HEX
Server: Apache/2.4.46 (Win64) OpenSSL/1.1.1j PHP/8.4.25
System: Windows NT DESKTOP-4TAV2RJ 10.0 build 19045 (Windows 10) AMD64
User: fred (0)
PHP: 8.4.25
Disabled: NONE
Upload Files
File: C:/Windows/System32/zh-TW/whoami.exe.mui
MZ����@���	�!�L�!This program cannot be run in DOS mode.

$5�<�q�R�q�R�q�R�e���p�R�e�P�p�R�Richq�R�PEL�!*

P��@ |&8.rdata�@@.rsrc0 (@@�s��
T88�s��$��8.rdata8x.rdata$zzzdbg �.rsrc$01�%x3.rsrc$02 ����Q�KU[����<F�q8=!H���׮s����(�@� �8�P�h�	��
�����������(�@�X�p� ��!��&��,��-��3�9�:0�9H�X`�Yx�_��`�������(8HXhx��������(8HXhx��%��P&��0(���+���0D��3���5d�D6���6v�H90�x96��94��9f�L:X��;��,<X��<P��<:�=6�H=<��=2��=x�0>>�p>���>\�T?���A��B��MUI����1S8Ӝy�i�O=T����|!|���2����MUIzh-TW
WhoAmI �v\O(u�e_	g	N.z: 

���l 1:
&    WHOAMI [/UPN | /FQDN | /LOGONID]

���l 2:
G    WHOAMI { [/USER] [/GROUPS] [/CLAIMS] [/PRIV] } [/FO format] [/NH]

���l 3:
$    WHOAMI /ALL [/FO format] [/NH]

�c�:
$    �S�NO(u�PlQ(uz_�O�S�_(W,g_j�|q}
N�vO(u�
T1z0�D}nj
�0
PA!    �N�S,g_j�|q}
N�vMRO(u��vTꁉ[hQ'`X�%R�x (SID)0
    �[JT0
kP�0{veQX�%R�x ({veQ ID)0
    �NsS�vMR{veQ�vO(u�/f��?
-    �Y�g*gc�[R�c�Sxe��]wQ\�N NTLM <h_ (domain\username)
    o�:yO(u�
T1z0

�Sxen�U:
.    /UPN                    �NO(u�;NԚ
T1z (UPN) <h_
&                            o�:yO(u�
T1z0

K    /FQDN                   �N Fully Qualified Distinguished Name (FQDN) <h_
&                            o�:yO(u�
T1z0

)    /USER                   o�:y�vMRO(u��vnj
��N�S
+                            �[hQ'`X�%R�x (SID)0

,    /GROUPS                 o�:y�vMRO(u��v�D}b�Tnj<h0
.                            3^6b^��W0�[hQ'`X�%R�x (SID)
#                            �N�Sl\'`0

(    /CLAIMS                 o�:y�vMRO(u��v�[JT�
-                            S�b�[JT
T1z0�ej0^��W�S<P0

(    /PRIV                   o�:y�vMRO(u��v�[hQ'`
!                            
kP�0

,    /LOGONID                o�:y�vMRO(u��v{veQX�%R�x0

(    /ALL                    o�:y�vMR�vO(u�
T1z0
'                            �_l\�v�D}�N�S�[hQ'`
0                            �NN�vX�%R�x (SID)0�[JT�S
kP� 
(                            �vMRO(u�X[�S
kVg0

(    /FO       format        c�[��o�:y�v8��Q<h_0
2                            	gHe<P/f TABLE0LIST0 CSV0
*                            kMOj-�
N�N CSV <h_
-                            o�:y0�-�<h_/f TABLE0

%    /NH                     c�[kMOj-�
N�a
$                            o�:y(W8��Q
N0
4                            �S��O(u(W TABLE �T CSV <h_
N0

'    /?                      o�:y�P��f
�o`0


Examples:
    WHOAMI
    WHOAMI /UPN
    WHOAMI /FQDN 
    WHOAMI /LOGONID
    WHOAMI /USER
    WHOAMI /USER /FO LIST
    WHOAMI /USER /FO CSV
    WHOAMI /GROUPS
    WHOAMI /GROUPS /FO CSV /NH
    WHOAMI /CLAIMS
    WHOAMI /CLAIMS /FO LIST
    WHOAMI /PRIV
    WHOAMI /PRIV /FO TABLE
    WHOAMI /USER /GROUPS
'    WHOAMI /USER /GROUPS /CLAIMS /PRIV
    WHOAMI /ALL
    WHOAMI /ALL /FO LIST
    WHOAMI /ALL /FO CSV /NH
    WHOAMI /?
"/���: ���l
N
\0
ˊ8�eQ "WHOAMI /?" �S�_��fnj
�0
/���: |vuaY/���0
*/���: c�[�N/����v<h_ (/FO)0
ˊ8�eQ"WHOAMI /?" �O�S�_��f0
�]_U(u�]\P(uUSER INFORMATION
GROUP INFORMATION
LOGON ID INFORMATION
PRIVILEGES INFORMATION
0/���: !q�l�S�_�[te��%R
T1z (FQDN)�
      �V�p�vMR{veQ�vO(u�
N/f�}�WO(u�0
0/���: !q�l�S�_O(u�;NԚ
T1z (UPN)�
      �V�p�vMR{veQ�vO(u�
N/f�}�WO(u�0
3/���: /NH R�c�Sxe!q�lO(u LIST <h_0
ˊ8�eQ "WHOAMI /?" �O�S�_O(u�e_0
O(u��[JTnj
�
-----------------------

݈n�[JTnj
�
-------------------------

PAO(u�
T1zSID�D}
T1z^��WSIDl\'`PAyr�k
kP�
T1z�c��r�l
f�JT: ,g_j#��}!q�lO(uO(u���I�0
FQDN
UPN
-----
PA----------------

-----------------

--------------------

----------------------

/���: |vuaY/��� - /����x/f %u0
/���: !q�l�S�_�D}b�Tnj<hnj
�0
/���: !q�l�S�_O(u��[JTnj
�0
/���: !q�l�S�_݈n�[JTnj
�0
O(u��D}�}�W%R
T�w
T�v�D}�]*Rd��v3^6bSID 
Nck�x

Nf�v SID ^��W��f�jd|7_6R'`�D}�-��p_U(uPA�]_U(u�v�D}�D}�d	g��P(u�e�bU}�v�D}{veQX�%R�x,g_j�D}
N�S|~b�v@SR'Y\�[�P(u�e�bU}�-��p\P(u\P(u7_6RIntUIntW[2NFQBNPASIDBLOBBOOLPA�[JT
T1z�[JTX�%R�x�ej^��W<PTRUEFALSEPAO(u��l	g�[JT0O(u��[JT*g�w0�]\P(u Kerberos (Wdk݈n
N�v�RKaX[�S�c6R/e�c0/���:f�JT:b�R:nj
�:
Ni�(uPA
8�eQ %s �v�[�x:�p,g_j#��}�P^�O(u���I�0
�vj�|q}�_��WL� Windows XP b�N
N�vHr,g0
`��z�|q}�_��WL� Windows 2000 b�N
N�vHr,g0
���l/���0'%s' <P
NAQ1�(u�e '%s' x��0
%s
���l/���0ˊ�p '%s' c�[	gHe�vxe<P0
%s
���l/���0ˊ�p '%s' c�[	gHe�vnmޞxe<P0
%s
���l/���0:\7_6Rx�� '%s'0
%s
���l/���0'%s' x��
NAQ1���N� %d !k0
%s
/����v_xe/x�� - '%s'0
%s
���l/���0z�1Y�-��v_xe0
%s
}T�NR_xe�vw��^
N�S��N� 255 P�xeW[CQ0
���l/���0�-�x��
NAQ1���N� %d !k0
%s
���l/���0'%s' �_���	g<P0
%s
���l/���0'%s' <P
NAQ1�ZP�p�-��v_xe0
%s
8�eQ "%s /?" �S�_O(u�e_0'%s' x���v<P
N�Szz}v0
%s
�-�x���v<P
N�Szz}v0
%s
PA���l/���0ˊ�p�-�c�[	gHe�vxe<P0
%s
���l/���0ˊ�p�-�c�[	gHe�vnmޞxe<P0
%s
�-�x���v<P
N�S�N��N� %d PW[CQ0
���l/���0
N�S�N '%s' x���Oc�[<P0
%s
'%s' x���v<P
N�S�N��N� %d PW[CQ0
�4VS_VERSION_INFO��
{aJ
{aJ?�StringFileInfo�040404B0LCompanyNameMicrosoft CorporationPFileDescriptionwhoami - o�:y{veQO(u��vnj
�n'FileVersion10.0.19041.7291 (WinBuild.160101.0800)6InternalNamewhoami.exe�.LegalCopyright� Microsoft Corporation. All rights reserved.FOriginalFilenamewhoami.exe.muij%ProductNameMicrosoft� Windows� Operating SystemDProductVersion10.0.19041.7291DVarFileInfo$Translation�PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD