HEX
Server: Apache/2.4.46 (Win64) OpenSSL/1.1.1j PHP/8.4.25
System: Windows NT DESKTOP-4TAV2RJ 10.0 build 19045 (Windows 10) AMD64
User: fred (0)
PHP: 8.4.25
Disabled: NONE
Upload Files
File: C:/Windows/System32/zh-TW/cipher.exe.mui
MZ����@���	�!�L�!This program cannot be run in DOS mode.

$5�<�q�R�q�R�q�R�e���p�R�e�P�p�R�Richq�R�PEL�!*

P��@ |'8.rdata�@@.rsrc0 (@@h���
T88h���$��8.rdata8x.rdata$zzzdbg �.rsrc$01� L.rsrc$02 h.e_e�)x֪�xM��H���{)7���h�����(�@�X�p��������� ���!l"�Dp�MUI�����W�M|�2��4Luf'=�P���̀¥����MUIzh-TWLt��M�P[�[OK]

[ERR]

H

 ck(WR�Q %1

 �R0R�P�v��v�e�jHh\g���R�[0



L

 ck(WR�Q %1

 �R0R�P�v��v�e�jHh\
Ng���R�[0



X

(W %2 �v�-N�v %1 P�jHh

%3 P�]�R�[; %4 P*g�R�[0



8

 -��[�v� %1 �O�R�[�e�jHh %0



,

 ck(W�R�[ %1 �v�jHh



,

 ck(W�R�[ %1 �v�jHh



4

%2 �v��v %1 �jHh�]�R�[0



@

 \�v� %1 -��[b
N��
\�e�jHh�R�[ %0



(

 ��[ %1 �v�jHh



(

 ��[ %1 �v�jHh



4

%2 �v��v %1 �jHh�]��[0



��aԚ
N��0

[�N� %1]

%1!-*s!%0

%1

(%1: �jHh�|q}
N/e�c�R�[0

0R 1 %0

$�x�x_j��<h
Nck�x: %1

T(W Active Directory �}�W
g�R-N\~bO(u��aI�Bf|vu/���

 
Nck�x�v�Sxe: %1

H

��f� %1 �v EFS �aI�c}/f:



  %2



(

�`�|q}
N�v�R�[�jHh:



$%1: �R�[�]�f�e0



�\�jHh1u}�eW[I��cb�[�x�eW[�S��g(W�x�x@S
NYuN~^�k
��v}�eW[0

�^p��`(W�[bI��c�_�O(u}T�N

CIPHER /W:directory �Ond��x�x0

0ˊ8�eQ�[�x�O�Ow��`�v .PFX �jHh:

 ˊ͑�e8�eQ�[�x�N�x��:

$�[�x
N&{T0*g"uu�aI�0

0/f&T�����[ %1 �U? (/f/&T):

YN

,�`�v .CER �jHh�]�}�^�zb�R0

,�`�v .PFX �jHh�]�}�^�zb�R0

ck(W�[eQ %1

X���v�S���yd���Nnj�e�ˊ(W�WL� CIPHER /W Bf�ܕ��@b	gvQ�N�a(uz_0

0x00

0xFF

��_jxeW[

P�l	g(u�O�R�[dk�jHh�v,g_j EFS �aI�0*g�P�N

,g_j EFS �aI�0

0�vMR�l	g���P�N�v,g_j EFS �aI�0

dck(W�P�N�`�v�aI��T
\�a�vёp�0�Y�g�`
N_U�RU�tz�^�ˊ	c [�S�m]0���x��ˊ	c [�x�[]0

$EFS �aI��]�}�P�Nb�R0

 EFS �aI��P�N1YWe0

$EFS �aI��Tёp��P�N0

(ˊ8�eQ�P�N PFX �jHh
T1z0

<8��Q PFX �jHh_*Yw�0ˊ\�[.~�w��Qf�N!k0

   �S�N��[�vO(u�:

    %1

   ~b
N0RO(u�0




Nf

(    �aI�c}: %1



  �O�_�aI�:

$  ~b
N0R�O�_�aI�0



$  !q�l�b�Sёp�nj
�0



�  ёp�nj
�:

    o�{�l: %1

    ёp�w��^: %2!d!

    ёp� Entropy: %3!d!



  �v�['`I{}:

0    Windows 2000



D    Windows XP/Server 2003



H    Windows Vista/Server 2008



(    Windows 7



     *g�w�vHr,g



<

 ck(W�e�XO(u�0R�R�[nj�e>Y %1 �v�jHh



4

 ck(W�e�XO(u�0R�R�[nj�e>Y %1



<

 ck(W�e�XO(u�0Rnj�e>Y %1 -N�v�jHh



L

O(u��]�e�X0R %2 �v�-N�v %1 �jHh [b�v�]0



$    �S�Ow��vOmi



$  Omi�S0R�NN��v�Ow�:

   Omiёp��]���d��0

(    �a(uz_�]�S�Ow�



@

 ck(W�_�R�[nj�e>Y %1 -N�v�jHh�yd�O(u�



8

 ck(W�_�R�[nj�e>Y %1 �yd�O(u�



<

 ck(W�_nj�e>Y %1 -N�v�jHh�yd�O(u�



L

O(u��]�_ %2 �v�-N�v %1 �jHh [b�v�] �yd�0



U %1

E %1

H

 ck(W�_�R�[nj�e>Y %1 -N�v�jHh�f�e EFS ёp�



@

 ck(W�_�R�[nj�e>Y %1 �f�e EFS ёp�



D

 ck(W�_nj�e>Y %1 -N�v�jHh�f�e EFS ёp�



T

EFS ёp��]�_ %2 �v�-N�v %1 �jHh [b�v�] �f�e0



o�:yb�f9e NTFS �x�xRrR
N�v� [�jHh] �v�R�[0



  CIPHER [/E | /D | /C]

           [/S:directory] [/B] [/H] [pathname [...]]



   CIPHER /K [/ECC:256|384|521]



   CIPHER /R:filename [/SMARTCARD] [/ECC:256|384|521]



  CIPHER /P:filename.cer



  CIPHER /U [/N]



  CIPHER /W:directory



  CIPHER /X[:efsfile] [filename]



   CIPHER /Y



 CIPHER /ADDUSER [/CERTHASH:hash | /CERTFILE:filename | /USER:username]

          [/S:directory] [/B] [/H] [pathname [...]]



  CIPHER /FLUSHCACHE [/SERVER:servername]



  CIPHER /REMOVEUSER /CERTHASH:hash

         [/S:directory] [/B] [/H] [pathname [...]]



  CIPHER /REKEY [pathname [...]]



        /B        �|vu/���GR-Nbk09h�d�-�<P�sSO|vu/����

 CIPHER �N\|~�~�WL�0

        /C        o�:y�R�[�jHh�vnj
�0

       /D        ��[c�[�v�jHhb�v�0

      /E        �R�[c�[�v�jHhb�v�0�v�g

�R
Nj:y��N�OKN�_�ReQ�v�jHh��g�R�[0�

6r�v��l	g�R�[�GR�O9e�R�[�v�jHhBf�

�R�[�jHh�S����[0�^p��`

�R�[�jHh�6r�v�0

      /H        o�:ywQ	g��υb�|q}l\'`�v�jHh09h�d�-�<P���N�jHh

g��weu0

       /K        �^�z-dM� EFS O(u�v�e�aI��ёp�0�x��ddk

x���\g�_eu@b	gvQ�Nx��0



       �la: 9h�d�-�<P�/K g�^�z&{T

�vMR�D}�SGR�v�aI��ёp�0�c�[ ECC�\gO(u�c�O�vёp�'Y\�^�z�b=|r

�aI�0



      /N        dkx���S��� /U -dM�O(u0�\g2�bk

�f�eёp�0�(u�e\~b

,g_j�x�x_j
N�v@b	g�R�[�jHh0

      /R        "uu EFS �O�_ёp���aI��6q�_\�[P�[eQ

� .PFX �jHh (S+T�aI���y�[ёp�) �

.CER �jHh (�PS+T�aI�)0�|q}�{t�T�S\ .CER �vgQ�[

�e�X0R EFS �O�_�SGR�N�^�z

O(u��v�O�_ёp��&N/SeQ .PFX �N�O�_

P%R�jHh0�c�[ SMARTCARD�GRg\

�O�_ёp���aI��[eQ�zfgaaS0g

"uu .CER �jHh (�PS+T�aI�)0
Ng

"uu .PFX �jHh0



         �la: 9h�d�-�<P�/R g�^�z 2048 MOCQ�v RSA �O�_ёp��

�aI�0�c�[ ECC��[�_b��_��cW� 2560384 b 512 �v

ёp�'Y\0



        /P        �_�PeQ�v

�aI��^�z Base64 �}�x�O�_�SGR Blob0dk Blob �S(u�eݑ
\ 

MDM �r-��[ DRA �SGR0

      /S        (Wc�[�v�v��vQN�v@b	g

�jHh�P[�v��WL�c�[�v\Omi0

       /U        Vf�U�t,g_j�x�x_j
N�v@b	g�R�[�jHh0�ёp��]

���f��g\O(u��v�jHh�R�[ёp�b�O�_ёp��f�e�p�vMR

�vёp�0dkx��!q�l-dM� /N �NY�vvQ�N

x��O(u0

      /W        �_teP

�x�x@S�v�S(u*gO(u�x�xzz���yd�nj�e0�x��ddkx���g�_eu@b	gvQ�Nx��0

     c�[�v�v��S�N/f,g_j�x�x@S�v�NUO0W�e0傃[

/f�c�cޞbcTvQ�N�x�x@S-N�v�v��r�

�x�x@S
N�vnj�e\g���yd�0

     /X        \ EFS �aI��ёp��P�N0R�N filename c�[�v�jHh0�

�c�O efsfile�\�P�N(u�e�R�[

�jHh�v�vMRO(u��aI�0&TGR�\�P�NO(u��vMR�v EFS

�aI��ёp�0

    /Y        o�:y,g_j��f�-N�`�vMR�v EFS �aI�c}0

     /ADDUSER  �e�XO(u�0Rc�[�v�R�[�jHh0�

�c�O CERTHASH��R�[�e_\d\wQ	gdkSHA1

 ܖJn�v�aI�0��c�O CERTFILE��R�[�e_\�_�jHh�d�S

�aI�0��c�O USER��R�[�e_\

Vf�(W0Active Directory �}�W


g�R
0-N\~br�O(u��v�aI�0

   /FLUSHCACHE

        nd�|v�Q|T�SKNO(u�(Wc�[:O
ghV
N�v EFS ёp��_�S0

�*g�c�O servername��R�[�e_gnd�O(u�(W

,g_j��f�
N�vёp��_�S0

    /REKEY    �f�ec�[�v�R�[�jHh�NO(u�vMR-��[�v

 EFS ёp�0

     /REMOVEUSER

      �_c�[�v�jHh�yd�O(u�0CERTHASH �_�/f���yd�KN�aI��v

 SHA1 ܖJn0



  directory �v�_0  

filename  �l	goR�j
T�v�jHh
T1z0

   pathname  c�[!j_0�jHhb�v�0

   efsfile   �R�[�jHh�v_0



    �(W*gc�[�Sxe�v�`�lNO(u�CIPHER go�:y

�vMR�v��r��v�S+TKN@b	g�jHh�v�R�[�rKa0�`�S�NO(uYP�v�


T1z�,�(uW[CQ0�`�_�(WYP�SxeKN��neQzz}v0




,    Omi�S0R�Ow���S+oJ�	�



p4VS_VERSION_INFO��
aJ
aJ?�StringFileInfo�040404B0LCompanyNameMicrosoft Corporation:	FileDescription�jHh�R�[lQ(uz_h$FileVersion10.0.19041.1 (WinBuild.160101.0800).InternalNamecipher�.LegalCopyright� Microsoft Corporation. All rights reserved.FOriginalFilenameCIPHER.EXE.MUIj%ProductNameMicrosoft� Windows� Operating System>
ProductVersion10.0.19041.1DVarFileInfo$Translation�PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD