filenameuk.exe
size1414840 (0x1596b8)
md560cc0f6cb04e0159ed92abd801ae9631
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
152201152
17040219175
1714021953
131307299
1473072933
10528
1804021972
1584021928
154402191
15101
157402191

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x4f25baec
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x123
Magic0x10b
LinkerVersion10.0
SizeOfCode0x80800
SizeOfInitializedData0x1dc00
SizeOfUninitializedData0
AddressOfEntryPoint0x165c1
BaseOfCode0x1000
BaseOfData0x82000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0xb5000
SizeOfHeaders0x400
CheckSum0x159d0e
Subsystem2
DllCharacteristics0x8000
SizeOfStackReserve0x400000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x400000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x8061c0x80800R-X CODE
.rdata0x820000xdfc00xe000R-- IDATA
.data0x900000x1a7580x6800RW- IDATA
.rsrc0xab0000x93280x9400R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x8d41c0x154
RESOURCE0xab0000x9328
EXCEPTION00
SECURITY0x158f080x7b0
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x820000x844
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#12961252
ICON#22961252
ICON#32961252
ICON#416401252
ICON#57441252
ICON#62961252
ICON#737521252
ICON#822161252
ICON#913841252
ICON#1096401252
ICON#1142641252
ICON#1211281252
MENU#166801252
DIALOG#10002521252
STRING#713281252
STRING#816801252
STRING#912321252
STRING#1015321252
STRING#1116281252
STRING#129041252
STRING#3133441252
GROUP_ICON#991321252
GROUP_ICON#162201252
GROUP_ICON#164201252
GROUP_ICON#169201252
VERSION#14121252
MANIFEST#16201252
idlangstring
1012057(Paused)
1022057AutoIt Error
1032057AutoIt has detected the stack has become corrupt. Stack corruption typically occurs when either the wrong calling convention is used or when the function is called with the wrong number of arguments. AutoIt supports the __stdcall (WINAPI) and __cdecl calling conventions. The __stdcall (WINAPI) convention is used by default but __cdecl can be used instead. See the DllCall() documentation for details on changing the calling convention.
1052057Badly formatted "Func" statement.
1072057Missing right bracket ')' in expression.
1082057Missing operator in expression.
1092057Unbalanced brackets in expression.
1102057Error in expression.
1112057Error parsing function call.
1122057Incorrect number of parameters in function call.
1132057"ReDim" used without an array variable.
1142057Illegal text at the end of statement (one statement per line).
1152057"If" statement has no matching "EndIf" statement.
1162057"Else" statement with no matching "If" statement.
1172057"EndIf" statement with no matching "If" statement.
1182057Too many "Else" statements for matching "If" statement.
1192057"While" statement has no matching "Wend" statement.
1202057"Wend" statement with no matching "While" statement.
1212057Variable used without being declared.
1222057Array variable has incorrect number of subscripts or subscript dimension range exceeded.
1232057Array variable subscript badly formatted.
1242057Subscript used with non-Array variable.
1252057Too many subscripts used for an array.
1262057Missing subscript dimensions in "Dim" statement.
1272057No variable given for "Dim", "Local", "Global", "Struct" or "Const" statement.
1282057Expected a "=" operator in assignment statement.
1292057Invalid keyword at the start of this line.
1302057Array maximum size exceeded.
1312057"Func" statement has no matching "EndFunc".
1322057Duplicate function name.
1332057Unknown function name.
1342057Unknown macro.
1362057Unable to get a list of running processes.
1372057Unable to get the process token.
1382057Invalid element in a DllStruct.
1392057Unknown option or bad parameter specified.
1402057Unable to load the internet libraries.
1412057"Struct" statement has no matching "EndStruct".
1422057Unable to open file, the maximum number of open files has been exceeded.
1432057"ContinueLoop" statement with no matching "While", "Do" or "For" statement.
1442057Invalid file filter given.
1452057Expected a variable in user function call.
1462057"Do" statement has no matching "Until" statement.
1472057"Until" statement with no matching "Do" statement.
1482057"For" statement is badly formatted.
1492057"Next" statement with no matching "For" statement.
1502057"ExitLoop/ContinueLoop" statements only valid from inside a For/Do/While loop.
1512057"For" statement has no matching "Next" statement.
1522057"Case" statement with no matching "Select"or "Switch" statement.
1532057"EndSelect" statement with no matching "Select" statement.
1542057Recursion level has been exceeded - AutoIt will quit to prevent stack overflow.
1552057Cannot make existing variables static.
1562057Cannot make static variables into regular variables.
1572057Badly formated Enum statement
1592057This keyword cannot be used after a "Then" keyword.
1602057"Select" statement is missing "EndSelect" or "Case" statement.
1612057"If" statements must have a "Then" keyword.
1622057Badly formated Struct statement.
1632057Cannot assign values to constants.
1642057Cannot make existing variables into constants.
1652057Only Object-type variables allowed in a "With" statement.
1662057"long_ptr", "int_ptr" and "short_ptr" DllCall() types have been deprecated. Use "long*", "int*" and "short*" instead.
1672057Object referenced outside a "With" statement.
1682057Nested "With" statements are not allowed.
1692057Variable must be of type "Object".
1702057The requested action with this object has failed.
1712057Variable appears more than once in function declaration.
1722057ReDim array can not be initialized in this manner.
1732057An array variable can not be used in this manner.
1742057Can not redeclare a constant.
1752057Can not redeclare a parameter inside a user function.
1762057Can pass constants by reference only to parameters with "Const" keyword.
1772057Can not initialize a variable with itself.
1782057Incorrect way to use this parameter.
1792057"EndSwitch" statement with no matching "Switch" statement.
1802057"Switch" statement is missing "EndSwitch" or "Case" statement.
1812057"ContinueCase" statement with no matching "Select"or "Switch" statement.
1822057Assert Failed!
1842057Obsolete function/parameter.
1852057Invalid Exitcode (reserved for AutoIt internal use).
50001033Unable to parse line.
50011033Unable to open the script file.
50021033String missing closing quote.
50031033Badly formated variable or macro.
50041033Missing separator character after keyword.
module_namehintordfunction_name
WSOCK32.dll151
WSOCK32.dll21
WSOCK32.dll15
WSOCK32.dll17
WSOCK32.dll20
WSOCK32.dll9
WSOCK32.dll18
WSOCK32.dll13
WSOCK32.dll115
WSOCK32.dll2
WSOCK32.dll3
WSOCK32.dll4
WSOCK32.dll23
WSOCK32.dll19
WSOCK32.dll116
WSOCK32.dll10
WSOCK32.dll1
WSOCK32.dll111
WSOCK32.dll11
WSOCK32.dll52
WSOCK32.dll57
WSOCK32.dll16
VERSION.dll14VerQueryValueW
VERSION.dll6GetFileVersionInfoW
VERSION.dll5GetFileVersionInfoSizeW
WINMM.dll148timeGetTime
WINMM.dll187waveOutSetVolume
WINMM.dll50mciSendStringW
COMCTL32.dll109ImageList_Remove
COMCTL32.dll114ImageList_SetDragCursorImage
COMCTL32.dll80ImageList_BeginDrag
COMCTL32.dll86ImageList_DragEnter
COMCTL32.dll87ImageList_DragLeave
COMCTL32.dll94ImageList_EndDrag
COMCTL32.dll88ImageList_DragMove
COMCTL32.dll111ImageList_ReplaceIcon
COMCTL32.dll83ImageList_Create
COMCTL32.dll123InitCommonControlsEx
COMCTL32.dll84ImageList_Destroy
MPR.dll12WNetCancelConnection2W
MPR.dll36WNetGetConnectionW
MPR.dll6WNetAddConnection2W
MPR.dll73WNetUseConnectionW
WININET.dll159InternetReadFile
WININET.dll107InternetCloseHandle
WININET.dll154InternetOpenW
WININET.dll175InternetSetOptionW
WININET.dll116InternetCrackUrlW
WININET.dll90HttpQueryInfoW
WININET.dll114InternetConnectW
WININET.dll88HttpOpenRequestW
WININET.dll94HttpSendRequestW
WININET.dll53FtpOpenFileW
WININET.dll50FtpGetFileSize
WININET.dll153InternetOpenUrlW
WININET.dll158InternetQueryOptionW
WININET.dll155InternetQueryDataAvailable
PSAPI.DLL6EnumProcesses
PSAPI.DLL14GetModuleBaseNameW
PSAPI.DLL21GetProcessMemoryInfo
PSAPI.DLL4EnumProcessModules
USERENV.dllCreateEnvironmentBlock
USERENV.dll4DestroyEnvironmentBlock
USERENV.dll44UnloadUserProfile
USERENV.dll33LoadUserProfileW
KERNEL32.dll715HeapAlloc
KERNEL32.dll1202Sleep
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll945RaiseException
KERNEL32.dll870MulDiv
KERNEL32.dll676GetVersionExW
KERNEL32.dll627GetSystemInfo
KERNEL32.dll751InterlockedIncrement
KERNEL32.dll747InterlockedDecrement
KERNEL32.dll1297WideCharToMultiByte
KERNEL32.dll1352lstrcpyW
KERNEL32.dll871MultiByteToWideChar
KERNEL32.dll1358lstrlenW
KERNEL32.dll1349lstrcmpiW
KERNEL32.dll536GetModuleHandleW
KERNEL32.dll935QueryPerformanceCounter
KERNEL32.dll1261VirtualFreeEx
KERNEL32.dll896OpenProcess
KERNEL32.dll1258VirtualAllocEx
KERNEL32.dll1326WriteProcessMemory
KERNEL32.dll963ReadProcessMemory
KERNEL32.dll143CreateFileW
KERNEL32.dll1127SetFilePointerEx
KERNEL32.dll960ReadFile
KERNEL32.dll1317WriteFile
KERNEL32.dll343FlushFileBuffers
KERNEL32.dll1216TerminateProcess
KERNEL32.dll190CreateToolhelp32Snapshot
KERNEL32.dll918Process32FirstW
KERNEL32.dll920Process32NextW
KERNEL32.dll1130SetFileTime
KERNEL32.dll490GetFileAttributesW
KERNEL32.dll313FindFirstFileW
KERNEL32.dll302FindClose
KERNEL32.dll214DeleteFileW
KERNEL32.dll325FindNextFileW
KERNEL32.dll867MoveFileW
KERNEL32.dll117CopyFileW
KERNEL32.dll129CreateDirectoryW
KERNEL32.dll1027RemoveDirectoryW
KERNEL32.dll586GetProcessHeap
KERNEL32.dll936QueryPerformanceFrequency
KERNEL32.dll334FindResourceW
KERNEL32.dll833LoadResource
