filenameerr.exe
size60928 (0xee00)
md5518032cc90e692d811f7230f825ea019
typePE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xd0

Rich Header

lib idversiontimes used
93403513
10381
110507273
001
120507271

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections6
TimeDateStamp0x542d8037
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x307
Magic0x10b
LinkerVersion5.0
SizeOfCode0x6800
SizeOfInitializedData0x9200
SizeOfUninitializedData0
AddressOfEntryPoint0x5ce0
BaseOfCode0x1000
BaseOfData0x8000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x13000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x8000
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x70000x6800R-X CODE
.rdata0x80000x30000x2a00R-- IDATA
.data0xb0000x20000x200RW- IDATA
.crt0xd0000x20000x1e00RW- IDATA
f0xf0000x20000x2000RW- IDATA
.rsrc0x110000x17900x1800R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x86c00x8c
RESOURCE0x110000x1790
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG0x86000x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x80000x5fc
Delay_IAT0x862c0x40
CLR_Header00
typenamesizecp
STRING#4389121252
STRING#43918241252
STRING#44011681252
STRING#4443961252
STRING#4452561252
STRING#4511801252
VERSION#18961252
idlangstring
70001049Использование команды RUNAS:
70011049RUNAS [ [/noprofile | /profile] [/env] [/netonly] ]
70021049 /user:<имя пользователя> <программа>
70031049RUNAS [ [/noprofile | /profile] [/env] [/netonly] ]
70041049 /smartcard [/user:<имя пользователя>] <программа>
70051049RUNAS /trustlevel:<уровень доверия> <программа>
70061049 /noprofile Не загружать профиль пользователя. Это приводит к более
70071049 быстрой загрузке приложения, но может стать причиной
70081049 неправильной работы некоторых приложений.
70091049 /profile Загружать профиль пользователя.
70101049 Этот параметр установлен по умолчанию.
70111049 /env Использовать текущие параметры среды.
70121049 /netonly Учетные данные предназначены только для удаленного
70131049 доступа.
70141049 /savecred Использовать учетные данные, сохраненные пользователем.
70151049 Этот параметр не доступен в Windows XP Home Edition
70161049 и будет проигнорирован.
70171049 /smartcard Для указания учетных данных используется
70181049 смарт-карта.
70191049 /showtrustlevels Отобразить список уровней доверия, которые можно
70201049 использовать в качестве аргументов параметра /trustlevel.
70211049 /trustlevel Значение <уровень доверия> должно быть перечислено в
70221049 списке уровней доверия.
70241049 <программа> Командная строка для EXE. См. примеры ниже.
70251049Примеры:
70261049> runas /profile /user:mymachine\administrator cmd
70271049> runas /profile /env /user:mydomain\admin "mmc %windir%\system32\dsa.msc"
70281049> runas /env /user:user@domain.microsoft.com "notepad \"Мой файл.txt\""
70291049Примечание: вводите пароль пользователя только тогда, когда он запрашивается.
70301049Примечание: формат записи USER@DOMAIN несовместим с параметром /netonly.
70311049Примечание: параметр /profile несовместим с параметром /netonly.
70321049 /user <имя пользователя> должно быть в виде USER@DOMAIN или DOMAIN\USER
71001049Ошибка утилиты RUNAS: Запуск невозможен
71011049Системная ошибка: не удается загрузить runas.exe
71021049Ошибка утилиты RUNAS: ввод данных невозможен
71031049Ошибка утилиты RUNAS: невозможно изменить эхо-режим
71041049Ошибка утилиты RUNAS: Не удалось получить пароль пользователя
71051049Ошибка утилиты RUNAS: Неправильное имя пользователя
72041049В системе доступны следующие уровни доверия:
72051049Пользователь со смарт-картой
module_namehintordfunction_name
KERNEL32.dll836SystemTimeToTzSpecificLocalTime
KERNEL32.dll439GetSystemDirectoryW
KERNEL32.dll633OpenWaitableTimerA
KERNEL32.dll516HeapCreate
KERNEL32.dll849TransmitCommChar
KERNEL32.dll901WriteConsoleOutputA
KERNEL32.dll672ReadConsoleOutputW
KERNEL32.dll231FlushInstructionCache
KERNEL32.dll396GetPriorityClass
KERNEL32.dll528HeapUnlock
KERNEL32.dll105CreateSemaphoreW
KERNEL32.dll321GetDefaultCommConfigA
KERNEL32.dll264GetCommTimeouts
KERNEL32.dll152EnumCalendarInfoExA
KERNEL32.dll185ExpandEnvironmentStringsA
KERNEL32.dll724SetComputerNameA
KERNEL32.dll505GlobalSize
KERNEL32.dll902WriteConsoleOutputAttribute
KERNEL32.dll947lstrlenA
KERNEL32.dll320GetDateFormatW
KERNEL32.dll944lstrcpynA
KERNEL32.dll130DeleteFileW
KERNEL32.dll578LoadLibraryExA
KERNEL32.dll342GetFileAttributesA
KERNEL32.dll333GetEnvironmentStrings
KERNEL32.dll370GetMailslotInfo
KERNEL32.dll878VirtualFreeEx
KERNEL32.dll205FindCloseChangeNotification
KERNEL32.dll855UnhandledExceptionFilter
KERNEL32.dll726SetComputerNameExW
KERNEL32.dll79CreateFileA
KERNEL32.dll802SetSystemPowerState
KERNEL32.dll460GetThreadLocale
KERNEL32.dll349GetFileTime
KERNEL32.dll30BeginUpdateResourceW
KERNEL32.dll795SetNamedPipeHandleState
KERNEL32.dll247GetAtomNameA
KERNEL32.dll563LCMapStringA
KERNEL32.dll133DeleteTimerQueueTimer
KERNEL32.dll2AddAtomW
KERNEL32.dll803SetSystemTime
KERNEL32.dll923_hread
KERNEL32.dll437GetSystemDefaultUILanguage
KERNEL32.dll47ClearCommError
KERNEL32.dll713SearchPathW
KERNEL32.dll579LoadLibraryExW
KERNEL32.dll816SetTimeZoneInformation
KERNEL32.dll664ReadConsoleInputA
KERNEL32.dll525HeapSetInformation
KERNEL32.dll423GetProfileStringA
KERNEL32.dll195FileTimeToSystemTime
KERNEL32.dll671ReadConsoleOutputCharacterW
KERNEL32.dll903WriteConsoleOutputCharacterA
KERNEL32.dll240FreeLibrary
KERNEL32.dll457GetTempPathW
KERNEL32.dll399GetPrivateProfileSectionA
KERNEL32.dll914WritePrivateProfileStructA
KERNEL32.dll194FileTimeToLocalFileTime
KERNEL32.dll581LoadModule
KERNEL32.dll491GlobalCompact
KERNEL32.dll552IsDBCSLeadByte
KERNEL32.dll669ReadConsoleOutputAttribute
KERNEL32.dll619OpenEventA
KERNEL32.dll621OpenFile
KERNEL32.dll757SetConsoleWindowInfo
KERNEL32.dll173EnumSystemLocalesW
KERNEL32.dll346GetFileInformationByHandle
KERNEL32.dll377GetNamedPipeHandleStateA
KERNEL32.dll731SetConsoleCtrlHandler
KERNEL32.dll95CreateNamedPipeW
KERNEL32.dll103CreateRemoteThread
KERNEL32.dll372GetModuleFileNameW
KERNEL32.dll350GetFileType
KERNEL32.dll251GetBinaryTypeW
KERNEL32.dll639PeekNamedPipe
KERNEL32.dll753SetConsoleScreenBufferSize
KERNEL32.dll34BuildCommDCBAndTimeoutsW
KERNEL32.dll145DuplicateHandle
KERNEL32.dll502GlobalMemoryStatus
KERNEL32.dll86CreateJobObjectA
KERNEL32.dll828SignalObjectAndWait
KERNEL32.dll191FatalAppExitW
KERNEL32.dll489GlobalAddAtomW
KERNEL32.dll257GetCalendarInfoW
KERNEL32.dll700ResetEvent
KERNEL32.dll1AddAtomA
KERNEL32.dll365GetLogicalDriveStringsA
KERNEL32.dll488GlobalAddAtomA
KERNEL32.dll35BuildCommDCBW
KERNEL32.dll688ReleaseMutex
KERNEL32.dll315GetCurrentProcess
KERNEL32.dll913WritePrivateProfileStringW
KERNEL32.dll756SetConsoleTitleW
KERNEL32.dll221FindNextVolumeMountPointW
KERNEL32.dll414GetProcessPriorityBoost
KERNEL32.dll546IsBadHugeReadPtr
KERNEL32.dll662RaiseException
KERNEL32.dll499GlobalGetAtomNameW
KERNEL32.dll107CreateTapePartition
KERNEL32.dll369GetLongPathNameW
KERNEL32.dll606MoveFileExA
KERNEL32.dll536SetThreadIdealProcessor
KERNEL32.dll66CopyFileW
KERNEL32.dll911WritePrivateProfileSectionW
KERNEL32.dll538InterlockedExchange
KERNEL32.dll921WriteTapemark
KERNEL32.dll762SetDefaultCommConfigW
KERNEL32.dll721SetCommMask
KERNEL32.dll928_lopen
KERNEL32.dll218FindNextFileW
KERNEL32.dll371GetModuleFileNameA
KERNEL32.dll198FillConsoleOutputCharacterW
KERNEL32.dll673ReadConsoleW
KERNEL32.dll74CreateDirectoryW
KERNEL32.dll470GetUserDefaultLangID
KERNEL32.dll129DeleteFileA
KERNEL32.dll594LockFile
KERNEL32.dll136DeviceIoControl
KERNEL32.dll395GetOverlappedResult
KERNEL32.dll235FormatMessageA
KERNEL32.dll838TerminateProcess
KERNEL32.dll534InitializeCriticalSectionAndSpinCount
KERNEL32.dll844TlsFree
KERNEL32.dll164EnumResourceNamesW
KERNEL32.dll550IsBadStringPtrW
KERNEL32.dll94CreateNamedPipeA
KERNEL32.dll592LocalSize
KERNEL32.dll37CallNamedPipeW
KERNEL32.dll811SetThreadIdealProcessor
KERNEL32.dll875VirtualAllocEx
KERNEL32.dll310GetCurrencyFormatW
KERNEL32.dll531HeapWalk
KERNEL32.dll487GetWriteWatch
KERNEL32.dll398GetPrivateProfileIntW
KERNEL32.dll640PostQueuedCompletionStatus
KERNEL32.dll379GetNamedPipeInfo
KERNEL32.dll175EnumTimeFormatsW
KERNEL32.dll888WaitForMultipleObjects
KERNEL32.dll595LockFileEx
KERNEL32.dll40CancelTimerQueueTimer
KERNEL32.dll331GetDriveTypeA
KERNEL32.dll701ResetWriteWatch
KERNEL32.dll360GetLastError
KERNEL32.dll376GetModuleHandleW
KERNEL32.dll367GetLogicalDrives
KERNEL32.dll316GetCurrentProcessId
KERNEL32.dll84CreateHardLinkW
KERNEL32.dll407GetProcAddress
KERNEL32.dll583LocalAlloc
KERNEL32.dll577LoadLibraryA
ADVAPI32.dll576StartServiceCtrlDispatcherA
ADVAPI32.dll95CreateProcessAsUserA
ADVAPI32.dll21AddAccessDeniedObjectAce
GDI32.dllAbortDoc
GDI32.dll347GetCharWidthI
GDI32.dll341GetCharABCWidthsW
GDI32.dll505RemoveFontResourceExA
GDI32.dll53CreateEllipticRgn
GDI32.dll551SetICMProfileW
GDI32.dll392GetKerningPairsA
GDI32.dll336GetBrushOrgEx
GDI32.dll492PolyTextOutW
GDI32.dll572SetTextColor
GDI32.dll340GetCharABCWidthsI
GDI32.dll61CreateFontIndirectW
GDI32.dll328GetAspectRatioFilterEx
GDI32.dll222ExtTextOutW
GDI32.dll491PolyTextOutA
GDI32.dll519SaveDC
GDI32.dll582StartDocW
GDI32.dll500RectInRegion
GDI32.dll562SetPixelFormat
GDI32.dll52CreateDiscardableBitmap
GDI32.dll215ExcludeClipRect
GDI32.dll415GetROP2
GDI32.dll394GetLayout
GDI32.dll408GetOutlineTextMetricsA
GDI32.dll1AbortPath
GDI32.dll358GetDCBrushColor
GDI32.dll57CreateFontA
GDI32.dll543SetDIBits
GDI32.dll405GetObjectA
GDI32.dll37CopyMetaFileA
GDI32.dll364GetDeviceGammaRamp
GDI32.dll531SetBitmapBits
GDI32.dll412GetPixel
GDI32.dll147DrawEscape
GDI32.dll59CreateFontIndirectExA
GDI32.dll539SetColorSpace
GDI32.dll440GetTextExtentPointW
GDI32.dll331GetBitmapDimensionEx
GDI32.dll420GetRgnBox
GDI32.dll12ArcTo
GDI32.dll395GetLogColorSpaceA
GDI32.dll494Polyline
GDI32.dll550SetICMProfileA
GDI32.dll330GetBitmapBits
GDI32.dll402GetMiterLimit
GDI32.dll327GetArcDirection
GDI32.dll523SelectClipPath
GDI32.dll382GetGlyphIndicesW
GDI32.dll400GetMetaFileW
GDI32.dll33CombineRgn
GDI32.dll427GetTextAlign
GDI32.dll333GetBkMode
GDI32.dll80CreateSolidBrush
GDI32.dll399GetMetaFileBitsEx
GDI32.dll283GdiFlush
GDI32.dll42CreateColorSpaceA
GDI32.dll546SetEnhMetaFileBits
GDI32.dll598WidenPath
GDI32.dll403GetNearestColor
GDI32.dll62CreateFontW
GDI32.dll377GetFontData
GDI32.dll529SetArcDirection
GDI32.dll460LineDDA
GDI32.dll343GetCharWidth32W
GDI32.dll374GetEnhMetaFilePixelFormat
GDI32.dll527SelectPalette
GDI32.dll560SetPaletteEntries
GDI32.dll406GetObjectType
GDI32.dll203EnumFontFamiliesExW
GDI32.dll233FixBrushOrgEx
GDI32.dll25Chord
GDI32.dll368GetEnhMetaFileA
GDI32.dll493Polygon
GDI32.dll540SetDCBrushColor
GDI32.dll3AddFontResourceA
GDI32.dll524SelectClipRgn
GDI32.dll234FlattenPath
GDI32.dll78CreateScalableFontResourceA
GDI32.dll39CreateBitmap
GDI32.dll56CreateEnhMetaFileW
GDI32.dll29CloseFigure
GDI32.dll71CreatePen
GDI32.dll478PathToRegion
GDI32.dll489PolyPolygon
GDI32.dll486PolyBezierTo
USER32.dll56CheckDlgButton
USER32.dll648SetWindowTextA
USER32.dll64ClientToScreen
USER32.dll88CreateIconFromResource
USER32.dll42CharNextA
USER32.dll256GetClassWord
USER32.dll667SystemParametersInfoA
USER32.dll658ShowScrollBar
USER32.dll209EnumDesktopsW
USER32.dll168DlgDirListComboBoxW
USER32.dll439LoadBitmapA
USER32.dll666SwitchToThisWindow
USER32.dll714VkKeyScanExA
USER32.dll423IsHungAppWindow
USER32.dll291GetKeyState
USER32.dll591SetCursor
USER32.dll651SetWindowsHookA
USER32.dll281GetForegroundWindow
USER32.dll171DlgDirSelectComboBoxExW
USER32.dll148DeregisterShellHookWindow
USER32.dll583SetCaretBlinkTime
USER32.dll712ValidateRgn
USER32.dll282GetGUIThreadInfo
USER32.dll15BringWindowToTop
USER32.dll733wvsprintfW
USER32.dll188DrawStateA
USER32.dll60ChildWindowFromPoint
USER32.dll573SendMessageA
USER32.dll701UpdateWindow
USER32.dll280GetFocus
USER32.dll580SendNotifyMessageW
USER32.dll74CopyRect
USER32.dll505OpenInputDesktop
USER32.dll39CharLowerBuffA
USER32.dll78CreateCaret
USER32.dll52CharUpperA
USER32.dll272GetDesktopWindow
USER32.dll318GetMessagePos
USER32.dll334GetQueueStatus
USER32.dll405InvalidateRect
USER32.dll426IsRectEmpty
USER32.dll252GetClassLongA
USER32.dll623SetRectEmpty
USER32.dll468MapDialogRect
USER32.dll221EnumThreadWindows
USER32.dll137DefDlgProcA
USER32.dll558RemovePropA
USER32.dll677TrackMouseEvent
USER32.dll539RegisterClassW
USER32.dll471MapVirtualKeyExW
USER32.dll322GetMonitorInfoW
USER32.dll473MapWindowPoints
USER32.dll214EnumDisplaySettingsExA
USER32.dll284GetIconInfo
USER32.dll456LoadMenuW
USER32.dll618SetProcessWindowStation
USER32.dll560ReplyMessage
USER32.dll305GetMenuContextHelpId
USER32.dll559RemovePropW
USER32.dll9AppendMenuW
USER32.dll164DispatchMessageW
USER32.dll502OpenDesktopA
USER32.dll355GetThreadDesktop
USER32.dll574SendMessageCallbackA
USER32.dll460LockSetForegroundWindow
USER32.dll612SetMenuItemInfoA
USER32.dll442LoadCursorFromFileA
USER32.dll65ClipCursor
USER32.dll12BeginDeferWindowPos
USER32.dll653SetWindowsHookExW
USER32.dll189DrawStateW
USER32.dll298GetLastActivePopup
USER32.dll531RealGetWindowClassW
USER32.dll268GetCursorInfo
USER32.dll144DefWindowProcA
USER32.dll417IsClipboardFormatAvailable
USER32.dll464LookupIconIdFromDirectory
USER32.dll635SetThreadDesktop
USER32.dll537RegisterClassExA
USER32.dll497OemToCharBuffA
USER32.dll191DrawTextExA
USER32.dll206EnumClipboardFormats
USER32.dll494NotifyWinEvent
USER32.dll289GetKeyNameTextA
USER32.dll1AdjustWindowRect
USER32.dll69CloseWindowStation
USER32.dll565ScrollDC
USER32.dll94CreatePopupMenu
USER32.dll310GetMenuItemInfoA
USER32.dll176DrawAnimatedRects
USER32.dll244GetAsyncKeyState
USER32.dll27CallWindowProcA
USER32.dll265GetComboBoxInfo
USER32.dll722WaitMessage
USER32.dll70CopyAcceleratorTableA
USER32.dll485MessageBoxW
USER32.dll415IsCharUpperW
USER32.dll40CharLowerBuffW
USER32.dll199EndDeferWindowPos
USER32.dll181DrawFocusRect
USER32.dll50CharToOemBuffW
USER32.dll469MapVirtualKeyA
USER32.dll290GetKeyNameTextW
USER32.dll713VkKeyScanA
USER32.dll448LoadImageW
USER32.dll273GetDialogBaseUnits
USER32.dll26CallNextHookEx
USER32.dll414IsCharUpperA
USER32.dll293GetKeyboardLayoutList
USER32.dll506OpenWindowStationA
USER32.dll404IntersectRect
USER32.dll553RegisterWindowMessageA
USER32.dll403InternalGetWindowText
USER32.dll347GetSubMenu
USER32.dll629SetSysColors
USER32.dll530RealGetWindowClassA
USER32.dll297GetKeyboardType
USER32.dll32ChangeDisplaySettingsA
USER32.dll368GetWindowLongA
USER32.dll2AdjustWindowRectEx
USER32.dll210EnumDisplayDevicesA
USER32.dll5AllowSetForegroundWindow
USER32.dll364GetWindow
USER32.dll196EnableMenuItem
USER32.dll248GetClassInfoA
USER32.dll264GetClipboardViewer
USER32.dll495OemKeyScan
USER32.dll657ShowOwnedPopups
USER32.dll79CreateCursor
USER32.dll668SystemParametersInfoW
USER32.dll317GetMessageExtraInfo
USER32.dll222EnumWindowStationsA
USER32.dll728keybd_event
USER32.dll478MessageBoxA
WINMM.dll73midiInGetDevCapsA
WINMM.dll116mixerGetDevCapsW
WINMM.dll191waveOutGetPlaybackRate
OLEAUT32.dll59
OLEAUT32.dll202

StringTable 041904B0

CompanyNameКорпорация Майкрософт
FileDescriptionПрограмма Запуск от имени
FileVersion5.6.1830.1 (xpclient.010817-1148)
InternalNamerunas
LegalCopyright© Корпорация Майкрософт. Все права защищены.
OriginalFilenametest.EXE
ProductNameОперационная система Microsoft® Windows®
ProductVersion5.6.1830.1

VS_FIXEDFILEINFO

FileVersion5.6.1830.1
ProductVersion5.6.1830.1
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
060928EXE10/02/2014 16:41:27#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK