Gen.Variant.MSILPerseus.58052_7d7a865c06

August 19, 2021 15:24

HEUR:Trojan.Win32.Generic (Kaspersky), Gen:Variant.MSILPerseus.58052 (B) (Emsisoft), Gen:Variant.MSILPerseus.58052 (AdAware), SpyTool.Win32.Ardamax.FD, GenericEmailWorm.YR (Lavasoft MAS)Behaviour: Trojan, Worm, EmailWorm, SpyTool

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary

MD5: 7d7a865c06dd16081a8568e0d8c29d7c

SHA1: 42e03523477559c8fb8e43710af2112b93c829d2

SHA256: 81bb0287c77cc3ded84441d08de0de539dd681641eb995efc28ff1639c5d92f9

SSDeep: 49152:0O5ui5KucyqqPgfH8xfY5rnSdONYKNto9WS1Hsao Okl3tT mGhiyA:X5JK9RqPFfk/7vOHldT mGhvA

Size: 2532875 bytes

File type: EXE

Platform: WIN32

Entropy: Packed

PEID: MicrosoftVisualC, NETexecutable, UPolyXv05_v6

Company: no certificate found

Created at: 2016-10-29 04:51:56

Analyzed on: Windows7 SP1 32-bit

Summary: Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Dynamic Analysis

Payload

Behaviour	Description
EmailWorm	Worm can send e-mails.

Process activity

The Trojan creates the following process(es):

netsh.exe:3804
Server.exe:2924
%original file name%.exe:2712
Gerenciador de Janelas do Windows.exe:3400

The Trojan injects its code into the following process(es):

CDT.exe:1780

Mutexes

The following mutexes were created/opened:No objects were found.

File activity

The process CDT.exe:1780 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

C:\ProgramData\XKQ\CDT.004 (15061 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.02 (57 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.01 (81 bytes)

The process Server.exe:2924 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\svchost.exe (48 bytes)

The process %original file name%.exe:2712 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Gerenciador de Janelas do Windows.exe (268667 bytes)

The process Gerenciador de Janelas do Windows.exe:3400 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Server.exe (48 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.01 (80 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.02 (55 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.00 (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.exe (148 bytes)

Registry activity

The process CDT.exe:1780 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CDT Start" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.exe"

The process netsh.exe:3804 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@%SystemRoot%\system32]
"eapqec.dll,-101" = "Provides Network Access Protection enforcement for EAP authenticated network connections, such as those used with 802.1X and VPN technologies."
"eapqec.dll,-100" = "EAP Quarantine Enforcement Client"
"eapqec.dll,-103" = "Microsoft Corporation"
"eapqec.dll,-102" = "1.0"
"tsgqec.dll,-101" = "Provides RD Gateway enforcement for NAP"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E\@%SystemRoot%\system32]
"tsgqec.dll,-103" = "Microsoft Corporation"
"tsgqec.dll,-100" = "RD Gateway Quarantine Enforcement Client"
"napipsec.dll,-2" = "Provides IPsec based enforcement for Network Access Protection"
"napipsec.dll,-3" = "Microsoft Corporation"
"napipsec.dll,-1" = "IPsec Relying Party"
"napipsec.dll,-4" = "1.0"
"tsgqec.dll,-102" = "1.0"
"dhcpqec.dll,-103" = "1.0"
"dhcpqec.dll,-102" = "Microsoft Corporation"
"dhcpqec.dll,-101" = "Provides DHCP based enforcement for NAP"
"dhcpqec.dll,-100" = "DHCP Quarantine Enforcement Client"

The process Server.exe:2924 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"
"AutoDetect" = "1"

[HKCU]
"di" = "!"

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

The process %original file name%.exe:2712 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

The process Gerenciador de Janelas do Windows.exe:3400 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

Dropped PE files

MD5	File path
a47463d5eb3261169b6d216579b0ceb5	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\Gerenciador de Janelas do Windows.exe
fd4d5c819fe5a9f8b40d18c7d914c5cd	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\Server.exe
b1936b29dd260e0dc7d46a09df4134da	c:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.01
c1df4e6fe747f2bdc8561b089804efad	c:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.02
6a8ce42b097c7a3fdce00acf554a1c48	c:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.exe
fd4d5c819fe5a9f8b40d18c7d914c5cd	c:\Users\"%CurrentUserName%"\AppData\Roaming\svchost.exe

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

Removals

Remove it with Ad-Aware

Click (here) to download and install Ad-Aware Free Antivirus.
Update the definition files.
Run a full scan of your computer.

Manual removal*

Terminate malicious process(es) (How to End a Process With the Task Manager):
netsh.exe:3804
Server.exe:2924
%original file name%.exe:2712
Gerenciador de Janelas do Windows.exe:3400
Delete the original Trojan file.
Delete or disinfect the following files created/modified by the Trojan:
C:\ProgramData\XKQ\CDT.004 (15061 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.02 (57 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.01 (81 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\svchost.exe (48 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Gerenciador de Janelas do Windows.exe (268667 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Server.exe (48 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.00 (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.exe (148 bytes)
Delete the following value(s) in the autorun key (How to Work with System Registry):
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CDT Start" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.exe"
Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Static Analysis

VersionInfo

Company Name: Microsoft
Product Name: BOA
Product Version: 1.0.0.0
Legal Copyright: Copyright (c) Microsoft 2016
Legal Trademarks:
Original Filename: BOA.exe
Internal Name: BOA.exe
File Version: 1.0.0.0
File Description: BOA
Comments:
Language: Language Neutral

Company Name: MicrosoftProduct Name: BOAProduct Version: 1.0.0.0Legal Copyright: Copyright (c) Microsoft 2016Legal Trademarks: Original Filename: BOA.exeInternal Name: BOA.exeFile Version: 1.0.0.0File Description: BOAComments: Language: Language Neutral

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Section MD5
.text	8192	128884	129024	4.10569	2415126d23b6dc1202677830ee7cf680
.sdata	139264	128	512	1.29884	356fe9d58b3b337a443deeb74403056c
.rsrc	147456	126278	126464	4.39254	c243cdeac931c9c6ca1a72d2a00bc27a
.reloc	278528	12	512	0.070639	7c87f67ba289fc0524eb8e511d5f54e3

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Network Activity

URLs

URL	IP
habbogerador.ddns.net	186.249.145.212

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

Map

The Trojan connects to the servers at the folowing location(s):

Strings from Dumps

CDT.exe_1780:

.text

.text

`.rdata

`.rdata

@.data

@.data

.rsrc

.rsrc

SSh8BS

SSh8BS

udPhPqY

udPhPqY

SSh@ S

SSh@ S

PSSSSSSh

PSSSSSSh

PSSSSSSh!

