Okay, I thought as a forensic expert, you would have figured out the most obvious things, like the used alpha version and the contained hotkeys. Any reproducible details? Like this, your accusations seem a bit thin. Please share your knowledge. Did you see smth different than the usual keyboard hoo...

Deeper analyses of what? The compiled version? How did you get there ? Of course the exe contains the complete AHK interpreter it was compiled with (probably v2-a122), like any compiled AHK script. Also, I see two hotkeys in the source code. [Mod edit: Fixed quote tags.] well if you don't know exe ...

very suspicious, the source code can't run but the exe file does. Even when exploring the exe file nothing seems bad but the code inside the exe wont run alone, so not using this The weirdest part is that after a deeper analysis it seems to hook keystrokes (sniff keylog) but it does not have any hot...

amazing work here.
I didn't know I need something like this, now I need to create a project that uses this.
Thank you for sharing

I have my own version that does not require to be global variables, parses to objects, and allows for great customization. /* name ------ : ini.ahk description : Parse INI configuration text or dump an object as INI configuration text. author ---- : TopHatCat version --- : v1.0.0 date ------ : 22-0...

Kisang Kim wrote: ↑

20 Apr 2022, 22:51

wonderful !

I changed one line
if !FileExist(CONFIGURATION_FILE){ to
if !FileExist(_SourcePath){

Oh in fact you are right, my mistake

Hello this is a function I have been using for years now. It is very simple, it reads and ini file and it create variables with it in the format of SECTION_key := value so for example, if you have an ini like this [SYSTEM] name=Applecation Name version=1.0.0.4 lang=english [OPTIONS] rootdir=C:\PathT...

yeah I assume the same.
it may also be only related to some "suspicious" dlls and system files that needs to read in order to gain access to certain "actions"
I just found it weird

BTW the tool used was https://analyze.intezer.com/ premium which allows the deep analysis and dynamic execution

I know that AHK is infamous between the AV engines, but this is a deep analysis that really shows some suspicious network activity that should not be present on the binary.

I have discovered that some AV engines mark my scripts (which obviously i know are safe) as malware and mark AHK RAT as the malware behavior starting at version 1.1.31.01, before that version everything is clean. The AHK RAT is marked as suspicious network activity. Anyone have any idea on this, or ...

nice idea
Thank you for sharing it

This is a very nice script

Amazing script, Thank you for sharing it

Here is a bit more of Gdi+ still very far from a release candidate but ... what do you think on the main behavior?

Well this is a WIP project I'm working on but the main timer (can countown or up) is done using Gdip only here is a sample if it it also include a little smoth animations for the handle.

Simple Code to make any window top, transparent (defined) & click through This was made because sometimes I have apps at full screen but I want to have something else kind of overlaying it but not clickable. By default the keys to reload the script (to select a new window or different opacity level)...