383
MFC42.DLL		4297
MFC42.DLL		4133
MFC42.DLL		1576
MFC42.DLL		4151
MFC42.DLL		2878
MFC42.DLL		2879
MFC42.DLL		3403
MFC42.DLL		5472
MFC42.DLL		975
MFC42.DLL		5012
MFC42.DLL		3350
MFC42.DLL		4303
MFC42.DLL		4467
MFC42.DLL		5103
MFC42.DLL		5100
MFC42.DLL		3059
MFC42.DLL		2390
MFC42.DLL		2723
MFC42.DLL		4242
MFC42.DLL		1842
MFC42.DLL		4159
MFC42.DLL		823
MFC42.DLL		1168
MSVCRT.dll	106		__p__commode
MSVCRT.dll	111		__p__fmode
MSVCRT.dll	129		__set_app_type
MSVCRT.dll	202		_except_handler3
MSVCRT.dll	85		__dllonexit
MSVCRT.dll	390		_onexit
MSVCRT.dll	183		_controlfp
MSVCRT.dll	131		__setusermatherr
MSVCRT.dll	271		_initterm
MSVCRT.dll	88		__getmainargs
MSVCRT.dll	143		_acmdln
MSVCRT.dll	585		exit
MSVCRT.dll	72		_XcptFilter
MSVCRT.dll	211		_exit
MSVCRT.dll	665		memset
MSVCRT.dll	663		memcpy
MSVCRT.dll	691		sqrt
MSVCRT.dll	241		_ftol
MSVCRT.dll	609		fscanf
MSVCRT.dll	599		fopen
MSVCRT.dll	588		fclose
MSVCRT.dll	426		_setmbcp
MSVCRT.dll	605		fread
MSVCRT.dll	682		rewind
MSVCRT.dll	612		ftell
MSVCRT.dll	610		fseek
MSVCRT.dll	515		_wfopen
MSVCRT.dll	73		__CxxFrameHandler
MSVCRT.dll	157		_adjust_fdiv
KERNEL32.dll	511		GlobalFree
KERNEL32.dll	372		GetLocaleInfoA
KERNEL32.dll	238		FlushFileBuffers
KERNEL32.dll	383		GetModuleHandleA
KERNEL32.dll	439		GetStartupInfoA
KERNEL32.dll	83		CreateFileA
KERNEL32.dll	426		GetProcessTimes
KERNEL32.dll	478		GetThreadTimes
KERNEL32.dll	320		GetCurrentDirectoryA
KERNEL32.dll	854		Sleep
KERNEL32.dll	382		GetModuleFileNameW
KERNEL32.dll	86		CreateFileW
USER32.dll	446		LoadIconA
USER32.dll	576		SendMessageW
USER32.dll	599		SetForegroundWindow
USER32.dll	375		GetWindowTextA
USER32.dll	277		GetDoubleClickTime
USER32.dll	268		GetDC
USER32.dll	196		EnableWindow
USER32.dll	700		UpdateWindow
USER32.dll	403		InvalidateRect
GDI32.dll	527		SelectPalette
GDI32.dll	222		ExtTextOutW
GDI32.dll	148		Ellipse
ADVAPI32.dll	467		RegCreateKeyW

StringTable 041f03b5

Comments
CompanyName
FileDescription	grhe
FileVersion	1, 0, 0, 1
InternalName	egrr
LegalCopyright	Copyright ? 2013
LegalTrademarks
OriginalFilename	fergerE.exe
PrivateBuild
ProductName	egtyre
ProductVersion	1, 0, 0, 1
SpecialBuild

VS_FIXEDFILEINFO

FileVersion	1.0.0.1
ProductVersion	1.0.0.1
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40000
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	245760	EXE	08/04/2014 16:56:37	#
15c1	15	HTM		#
3c000	578	BIN	overlay data past EOF	#

Scanning the drive for archives:
1 file, 246338 bytes (241 KiB)



Errors: 1

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

file.exe-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 041f03b5

VS_FIXEDFILEINFO

file.exe
-