| / Australian Personal Computer 1999 November
/ APC411-2.ISO / multimed / MediaCenter.exe / WinHost / wsh.exe / postinst.exe
| < prev | next > |
| MS-DOS/Windows or OS/2 Executable | 1997-09-28 | 5.0 KB |
MacOS 8.1
|
Win98
|
DOS
browse contents |
view JSON data
|
view as text| Confidence | Program | Detection | Match Type | Support |
|---|---|---|---|---|
| 100% | dexvert | MS-DOS/Windows or OS/2 Executable (executable/exe) | magic | Supported |
| 1% | dexvert | Ady's GLUE Packed (archive/adysGLUEPacked) | ext | Unsupported |
| 1% | dexvert | BlacK FiST Packed (archive/blackFiSTPacked) | ext | Unsupported |
| 1% | dexvert | CauseWay Compressor Packed (archive/causeWayCompressorPacked) | ext | Unsupported |
| 1% | dexvert | CExe Packed (archive/cExePacked) | ext | Unsupported |
| 1% | dexvert | cIPHATOR Protected (archive/ciphatorProtected) | ext | Unsupported |
| 1% | dexvert | CRYPACK Protected (archive/crypackProtected) | ext | Unsupported |
| 1% | dexvert | CRYPTEXE Protected (archive/cryptexeProtected) | ext | Unsupported |
| 1% | dexvert | Crypt Light Show Protected (archive/cryptLightShowProtected) | ext | Unsupported |
| 1% | dexvert | DaRKSToP Protected (archive/darkstopProtected) | ext | Unsupported |
| 1% | dexvert | DiskImager SFX Image (archive/diskImagerSFXImage) | ext | Unsupported |
| 1% | dexvert | Dismember EXE CRYPT Protected (archive/dismemberProtected) | ext | Unsupported |
| 1% | dexvert | DJP Packed (archive/djpPacked) | ext | Unsupported |
| 1% | dexvert | .NETZ Packed (archive/dotNETZPacked) | ext | Unsupported |
| 1% | dexvert | DSHIELD Protected (archive/dshieldProtected) | ext | Unsupported |
| 1% | dexvert | Exe32Pack Packed (archive/exe32PackPacked) | ext | Unsupported |
| 1% | dexvert | ExeHigh Packed (archive/exeHighPacked) | ext | Unsupported |
| 1% | dexvert | EXE Manager Protected (archive/exeManagerProtected) | ext | Unsupported |
| 1% | dexvert | EXETOOLS Protected (archive/exetoolsProtected) | ext | Unsupported |
| 1% | dexvert | EZip Packed (archive/ezipPacked) | ext | Unsupported |
| 1% | dexvert | FSG Packed (archive/fsgPacked) | ext | Unsupported |
| 1% | dexvert | HackStop Protected (archive/hackStopProtected) | ext | Unsupported |
| 1% | dexvert | JMCryptExe Protected (archive/jmCryptExeProtected) | ext | Unsupported |
| 1% | dexvert | JDPack Packed (archive/kdPackPacked) | ext | Unsupported |
| 1% | dexvert | kkrunchy Packed (archive/kkcrunchPacked) | ext | Unsupported |
| 1% | dexvert | mbp SHRINK Packed (archive/mbpSHRINKPacked) | ext | Unsupported |
| 1% | dexvert | MEGALITE Packed (archive/megalitePacked) | ext | Unsupported |
| 1% | dexvert | Mess Protected (archive/messProtected) | ext | Unsupported |
| 1% | dexvert | Mew Packed (archive/mewPacked) | ext | Unsupported |
| 1% | dexvert | MPRESS Packed (archive/mpressPacked) | ext | Unsupported |
| 1% | dexvert | NOS Packer Packed (archive/nosPackerPacked) | ext | Unsupported |
| 1% | dexvert | NTShell Protected (archive/ntShellProtected) | ext | Unsupported |
| 1% | dexvert | Pack Master Packed (archive/packMasterPacked) | ext | Unsupported |
| 1% | dexvert | PE Diminisher Packed (archive/peDiminisherPacked) | ext | Unsupported |
| 1% | dexvert | Petite Packed (archive/petitePacked) | ext | Unsupported |
| 1% | dexvert | PeX Packed (archive/pexPacked) | ext | Unsupported |
| 1% | dexvert | PKLITE32 Packed (archive/pklite32Packed) | ext | Unsupported |
| 1% | dexvert | PowerBatch Packed (archive/powerBatchPacked) | ext | Unsupported |
| 1% | dexvert | protector Protected (archive/protectorProtected) | ext | Unsupported |
| 1% | dexvert | py2exe Packed (archive/py2exePacked) | ext | Unsupported |
| 1% | dexvert | PyInstaller Packed (archive/pyInstallerPacked) | ext | Unsupported |
| 1% | dexvert | RERP Packed (archive/rerpPacked) | ext | Unsupported |
| 1% | dexvert | Scramb Packed (archive/scrambPacked) | ext | Unsupported |
| 1% | dexvert | SECURE Protected (archive/secureProtected) | ext | Unsupported |
| 1% | dexvert | Shrinker Packed (Windows) (archive/shrinkerWindowsPacked) | ext | Unsupported |
| 1% | dexvert | Spoon Studio Packed (archive/spoonStudioPacked) | ext | Unsupported |
| 1% | dexvert | tElock Packed (archive/telockPacked) | ext | Unsupported |
| 1% | dexvert | The Builder Packed (archive/theBuilderPacked) | ext | Unsupported |
| 1% | dexvert | The Patcher Packed (archive/thePatcherPacked) | ext | Unsupported |
| 1% | dexvert | 32Lite Packed (archive/thirtyTwoLitePacked) | ext | Unsupported |
| 1% | dexvert | TinyProt Protected (archive/tinyProtProtected) | ext | Unsupported |
| 1% | dexvert | (Win)Upack Packed (archive/winUpackPacked) | ext | Unsupported |
| 1% | dexvert | Yoda's Crypte Protected (archive/yodasCrypterProtected) | ext | Unsupported |
| 1% | dexvert | MS-DOS PMODE extender executable (executable/msdosPMODEExtenderExecutable) | ext | Unsupported |
| 1% | dexvert | Sony Playstation Executable (executable/sonyPlaystationExe) | ext | Unsupported |
| 1% | dexvert | Novell Netware Virtual Loadable Module (other/novellNetwareVirtualLoadableModule) | ext | Unsupported |
| 100% | file | PE32 executable for MS Windows 4.00 (GUI), Intel i386, 5 sections | default | |
| 99% | file | data | default | |
| 83% | TrID | Win32 Executable MS Visual C++ 4.x | default | |
| 4% | TrID | Win32 Dynamic Link Library (generic) | default (weak) | |
| 3% | TrID | Win16 NE executable (generic) | default (weak) | |
| 2% | TrID | Win32 Executable (generic) | default (weak) | |
| 1% | TrID | Win16/32 Executable Delphi generic | default (weak) | |
| 100% | siegfried | fmt/899 Windows Portable Executable (32 bit) | default | |
| 100% | gt2 | Ist eine ausf�hrbare Win32 Datei | default | |
| 100% | binwalkID | Microsoft executable, portable (PE) | default | |
| 100% | xdgMime | application/vnd.microsoft.portable-executable | default (weak) |
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 80 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| 50 45 00 00 4c 01 05 00 | 77 1b 2f 34 00 00 00 00 |PE..L...|w./4....|
|00000090| 00 00 00 00 e0 00 0f 01 | 0b 01 05 02 00 06 00 00 |........|........|
|000000a0| 00 0a 00 00 00 00 00 00 | 00 10 00 00 00 10 00 00 |........|........|
|000000b0| 00 20 00 00 00 00 40 00 | 00 10 00 00 00 02 00 00 |. ....@.|........|
|000000c0| 04 00 00 00 00 00 00 00 | 04 00 00 00 00 00 00 00 |........|........|
|000000d0| 00 60 00 00 00 04 00 00 | 00 00 00 00 02 00 00 00 |.`......|........|
|000000e0| 00 00 10 00 00 10 00 00 | 00 00 10 00 00 10 00 00 |........|........|
|000000f0| 00 00 00 00 10 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000100| 00 40 00 00 50 00 00 00 | 00 50 00 00 dc 03 00 00 |.@..P...|.P......|
|00000110| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000120| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000130| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000150| 00 00 00 00 00 00 00 00 | 8c 40 00 00 3c 00 00 00 |........|.@..<...|
|00000160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000170| 00 00 00 00 00 00 00 00 | 2e 74 65 78 74 00 00 00 |........|.text...|
|00000180| 00 05 00 00 00 10 00 00 | 00 06 00 00 00 04 00 00 |........|........|
|00000190| 00 00 00 00 00 00 00 00 | 00 00 00 00 20 00 00 60 |........|.... ..`|
|000001a0| 2e 72 64 61 74 61 00 00 | 60 00 00 00 00 20 00 00 |.rdata..|`.... ..|
|000001b0| 00 02 00 00 00 0a 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001c0| 00 00 00 00 40 00 00 40 | 2e 64 61 74 61 00 00 00 |....@..@|.data...|
|000001d0| 69 00 00 00 00 30 00 00 | 00 02 00 00 00 0c 00 00 |i....0..|........|
|000001e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 c0 |........|....@...|
|000001f0| 2e 69 64 61 74 61 00 00 | b4 01 00 00 00 40 00 00 |.idata..|.....@..|
|00000200| 00 02 00 00 00 0e 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000210| 00 00 00 00 40 00 00 c0 | 2e 72 73 72 63 00 00 00 |....@...|.rsrc...|
|00000220| dc 03 00 00 00 50 00 00 | 00 04 00 00 00 10 00 00 |.....P..|........|
|00000230| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 40 |........|....@..@|
|00000240| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000250| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000260| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000270| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000280| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000290| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000300| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000310| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000320| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000340| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000350| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000360| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000370| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000380| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000390| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000400| 83 ec 44 68 0c 30 40 00 | 68 08 30 40 00 e8 5e 00 |..Dh.0@.|h.0@..^.|
|00000410| 00 00 83 c4 08 68 04 30 | 40 00 68 00 30 40 00 e8 |.....h.0|@.h.0@..|
|00000420| 4c 00 00 00 83 c4 08 8d | 44 24 00 c7 44 24 2c 00 |L.......|D$..D$,.|
|00000430| 00 00 00 50 ff 15 b0 40 | 40 00 f6 44 24 2c 01 74 |...P...@|@..D$,.t|
|00000440| 0b 8b 44 24 30 25 ff ff | 00 00 eb 05 b8 0a 00 00 |..D$0%..|........|
|00000450| 00 50 6a 00 6a 00 6a 00 | ff 15 a0 40 40 00 50 e8 |.Pj.j.j.|...@@.P.|
|00000460| dc 01 00 00 50 ff 15 a4 | 40 40 00 83 c4 44 c3 90 |....P...|@@...D..|
|00000470| 56 8b 74 24 08 57 8b 7c | 24 10 3b f7 73 0f 8b 06 |V.t$.W.||$.;.s...|
|00000480| 85 c0 74 02 ff d0 83 c6 | 04 3b f7 72 f1 5f 5e c3 |..t.....|.;.r._^.|
|00000490| 56 57 8b 7c 24 14 4f 78 | 2d 8b 74 24 10 8b 54 24 |VW.|$.Ox|-.t$..T$|
|000004a0| 0c 0f be 02 0f be 0e 42 | 46 85 c0 74 12 85 c9 74 |.......B|F..t...t|
|000004b0| 0e 3b c1 75 0a 4f 79 e9 | 33 c0 5f 5e c2 0c 00 2b |.;.u.Oy.|3._^...+|
|000004c0| c1 5f 5e c2 0c 00 5f 33 | c0 5e c2 0c 00 90 90 90 |._^..._3|.^......|
|000004d0| 53 56 57 8b 7c 24 14 57 | ff 15 ac 40 40 00 8b d8 |SVW.|$.W|...@@...|
|000004e0| 8b 74 24 10 80 3e 00 74 | 24 53 57 56 e8 9f ff ff |.t$..>.t|$SWV....|
|000004f0| ff 85 c0 74 10 8a 46 01 | 46 84 c0 75 ec 33 c0 5f |...t..F.|F..u.3._|
|00000500| 5e 5b c2 08 00 8b c6 5f | 5e 5b c2 08 00 5f 5e 33 |^[....._|^[..._^3|
|00000510| c0 5b c2 08 00 90 90 90 | 90 90 90 90 90 90 90 90 |.[......|........|
|00000520| 8b 44 24 04 8b 54 24 08 | 83 c1 04 6a 00 51 8b 4c |.D$..T$.|...j.Q.L|
|00000530| 24 14 6a 00 50 6a 00 6a | 00 6a 00 51 52 ff 15 90 |$.j.Pj.j|.j.QR...|
|00000540| 40 40 00 85 c0 74 0d 25 | ff ff 00 00 0d 00 00 07 |@@...t.%|........|
|00000550| 80 c2 0c 00 33 c0 c2 0c | 00 90 90 90 90 90 90 90 |....3...|........|
|00000560| 51 8b 49 04 56 8b 74 24 | 10 8d 44 24 04 50 8b 44 |Q.I.V.t$|..D$.P.D|
|00000570| 24 10 8d 54 24 14 56 52 | 6a 00 50 51 c7 44 24 1c |$..T$.VR|j.PQ.D$.|
|00000580| 00 04 00 00 ff 15 8c 40 | 40 00 83 f8 02 75 0b 33 |.......@|@....u.3|
|00000590| c0 b9 01 00 00 00 88 06 | eb 04 8b 4c 24 10 85 c0 |........|...L$...|
|000005a0| 74 0c 25 ff ff 00 00 0d | 00 00 07 80 eb 02 33 c0 |t.%.....|......3.|
|000005b0| 85 c0 7c 0f 83 f9 01 74 | 0a 83 f9 02 74 05 b8 05 |..|....t|....t...|
|000005c0| 40 00 80 5e 59 c2 08 00 | 90 90 90 90 90 90 90 90 |@..^Y...|........|
|000005d0| 56 57 8b 7c 24 10 8b f1 | 57 ff 15 ac 40 40 00 8b |VW.|$...|W...@@..|
|000005e0| 4e 04 40 50 8b 44 24 10 | 57 6a 01 6a 00 50 51 ff |N.@P.D$.|Wj.j.PQ.|
|000005f0| 15 94 40 40 00 85 c0 74 | 0e 25 ff ff 00 00 0d 00 |..@@...t|.%......|
|00000600| 00 07 80 8b f0 eb 02 33 | f6 85 f6 7c 20 8d 54 24 |.......3|...| .T$|
|00000610| 10 52 68 20 4e 00 00 6a | 00 68 20 30 40 00 6a 00 |.Rh N..j|.h 0@.j.|
|00000620| 6a 1a 68 ff ff 00 00 ff | 15 c0 40 40 00 8b c6 5f |j.h.....|..@@..._|
|00000630| 5e c2 08 00 90 90 90 90 | 90 90 90 90 90 90 90 90 |^.......|........|
|00000640| e8 0b 00 00 00 c2 10 00 | 90 90 90 90 90 90 90 90 |........|........|
|00000650| 81 ec a4 08 00 00 55 56 | 8d 44 24 18 57 50 c7 44 |......UV|.D$.WP.D|
|00000660| 24 20 94 00 00 00 ff 15 | b8 40 40 00 83 7c 24 2c |$ ......|.@@..|$,|
|00000670| 02 0f 85 73 02 00 00 68 | 2c 30 40 00 68 02 00 00 |...s...h|,0@.h...|
|00000680| 80 68 1f 00 02 00 8d 4c | 24 18 c7 44 24 1c 00 00 |.h.....L|$..D$...|
|00000690| 00 00 c7 44 24 18 58 20 | 40 00 e8 81 fe ff ff 85 |...D$.X |@.......|
|000006a0| c0 7d 2a 8b 44 24 10 c7 | 44 24 0c 50 20 40 00 85 |.}*.D$..|D$.P @..|
|000006b0| c0 0f 84 1d 02 00 00 50 | ff 15 98 40 40 00 b8 01 |.......P|...@@...|
|000006c0| 00 00 00 5f 5e 5d 81 c4 | a4 08 00 00 c3 8d 8c 24 |..._^]..|.......$|
|000006d0| b0 00 00 00 51 68 00 20 | 40 00 8d 4c 24 14 e8 7d |....Qh. |@..L$..}|
|000006e0| fe ff ff 85 c0 7d 2a 8b | 44 24 10 c7 44 24 0c 50 |.....}*.|D$..D$.P|
|000006f0| 20 40 00 85 c0 0f 84 d9 | 01 00 00 50 ff 15 98 40 | @......|...P...@|
|00000700| 40 00 b8 01 00 00 00 5f | 5e 5d 81 c4 a4 08 00 00 |@......_|^]......|
|00000710| c3 8d 94 24 b0 00 00 00 | 68 10 20 40 00 52 e8 ad |...$....|h. @.R..|
|00000720| fd ff ff 85 c0 74 3d 8d | 84 24 b0 00 00 00 68 18 |.....t=.|.$....h.|
|00000730| 20 40 00 50 e8 97 fd ff | ff 85 c0 74 27 8b 44 24 | @.P....|...t'.D$|
|00000740| 10 c7 44 24 0c 50 20 40 | 00 85 c0 0f 84 99 01 00 |..D$.P @|........|
|00000750| 00 50 ff 15 98 40 40 00 | 33 c0 5f 5e 5d 81 c4 a4 |.P...@@.|3._^]...|
|00000760| 08 00 00 c3 68 20 20 40 | 00 68 01 00 00 80 68 19 |....h @|.h....h.|
|00000770| 00 02 00 8d 4c 24 20 c7 | 44 24 24 00 00 00 00 c7 |....L$ .|D$$.....|
|00000780| 44 24 20 48 20 40 00 e8 | 94 fd ff ff 85 c0 7c 1a |D$ H @..|......|.|
|00000790| 8d 8c 24 b0 04 00 00 51 | 68 00 20 40 00 8d 4c 24 |..$....Q|h. @..L$|
|000007a0| 1c e8 ba fd ff ff 85 c0 | 7d 3c 8b 44 24 18 8b 35 |........|}<.D$..5|
|000007b0| 98 40 40 00 bf 50 20 40 | 00 85 c0 89 7c 24 14 74 |.@@..P @|....|$.t|
|000007c0| 03 50 ff d6 8b 44 24 10 | 89 7c 24 0c 85 c0 0f 84 |.P...D$.|.|$.....|
|000007d0| 00 01 00 00 50 ff d6 b8 | 01 00 00 00 5f 5e 5d 81 |....P...|...._^].|
|000007e0| c4 a4 08 00 00 c3 8a 84 | 24 b0 04 00 00 8b 35 b4 |........|$.....5.|
|000007f0| 40 40 00 84 c0 74 12 8d | 94 24 b0 04 00 00 8d 84 |@@...t..|.$......|
|00000800| 24 b0 00 00 00 52 50 ff | d6 8b 44 24 18 8b 2d 98 |$....RP.|..D$..-.|
|00000810| 40 40 00 bf 50 20 40 00 | 85 c0 89 7c 24 14 74 03 |@@..P @.|...|$.t.|
|00000820| 50 ff d5 8a 84 24 b0 00 | 00 00 84 c0 75 0f 8d 8c |P....$..|....u...|
|00000830| 24 b0 00 00 00 68 30 20 | 40 00 51 ff d6 8d 94 24 |$....h0 |@.Q....$|
|00000840| b0 00 00 00 68 10 20 40 | 00 52 e8 81 fc ff ff 8b |....h. @|.R......|
|00000850| 35 a8 40 40 00 85 c0 75 | 1e 8d 84 24 b0 00 00 00 |5.@@...u|...$....|
|00000860| 68 08 20 40 00 50 ff d6 | 8d 8c 24 b0 00 00 00 68 |h. @.P..|..$....h|
|00000870| 10 20 40 00 51 ff d6 8d | 94 24 b0 00 00 00 68 18 |. @.Q...|.$....h.|
|00000880| 20 40 00 52 e8 47 fc ff | ff 85 c0 75 1e 8d 84 24 | @.R.G..|...u...$|
|00000890| b0 00 00 00 68 08 20 40 | 00 50 ff d6 8d 8c 24 b0 |....h. @|.P....$.|
|000008a0| 00 00 00 68 18 20 40 00 | 51 ff d6 8d 94 24 b0 00 |...h. @.|Q....$..|
|000008b0| 00 00 8d 4c 24 0c 52 68 | 00 20 40 00 e8 0f fd ff |...L$.Rh|. @.....|
|000008c0| ff 85 c0 8b 44 24 10 89 | 7c 24 0c 7d 16 85 c0 74 |....D$..||$.}...t|
|000008d0| 03 50 ff d5 b8 01 00 00 | 00 5f 5e 5d 81 c4 a4 08 |.P......|._^]....|
|000008e0| 00 00 c3 85 c0 74 03 50 | ff d5 5f 5e 33 c0 5d 81 |.....t.P|.._^3.].|
|000008f0| c4 a4 08 00 00 c3 90 90 | 90 90 90 90 90 90 90 90 |........|........|
|00000900| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000910| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000920| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000930| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000940| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000950| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000960| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000970| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000980| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000990| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a00| 50 41 54 48 45 58 54 00 | 3b 00 00 00 00 00 00 00 |PATHEXT.|;.......|
|00000a10| 2e 56 42 53 00 00 00 00 | 2e 4a 53 00 00 00 00 00 |.VBS....|.JS.....|
|00000a20| 45 6e 76 69 72 6f 6e 6d | 65 6e 74 00 00 00 00 00 |Environm|ent.....|
|00000a30| 2e 43 4f 4d 3b 2e 45 58 | 45 3b 2e 42 41 54 3b 2e |.COM;.EX|E;.BAT;.|
|00000a40| 43 4d 44 00 00 00 00 00 | 60 11 40 00 d0 11 40 00 |CMD.....|`.@...@.|
|00000a50| 60 11 40 00 d0 11 40 00 | 60 11 40 00 d0 11 40 00 |`.@...@.|`.@...@.|
|00000a60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000aa0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ab0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ac0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ad0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ae0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000af0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ba0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000be0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c20| 45 6e 76 69 72 6f 6e 6d | 65 6e 74 00 53 79 73 74 |Environm|ent.Syst|
|00000c30| 65 6d 5c 43 75 72 72 65 | 6e 74 43 6f 6e 74 72 6f |em\Curre|ntContro|
|00000c40| 6c 53 65 74 5c 43 6f 6e | 74 72 6f 6c 5c 53 65 73 |lSet\Con|trol\Ses|
|00000c50| 73 69 6f 6e 20 4d 61 6e | 61 67 65 72 5c 45 6e 76 |sion Man|ager\Env|
|00000c60| 69 72 6f 6e 6d 65 6e 74 | 00 00 00 00 00 00 00 00 |ironment|........|
|00000c70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ca0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000cb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000cc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000cd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ce0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000cf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000da0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000db0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000dc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000dd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000de0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000df0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e00| 64 40 00 00 00 00 00 00 | 00 00 00 00 30 41 00 00 |d@......|....0A..|
|00000e10| a0 40 00 00 84 40 00 00 | 00 00 00 00 00 00 00 00 |.@...@..|........|
|00000e20| 54 41 00 00 c0 40 00 00 | 50 40 00 00 00 00 00 00 |TA...@..|P@......|
|00000e30| 00 00 00 00 a6 41 00 00 | 8c 40 00 00 00 00 00 00 |.....A..|.@......|
|00000e40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e50| 72 41 00 00 60 41 00 00 | 86 41 00 00 98 41 00 00 |rA..`A..|.A...A..|
|00000e60| 00 00 00 00 d6 40 00 00 | c8 40 00 00 08 41 00 00 |.....@..|.@...A..|
|00000e70| fc 40 00 00 ea 40 00 00 | 14 41 00 00 20 41 00 00 |.@...@..|.A.. A..|
|00000e80| 00 00 00 00 3e 41 00 00 | 00 00 00 00 72 41 00 00 |....>A..|....rA..|
|00000e90| 60 41 00 00 86 41 00 00 | 98 41 00 00 00 00 00 00 |`A...A..|.A......|
|00000ea0| d6 40 00 00 c8 40 00 00 | 08 41 00 00 fc 40 00 00 |.@...@..|.A...@..|
|00000eb0| ea 40 00 00 14 41 00 00 | 20 41 00 00 00 00 00 00 |.@...A..| A......|
|00000ec0| 3e 41 00 00 00 00 00 00 | 6b 00 45 78 69 74 50 72 |>A......|k.ExitPr|
|00000ed0| 6f 63 65 73 73 00 fe 00 | 47 65 74 4d 6f 64 75 6c |ocess...|GetModul|
|00000ee0| 65 48 61 6e 64 6c 65 41 | 00 00 28 01 47 65 74 53 |eHandleA|..(.GetS|
|00000ef0| 74 61 72 74 75 70 49 6e | 66 6f 41 00 a1 02 6c 73 |tartupIn|foA...ls|
|00000f00| 74 72 6c 65 6e 41 00 00 | 92 02 6c 73 74 72 63 61 |trlenA..|..lstrca|
|00000f10| 74 41 00 00 9b 02 6c 73 | 74 72 63 70 79 41 00 00 |tA....ls|trcpyA..|
|00000f20| 4d 01 47 65 74 56 65 72 | 73 69 6f 6e 45 78 41 00 |M.GetVer|sionExA.|
|00000f30| 4b 45 52 4e 45 4c 33 32 | 2e 64 6c 6c 00 00 dd 01 |KERNEL32|.dll....|
|00000f40| 53 65 6e 64 4d 65 73 73 | 61 67 65 54 69 6d 65 6f |SendMess|ageTimeo|
|00000f50| 75 74 41 00 55 53 45 52 | 33 32 2e 64 6c 6c 00 00 |utA.USER|32.dll..|
|00000f60| 1b 01 52 65 67 43 72 65 | 61 74 65 4b 65 79 45 78 |..RegCre|ateKeyEx|
|00000f70| 41 00 36 01 52 65 67 51 | 75 65 72 79 56 61 6c 75 |A.6.RegQ|ueryValu|
|00000f80| 65 45 78 41 00 00 41 01 | 52 65 67 53 65 74 56 61 |eExA..A.|RegSetVa|
|00000f90| 6c 75 65 45 78 41 00 00 | 17 01 52 65 67 43 6c 6f |lueExA..|..RegClo|
|00000fa0| 73 65 4b 65 79 00 41 44 | 56 41 50 49 33 32 2e 64 |seKey.AD|VAPI32.d|
|00000fb0| 6c 6c 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |ll......|........|
|00000fc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fe0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ff0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001000| 00 00 00 00 77 1b 2f 34 | 00 00 00 00 00 00 01 00 |....w./4|........|
|00001010| 10 00 00 00 18 00 00 80 | 00 00 00 00 77 1b 2f 34 |........|....w./4|
|00001020| 00 00 00 00 00 00 01 00 | 01 00 00 00 30 00 00 80 |........|....0...|
|00001030| 00 00 00 00 77 1b 2f 34 | 00 00 00 00 00 00 01 00 |....w./4|........|
|00001040| 09 04 00 00 48 00 00 00 | 60 50 00 00 7c 03 00 00 |....H...|`P..|...|
|00001050| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001060| 7c 03 34 00 00 00 56 00 | 53 00 5f 00 56 00 45 00 ||.4...V.|S._.V.E.|
|00001070| 52 00 53 00 49 00 4f 00 | 4e 00 5f 00 49 00 4e 00 |R.S.I.O.|N._.I.N.|
|00001080| 46 00 4f 00 00 00 00 00 | bd 04 ef fe 00 00 01 00 |F.O.....|........|
|00001090| 00 00 05 00 06 00 13 02 | 00 00 05 00 06 00 13 02 |........|........|
|000010a0| 3f 00 00 00 00 00 00 00 | 04 00 04 00 01 00 00 00 |?.......|........|
|000010b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 dc 02 00 00 |........|........|
|000010c0| 01 00 53 00 74 00 72 00 | 69 00 6e 00 67 00 46 00 |..S.t.r.|i.n.g.F.|
|000010d0| 69 00 6c 00 65 00 49 00 | 6e 00 66 00 6f 00 00 00 |i.l.e.I.|n.f.o...|
|000010e0| b8 02 00 00 01 00 30 00 | 34 00 30 00 39 00 30 00 |......0.|4.0.9.0.|
|000010f0| 34 00 62 00 30 00 00 00 | 4c 00 16 00 01 00 43 00 |4.b.0...|L.....C.|
|00001100| 6f 00 6d 00 70 00 61 00 | 6e 00 79 00 4e 00 61 00 |o.m.p.a.|n.y.N.a.|
|00001110| 6d 00 65 00 00 00 00 00 | 4d 00 69 00 63 00 72 00 |m.e.....|M.i.c.r.|
|00001120| 6f 00 73 00 6f 00 66 00 | 74 00 20 00 43 00 6f 00 |o.s.o.f.|t. .C.o.|
|00001130| 72 00 70 00 6f 00 72 00 | 61 00 74 00 69 00 6f 00 |r.p.o.r.|a.t.i.o.|
|00001140| 6e 00 00 00 7c 00 2a 00 | 01 00 46 00 69 00 6c 00 |n...|.*.|..F.i.l.|
|00001150| 65 00 44 00 65 00 73 00 | 63 00 72 00 69 00 70 00 |e.D.e.s.|c.r.i.p.|
|00001160| 74 00 69 00 6f 00 6e 00 | 00 00 00 00 57 00 69 00 |t.i.o.n.|....W.i.|
|00001170| 6e 00 64 00 6f 00 77 00 | 73 00 20 00 53 00 63 00 |n.d.o.w.|s. .S.c.|
|00001180| 72 00 69 00 70 00 74 00 | 69 00 6e 00 67 00 20 00 |r.i.p.t.|i.n.g. .|
|00001190| 48 00 6f 00 73 00 74 00 | 20 00 50 00 6f 00 73 00 |H.o.s.t.| .P.o.s.|
|000011a0| 74 00 20 00 53 00 65 00 | 74 00 75 00 70 00 20 00 |t. .S.e.|t.u.p. .|
|000011b0| 43 00 6f 00 6d 00 6d 00 | 61 00 6e 00 64 00 00 00 |C.o.m.m.|a.n.d...|
|000011c0| 34 00 0a 00 01 00 46 00 | 69 00 6c 00 65 00 56 00 |4.....F.|i.l.e.V.|
|000011d0| 65 00 72 00 73 00 69 00 | 6f 00 6e 00 00 00 00 00 |e.r.s.i.|o.n.....|
|000011e0| 35 00 2e 00 30 00 2e 00 | 35 00 33 00 31 00 2e 00 |5...0...|5.3.1...|
|000011f0| 36 00 00 00 32 00 09 00 | 01 00 49 00 6e 00 74 00 |6...2...|..I.n.t.|
|00001200| 65 00 72 00 6e 00 61 00 | 6c 00 4e 00 61 00 6d 00 |e.r.n.a.|l.N.a.m.|
|00001210| 65 00 00 00 50 00 6f 00 | 73 00 74 00 49 00 6e 00 |e...P.o.|s.t.I.n.|
|00001220| 73 00 74 00 00 00 00 00 | 6c 00 24 00 01 00 4c 00 |s.t.....|l.$...L.|
|00001230| 65 00 67 00 61 00 6c 00 | 43 00 6f 00 70 00 79 00 |e.g.a.l.|C.o.p.y.|
|00001240| 72 00 69 00 67 00 68 00 | 74 00 00 00 43 00 6f 00 |r.i.g.h.|t...C.o.|
|00001250| 70 00 79 00 72 00 69 00 | 67 00 68 00 74 00 20 00 |p.y.r.i.|g.h.t. .|
|00001260| a9 00 20 00 31 00 39 00 | 39 00 37 00 20 00 62 00 |.. .1.9.|9.7. .b.|
|00001270| 79 00 20 00 4d 00 69 00 | 63 00 72 00 6f 00 73 00 |y. .M.i.|c.r.o.s.|
|00001280| 6f 00 66 00 74 00 20 00 | 43 00 6f 00 72 00 70 00 |o.f.t. .|C.o.r.p.|
|00001290| 2e 00 00 00 42 00 0d 00 | 01 00 4f 00 72 00 69 00 |....B...|..O.r.i.|
|000012a0| 67 00 69 00 6e 00 61 00 | 6c 00 46 00 69 00 6c 00 |g.i.n.a.|l.F.i.l.|
|000012b0| 65 00 6e 00 61 00 6d 00 | 65 00 00 00 50 00 6f 00 |e.n.a.m.|e...P.o.|
|000012c0| 73 00 74 00 49 00 6e 00 | 73 00 74 00 2e 00 65 00 |s.t.I.n.|s.t...e.|
|000012d0| 78 00 65 00 00 00 00 00 | 88 00 34 00 01 00 50 00 |x.e.....|..4...P.|
|000012e0| 72 00 6f 00 64 00 75 00 | 63 00 74 00 4e 00 61 00 |r.o.d.u.|c.t.N.a.|
|000012f0| 6d 00 65 00 00 00 00 00 | 4d 00 69 00 63 00 72 00 |m.e.....|M.i.c.r.|
|00001300| 6f 00 73 00 6f 00 66 00 | 74 00 20 00 57 00 69 00 |o.s.o.f.|t. .W.i.|
|00001310| 6e 00 64 00 6f 00 77 00 | 73 00 20 00 53 00 63 00 |n.d.o.w.|s. .S.c.|
|00001320| 72 00 69 00 70 00 74 00 | 69 00 6e 00 67 00 20 00 |r.i.p.t.|i.n.g. .|
|00001330| 48 00 6f 00 73 00 74 00 | 20 00 50 00 6f 00 73 00 |H.o.s.t.| .P.o.s.|
|00001340| 74 00 20 00 53 00 65 00 | 74 00 75 00 70 00 20 00 |t. .S.e.|t.u.p. .|
|00001350| 43 00 6f 00 6d 00 6d 00 | 61 00 6e 00 64 00 00 00 |C.o.m.m.|a.n.d...|
|00001360| 38 00 0a 00 01 00 50 00 | 72 00 6f 00 64 00 75 00 |8.....P.|r.o.d.u.|
|00001370| 63 00 74 00 56 00 65 00 | 72 00 73 00 69 00 6f 00 |c.t.V.e.|r.s.i.o.|
|00001380| 6e 00 00 00 35 00 2e 00 | 30 00 2e 00 35 00 33 00 |n...5...|0...5.3.|
|00001390| 31 00 2e 00 36 00 00 00 | 44 00 00 00 01 00 56 00 |1...6...|D.....V.|
|000013a0| 61 00 72 00 46 00 69 00 | 6c 00 65 00 49 00 6e 00 |a.r.F.i.|l.e.I.n.|
|000013b0| 66 00 6f 00 00 00 00 00 | 24 00 04 00 00 00 54 00 |f.o.....|$.....T.|
|000013c0| 72 00 61 00 6e 00 73 00 | 6c 00 61 00 74 00 69 00 |r.a.n.s.|l.a.t.i.|
|000013d0| 6f 00 6e 00 00 00 00 00 | 09 04 b0 04 00 00 00 00 |o.n.....|........|
|000013e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+