KERNEL32.dll852LockResource
KERNEL32.dll1201SizeofResource
KERNEL32.dll258EnumResourceNamesW
KERNEL32.dll906OutputDebugStringW
KERNEL32.dll515GetLocalTime
KERNEL32.dll100CompareStringW
KERNEL32.dll209DeleteCriticalSection
KERNEL32.dll238EnterCriticalSection
KERNEL32.dll825LeaveCriticalSection
KERNEL32.dll739InitializeCriticalSectionAndSpinCount
KERNEL32.dll612GetStdHandle
KERNEL32.dll161CreatePipe
KERNEL32.dll748InterlockedExchange
KERNEL32.dll1217TerminateThread
KERNEL32.dll645GetTempPathW
KERNEL32.dll643GetTempFileNameW
KERNEL32.dll1260VirtualFree
KERNEL32.dll350FormatMessageW
KERNEL32.dll479GetExitCodeProcess
KERNEL32.dll1112SetErrorMode
KERNEL32.dll578GetPrivateProfileStringW
KERNEL32.dll1323WritePrivateProfileStringW
KERNEL32.dll576GetPrivateProfileSectionW
KERNEL32.dll1321WritePrivateProfileSectionW
KERNEL32.dll575GetPrivateProfileSectionNamesW
KERNEL32.dll292FileTimeToLocalFileTime
KERNEL32.dll293FileTimeToSystemTime
KERNEL32.dll1213SystemTimeToFileTime
KERNEL32.dll838LocalFileTimeToFileTime
KERNEL32.dll467GetDriveTypeW
KERNEL32.dll462GetDiskFreeSpaceExW
KERNEL32.dll463GetDiskFreeSpaceW
KERNEL32.dll679GetVolumeInformationW
KERNEL32.dll1193SetVolumeLabelW
KERNEL32.dll147CreateHardLinkW
KERNEL32.dll221DeviceIoControl
KERNEL32.dll1121SetFileAttributesW
KERNEL32.dll609GetShortPathNameW
KERNEL32.dll133CreateEventW
KERNEL32.dll1113SetEvent
KERNEL32.dll476GetEnvironmentVariableW
KERNEL32.dll1111SetEnvironmentVariableW
KERNEL32.dll702GlobalLock
KERNEL32.dll709GlobalUnlock
KERNEL32.dll691GlobalAlloc
KERNEL32.dll496GetFileSize
KERNEL32.dll698GlobalFree
KERNEL32.dll704GlobalMemoryStatusEx
KERNEL32.dll54Beep
KERNEL32.dll624GetSystemDirectoryW
KERNEL32.dll399GetComputerNameW
KERNEL32.dll687GetWindowsDirectoryW
KERNEL32.dll449GetCurrentProcessId
KERNEL32.dll452GetCurrentThread
KERNEL32.dll590GetProcessIoCounters
KERNEL32.dll168CreateProcessW
KERNEL32.dll1149SetPriorityClass
KERNEL32.dll831LoadLibraryW
KERNEL32.dll1257VirtualAlloc
KERNEL32.dll830LoadLibraryExW
KERNEL32.dll719HeapFree
KERNEL32.dll1273WaitForSingleObject
KERNEL32.dll181CreateThread
KERNEL32.dll232DuplicateHandle
KERNEL32.dll514GetLastError
KERNEL32.dll82CloseHandle
KERNEL32.dll448GetCurrentProcess
KERNEL32.dll581GetProcAddress
KERNEL32.dll828LoadLibraryA
KERNEL32.dll354FreeLibrary
KERNEL32.dll532GetModuleFileNameW
KERNEL32.dll507GetFullPathNameW
KERNEL32.dll1101SetCurrentDirectoryW
KERNEL32.dll768IsDebuggerPresent
KERNEL32.dll447GetCurrentDirectoryW
KERNEL32.dll281ExitProcess
KERNEL32.dll282ExitThread
KERNEL32.dll633GetSystemTimeAsFileTime
KERNEL32.dll1043ResumeThread
KERNEL32.dll663GetTimeFormatW
KERNEL32.dll456GetDateFormatW
KERNEL32.dll391GetCommandLineW
KERNEL32.dll611GetStartupInfoW
KERNEL32.dll772IsProcessorFeaturePresent
KERNEL32.dll724HeapSize
KERNEL32.dll370GetCPInfo
KERNEL32.dll360GetACP
KERNEL32.dll567GetOEMCP
KERNEL32.dll778IsValidCodePage
KERNEL32.dll1221TlsAlloc
KERNEL32.dll1223TlsGetValue
KERNEL32.dll1224TlsSetValue
KERNEL32.dll1222TlsFree
KERNEL32.dll1139SetLastError
KERNEL32.dll1235UnhandledExceptionFilter
KERNEL32.dll1189SetUnhandledExceptionFilter
KERNEL32.dll617GetStringTypeW
KERNEL32.dll717HeapCreate
KERNEL32.dll1135SetHandleCount
KERNEL32.dll499GetFileType
KERNEL32.dll1159SetStdHandle
KERNEL32.dll410GetConsoleCP
KERNEL32.dll428GetConsoleMode
KERNEL32.dll813LCMapStringW
KERNEL32.dll1048RtlUnwind
KERNEL32.dll1126SetFilePointer
KERNEL32.dll664GetTimeZoneInformation
KERNEL32.dll353FreeEnvironmentStringsW
KERNEL32.dll474GetEnvironmentStringsW
KERNEL32.dll659GetTickCount
KERNEL32.dll722HeapReAlloc
KERNEL32.dll1316WriteConsoleW
KERNEL32.dll1107SetEndOfFile
KERNEL32.dll1162SetSystemPowerState
KERNEL32.dll1110SetEnvironmentVariableA
USER32.dll287GetCursorInfo
USER32.dll598RegisterHotKey
USER32.dll71ClientToScreen
USER32.dll321GetKeyboardLayoutNameW
USER32.dll452IsCharAlphaW
USER32.dll451IsCharAlphaNumericW
USER32.dll454IsCharLowerW
USER32.dll456IsCharUpperW
USER32.dll344GetMenuStringW
USER32.dll378GetSubMenu
USER32.dll266GetCaretPos
USER32.dll482IsZoomed
USER32.dll536MonitorFromPoint
USER32.dll351GetMonitorInfoW
USER32.dll708SetWindowLongW
USER32.dll664SetLayeredWindowAttributes
USER32.dll251FlashWindow
USER32.dll272GetClassLongW
USER32.dll762TranslateAcceleratorW
USER32.dll461IsDialogMessageW
USER32.dll379GetSysColor
USER32.dll437InflateRect
USER32.dll196DrawFocusRect
USER32.dll208DrawTextW
USER32.dll253FrameRect
USER32.dll198DrawFrameControl
USER32.dll246FillRect
USER32.dll576PtInRect
USER32.dll160DestroyAcceleratorTable
USER32.dll88CreateAcceleratorTableW
USER32.dll648SetCursor
USER32.dll402GetWindowDC
USER32.dll382GetSystemMetrics
USER32.dll256GetActiveWindow
USER32.dll49CharNextW
USER32.dll819wsprintfW
USER32.dll586RedrawWindow
USER32.dll201DrawMenuBar
USER32.dll164DestroyMenu
USER32.dll668SetMenu
USER32.dll418GetWindowTextLengthW
USER32.dll106CreateMenu
USER32.dll462IsDlgButtonChecked
USER32.dll149DefDlgProcW
USER32.dll612ReleaseCapture
USER32.dll640SetCapture
USER32.dll812WindowFromPoint
USER32.dll495LoadImageW
USER32.dll102CreateIconFromResourceEx
USER32.dll817mouse_event
USER32.dll245ExitWindowsEx
USER32.dll639SetActiveWindow
USER32.dll249FindWindowExW
USER32.dll239EnumThreadWindows
USER32.dll670SetMenuDefaultItem
USER32.dll441InsertMenuItemW
USER32.dll466IsMenu
USER32.dll759TrackPopupMenuEx
USER32.dll288GetCursorPos
USER32.dll158DeleteMenu
USER32.dll64CheckMenuRadioItem
USER32.dll710SetWindowPos
USER32.dll337GetMenuItemCount
USER32.dll674SetMenuItemInfoW
USER32.dll340GetMenuItemInfoW
USER32.dll659SetForegroundWindow
USER32.dll465IsIconic
USER32.dll250FindWindowW
USER32.dll748SystemParametersInfoW
USER32.dll764TranslateMessage
USER32.dll630SendInput
USER32.dll263GetAsyncKeyState
USER32.dll662SetKeyboardState
USER32.dll322GetKeyboardState
USER32.dll317GetKeyState
USER32.dll801VkKeyScanW
USER32.dll506LoadStringW
USER32.dll172DialogBoxParamW
USER32.dll525MessageBeep
USER32.dll218EndDialog
USER32.dll627SendDlgItemMessageW
USER32.dll295GetDlgItem
USER32.dll715SetWindowTextW
USER32.dll85CopyRect
USER32.dll613ReleaseDC
USER32.dll289GetDC
USER32.dll220EndPaint
USER32.dll14BeginPaint
USER32.dll276GetClientRect
USER32.dll331GetMenu
USER32.dll166DestroyWindow
USER32.dll242EnumWindows
USER32.dll291GetDesktopWindow
USER32.dll475IsWindow
USER32.dll476IsWindowEnabled
USER32.dll480IsWindowVisible
USER32.dll216EnableWindow
USER32.dll446InvalidateRect
USER32.dll406GetWindowLongW
USER32.dll12AttachThreadInput
USER32.dll300GetFocus
USER32.dll419GetWindowTextW
USER32.dll621ScreenToClient
USER32.dll635SendMessageTimeoutW
USER32.dll223EnumChildWindows
USER32.dll59CharUpperBuffW
USER32.dll274GetClassNameW
USER32.dll356GetParent
USER32.dll294GetDlgCtrlID
USER32.dll636SendMessageW
USER32.dll520MapVirtualKeyW
USER32.dll566PostMessageW
USER32.dll412GetWindowRect
USER32.dll702SetUserObjectSecurity
USER32.dll396GetUserObjectSecurity
USER32.dll74CloseDesktop
USER32.dll78CloseWindowStation
USER32.dll552OpenDesktopW
USER32.dll682SetProcessWindowStation
USER32.dll360GetProcessWindowStation
USER32.dll557OpenWindowStationW
USER32.dll533MessageBoxW
USER32.dll156DefWindowProcW
USER32.dll84CopyImage
USER32.dll3AdjustWindowRectEx
USER32.dll686SetRect
USER32.dll646SetClipboardData
USER32.dll213EmptyClipboard
USER32.dll86CountClipboardFormats
USER32.dll73CloseClipboard
USER32.dll278GetClipboardData
USER32.dll458IsClipboardFormatAvailable
USER32.dll550OpenClipboard
USER32.dll15BlockInput
USER32.dll349GetMessageW
USER32.dll509LockWindowUpdate
USER32.dll338GetMenuItemID
USER32.dll175DispatchMessageW
USER32.dll539MoveWindow
USER32.dll658SetFocus
USER32.dll567PostQuitMessage
USER32.dll483KillTimer
USER32.dll107CreatePopupMenu
USER32.dll611RegisterWindowMessageW
USER32.dll699SetTimer
USER32.dll735ShowWindow
USER32.dll110CreateWindowExW
USER32.dll589RegisterClassExW
USER32.dll493LoadIconW
USER32.dll491LoadCursorW
USER32.dll380GetSysColorBrush
USER32.dll301GetForegroundWindow
USER32.dll526MessageBoxA
USER32.dll163DestroyIcon
USER32.dll563PeekMessageW
USER32.dll776UnregisterHotKey
USER32.dll45CharLowerBuffW
USER32.dll816keybd_event
USER32.dll537MonitorFromRect
USER32.dll420GetWindowThreadProcessId
GDI32.dll230DeleteObject
GDI32.dll8AngleArc
GDI32.dll542GetTextExtentPoint32W
GDI32.dll306ExtCreatePen
GDI32.dll693StrokeAndFillPath
GDI32.dll694StrokePath
GDI32.dll243EndPath
GDI32.dll667SetPixel
GDI32.dll30CloseFigure
GDI32.dll47CreateCompatibleBitmap
GDI32.dll48CreateCompatibleDC
GDI32.dll631SelectObject
GDI32.dll691StretchBlt
GDI32.dll458GetDIBits
GDI32.dll459GetDeviceCaps
GDI32.dll570MoveToEx
GDI32.dll227DeleteDC
GDI32.dll516GetPixel
GDI32.dll50CreateDCW
GDI32.dll237Ellipse
GDI32.dll592PolyDraw
GDI32.dll18BeginPath
GDI32.dll607Rectangle
GDI32.dll681SetViewportOrgEx
GDI32.dll509GetObjectW
GDI32.dll639SetBkMode
GDI32.dll618RoundRect
GDI32.dll638SetBkColor
GDI32.dll75CreatePen
GDI32.dll84CreateSolidBrush
GDI32.dll678SetTextColor
GDI32.dll65CreateFontW
GDI32.dll548GetTextFaceW
GDI32.dll525GetStockObject
GDI32.dll566LineTo
COMDLG32.dll14GetSaveFileNameW
COMDLG32.dll12GetOpenFileNameW
ADVAPI32.dll594RegEnumValueW
ADVAPI32.dll584RegDeleteValueW
ADVAPI32.dll580RegDeleteKeyW
ADVAPI32.dll591RegEnumKeyExW
ADVAPI32.dll638RegSetValueExW
ADVAPI32.dll569RegCreateKeyExW
ADVAPI32.dll357GetUserNameW
ADVAPI32.dll564RegConnectRegistryW
ADVAPI32.dll87CloseServiceHandle
ADVAPI32.dll768UnlockServiceDatabase
ADVAPI32.dll508OpenThreadToken
ADVAPI32.dll503OpenProcessToken
ADVAPI32.dll407LookupPrivilegeValueW
ADVAPI32.dll223DuplicateTokenEx
ADVAPI32.dll124CreateProcessAsUserW
ADVAPI32.dll125CreateProcessWithLogonW
ADVAPI32.dll375InitializeSecurityDescriptor
ADVAPI32.dll374InitializeAcl
ADVAPI32.dll310GetLengthSid
ADVAPI32.dll118CopySid
ADVAPI32.dll397LogonUserW
ADVAPI32.dll392LockServiceDatabase
ADVAPI32.dll346GetTokenInformation
ADVAPI32.dll328GetSecurityDescriptorDacl
ADVAPI32.dll292GetAclInformation
ADVAPI32.dll291GetAce
ADVAPI32.dll22AddAce
ADVAPI32.dll694SetSecurityDescriptorDacl
ADVAPI32.dll609RegOpenKeyExW
ADVAPI32.dll622RegQueryValueExW
ADVAPI32.dll31AdjustTokenPrivileges
ADVAPI32.dll381InitiateSystemShutdownExW
ADVAPI32.dll505OpenSCManagerW
ADVAPI32.dll560RegCloseKey
SHELL32.dll32DragQueryPoint
SHELL32.dll289ShellExecuteExW
SHELL32.dll195SHGetFolderPathW
SHELL32.dll31DragQueryFileW
SHELL32.dll165SHEmptyRecycleBinW
SHELL32.dll123SHBrowseForFolderW
SHELL32.dll172SHFileOperationW
SHELL32.dll215SHGetPathFromIDListW
SHELL32.dll182SHGetDesktopFolder
SHELL32.dll207SHGetMalloc
SHELL32.dll42ExtractIconExW
SHELL32.dll302Shell_NotifyIconW
SHELL32.dll290ShellExecuteW
SHELL32.dll27DragFinish
ole32.dll327OleSetMenuDescriptor
ole32.dll212MkParseDisplayName
ole32.dll326OleSetContainedObject
ole32.dll8CLSIDFromString
ole32.dll377StringFromGUID2
ole32.dll62CoInitialize
ole32.dll108CoUninitialize
ole32.dll16CoCreateInstance
ole32.dll134CreateStreamOnHGlobal
ole32.dll103CoTaskMemAlloc
ole32.dll104CoTaskMemFree
ole32.dll331ProgIDFromCLSID
ole32.dll306OleInitialize
ole32.dll121CreateBindCtx
ole32.dll6CLSIDFromProgID
ole32.dll64CoInitializeSecurity
ole32.dll17CoCreateInstanceEx
ole32.dll99CoSetProxyBlanket
ole32.dll329OleUninitialize
ole32.dll205IIDFromString
OLEAUT32.dll12
OLEAUT32.dll11
OLEAUT32.dll146
OLEAUT32.dll32
OLEAUT32.dll31
OLEAUT32.dll6
OLEAUT32.dll38
OLEAUT32.dll39
OLEAUT32.dll24
OLEAUT32.dll7
OLEAUT32.dll37
OLEAUT32.dll35
OLEAUT32.dll164
OLEAUT32.dll41
OLEAUT32.dll411
OLEAUT32.dll2
OLEAUT32.dll10
OLEAUT32.dll9
OLEAUT32.dll185
OLEAUT32.dll220
OLEAUT32.dll77
OLEAUT32.dll418
OLEAUT32.dll23
OLEAUT32.dll8

StringTable 080904b0

FileDescription
FileVersion3, 3, 8, 1
CompiledScriptAutoIt v3 Script: 3, 3, 8, 1

VS_FIXEDFILEINFO

FileVersion3.3.8.1
ProductVersion3.3.8.1
StrucVersion0x10000
FileFlagsMask0x17
FileFlags0
FileOS4
FileType0
FileSubtype0

Signers (1)

issuer: /C=FR/ST=FRANCE/O=CAHPP/OU=Adherent/CN=AutoriteDeCertification/emailAddress=reseaux@cahpp.fr
serial: 04F5

Certificates (1)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1269 (0x4f5)
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=FR, ST=FRANCE, O=CAHPP, OU=Adherent, CN=AutoriteDeCertification/emailAddress=reseaux@cahpp.fr
        Validity
            Not Before: Jun 10 14:41:25 2010 GMT
            Not After : Jan 30 14:41:25 2035 GMT
        Subject: C=FR, ST=FRANCE, L=Paris, O=CAHPP, OU=Adherent, CN=71720563AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:96:bb:bf:25:05:27:50:0c:3a:44:85:7e:5f:54:
                    3a:6b:93:90:b3:f6:37:08:ce:5d:31:c0:59:ee:43:
                    18:9c:9f:61:ff:70:3b:03:81:67:58:16:bc:28:41:
                    5a:1b:a0:8d:d8:8e:64:0c:39:a6:3c:4d:f7:fc:98:
                    ce:be:7a:83:74:cb:e6:22:ea:f2:3f:c7:76:99:31:
                    c0:92:b1:55:0b:95:eb:81:c8:dc:ac:ce:bc:07:8b:
                    ef:00:c5:35:30:a1:93:6c:32:fd:51:6d:55:be:c3:
                    ae:30:04:fe:15:e2:bd:c7:8c:70:5d:c9:56:00:fb:
                    63:de:c8:78:db:de:39:c9:3b:7f:56:00:28:19:95:
                    63:87:ad:68:4f:7d:b9:e0:ba:a2:5b:f8:2e:bb:85:
                    f7:55:b5:2f:20:0e:18:74:1f:01:d4:07:fb:4f:b8:
                    7b:88:5c:41:ee:57:95:9f:a2:c7:6a:8b:0b:fc:01:
                    ec:6f:d3:3b:fe:e0:23:28:91:b4:67:d8:aa:88:73:
                    11:45:8d:11:1e:1d:c2:23:78:49:d5:f8:83:4e:bb:
                    51:cb:bf:ea:62:57:4a:a1:ae:f1:7b:65:e0:18:34:
                    85:e6:46:d0:18:08:7b:f4:f1:f0:fd:c0:ed:c5:36:
                    07:d7:7a:ad:58:e8:d6:d7:93:ce:64:e8:fd:b1:4e:
                    7a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            Netscape Cert Type: 
                SSL Client, S/MIME
            X509v3 Key Usage: 
                Digital Signature, Non Repudiation, Key Encipherment
            Netscape Comment: 
                OpenSSL Generated Certificate
            X509v3 Subject Key Identifier: 
                EE:82:B6:A7:F7:45:9F:D9:BD:0F:51:08:74:D6:D1:C5:3F:FB:07:BB
            X509v3 Authority Key Identifier: 
                5A:3D:46:F0:58:A3:8C:56:5C:D1:39:2A:AC:52:28:2D:83:DA:7C:0C
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        03:7a:49:81:d1:7f:87:22:31:55:67:19:8d:7f:c8:68:84:a7:
        18:b2:f9:b1:cd:da:da:33:32:74:3b:74:8f:aa:cf:6a:b6:b4:
        b5:53:08:ea:76:f1:e0:7e:36:3c:d6:22:8e:52:e7:7d:dd:7b:
        e5:1b:5c:1e:f8:bf:6f:c9:96:2d:ef:d4:be:25:30:84:56:87:
        42:78:eb:2e:56:79:92:c9:7c:56:a6:70:dc:0a:ed:ed:1c:1e:
        3c:11:d8:7e:bb:c5:7d:f3:ea:30:72:73:56:04:12:f0:44:ff:
        9a:57:01:17:d2:9b:61:02:23:d6:1a:20:d2:27:49:57:7a:3e:
        2d:ae:29:dc:92:27:cd:ce:33:d8:a2:18:d0:ad:2a:8d:c8:93:
        36:36:7c:ed:20:65:c7:fb:06:85:72:f0:c2:79:08:82:5f:fe:
        ad:b0:0b:99:58:0c:61:85:85:88:90:2a:0d:2e:34:2a:56:91:
        b2:e4:bf:b5:ca:e1:93:69:40:bf:4f:c7:8a:63:b6:07:f3:34:
        ef:93:5b:61:bc:89:ff:73:c8:f4:7f:74:46:55:84:ee:dd:3e:
        4a:0a:98:ad:33:5c:4a:84:99:0c:1b:0a:4e:ef:6e:a2:90:d7:
        10:e3:fd:f5:2c:45:9b:61:fd:b1:ae:9e:04:0a:b2:b0:08:59:
        0f:5a:ee:21:e4:8e:c8:3d:c1:77:0b:3d:02:ff:aa:e1:63:bd:
        bb:19:fd:10:72:60:2d:d9:19:a5:f4:ed:c9:4e:d9:8f:6e:09:
        c5:9f:95:16:97:36:da:45:e8:49:85:ac:f7:6c:dd:36:e6:9c:
        72:79:83:c7:54:5d:c0:4b:0a:0a:c8:fc:b6:1f:8e:52:20:3a:
        37:75:13:7e:00:0c:1f:59:48:6e:17:78:9e:71:3c:06:07:5a:
        82:b6:d8:57:97:1f:67:7a:4a:63:cb:97:d9:c5:85:05:db:83:
        60:3b:23:ae:e8:72:0e:cf:29:a5:f4:e1:e5:06:40:a0:a6:95:
        c2:e1:64:26:ff:0e:58:2c:3c:75:e8:14:35:91:d5:a3:17:c7:
        ea:78:99:8c:dc:57:60:e1:78:cf:38:86:ef:63:5e:10:5b:17:
        c0:c8:ad:98:94:75:53:4e:ac:07:83:c1:1b:e6:0f:4a:66:a9:
        b6:55:4b:50:98:c7:08:b9:76:a5:22:b1:d0:97:45:01:bb:b9:
        d5:74:c8:bd:e2:30:8f:37:c5:4c:b7:dd:fa:d3:c7:41:b8:5e:
        e0:cc:6b:41:cd:83:e3:34:63:0c:78:5d:5c:3f:94:ea:1a:d7:
        78:e6:94:bd:4e:a1:60:02:d8:00:b1:33:d4:46:b9:d4:a8:c6:
        08:65:2c:9e:06:41:dd:58
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • : 
            00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |
        • SHA1
          • 2c cb fa 7f 7c ba 71 2d  a5 69 55 3a 41 2a 3c 27  |,...|.q-.iU:A*<'|
52 0d 3c bb                                       |R.<.            |
    • Certificate #2
      • 2
        • 0x04F5
        • RSA-SHA1: nil
        • Issuer
          • C: FR
          • ST: FRANCE
          • O: CAHPP
          • OU: Adherent
          • CN: AutoriteDeCertification
          • emailAddress: reseaux@cahpp.fr
        • 2010-06-10 14:41:25 UTC: 2035-01-30 14:41:25 UTC
        • Subject
          • C: FR
          • ST: FRANCE
          • L: Paris
          • O: CAHPP
          • OU: Adherent
          • CN: 71720563AA
        • #5
          • rsaEncryption: nil
          • 96:BB:BF:25:05:27:50:0C:3A:44:85:7E:5F:54:3A:6B:
            93:90:B3:F6:37:08:CE:5D:31:C0:59:EE:43:18:9C:9F:
            61:FF:70:3B:03:81:67:58:16:BC:28:41:5A:1B:A0:8D:
            D8:8E:64:0C:39:A6:3C:4D:F7:FC:98:CE:BE:7A:83:74:
            CB:E6:22:EA:F2:3F:C7:76:99:31:C0:92:B1:55:0B:95:
            EB:81:C8:DC:AC:CE:BC:07:8B:EF:00:C5:35:30:A1:93:
            6C:32:FD:51:6D:55:BE:C3:AE:30:04:FE:15:E2:BD:C7:
            8C:70:5D:C9:56:00:FB:63:DE:C8:78:DB:DE:39:C9:3B:
            7F:56:00:28:19:95:63:87:AD:68:4F:7D:B9:E0:BA:A2:
            5B:F8:2E:BB:85:F7:55:B5:2F:20:0E:18:74:1F:01:D4:
            07:FB:4F:B8:7B:88:5C:41:EE:57:95:9F:A2:C7:6A:8B:
            0B:FC:01:EC:6F:D3:3B:FE:E0:23:28:91:B4:67:D8:AA:
            88:73:11:45:8D:11:1E:1D:C2:23:78:49:D5:F8:83:4E:
            BB:51:CB:BF:EA:62:57:4A:A1:AE:F1:7B:65:E0:18:34:
            85:E6:46:D0:18:08:7B:F4:F1:F0:FD:C0:ED:C5:36:07:
            D7:7A:AD:58:E8:D6:D7:93:CE:64:E8:FD:B1:4E:7A:9F            : 0x010001
        • X509v3 extensions
          • basicConstraints
            • nil
          • nsCertType: 0xa0
          • keyUsage: 0xe0
          • nsComment: OpenSSL Generated Certificate
          • subjectKeyIdentifier: 
            ee 82 b6 a7 f7 45 9f d9  bd 0f 51 08 74 d6 d1 c5  |.....E....Q.t...|
3f fb 07 bb                                       |?...            |
          • authorityKeyIdentifier: 
            5a 3d 46 f0 58 a3 8c 56  5c d1 39 2a ac 52 28 2d  |Z=F.X..V\.9*.R(-|
83 da 7c 0c                                       |..|.            |
      • RSA-SHA1: 
        03 7a 49 81 d1 7f 87 22  31 55 67 19 8d 7f c8 68  |.zI...."1Ug....h|
84 a7 18 b2 f9 b1 cd da  da 33 32 74 3b 74 8f aa  |.........32t;t..|
cf 6a b6 b4 b5 53 08 ea  76 f1 e0 7e 36 3c d6 22  |.j...S..v..~6<."|
8e 52 e7 7d dd 7b e5 1b  5c 1e f8 bf 6f c9 96 2d  |.R.}.{..\...o..-|
ef d4 be 25 30 84 56 87  42 78 eb 2e 56 79 92 c9  |...%0.V.Bx..Vy..|
7c 56 a6 70 dc 0a ed ed  1c 1e 3c 11 d8 7e bb c5  ||V.p......<..~..|
7d f3 ea 30 72 73 56 04  12 f0 44 ff 9a 57 01 17  |}..0rsV...D..W..|
d2 9b 61 02 23 d6 1a 20  d2 27 49 57 7a 3e 2d ae  |..a.#.. .'IWz>-.|
29 dc 92 27 cd ce 33 d8  a2 18 d0 ad 2a 8d c8 93  |)..'..3.....*...|
36 36 7c ed 20 65 c7 fb  06 85 72 f0 c2 79 08 82  |66|. e....r..y..|
5f fe ad b0 0b 99 58 0c  61 85 85 88 90 2a 0d 2e  |_.....X.a....*..|
34 2a 56 91 b2 e4 bf b5  ca e1 93 69 40 bf 4f c7  |4*V........i@.O.|
8a 63 b6 07 f3 34 ef 93  5b 61 bc 89 ff 73 c8 f4  |.c...4..[a...s..|
7f 74 46 55 84 ee dd 3e  4a 0a 98 ad 33 5c 4a 84  |.tFU...>J...3\J.|
99 0c 1b 0a 4e ef 6e a2  90 d7 10 e3 fd f5 2c 45  |....N.n.......,E|
9b 61 fd b1 ae 9e 04 0a  b2 b0 08 59 0f 5a ee 21  |.a.........Y.Z.!|
e4 8e c8 3d c1 77 0b 3d  02 ff aa e1 63 bd bb 19  |...=.w.=....c...|
fd 10 72 60 2d d9 19 a5  f4 ed c9 4e d9 8f 6e 09  |..r`-......N..n.|
c5 9f 95 16 97 36 da 45  e8 49 85 ac f7 6c dd 36  |.....6.E.I...l.6|
e6 9c 72 79 83 c7 54 5d  c0 4b 0a 0a c8 fc b6 1f  |..ry..T].K......|
8e 52 20 3a 37 75 13 7e  00 0c 1f 59 48 6e 17 78  |.R :7u.~...YHn.x|
9e 71 3c 06 07 5a 82 b6  d8 57 97 1f 67 7a 4a 63  |.q<..Z...W..gzJc|
cb 97 d9 c5 85 05 db 83  60 3b 23 ae e8 72 0e cf  |........`;#..r..|
29 a5 f4 e1 e5 06 40 a0  a6 95 c2 e1 64 26 ff 0e  |).....@.....d&..|
58 2c 3c 75 e8 14 35 91  d5 a3 17 c7 ea 78 99 8c  |X,
    • 1
      • unnamed
        • #0
          • C: FR
          • ST: FRANCE
          • O: CAHPP
          • OU: Adherent
          • CN: AutoriteDeCertification
          • emailAddress: reseaux@cahpp.fr
        • 0x04F5
      • SHA1: nil
      • #2
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • messageDigest: 
          fa cb bd 66 4f 6d cc 01  1f 8a 86 ec 56 cc c9 88  |...fOm......V...|
1d 7f 92 a9                                       |....            |
      • rsaEncryption: 
        22 f0 cd 24 dc e5 dc 15  2c dd 75 4f a3 78 3a 08  |"..$....,.uO.x:.|
1c 15 34 0d 6c 9e 1d 1d  0a 6d dc 6d 5b 2c 08 f6  |..4.l....m.m[,..|
5f a7 f7 95 ec 90 15 89  fc 55 96 96 62 99 fd e9  |_........U..b...|
7c ee e3 0f f1 6f 38 26  34 86 ab 06 2a c1 30 06  ||....o8&4...*.0.|
3a e1 e9 b4 2d c5 6b 24  8b b1 95 76 0f 94 99 68  |:...-.k$...v...h|
e4 f2 76 04 b2 5b bc 12  b2 1b 4e e9 1d 61 6d c8  |..v..[....N..am.|
c9 35 8d bd c8 14 ac 46  84 a8 d1 5c de ad 87 dc  |.5.....F...\....|
9f c0 2c 5e 2e 1f 3d e4  4b 82 0a 5b 72 46 f2 44  |..,^..=.K..[rF.D|
79 9e 79 eb 11 d3 22 84  30 8c 60 ee 8a 83 26 68  |y.y...".0.`...&h|
7b 23 78 0b c0 72 10 0d  34 f1 0e 9f 62 fa 69 b0  |{#x..r..4...b.i.|
ab a3 ad a7 c4 bf 33 6e  4f 99 f7 fc 85 85 4e f3  |......3nO.....N.|
10 cd 19 59 86 7a c1 0e  16 a4 f2 06 44 c5 4b 9e  |...Y.z......D.K.|
ab d2 aa e9 87 a0 07 9e  15 46 d2 bf 42 6f be 6c  |.........F..Bo.l|
73 95 4c 63 4b 59 fe 16  1e 68 fd 5b d1 ab 76 82  |s.LcKY...h.[..v.|
fb 98 c8 cc 13 86 cc a4  0f 77 e1 62 ef b9 dd c4  |.........w.b....|
9c 78 3c 79 53 ae 6c 3a  2f e3 f9 d8 72 5c 0a dd  |.x
offsetsizetypecomment
0649216EXE01/29/2012 21:32:28#
15c115HTM#
9e800765624BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK