home *** CD-ROM | disk | FTP | other *** search
| Unknown | 2008-01-19 | 2.5 KB |
open in: 
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
| Confidence | Program | Detection | Match Type | Support
|
|---|
| 100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 00 00 00 00 00 8b ff 55 | 8b ec a1 2c f0 01 00 85 |.......U|...,....|
|00000010| c0 b9 4e e6 40 bb 74 04 | 3b c1 75 1a a1 80 d0 01 |..N.@.t.|;.u.....|
|00000020| 00 8b 00 35 2c f0 01 00 | a3 2c f0 01 00 75 07 8b |...5,...|.,...u..|
|00000030| c1 a3 2c f0 01 00 f7 d0 | a3 30 f0 01 00 5d e9 4d |..,.....|.0...].M|
|00000040| 01 ff ff cc f4 10 01 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000050| f6 14 01 00 4c d0 00 00 | a8 10 01 00 00 00 00 00 |....L...|........|
|00000060| 00 00 00 00 48 15 01 00 | 00 d0 00 00 c4 10 01 00 |....H...|........|
|00000070| 00 00 00 00 00 00 00 00 | 72 16 01 00 1c d0 00 00 |........|r.......|
|00000080| b4 10 01 00 00 00 00 00 | 00 00 00 00 dc 16 01 00 |........|........|
|00000090| 0c d0 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000a0| 00 00 00 00 00 00 00 00 | 26 15 01 00 04 15 01 00 |........|&.......|
|000000b0| 00 00 00 00 80 16 01 00 | 94 16 01 00 b8 16 01 00 |........|........|
|000000c0| 00 00 00 00 30 16 01 00 | 1c 16 01 00 42 16 01 00 |....0...|....B...|
|000000d0| e0 15 01 00 c8 15 01 00 | 9e 15 01 00 84 15 01 00 |........|........|
|000000e0| 6c 15 01 00 60 16 01 00 | 08 16 01 00 50 15 01 00 |l...`...|....P...|
|000000f0| 00 00 00 00 80 13 01 00 | 98 13 01 00 ae 13 01 00 |........|........|
|00000100| c2 13 01 00 d6 13 01 00 | ee 13 01 00 00 14 01 00 |........|........|
|00000110| 1c 14 01 00 70 13 01 00 | 5a 14 01 00 78 14 01 00 |....p...|Z...x...|
|00000120| 92 14 01 00 aa 14 01 00 | c2 14 01 00 d0 14 01 00 |........|........|
|00000130| dc 14 01 00 e6 14 01 00 | 56 13 01 00 38 13 01 00 |........|V...8...|
|00000140| 18 13 01 00 ec 11 01 00 | f8 12 01 00 e2 12 01 00 |........|........|
|00000150| d0 12 01 00 b8 12 01 00 | 9c 12 01 00 84 12 01 00 |........|........|
|00000160| 68 12 01 00 5e 12 01 00 | 46 12 01 00 34 12 01 00 |h...^...|F...4...|
|00000170| 20 12 01 00 16 12 01 00 | 08 12 01 00 fc 11 01 00 | .......|........|
|00000180| 38 14 01 00 e6 16 01 00 | f6 16 01 00 06 17 01 00 |8.......|........|
|00000190| 26 17 01 00 30 17 01 00 | 4a 17 01 00 64 17 01 00 |&...0...|J...d...|
|000001a0| 7c 17 01 00 96 17 01 00 | b0 17 01 00 c4 17 01 00 ||.......|........|
|000001b0| d8 17 01 00 f0 17 01 00 | 00 18 01 00 14 18 01 00 |........|........|
|000001c0| 1e 18 01 00 46 18 01 00 | 5c 18 01 00 78 18 01 00 |....F...|\...x...|
|000001d0| 92 18 01 00 ae 18 01 00 | c6 18 01 00 da 18 01 00 |........|........|
|000001e0| f2 18 01 00 0a 19 01 00 | 00 00 00 00 53 00 45 74 |........|....S.Et|
|000001f0| 77 55 6e 72 65 67 69 73 | 74 65 72 00 54 00 45 74 |wUnregis|ter.T.Et|
|00000200| 77 57 72 69 74 65 00 00 | 50 00 45 74 77 52 65 67 |wWrite..|P.EtwReg|
|00000210| 69 73 74 65 72 00 80 07 | 6d 65 6d 73 65 74 00 00 |ister...|memset..|
|00000220| 85 00 45 78 46 72 65 65 | 50 6f 6f 6c 57 69 74 68 |..ExFree|PoolWith|
|00000230| 54 61 67 00 8e 02 49 6f | 57 4d 49 57 72 69 74 65 |Tag...Io|WMIWrite|
|00000240| 45 76 65 6e 74 00 6d 00 | 45 78 41 6c 6c 6f 63 61 |Event.m.|ExAlloca|
|00000250| 74 65 50 6f 6f 6c 57 69 | 74 68 54 61 67 00 7e 07 |tePoolWi|thTag.~.|
|00000260| 6d 65 6d 63 70 79 00 00 | 8a 03 4d 6d 47 65 74 53 |memcpy..|..MmGetS|
|00000270| 79 73 74 65 6d 52 6f 75 | 74 69 6e 65 41 64 64 72 |ystemRou|tineAddr|
|00000280| 65 73 73 00 5f 05 52 74 | 6c 49 6e 69 74 55 6e 69 |ess._.Rt|lInitUni|
|00000290| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 89 02 49 6f |codeStri|ng....Io|
|000002a0| 57 4d 49 52 65 67 69 73 | 74 72 61 74 69 6f 6e 43 |WMIRegis|trationC|
|000002b0| 6f 6e 74 72 6f 6c 00 00 | e8 01 49 6f 44 65 6c 65 |ontrol..|..IoDele|
|000002c0| 74 65 53 79 6d 62 6f 6c | 69 63 4c 69 6e 6b 00 00 |teSymbol|icLink..|
|000002d0| e6 01 49 6f 44 65 6c 65 | 74 65 44 65 76 69 63 65 |..IoDele|teDevice|
|000002e0| 00 00 96 02 49 6f 66 43 | 6f 6d 70 6c 65 74 65 52 |....IofC|ompleteR|
|000002f0| 65 71 75 65 73 74 00 00 | 3f 04 4f 62 53 65 74 53 |equest..|?.ObSetS|
|00000300| 65 63 75 72 69 74 79 4f | 62 6a 65 63 74 42 79 50 |ecurityO|bjectByP|
|00000310| 6f 69 6e 74 65 72 00 00 | cd 05 52 74 6c 53 65 74 |ointer..|..RtlSet|
|00000320| 44 61 63 6c 53 65 63 75 | 72 69 74 79 44 65 73 63 |DaclSecu|rityDesc|
|00000330| 72 69 70 74 6f 72 00 00 | 04 05 52 74 6c 43 72 65 |riptor..|..RtlCre|
|00000340| 61 74 65 53 65 63 75 72 | 69 74 79 44 65 73 63 72 |ateSecur|ityDescr|
|00000350| 69 70 74 6f 72 00 d3 04 | 52 74 6c 41 64 64 41 63 |iptor...|RtlAddAc|
|00000360| 63 65 73 73 41 6c 6c 6f | 77 65 64 41 63 65 00 00 |cessAllo|wedAce..|
|00000370| 00 05 52 74 6c 43 72 65 | 61 74 65 41 63 6c 00 00 |..RtlCre|ateAcl..|
|00000380| 93 05 52 74 6c 4c 65 6e | 67 74 68 52 65 71 75 69 |..RtlLen|gthRequi|
|00000390| 72 65 64 53 69 64 00 00 | d9 05 52 74 6c 53 75 62 |redSid..|..RtlSub|
|000003a0| 41 75 74 68 6f 72 69 74 | 79 53 69 64 00 00 65 05 |Authorit|ySid..e.|
|000003b0| 52 74 6c 49 6e 69 74 69 | 61 6c 69 7a 65 53 69 64 |RtlIniti|alizeSid|
|000003c0| 00 00 ef 04 52 74 6c 43 | 6f 6d 70 61 72 65 4d 65 |....RtlC|ompareMe|
|000003d0| 6d 6f 72 79 00 00 db 01 | 49 6f 43 72 65 61 74 65 |mory....|IoCreate|
|000003e0| 53 79 6d 62 6f 6c 69 63 | 4c 69 6e 6b 00 00 d1 01 |Symbolic|Link....|
|000003f0| 49 6f 43 72 65 61 74 65 | 44 65 76 69 63 65 00 00 |IoCreate|Device..|
|00000400| a4 01 49 6e 74 65 72 6c | 6f 63 6b 65 64 50 6f 70 |..Interl|ockedPop|
|00000410| 45 6e 74 72 79 53 4c 69 | 73 74 00 00 a5 01 49 6e |EntrySLi|st....In|
|00000420| 74 65 72 6c 6f 63 6b 65 | 64 50 75 73 68 45 6e 74 |terlocke|dPushEnt|
|00000430| 72 79 53 4c 69 73 74 00 | 8e 00 45 78 49 6e 69 74 |rySList.|..ExInit|
|00000440| 69 61 6c 69 7a 65 4e 50 | 61 67 65 64 4c 6f 6f 6b |ializeNP|agedLook|
|00000450| 61 73 69 64 65 4c 69 73 | 74 00 72 00 45 78 44 65 |asideLis|t.r.ExDe|
|00000460| 6c 65 74 65 4e 50 61 67 | 65 64 4c 6f 6f 6b 61 73 |leteNPag|edLookas|
|00000470| 69 64 65 4c 69 73 74 00 | 45 02 49 6f 52 65 6c 65 |ideList.|E.IoRele|
|00000480| 61 73 65 43 61 6e 63 65 | 6c 53 70 69 6e 4c 6f 63 |aseCance|lSpinLoc|
|00000490| 6b 00 71 04 50 73 47 65 | 74 43 75 72 72 65 6e 74 |k.q.PsGe|tCurrent|
|000004a0| 50 72 6f 63 65 73 73 49 | 64 00 00 03 4b 65 51 75 |ProcessI|d...KeQu|
|000004b0| 65 72 79 54 69 6d 65 49 | 6e 63 72 65 6d 65 6e 74 |eryTimeI|ncrement|
|000004c0| 00 00 3f 03 4b 65 54 69 | 63 6b 43 6f 75 6e 74 00 |..?.KeTi|ckCount.|
|000004d0| 52 07 5f 61 75 6c 6c 64 | 69 76 00 00 4b 07 5f 61 |R._aulld|iv..K._a|
|000004e0| 6c 6c 6d 75 6c 00 b3 02 | 4b 65 42 75 67 43 68 65 |llmul...|KeBugChe|
|000004f0| 63 6b 45 78 00 00 6e 74 | 6f 73 6b 72 6e 6c 2e 65 |ckEx..nt|oskrnl.e|
|00000500| 78 65 00 00 49 00 4b 65 | 41 63 71 75 69 72 65 49 |xe..I.Ke|AcquireI|
|00000510| 6e 53 74 61 63 6b 51 75 | 65 75 65 64 53 70 69 6e |nStackQu|euedSpin|
|00000520| 4c 6f 63 6b 00 00 56 00 | 4b 65 52 65 6c 65 61 73 |Lock..V.|KeReleas|
|00000530| 65 49 6e 53 74 61 63 6b | 51 75 65 75 65 64 53 70 |eInStack|QueuedSp|
|00000540| 69 6e 4c 6f 63 6b 00 00 | 48 41 4c 2e 64 6c 6c 00 |inLock..|HAL.dll.|
|00000550| 64 00 46 77 70 73 46 6c | 6f 77 41 73 73 6f 63 69 |d.FwpsFl|owAssoci|
|00000560| 61 74 65 43 6f 6e 74 65 | 78 74 30 00 50 00 46 77 |ateConte|xt0.P.Fw|
|00000570| 70 6d 54 72 61 6e 73 61 | 63 74 69 6f 6e 41 62 6f |pmTransa|ctionAbo|
|00000580| 72 74 30 00 52 00 46 77 | 70 6d 54 72 61 6e 73 61 |rt0.R.Fw|pmTransa|
|00000590| 63 74 69 6f 6e 43 6f 6d | 6d 69 74 30 00 00 02 00 |ctionCom|mit0....|
|000005a0| 46 77 70 69 43 61 6c 6c | 6f 75 74 52 65 67 69 73 |FwpiCall|outRegis|
|000005b0| 74 65 72 41 6e 64 41 64 | 64 57 69 74 68 6f 75 74 |terAndAd|dWithout|
|000005c0| 44 65 76 69 63 65 30 00 | 51 00 46 77 70 6d 54 72 |Device0.|Q.FwpmTr|
|000005d0| 61 6e 73 61 63 74 69 6f | 6e 42 65 67 69 6e 30 00 |ansactio|nBegin0.|
|000005e0| 03 00 46 77 70 69 43 61 | 6c 6c 6f 75 74 55 6e 72 |..FwpiCa|lloutUnr|
|000005f0| 65 67 69 73 74 65 72 41 | 6e 64 44 65 6c 65 74 65 |egisterA|ndDelete|
|00000600| 42 79 4b 65 79 30 00 00 | 13 00 46 77 70 6d 45 6e |ByKey0..|..FwpmEn|
|00000610| 67 69 6e 65 43 6c 6f 73 | 65 30 00 00 31 00 46 77 |gineClos|e0..1.Fw|
|00000620| 70 6d 50 72 6f 76 69 64 | 65 72 41 64 64 30 00 00 |pmProvid|erAdd0..|
|00000630| 16 00 46 77 70 6d 45 6e | 67 69 6e 65 4f 70 65 6e |..FwpmEn|gineOpen|
|00000640| 30 00 5c 00 46 77 70 73 | 43 61 6c 6c 6f 75 74 55 |0.\.Fwps|CalloutU|
|00000650| 6e 72 65 67 69 73 74 65 | 72 42 79 4b 65 79 30 00 |nregiste|rByKey0.|
|00000660| 1d 00 46 77 70 6d 46 69 | 6c 74 65 72 41 64 64 30 |..FwpmFi|lterAdd0|
|00000670| 00 00 66 77 70 6b 63 6c | 6e 74 2e 73 79 73 00 00 |..fwpkcl|nt.sys..|
|00000680| a4 00 4e 64 69 73 47 65 | 74 44 61 74 61 42 75 66 |..NdisGe|tDataBuf|
|00000690| 66 65 72 00 08 00 4e 64 | 69 73 41 64 76 61 6e 63 |fer...Nd|isAdvanc|
|000006a0| 65 4e 65 74 42 75 66 66 | 65 72 4c 69 73 74 44 61 |eNetBuff|erListDa|
|000006b0| 74 61 53 74 61 72 74 00 | 8a 01 4e 64 69 73 52 65 |taStart.|..NdisRe|
|000006c0| 74 72 65 61 74 4e 65 74 | 42 75 66 66 65 72 4c 69 |treatNet|BufferLi|
|000006d0| 73 74 44 61 74 61 53 74 | 61 72 74 00 4e 44 49 53 |stDataSt|art.NDIS|
|000006e0| 2e 53 59 53 00 00 95 05 | 52 74 6c 4c 65 6e 67 74 |.SYS....|RtlLengt|
|000006f0| 68 53 69 64 00 00 12 06 | 53 65 41 63 63 65 73 73 |hSid....|SeAccess|
|00000700| 43 68 65 63 6b 00 10 02 | 49 6f 47 65 74 46 69 6c |Check...|IoGetFil|
|00000710| 65 4f 62 6a 65 63 74 47 | 65 6e 65 72 69 63 4d 61 |eObjectG|enericMa|
|00000720| 70 70 69 6e 67 00 ad 06 | 5a 77 43 6c 6f 73 65 00 |pping...|ZwClose.|
|00000730| 45 06 53 65 52 65 6c 65 | 61 73 65 53 75 62 6a 65 |E.SeRele|aseSubje|
|00000740| 63 74 43 6f 6e 74 65 78 | 74 00 55 06 53 65 55 6e |ctContex|t.U.SeUn|
|00000750| 6c 6f 63 6b 53 75 62 6a | 65 63 74 43 6f 6e 74 65 |lockSubj|ectConte|
|00000760| 78 74 00 00 35 06 53 65 | 4c 6f 63 6b 53 75 62 6a |xt..5.Se|LockSubj|
|00000770| 65 63 74 43 6f 6e 74 65 | 78 74 00 00 20 06 53 65 |ectConte|xt.. .Se|
|00000780| 43 61 70 74 75 72 65 53 | 75 62 6a 65 63 74 43 6f |CaptureS|ubjectCo|
|00000790| 6e 74 65 78 74 00 32 07 | 5a 77 53 65 74 49 6e 66 |ntext.2.|ZwSetInf|
|000007a0| 6f 72 6d 61 74 69 6f 6e | 54 68 72 65 61 64 00 00 |ormation|Thread..|
|000007b0| c8 06 5a 77 44 75 70 6c | 69 63 61 74 65 54 6f 6b |..ZwDupl|icateTok|
|000007c0| 65 6e 00 00 c7 06 5a 77 | 44 75 70 6c 69 63 61 74 |en....Zw|Duplicat|
|000007d0| 65 4f 62 6a 65 63 74 00 | ea 06 5a 77 4f 70 65 6e |eObject.|..ZwOpen|
|000007e0| 50 72 6f 63 65 73 73 54 | 6f 6b 65 6e 45 78 00 00 |ProcessT|okenEx..|
|000007f0| e8 06 5a 77 4f 70 65 6e | 50 72 6f 63 65 73 73 00 |..ZwOpen|Process.|
|00000800| fe 02 4b 65 51 75 65 72 | 79 53 79 73 74 65 6d 54 |..KeQuer|ySystemT|
|00000810| 69 6d 65 00 7f 07 6d 65 | 6d 6d 6f 76 65 00 47 06 |ime...me|mmove.G.|
|00000820| 53 65 52 65 70 6f 72 74 | 53 65 63 75 72 69 74 79 |SeReport|Security|
|00000830| 45 76 65 6e 74 57 69 74 | 68 53 75 62 43 61 74 65 |EventWit|hSubCate|
|00000840| 67 6f 72 79 00 00 49 06 | 53 65 53 65 74 41 75 64 |gory..I.|SeSetAud|
|00000850| 69 74 50 61 72 61 6d 65 | 74 65 72 00 37 04 4f 62 |itParame|ter.7.Ob|
|00000860| 52 65 66 65 72 65 6e 63 | 65 4f 62 6a 65 63 74 42 |Referenc|eObjectB|
|00000870| 79 48 61 6e 64 6c 65 00 | c8 04 50 73 54 65 72 6d |yHandle.|..PsTerm|
|00000880| 69 6e 61 74 65 53 79 73 | 74 65 6d 54 68 72 65 61 |inateSys|temThrea|
|00000890| 64 00 46 03 4b 65 57 61 | 69 74 46 6f 72 4d 75 6c |d.F.KeWa|itForMul|
|000008a0| 74 69 70 6c 65 4f 62 6a | 65 63 74 73 00 00 69 04 |tipleObj|ects..i.|
|000008b0| 50 73 43 72 65 61 74 65 | 53 79 73 74 65 6d 54 68 |PsCreate|SystemTh|
|000008c0| 72 65 61 64 00 00 d9 02 | 4b 65 49 6e 69 74 69 61 |read....|KeInitia|
|000008d0| 6c 69 7a 65 45 76 65 6e | 74 00 41 04 4f 62 66 44 |lizeEven|t.A.ObfD|
|000008e0| 65 72 65 66 65 72 65 6e | 63 65 4f 62 6a 65 63 74 |ereferen|ceObject|
|000008f0| 00 00 48 03 4b 65 57 61 | 69 74 46 6f 72 53 69 6e |..H.KeWa|itForSin|
|00000900| 67 6c 65 4f 62 6a 65 63 | 74 00 2a 03 4b 65 53 65 |gleObjec|t.*.KeSe|
|00000910| 74 45 76 65 6e 74 00 00 | 00 00 00 00 00 00 00 00 |tEvent..|........|
|00000920| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000930| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000940| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000950| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000960| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000970| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000980| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000990| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+