PSSSSSSh!

vSSSh

vSSSh

FTPjK

FTPjK

FtPj;

FtPj;

C.PjRV

C.PjRV

tGHt.Ht&

tGHt.Ht&

.EKSWU

.EKSWU

FTPG

FTPG

FTPj

FTPj

FtPS

FtPS

=KNILw.tT=RCNEw

=KNILw.tT=RCNEw

_0 _8 _4;_,

_0 _8 _4;_,

SHA1 block transform for x86, CRYPTOGAMS by

SHA1 block transform for x86, CRYPTOGAMS by

SHA256 block transform for x86, CRYPTOGAMS by

SHA256 block transform for x86, CRYPTOGAMS by

DlSHA512 block transform for x86, CRYPTOGAMS by

DlSHA512 block transform for x86, CRYPTOGAMS by

Montgomery Multiplication for x86, CRYPTOGAMS by

Montgomery Multiplication for x86, CRYPTOGAMS by

6-9'6-9'

6-9'6-9'

$6.:$6.:

$6.:$6.:

*?#1*?#1

*?#1*?#1

>8$4,8$4,

>8$4,8$4,

AES for x86, CRYPTOGAMS by

AES for x86, CRYPTOGAMS by

Camellia for x86 by

Camellia for x86 by

RC4 for x86, CRYPTOGAMS by

RC4 for x86, CRYPTOGAMS by

FRegDeleteKeyExW

FRegDeleteKeyExW

gmail.com

gmail.com

MARGIN-BOTTOM: 11px; BORDER-STYLE: solid; BORDER-COLOR: #DFDFE5; BORDER-WIDTH: 2px; BACKGROUND-COLOR: #DFDFE5; }H2 { COLOR: black; BACKGROUND-COLOR: #FFFFF; FONT-SIZE: 12pt; FONT-WEIGHT: normal; MARGIN-BOTTOM: 0px; MARGIN-TOP: 10px;}

MARGIN-BOTTOM: 11px; BORDER-STYLE: solid; BORDER-COLOR: #DFDFE5; BORDER-WIDTH: 2px; BACKGROUND-COLOR: #DFDFE5; }H2 { COLOR: black; BACKGROUND-COLOR: #FFFFF; FONT-SIZE: 12pt; FONT-WEIGHT: normal; MARGIN-BOTTOM: 0px; MARGIN-TOP: 10px;}

mail@domain.com

mail@domain.com

Date: %d %s %d %d:%d:%d

Date: %d %s %d %d:%d:%d

EHLO %s

EHLO %s

,qop=%s

,qop=%s

,response=%s

,response=%s

,digest-uri="%s"

,digest-uri="%s"

,cnonce="%s"

,cnonce="%s"

,nc=%s

,nc=%s

,nonce="%s"

,nonce="%s"

,realm="%s"

,realm="%s"

charset=utf-8,username="%s"

charset=utf-8,username="%s"

smtp/

smtp/

AUTH PLAIN %s

AUTH PLAIN %s

^%s^%s

^%s^%s

AUTH LOGIN

AUTH LOGIN

LOGIN

LOGIN

--%s--

--%s--

RCPT TO:

RCPT TO:

MAIL FROM:

MAIL FROM:

Please contact the application's support team for more information.

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- CRT not initialized

- floating point support not loaded

- floating point support not loaded

operator

operator

GetProcessWindowStation

GetProcessWindowStation

USER32.DLL

USER32.DLL

portuguese-brazilian

portuguese-brazilian

ADVAPI32.DLL

ADVAPI32.DLL

kernel32.dll

kernel32.dll

UxTheme.dll

UxTheme.dll

OLEACC.dll

OLEACC.dll

passed a null parameter

passed a null parameter

DSO support routines

DSO support routines

x509 certificate routines

x509 certificate routines

error:lX:%s:%s:%s

error:lX:%s:%s:%s

ssl_sess_cert

ssl_sess_cert

ssl_cert

ssl_cert

evp_pkey

evp_pkey

x509_pkey

x509_pkey

%s(%d): OpenSSL internal error, assertion failed: %s

%s(%d): OpenSSL internal error, assertion failed: %s

lhash part of OpenSSL 1.0.0d 8 Feb 2011

lhash part of OpenSSL 1.0.0d 8 Feb 2011

Stack part of OpenSSL 1.0.0d 8 Feb 2011

Stack part of OpenSSL 1.0.0d 8 Feb 2011

supportedAlgorithms

supportedAlgorithms

crossCertificatePair

crossCertificatePair

certificateRevocationList

certificateRevocationList

cACertificate

cACertificate

userCertificate

userCertificate

userPassword

userPassword

supportedApplicationContext

supportedApplicationContext

Microsoft Local Key set

Microsoft Local Key set

LocalKeySet

LocalKeySet

id-Gost28147-89-None-KeyMeshing

id-Gost28147-89-None-KeyMeshing

id-Gost28147-89-CryptoPro-KeyMeshing

id-Gost28147-89-CryptoPro-KeyMeshing

password based MAC

password based MAC

id-PasswordBasedMAC

id-PasswordBasedMAC

X509v3 Certificate Issuer

X509v3 Certificate Issuer

certificateIssuer

certificateIssuer

certicom-arc

certicom-arc

Proxy Certificate Information

Proxy Certificate Information

proxyCertInfo

proxyCertInfo

Microsoft Smartcardlogin

Microsoft Smartcardlogin

msSmartcardLogin

msSmartcardLogin

joint-iso-itu-t

joint-iso-itu-t

JOINT-ISO-ITU-T

JOINT-ISO-ITU-T

set-rootKeyThumb

set-rootKeyThumb

setAttr-Cert

setAttr-Cert

setCext-cCertRequired

setCext-cCertRequired

setCext-certType

setCext-certType

setct-CertResTBE

setct-CertResTBE

setct-CertReqTBEX

setct-CertReqTBEX

setct-CertReqTBE

setct-CertReqTBE

setct-AcqCardCodeMsgTBE

setct-AcqCardCodeMsgTBE

setct-CertInqReqTBS

setct-CertInqReqTBS

setct-CertResData

setct-CertResData

setct-CertReqTBS

setct-CertReqTBS

setct-CertReqData

setct-CertReqData

setct-PCertResTBS

setct-PCertResTBS

setct-PCertReqData

setct-PCertReqData

setct-AcqCardCodeMsg

setct-AcqCardCodeMsg

certificate extensions

certificate extensions

set-certExt

set-certExt

set-msgExt

set-msgExt

id-ecPublicKey

id-ecPublicKey

id-cmc-confirmCertAcceptance

id-cmc-confirmCertAcceptance

id-cmc-getCert

id-cmc-getCert

id-regInfo-certReq

id-regInfo-certReq

id-regCtrl-protocolEncrKey

id-regCtrl-protocolEncrKey

id-regCtrl-oldCertID

id-regCtrl-oldCertID

id-it-revPassphrase

id-it-revPassphrase

id-it-keyPairParamRep

id-it-keyPairParamRep

id-it-keyPairParamReq

id-it-keyPairParamReq

id-it-unsupportedOIDs

id-it-unsupportedOIDs

id-it-caKeyUpdateInfo

id-it-caKeyUpdateInfo

id-it-encKeyPairTypes

id-it-encKeyPairTypes

id-it-signKeyPairTypes

id-it-signKeyPairTypes

id-it-caProtEncCert

id-it-caProtEncCert

id-mod-attribute-cert

id-mod-attribute-cert

id-mod-qualified-cert-93

id-mod-qualified-cert-93

id-mod-qualified-cert-88

id-mod-qualified-cert-88

id-smime-aa-ets-certCRLTimestamp

id-smime-aa-ets-certCRLTimestamp

id-smime-aa-ets-certValues

id-smime-aa-ets-certValues

id-smime-aa-ets-CertificateRefs

id-smime-aa-ets-CertificateRefs

id-smime-aa-ets-otherSigCert

id-smime-aa-ets-otherSigCert

id-smime-aa-smimeEncryptCerts

id-smime-aa-smimeEncryptCerts

id-smime-aa-signingCertificate

id-smime-aa-signingCertificate

id-smime-aa-encrypKeyPref

id-smime-aa-encrypKeyPref

id-smime-aa-msgSigDigest

id-smime-aa-msgSigDigest

id-smime-ct-publishCert

id-smime-ct-publishCert

id-smime-mod-msg-v3

id-smime-mod-msg-v3

sdsiCertificate

sdsiCertificate

x509Certificate

x509Certificate

localKeyID

localKeyID

certBag

certBag

pkcs8ShroudedKeyBag

pkcs8ShroudedKeyBag

keyBag

keyBag

pbeWithSHA1And2-KeyTripleDES-CBC

pbeWithSHA1And2-KeyTripleDES-CBC

pbeWithSHA1And3-KeyTripleDES-CBC

pbeWithSHA1And3-KeyTripleDES-CBC

TLS Web Client Authentication

TLS Web Client Authentication

TLS Web Server Authentication

TLS Web Server Authentication

X509v3 Extended Key Usage

X509v3 Extended Key Usage

extendedKeyUsage

extendedKeyUsage

X509v3 Authority Key Identifier

X509v3 Authority Key Identifier

authorityKeyIdentifier

authorityKeyIdentifier

X509v3 Certificate Policies

X509v3 Certificate Policies

certificatePolicies

certificatePolicies

X509v3 Private Key Usage Period

X509v3 Private Key Usage Period

privateKeyUsagePeriod

privateKeyUsagePeriod

X509v3 Key Usage

X509v3 Key Usage

keyUsage

keyUsage

X509v3 Subject Key Identifier

X509v3 Subject Key Identifier

subjectKeyIdentifier

subjectKeyIdentifier

Netscape Certificate Sequence

Netscape Certificate Sequence

nsCertSequence

nsCertSequence

Netscape CA Policy Url

Netscape CA Policy Url

nsCaPolicyUrl

nsCaPolicyUrl

Netscape Renewal Url

Netscape Renewal Url

nsRenewalUrl

nsRenewalUrl

Netscape CA Revocation Url

Netscape CA Revocation Url

nsCaRevocationUrl

nsCaRevocationUrl

Netscape Revocation Url

Netscape Revocation Url

nsRevocationUrl

nsRevocationUrl

Netscape Base Url

Netscape Base Url

nsBaseUrl

nsBaseUrl

Netscape Cert Type

Netscape Cert Type

nsCertType

nsCertType

Netscape Certificate Extension

Netscape Certificate Extension

nsCertExt

nsCertExt

extendedCertificateAttributes

extendedCertificateAttributes

challengePassword

challengePassword

dhKeyAgreement

dhKeyAgreement

Big Number part of OpenSSL 1.0.0d 8 Feb 2011

Big Number part of OpenSSL 1.0.0d 8 Feb 2011

ASN.1 part of OpenSSL 1.0.0d 8 Feb 2011

ASN.1 part of OpenSSL 1.0.0d 8 Feb 2011

keylen

keylen

EVP_CIPHER_key_length(cipher)

EVP_CIPHER_key_length(cipher)

len>=0 && lenkey)

len>=0 && lenkey)

j key)

j key)

keylength

keylength

keyfunc

keyfunc

EVP part of OpenSSL 1.0.0d 8 Feb 2011

EVP part of OpenSSL 1.0.0d 8 Feb 2011

.\crypto\pkcs12\p12_key.c

.\crypto\pkcs12\p12_key.c

SHA1 part of OpenSSL 1.0.0d 8 Feb 2011

SHA1 part of OpenSSL 1.0.0d 8 Feb 2011

SHA-256 part of OpenSSL 1.0.0d 8 Feb 2011

SHA-256 part of OpenSSL 1.0.0d 8 Feb 2011

SHA-512 part of OpenSSL 1.0.0d 8 Feb 2011

SHA-512 part of OpenSSL 1.0.0d 8 Feb 2011

RSA part of OpenSSL 1.0.0d 8 Feb 2011

RSA part of OpenSSL 1.0.0d 8 Feb 2011

RAND part of OpenSSL 1.0.0d 8 Feb 2011

RAND part of OpenSSL 1.0.0d 8 Feb 2011

You need to read the OpenSSL FAQ, hXXp://VVV.openssl.org/support/faq.html

You need to read the OpenSSL FAQ, hXXp://VVV.openssl.org/support/faq.html

value.bag

value.bag

value.safes

value.safes

value.shkeybag

value.shkeybag

value.keybag

value.keybag

value.sdsicert

value.sdsicert

value.x509cert

value.x509cert

value.other

value.other

cert_info

cert_info

hexkey

hexkey

rsa_keygen_pubexp

rsa_keygen_pubexp

rsa_keygen_bits

rsa_keygen_bits

NETAPI32.DLL

NETAPI32.DLL

KERNEL32.DLL

KERNEL32.DLL

value.single

value.single

value.set

value.set

PKCS8_PRIV_KEY_INFO

PKCS8_PRIV_KEY_INFO

pkey

pkey

pkeyalg

pkeyalg

enc_key

enc_key

key_enc_algor

key_enc_algor

cert

cert

d.encrypted

d.encrypted

d.digest

d.digest

d.signed_and_enveloped

d.signed_and_enveloped

d.enveloped

d.enveloped

d.sign

d.sign

d.data

d.data

d.other

d.other

X509_PUBKEY

X509_PUBKEY

public_key

public_key

.\crypto\asn1\x_pubkey.c

.\crypto\asn1\x_pubkey.c

%d.%d.%d.%d/%d.%d.%d.%d

%d.%d.%d.%d/%d.%d.%d.%d

%*s%s:

%*s%s:

d.registeredID

d.registeredID

d.iPAddress

d.iPAddress

d.uniformResourceIdentifier

d.uniformResourceIdentifier

d.ediPartyName

d.ediPartyName

d.directoryName

d.directoryName

d.dNSName

d.dNSName

d.rfc822Name

d.rfc822Name

d.otherName

d.otherName

name.relativename

name.relativename

name.fullname

name.fullname

certificateHold

certificateHold

Certificate Hold

Certificate Hold

cessationOfOperation

cessationOfOperation

Cessation Of Operation

Cessation Of Operation

keyCompromise

keyCompromise

Key Compromise

Key Compromise

%*sOnly Attribute Certificates

%*sOnly Attribute Certificates

%*sOnly CA Certificates

%*sOnly CA Certificates

%*sOnly User Certificates

%*sOnly User Certificates

AUTHORITY_KEYID

AUTHORITY_KEYID

keyid

keyid

X509_CERT_PAIR

X509_CERT_PAIR

X509_CERT_AUX

X509_CERT_AUX

%d.%d.%d.%d

%d.%d.%d.%d

EC part of OpenSSL 1.0.0d 8 Feb 2011

EC part of OpenSSL 1.0.0d 8 Feb 2011

ECDSA part of OpenSSL 1.0.0d 8 Feb 2011

ECDSA part of OpenSSL 1.0.0d 8 Feb 2011

.\crypto\ec\ec_key.c

.\crypto\ec\ec_key.c

DSA part of OpenSSL 1.0.0d 8 Feb 2011

DSA part of OpenSSL 1.0.0d 8 Feb 2011

Diffie-Hellman part of OpenSSL 1.0.0d 8 Feb 2011

Diffie-Hellman part of OpenSSL 1.0.0d 8 Feb 2011

.\crypto\dh\dh_key.c

.\crypto\dh\dh_key.c

\X

\X

IP Address:%d.%d.%d.%d

IP Address:%d.%d.%d.%d

URI:%s

URI:%s

DNS:%s

DNS:%s

email:%s

email:%s

EdiPartyName:

EdiPartyName:

X400Name:

X400Name:

othername:

othername:

d.usernotice

d.usernotice

d.cpsuri

d.cpsuri

CERTIFICATEPOLICIES

CERTIFICATEPOLICIES

%*sExplicit Text: %s

%*sExplicit Text: %s

%*sNumber%s:

%*sNumber%s:

%*sOrganization: %s

%*sOrganization: %s

%*sCPS: %s

%*sCPS: %s

ddddddZ

ddddddZ

ddddddZ

ddddddZ

pubkey

pubkey

priv_key

priv_key

pub_key

pub_key

EC_PRIVATEKEY

EC_PRIVATEKEY

publicKey

publicKey

privateKey

privateKey

value.implicitlyCA

value.implicitlyCA

value.parameters

value.parameters

value.named_curve

value.named_curve

p.char_two

p.char_two

p.prime

p.prime

p.ppBasis

p.ppBasis

p.tpBasis

p.tpBasis

p.onBasis

p.onBasis

p.other

p.other

.\crypto\evp\evp_pkey.c

.\crypto\evp\evp_pkey.c

ECDH part of OpenSSL 1.0.0d 8 Feb 2011

ECDH part of OpenSSL 1.0.0d 8 Feb 2011

%'%1$=%C%K%O%s%

%'%1$=%C%K%O%s%

.%.-.3.7.9.?.W.[.o.y.

.%.-.3.7.9.?.W.[.o.y.

C%C'C3C7C9COCWCiC

C%C'C3C7C9COCWCiC

%s: (%d bit)

%s: (%d bit)

Public-Key

Public-Key

Private-Key

Private-Key

recommended-private-length: %d bits

recommended-private-length: %d bits

public-key:

public-key:

private-key:

private-key:

PKCS#3 DH Public-Key

PKCS#3 DH Public-Key

PKCS#3 DH Private-Key

PKCS#3 DH Private-Key

Public-Key: (%d bit)

Public-Key: (%d bit)

Private-Key: (%d bit)

Private-Key: (%d bit)

X.509 part of OpenSSL 1.0.0d 8 Feb 2011

X.509 part of OpenSSL 1.0.0d 8 Feb 2011

OPENSSL_ALLOW_PROXY_CERTS

OPENSSL_ALLOW_PROXY_CERTS

x%s

x%s

%s - d:d:d%.*s %d%s

%s - d:d:d%.*s %d%s

'() ,-./:=?

'() ,-./:=?

CONF part of OpenSSL 1.0.0d 8 Feb 2011

CONF part of OpenSSL 1.0.0d 8 Feb 2011

%*sPolicy Text: %s

%*sPolicy Text: %s

%*scrlUrl:

%*scrlUrl:

EXTENDED_KEY_USAGE

EXTENDED_KEY_USAGE

%*sZone: %s, User:

%*sZone: %s, User:

.\crypto\x509v3\v3_akey.c

.\crypto\x509v3\v3_akey.c

PKEY_USAGE_PERIOD

PKEY_USAGE_PERIOD

keyCertSign

keyCertSign

Certificate Sign

Certificate Sign

keyAgreement

keyAgreement

Key Agreement

Key Agreement

keyEncipherment

keyEncipherment

Key Encipherment

Key Encipherment

.\crypto\x509v3\v3_skey.c

.\crypto\x509v3\v3_skey.c

MD5 part of OpenSSL 1.0.0d 8 Feb 2011

MD5 part of OpenSSL 1.0.0d 8 Feb 2011

PROXY_CERT_INFO_EXTENSION

PROXY_CERT_INFO_EXTENSION

D:/Projects/openssl-10.0d/ssl/certs

D:/Projects/openssl-10.0d/ssl/certs

D:/Projects/openssl-10.0d/ssl/cert.pem

D:/Projects/openssl-10.0d/ssl/cert.pem

SSL_CERT_DIR

SSL_CERT_DIR

SSL_CERT_FILE

SSL_CERT_FILE

Basis Type: %s

Basis Type: %s

Field Type: %s

Field Type: %s

ASN1 OID: %s

ASN1 OID: %s

%s %s%lu (%s0x%lx)

%s %s%lu (%s0x%lx)

%lu:%s:%s:%d:%s

%lu:%s:%s:%d:%s

CONF_def part of OpenSSL 1.0.0d 8 Feb 2011

CONF_def part of OpenSSL 1.0.0d 8 Feb 2011

[[%s]]

[[%s]]

[%s] %s=%s

[%s] %s=%s

crlUrl

crlUrl

certStatus

certStatus

certId

certId

OCSP_CERTSTATUS

OCSP_CERTSTATUS

value.unknown

value.unknown

value.revoked

value.revoked

value.good

value.good

value.byKey

value.byKey

value.byName

value.byName

reqCert

reqCert

OCSP_CERTID

OCSP_CERTID

issuerKeyHash

issuerKeyHash

certs

certs

d.receiptList

d.receiptList

d.allOrFirstTier

d.allOrFirstTier

d.compressedData

d.compressedData

d.authenticatedData

d.authenticatedData

d.encryptedData

d.encryptedData

d.digestedData

d.digestedData

d.envelopedData

d.envelopedData

d.signedData

d.signedData

d.ori

d.ori

d.pwri

d.pwri

d.kekri

d.kekri

d.kari

d.kari

d.ktri

d.ktri

CMS_PasswordRecipientInfo

CMS_PasswordRecipientInfo

keyDerivationAlgorithm

keyDerivationAlgorithm

keyIdentifier

keyIdentifier

CMS_KeyAgreeRecipientInfo

CMS_KeyAgreeRecipientInfo

recipientEncryptedKeys

recipientEncryptedKeys

CMS_OriginatorIdentifierOrKey

CMS_OriginatorIdentifierOrKey

d.originatorKey

d.originatorKey

CMS_OriginatorPublicKey

CMS_OriginatorPublicKey

CMS_RecipientEncryptedKey

CMS_RecipientEncryptedKey

CMS_KeyAgreeRecipientIdentifier

CMS_KeyAgreeRecipientIdentifier

d.rKeyId

d.rKeyId

CMS_RecipientKeyIdentifier

CMS_RecipientKeyIdentifier

CMS_OtherKeyAttribute

CMS_OtherKeyAttribute

keyAttr

keyAttr

keyAttrId

keyAttrId

CMS_KeyTransRecipientInfo

CMS_KeyTransRecipientInfo

encryptedKey

encryptedKey

keyEncryptionAlgorithm

keyEncryptionAlgorithm

certificates

certificates

d.crl

d.crl

d.subjectKeyIdentifier

d.subjectKeyIdentifier

d.issuerAndSerialNumber

d.issuerAndSerialNumber

CMS_CertificateChoices

CMS_CertificateChoices

d.v2AttrCert

d.v2AttrCert

d.v1AttrCert

d.v1AttrCert

d.extendedCertificate

d.extendedCertificate

d.certificate

d.certificate

CMS_OtherCertificateFormat

CMS_OtherCertificateFormat

otherCert

otherCert

otherCertFormat

otherCertFormat

%s.dll

%s.dll

PEM part of OpenSSL 1.0.0d 8 Feb 2011

PEM part of OpenSSL 1.0.0d 8 Feb 2011

phrase is too short, needs to be at least %d chars

phrase is too short, needs to be at least %d chars

Enter PEM pass phrase:

Enter PEM pass phrase:

TRUSTED CERTIFICATE

TRUSTED CERTIFICATE

CERTIFICATE REQUEST

CERTIFICATE REQUEST

NEW CERTIFICATE REQUEST

NEW CERTIFICATE REQUEST

CERTIFICATE

CERTIFICATE

X509 CERTIFICATE

X509 CERTIFICATE

PRIVATE KEY

PRIVATE KEY

ENCRYPTED PRIVATE KEY

ENCRYPTED PRIVATE KEY

ANY PRIVATE KEY

ANY PRIVATE KEY

.\crypto\evp\evp_key.c

.\crypto\evp\evp_key.c

nkey

nkey

?456789:;

?456789:;

!"#$%&'()* ,-./0123

!"#$%&'()* ,-./0123

Verifying - %s

Verifying - %s

OpenSSL 1.0.0d 8 Feb 2011

OpenSSL 1.0.0d 8 Feb 2011

%-23s %s Kx=%-8s Au=%-4s Enc=%-9s Mac=%-4s%s

%-23s %s Kx=%-8s Au=%-4s Enc=%-9s Mac=%-4s%s

EXPORT56

EXPORT56

EXPORT40

EXPORT40

EXPORT

EXPORT

.\ssl\ssl_cert.c

.\ssl\ssl_cert.c

SSLv3 part of OpenSSL 1.0.0d 8 Feb 2011

SSLv3 part of OpenSSL 1.0.0d 8 Feb 2011

TLSv1 part of OpenSSL 1.0.0d 8 Feb 2011

TLSv1 part of OpenSSL 1.0.0d 8 Feb 2011

SSLv2 part of OpenSSL 1.0.0d 8 Feb 2011

SSLv2 part of OpenSSL 1.0.0d 8 Feb 2011

s->session->master_key_length >= 0 && s->session->master_key_length session->master_key)

s->session->master_key_length >= 0 && s->session->master_key_length session->master_key)

wrong number of key bits

wrong number of key bits

unsupported status type

unsupported status type

unsupported ssl version

unsupported ssl version

unsupported protocol

unsupported protocol

unsupported elliptic curve

unsupported elliptic curve

unsupported digest type

unsupported digest type

unsupported compression algorithm

unsupported compression algorithm

unsupported cipher

unsupported cipher

unknown pkey type

unknown pkey type

unknown key exchange type

unknown key exchange type

unknown certificate type

unknown certificate type

unable to find public key parameters

unable to find public key parameters

unable to extract public key

unable to extract public key

unable to decode ecdh certs

unable to decode ecdh certs

unable to decode dh certs

unable to decode dh certs

tried to use unsupported cipher

tried to use unsupported cipher

tls peer did not respond with certificate list

tls peer did not respond with certificate list

tls client cert req with anon cipher

tls client cert req with anon cipher

tlsv1 unsupported extension

tlsv1 unsupported extension

tlsv1 certificate unobtainable

tlsv1 certificate unobtainable

tlsv1 bad certificate status response

tlsv1 bad certificate status response

tlsv1 bad certificate hash value

tlsv1 bad certificate hash value

tlsv1 alert export restriction

tlsv1 alert export restriction

sslv3 alert unsupported certificate

sslv3 alert unsupported certificate

sslv3 alert no certificate

sslv3 alert no certificate

sslv3 alert certificate unknown

sslv3 alert certificate unknown

sslv3 alert certificate revoked

sslv3 alert certificate revoked

sslv3 alert certificate expired

sslv3 alert certificate expired

sslv3 alert bad certificate

sslv3 alert bad certificate

signature for non signing certificate

signature for non signing certificate

reuse cert type not zero

reuse cert type not zero

reuse cert length not zero

reuse cert length not zero

public key not rsa

public key not rsa

public key is not rsa

public key is not rsa

public key encrypt error

public key encrypt error

peer error unsupported certificate type

peer error unsupported certificate type

peer error no certificate

peer error no certificate

peer error certificate

peer error certificate

peer did not return a certificate

peer did not return a certificate

null ssl method passed

null ssl method passed

no publickey

no publickey

no private key assigned

no private key assigned

no privatekey

no privatekey

Peer haven't sent GOST certificate, required for selected ciphersuite

Peer haven't sent GOST certificate, required for selected ciphersuite

no client cert received

no client cert received

no client cert method

no client cert method

no ciphers passed

no ciphers passed

no certificate specified

no certificate specified

no certificate set

no certificate set

no certificate returned

no certificate returned

no certificate assigned

no certificate assigned

no certificates returned

no certificates returned

missing tmp rsa pkey

missing tmp rsa pkey

missing tmp rsa key

missing tmp rsa key

missing tmp ecdh key

missing tmp ecdh key

missing tmp dh key

missing tmp dh key

missing rsa signing cert

missing rsa signing cert

missing rsa encrypting cert

missing rsa encrypting cert

missing rsa certificate

missing rsa certificate

missing export tmp rsa key

missing export tmp rsa key

missing export tmp dh key

missing export tmp dh key

missing dsa signing cert

missing dsa signing cert

missing dh rsa cert

missing dh rsa cert

missing dh key

missing dh key

missing dh dsa cert

missing dh dsa cert

krb5 server rd_req (keytab perms?)

krb5 server rd_req (keytab perms?)

key arg too long

key arg too long

invalid ticket keys length

invalid ticket keys length

http request

http request

https proxy request

https proxy request

error generating tmp rsa key

error generating tmp rsa key

ecc cert should have sha1 signature

ecc cert should have sha1 signature

ecc cert should have rsa signature

ecc cert should have rsa signature

ecc cert not for signing

ecc cert not for signing

ecc cert not for key agreement

ecc cert not for key agreement

cert length mismatch

cert length mismatch

certificate verify failed

certificate verify failed

bad ecc cert

bad ecc cert

bad dh pub key length

bad dh pub key length

TLS1_SETUP_KEY_BLOCK

TLS1_SETUP_KEY_BLOCK

tls1_cert_verify_mac

tls1_cert_verify_mac

SSL_VERIFY_CERT_CHAIN

SSL_VERIFY_CERT_CHAIN

SSL_use_RSAPrivateKey_file

SSL_use_RSAPrivateKey_file

SSL_use_RSAPrivateKey_ASN1

SSL_use_RSAPrivateKey_ASN1

SSL_use_RSAPrivateKey

SSL_use_RSAPrivateKey

SSL_use_PrivateKey_file

SSL_use_PrivateKey_file

SSL_use_PrivateKey_ASN1

SSL_use_PrivateKey_ASN1

SSL_use_PrivateKey

SSL_use_PrivateKey

SSL_use_certificate_file

SSL_use_certificate_file

SSL_use_certificate_ASN1

SSL_use_certificate_ASN1

SSL_use_certificate

SSL_use_certificate

SSL_SET_PKEY

SSL_SET_PKEY

SSL_SET_CERT

SSL_SET_CERT

SSL_SESS_CERT_NEW

SSL_SESS_CERT_NEW

SSL_GET_SIGN_PKEY

SSL_GET_SIGN_PKEY

SSL_GET_SERVER_SEND_CERT

SSL_GET_SERVER_SEND_CERT

SSL_CTX_use_RSAPrivateKey_file

SSL_CTX_use_RSAPrivateKey_file

SSL_CTX_use_RSAPrivateKey_ASN1

SSL_CTX_use_RSAPrivateKey_ASN1

SSL_CTX_use_RSAPrivateKey

SSL_CTX_use_RSAPrivateKey

SSL_CTX_use_PrivateKey_file

SSL_CTX_use_PrivateKey_file

SSL_CTX_use_PrivateKey_ASN1

SSL_CTX_use_PrivateKey_ASN1

SSL_CTX_use_PrivateKey

SSL_CTX_use_PrivateKey

SSL_CTX_use_certificate_file

SSL_CTX_use_certificate_file

SSL_CTX_use_certificate_chain_file

SSL_CTX_use_certificate_chain_file

SSL_CTX_use_certificate_ASN1

SSL_CTX_use_certificate_ASN1

SSL_CTX_use_certificate

SSL_CTX_use_certificate

SSL_CTX_set_client_cert_engine

SSL_CTX_set_client_cert_engine

SSL_CTX_check_private_key

SSL_CTX_check_private_key

SSL_CHECK_SRVR_ECC_CERT_AND_ALG

SSL_CHECK_SRVR_ECC_CERT_AND_ALG

SSL_check_private_key

SSL_check_private_key

SSL_CERT_NEW

SSL_CERT_NEW

SSL_CERT_INSTANTIATE

SSL_CERT_INSTANTIATE

SSL_CERT_INST

SSL_CERT_INST

SSL_CERT_DUP

SSL_CERT_DUP

SSL_add_file_cert_subjects_to_stack

SSL_add_file_cert_subjects_to_stack

SSL_add_dir_cert_subjects_to_stack

SSL_add_dir_cert_subjects_to_stack

SSL3_SETUP_KEY_BLOCK

SSL3_SETUP_KEY_BLOCK

SSL3_SEND_SERVER_KEY_EXCHANGE

SSL3_SEND_SERVER_KEY_EXCHANGE

SSL3_SEND_SERVER_CERTIFICATE

SSL3_SEND_SERVER_CERTIFICATE

SSL3_SEND_CLIENT_KEY_EXCHANGE

SSL3_SEND_CLIENT_KEY_EXCHANGE

SSL3_SEND_CLIENT_CERTIFICATE

SSL3_SEND_CLIENT_CERTIFICATE

SSL3_SEND_CERTIFICATE_REQUEST

SSL3_SEND_CERTIFICATE_REQUEST

SSL3_OUTPUT_CERT_CHAIN

SSL3_OUTPUT_CERT_CHAIN

SSL3_GET_SERVER_CERTIFICATE

SSL3_GET_SERVER_CERTIFICATE

SSL3_GET_KEY_EXCHANGE

SSL3_GET_KEY_EXCHANGE

SSL3_GET_CLIENT_KEY_EXCHANGE

SSL3_GET_CLIENT_KEY_EXCHANGE

SSL3_GET_CLIENT_CERTIFICATE

SSL3_GET_CLIENT_CERTIFICATE

SSL3_GET_CERT_VERIFY

SSL3_GET_CERT_VERIFY

SSL3_GET_CERT_STATUS

SSL3_GET_CERT_STATUS

SSL3_GET_CERTIFICATE_REQUEST

SSL3_GET_CERTIFICATE_REQUEST

SSL3_GENERATE_KEY_BLOCK

SSL3_GENERATE_KEY_BLOCK

SSL3_CHECK_CERT_AND_ALGORITHM

SSL3_CHECK_CERT_AND_ALGORITHM

SSL3_ADD_CERT_TO_BUF

SSL3_ADD_CERT_TO_BUF

SSL2_SET_CERTIFICATE

SSL2_SET_CERTIFICATE

SSL2_GENERATE_KEY_MATERIAL

SSL2_GENERATE_KEY_MATERIAL

REQUEST_CERTIFICATE

REQUEST_CERTIFICATE

GET_CLIENT_MASTER_KEY

GET_CLIENT_MASTER_KEY

DTLS1_SEND_SERVER_KEY_EXCHANGE

DTLS1_SEND_SERVER_KEY_EXCHANGE

DTLS1_SEND_SERVER_CERTIFICATE

DTLS1_SEND_SERVER_CERTIFICATE

DTLS1_SEND_CLIENT_KEY_EXCHANGE

DTLS1_SEND_CLIENT_KEY_EXCHANGE

DTLS1_SEND_CLIENT_CERTIFICATE

DTLS1_SEND_CLIENT_CERTIFICATE

DTLS1_SEND_CERTIFICATE_REQUEST

DTLS1_SEND_CERTIFICATE_REQUEST

DTLS1_OUTPUT_CERT_CHAIN

DTLS1_OUTPUT_CERT_CHAIN

DTLS1_ADD_CERT_TO_BUF

DTLS1_ADD_CERT_TO_BUF

CLIENT_MASTER_KEY

CLIENT_MASTER_KEY

CLIENT_CERTIFICATE

CLIENT_CERTIFICATE

key expansion

key expansion

client write key

client write key

server write key

server write key

c->iv_len session->key_arg)

c->iv_len session->key_arg)

s->s2->key_material_length s2->key_material

s->s2->key_material_length s2->key_material

Corrupt JPEG data: found marker 0xx instead of RST%d

Corrupt JPEG data: found marker 0xx instead of RST%d

Warning: unknown JFIF revision number %d.d

Warning: unknown JFIF revision number %d.d

Corrupt JPEG data: %u extraneous bytes before marker 0xx

Corrupt JPEG data: %u extraneous bytes before marker 0xx

Inconsistent progression sequence for component %d coefficient %d

Inconsistent progression sequence for component %d coefficient %d

Unknown Adobe color transform code %d

Unknown Adobe color transform code %d

Obtained XMS handle %u

Obtained XMS handle %u

Freed XMS handle %u

Freed XMS handle %u

Unrecognized component IDs %d %d %d, assuming YCbCr

Unrecognized component IDs %d %d %d, assuming YCbCr

JFIF extension marker: RGB thumbnail image, length %u

JFIF extension marker: RGB thumbnail image, length %u

JFIF extension marker: palette thumbnail image, length %u

JFIF extension marker: palette thumbnail image, length %u

JFIF extension marker: JPEG-compressed thumbnail image, length %u

JFIF extension marker: JPEG-compressed thumbnail image, length %u

Opened temporary file %s

Opened temporary file %s

Closed temporary file %s

Closed temporary file %s

Ss=%d, Se=%d, Ah=%d, Al=%d

Ss=%d, Se=%d, Ah=%d, Al=%d

Component %d: dc=%d ac=%d

Component %d: dc=%d ac=%d

Start Of Scan: %d components

Start Of Scan: %d components

Component %d: %dhx%dv q=%d

Component %d: %dhx%dv q=%d

Start Of Frame 0xx: width=%u, height=%u, components=%d

Start Of Frame 0xx: width=%u, height=%u, components=%d

Smoothing not supported with nonstandard sampling ratios

Smoothing not supported with nonstandard sampling ratios

RST%d

RST%d

At marker 0xx, recovery action %d

At marker 0xx, recovery action %d

Selected %d colors for quantization

Selected %d colors for quantization

Quantizing to %d colors

Quantizing to %d colors

Quantizing to %d = %d*%d*%d colors

Quantizing to %d = %d*%d*%d colors

%4u %4u %4u %4u %4u %4u %4u %4u

%4u %4u %4u %4u %4u %4u %4u %4u

Unexpected marker 0xx

Unexpected marker 0xx

Miscellaneous marker 0xx, length %u

Miscellaneous marker 0xx, length %u

with %d x %d thumbnail image

with %d x %d thumbnail image

JFIF extension marker: type 0xx, length %u

JFIF extension marker: type 0xx, length %u

Warning: thumbnail image size does not match data length %u

Warning: thumbnail image size does not match data length %u

JFIF APP0 marker: version %d.d, density %dx%d %d

JFIF APP0 marker: version %d.d, density %dx%d %d

= = = = = = = =

= = = = = = = =

Obtained EMS handle %u

Obtained EMS handle %u

Freed EMS handle %u

Freed EMS handle %u

Define Restart Interval %u

Define Restart Interval %u

Define Quantization Table %d precision %d

Define Quantization Table %d precision %d

Define Huffman Table 0xx

Define Huffman Table 0xx

Define Arithmetic Table 0xx: 0xx

Define Arithmetic Table 0xx: 0xx

Unknown APP14 marker (not Adobe), length %u

Unknown APP14 marker (not Adobe), length %u

Unknown APP0 marker (not JFIF), length %u

Unknown APP0 marker (not JFIF), length %u

Adobe APP14 marker: version %d, flags 0xx 0xx, transform %d

Adobe APP14 marker: version %d, flags 0xx 0xx, transform %d

Unsupported marker type 0xx

Unsupported marker type 0xx

Failed to create temporary file %s

Failed to create temporary file %s

Unsupported JPEG process: SOF type 0xx

Unsupported JPEG process: SOF type 0xx

Cannot quantize to more than %d colors

Cannot quantize to more than %d colors

Cannot quantize to fewer than %d colors

Cannot quantize to fewer than %d colors

Cannot quantize more than %d color components

Cannot quantize more than %d color components

Insufficient memory (case %d)

Insufficient memory (case %d)

Not a JPEG file: starts with 0xx 0xx

Not a JPEG file: starts with 0xx 0xx

Quantization table 0xx was not defined

Quantization table 0xx was not defined

Huffman table 0xx was not defined

Huffman table 0xx was not defined

Backing store not supported

Backing store not supported

Cannot transcode due to multiple use of quantization table %d

Cannot transcode due to multiple use of quantization table %d

Maximum supported image dimension is %u pixels

Maximum supported image dimension is %u pixels

Empty JPEG image (DNL not supported)

Empty JPEG image (DNL not supported)

Bogus DQT index %d

Bogus DQT index %d

Bogus DHT index %d

Bogus DHT index %d

Bogus DAC value 0x%x

Bogus DAC value 0x%x

Bogus DAC index %d

Bogus DAC index %d

Unsupported color conversion request

Unsupported color conversion request

Too many color components: %d, max %d

Too many color components: %d, max %d

Buffer passed to JPEG library is too small

Buffer passed to JPEG library is too small

JPEG parameter struct mismatch: library thinks size is %u, caller expects %u

JPEG parameter struct mismatch: library thinks size is %u, caller expects %u

Improper call to JPEG library in state %d

Improper call to JPEG library in state %d

Invalid scan script at entry %d

Invalid scan script at entry %d

Invalid progressive parameters at scan script entry %d

Invalid progressive parameters at scan script entry %d

Invalid progressive parameters Ss=%d Se=%d Ah=%d Al=%d

Invalid progressive parameters Ss=%d Se=%d Ah=%d Al=%d

Unsupported JPEG data precision %d

Unsupported JPEG data precision %d

Invalid memory pool code %d

Invalid memory pool code %d

Wrong JPEG library version: library is %d, caller expects %d

Wrong JPEG library version: library is %d, caller expects %d

IDCT output block size %d not supported

IDCT output block size %d not supported

Invalid component ID %d in SOS

Invalid component ID %d in SOS

Bogus message code %d

Bogus message code %d

;Warning: highpass filter disabled. highpass frequency too small

;Warning: highpass filter disabled. highpass frequency too small

hXXp://lame.sf.net

hXXp://lame.sf.net

3.99.5

3.99.5

Opera

Opera

?INTERNAL ERROR IN VBR NEW CODE, please send bug report

?INTERNAL ERROR IN VBR NEW CODE, please send bug report

@INTERNAL ERROR IN VBR NEW CODE (986), please send bug report

@INTERNAL ERROR IN VBR NEW CODE (986), please send bug report

INTERNAL ERROR IN VBR NEW CODE (1313), please send bug report

INTERNAL ERROR IN VBR NEW CODE (1313), please send bug report

maxbits=%d usedbits=%d

maxbits=%d usedbits=%d

hip: invalid layer %d

hip: invalid layer %d

hip: error audio data exceeds framesize by %d bytes

hip: error audio data exceeds framesize by %d bytes

hip: bitstream problem, resyncing skipping %d bytes...

hip: bitstream problem, resyncing skipping %d bytes...

Sorry, layer %d not supported

Sorry, layer %d not supported

hip: Can't rewind stream by %d bits!

hip: Can't rewind stream by %d bits!

hip: Bogus region length (%d)

hip: Bogus region length (%d)

ADVAPI32.dll

ADVAPI32.dll

F%D,3

F%D,3

QVisual C CRT: Not enough memory to complete call to strerror.

QVisual C CRT: Not enough memory to complete call to strerror.

Broken pipe

Broken pipe

Inappropriate I/O control operation

Inappropriate I/O control operation

Operation not permitted

Operation not permitted

%S#[k

%S#[k

?#%X.y

?#%X.y

.\crypto\engine\eng_pkey.c

.\crypto\engine\eng_pkey.c

RSA PRIVATE KEY

RSA PRIVATE KEY

DSA PRIVATE KEY

DSA PRIVATE KEY

EC PRIVATE KEY

EC PRIVATE KEY

Load certs from files in a directory

Load certs from files in a directory

%s%clx.%s%d

%s%clx.%s%d

unsupported type

unsupported type

unsupported recpientinfo type

unsupported recpientinfo type

unsupported recipient type

unsupported recipient type

unsupported kek algorithm

unsupported kek algorithm

unsupported content type

unsupported content type

signer certificate not found

signer certificate not found

private key does not match certificate

private key does not match certificate

no public key

no public key

no private key

no private key

no msgsigdigest

no msgsigdigest

no key or cert

no key or cert

no key

no key

not supported for this key type

not supported for this key type

not key transport

not key transport

msgsigdigest wrong length

msgsigdigest wrong length

msgsigdigest verification failure

msgsigdigest verification failure

msgsigdigest error

msgsigdigest error

invalid key length

invalid key length

invalid encrypted key length

invalid encrypted key length

error setting key

error setting key

error getting public key

error getting public key

certificate verify error

certificate verify error

certificate has no keyid

certificate has no keyid

certificate already present

certificate already present

CMS_SIGNERINFO_VERIFY_CERT

CMS_SIGNERINFO_VERIFY_CERT

CMS_RecipientInfo_set0_pkey

CMS_RecipientInfo_set0_pkey

CMS_RecipientInfo_set0_key

CMS_RecipientInfo_set0_key

CMS_RecipientInfo_ktri_cert_cmp

CMS_RecipientInfo_ktri_cert_cmp

cms_msgSigDigest_add1

cms_msgSigDigest_add1

CMS_GET0_CERTIFICATE_CHOICES

CMS_GET0_CERTIFICATE_CHOICES

CMS_EncryptedData_set1_key

CMS_EncryptedData_set1_key

CMS_decrypt_set1_pkey

CMS_decrypt_set1_pkey

CMS_decrypt_set1_key

CMS_decrypt_set1_key

CMS_add1_recipient_cert

CMS_add1_recipient_cert

CMS_add0_recipient_key

CMS_add0_recipient_key

CMS_add0_cert

CMS_add0_cert

unsupported requestorname type

unsupported requestorname type

no certificates in chain

no certificates in chain

error parsing url

error parsing url

PARSE_HTTP_LINE1

PARSE_HTTP_LINE1

OCSP_parse_url

OCSP_parse_url

OCSP_cert_id_new

OCSP_cert_id_new

unimplemented public key method

unimplemented public key method

invalid cmd number

invalid cmd number

invalid cmd name

invalid cmd name

failed loading public key

failed loading public key

failed loading private key

failed loading private key

cmd not executable

cmd not executable

ENGINE_UNLOAD_KEY

ENGINE_UNLOAD_KEY

ENGINE_load_ssl_client_cert

ENGINE_load_ssl_client_cert

ENGINE_load_public_key

ENGINE_load_public_key

ENGINE_load_private_key

ENGINE_load_private_key

ENGINE_get_pkey_meth

ENGINE_get_pkey_meth

ENGINE_get_pkey_asn1_meth

ENGINE_get_pkey_asn1_meth

ENGINE_ctrl_cmd_string

ENGINE_ctrl_cmd_string

ENGINE_ctrl_cmd

ENGINE_ctrl_cmd

ENGINE_cmd_is_executable

ENGINE_cmd_is_executable

unsupported version

unsupported version

unsupported md algorithm

unsupported md algorithm

invalid signer certificate purpose

invalid signer certificate purpose

ess signing certificate error

ess signing certificate error

ess add signing cert error

ess add signing cert error

TS_VERIFY_CERT

TS_VERIFY_CERT

TS_TST_INFO_set_msg_imprint

TS_TST_INFO_set_msg_imprint

TS_RESP_CTX_set_signer_cert

TS_RESP_CTX_set_signer_cert

TS_RESP_CTX_set_certs

TS_RESP_CTX_set_certs

TS_REQ_set_msg_imprint

TS_REQ_set_msg_imprint

TS_MSG_IMPRINT_set_algo

TS_MSG_IMPRINT_set_algo

TS_CHECK_SIGNING_CERTS

TS_CHECK_SIGNING_CERTS

ESS_SIGNING_CERT_NEW_INIT

ESS_SIGNING_CERT_NEW_INIT

ESS_CERT_ID_NEW_INIT

ESS_CERT_ID_NEW_INIT

ESS_ADD_SIGNING_CERT

ESS_ADD_SIGNING_CERT

functionality not supported

functionality not supported

WIN32_JOINER

WIN32_JOINER

unsupported pkcs12 mode

unsupported pkcs12 mode

key gen error

key gen error

PKCS8_add_keyusage

PKCS8_add_keyusage

PKCS12_PBE_keyivgen

PKCS12_PBE_keyivgen

PKCS12_newpass

PKCS12_newpass

PKCS12_MAKE_SHKEYBAG

PKCS12_MAKE_SHKEYBAG

PKCS12_MAKE_KEYBAG

PKCS12_MAKE_KEYBAG

PKCS12_key_gen_uni

PKCS12_key_gen_uni

PKCS12_key_gen_asc

PKCS12_key_gen_asc

PKCS12_add_localkeyid

PKCS12_add_localkeyid

unsupported option

unsupported option

unable to get issuer keyid

unable to get issuer keyid

policy syntax not currently supported

policy syntax not currently supported

operation not defined

operation not defined

no proxy cert policy language defined

no proxy cert policy language defined

no issuer certificate

no issuer certificate

extension setting not supported

extension setting not supported

V2I_EXTENDED_KEY_USAGE

V2I_EXTENDED_KEY_USAGE

V2I_AUTHORITY_KEYID

V2I_AUTHORITY_KEYID

S2I_SKEY_ID

S2I_SKEY_ID

S2I_ASN1_SKEY_ID

S2I_ASN1_SKEY_ID

R2I_CERTPOL

R2I_CERTPOL

unsupported cipher type

unsupported cipher type

unknown operation

unknown operation

unable to find certificate

unable to find certificate

signing not supported for this key type

signing not supported for this key type

operation not supported on this type

operation not supported on this type

no recipient matches key

no recipient matches key

no recipient matches certificate

no recipient matches certificate

encryption not supported for this key type

encryption not supported for this key type

decrypted key is wrong length

decrypted key is wrong length

PKCS7_add_certificate

PKCS7_add_certificate

unsupported method

unsupported method

no port specified

no port specified

no port defined

no port defined

no accept port specified

no accept port specified

broken pipe

broken pipe

BIO_get_port

BIO_get_port

ECDH_compute_key

ECDH_compute_key

data too large for key size

data too large for key size

unsupported field

unsupported field

passed null parameter

passed null parameter

not a supported NIST prime

not a supported NIST prime

missing private key

missing private key

keys not set

keys not set

invalid private key

invalid private key

PKEY_EC_SIGN

PKEY_EC_SIGN

PKEY_EC_PARAMGEN

PKEY_EC_PARAMGEN

PKEY_EC_KEYGEN

PKEY_EC_KEYGEN

PKEY_EC_DERIVE

PKEY_EC_DERIVE

PKEY_EC_CTRL_STR

PKEY_EC_CTRL_STR

PKEY_EC_CTRL

PKEY_EC_CTRL

o2i_ECPublicKey

o2i_ECPublicKey

i2o_ECPublicKey

i2o_ECPublicKey

i2d_ECPrivateKey

i2d_ECPrivateKey

EC_KEY_print_fp

EC_KEY_print_fp

EC_KEY_print

EC_KEY_print

EC_KEY_new

EC_KEY_new

EC_KEY_generate_key

EC_KEY_generate_key

EC_KEY_copy

EC_KEY_copy

EC_KEY_check_key

EC_KEY_check_key

ECKEY_TYPE2PARAM

ECKEY_TYPE2PARAM

ECKEY_PUB_ENCODE

ECKEY_PUB_ENCODE

ECKEY_PUB_DECODE

ECKEY_PUB_DECODE

ECKEY_PRIV_ENCODE

ECKEY_PRIV_ENCODE

ECKEY_PRIV_DECODE

ECKEY_PRIV_DECODE

ECKEY_PARAM_DECODE

ECKEY_PARAM_DECODE

ECKEY_PARAM2TYPE

ECKEY_PARAM2TYPE

DO_EC_KEY_PRINT

DO_EC_KEY_PRINT

d2i_ECPrivateKey

d2i_ECPrivateKey

zlib not supported

zlib not supported

wrong public key type

wrong public key type

unsupported public key type

unsupported public key type

unsupported encryption algorithm

unsupported encryption algorithm

unsupported any defined by type

unsupported any defined by type

unknown public key type

unknown public key type

unable to decode rsa private key

unable to decode rsa private key

unable to decode rsa key

unable to decode rsa key

streaming not supported

streaming not supported

private key header missing

private key header missing

digest and key type not supported

digest and key type not supported

bad password read

bad password read

X509_PKEY_new

X509_PKEY_new

i2d_RSA_PUBKEY

i2d_RSA_PUBKEY

i2d_PublicKey

i2d_PublicKey

i2d_PrivateKey

i2d_PrivateKey

i2d_EC_PUBKEY

i2d_EC_PUBKEY

i2d_DSA_PUBKEY

i2d_DSA_PUBKEY

d2i_X509_PKEY

d2i_X509_PKEY

d2i_PublicKey

d2i_PublicKey

d2i_PrivateKey

d2i_PrivateKey

d2i_AutoPrivateKey

d2i_AutoPrivateKey

unsupported algorithm

unsupported algorithm

unknown key type

unknown key type

unable to get certs public key

unable to get certs public key

public key encode error

public key encode error

public key decode error

public key decode error

no cert set for us to verify

no cert set for us to verify

method not supported

method not supported

loading cert dir

loading cert dir

key values mismatch

key values mismatch

key type mismatch

key type mismatch

cert already in hash table

cert already in hash table

cant check dh key

cant check dh key

X509_verify_cert

X509_verify_cert

X509_STORE_add_cert

X509_STORE_add_cert

X509_REQ_check_private_key

X509_REQ_check_private_key

X509_PUBKEY_set

X509_PUBKEY_set

X509_PUBKEY_get

X509_PUBKEY_get

X509_load_cert_file

X509_load_cert_file

X509_load_cert_crl_file

X509_load_cert_crl_file

X509_get_pubkey_parameters

X509_get_pubkey_parameters

X509_check_private_key

X509_check_private_key

GET_CERT_BY_SUBJECT

GET_CERT_BY_SUBJECT

ADD_CERT_DIR

ADD_CERT_DIR

PKEY_DSA_KEYGEN

PKEY_DSA_KEYGEN

PKEY_DSA_CTRL

PKEY_DSA_CTRL

unsupported key components

unsupported key components

unsupported encryption

unsupported encryption

read key

read key

public key no rsa

public key no rsa

problems getting password

problems getting password

keyblob too short

keyblob too short

keyblob header parse error

keyblob header parse error

expecting public key blob

expecting public key blob

expecting private key blob

expecting private key blob

error converting private key

error converting private key

PEM_WRITE_PRIVATEKEY

PEM_WRITE_PRIVATEKEY

PEM_READ_PRIVATEKEY

PEM_READ_PRIVATEKEY

PEM_READ_BIO_PRIVATEKEY

PEM_READ_BIO_PRIVATEKEY

PEM_PK8PKEY

PEM_PK8PKEY

PEM_F_PEM_WRITE_PKCS8PRIVATEKEY

PEM_F_PEM_WRITE_PKCS8PRIVATEKEY

DO_PK8PKEY_FP

DO_PK8PKEY_FP

DO_PK8PKEY

DO_PK8PKEY

d2i_PKCS8PrivateKey_fp

d2i_PKCS8PrivateKey_fp

d2i_PKCS8PrivateKey_bio

d2i_PKCS8PrivateKey_bio

unsupported salt type

unsupported salt type

unsupported private key algorithm

unsupported private key algorithm

unsupported prf

unsupported prf

unsupported key size

unsupported key size

unsupported key derivation function

unsupported key derivation function

unsupported keylength

unsupported keylength

unsuported number of rounds

unsuported number of rounds

private key encode error

private key encode error

private key decode error

private key decode error

operaton not initialized

operaton not initialized

operation not supported for this keytype

operation not supported for this keytype

no operation set

no operation set

no key set

no key set

keygen failure

keygen failure

invalid operation

invalid operation

expecting a ec key

expecting a ec key

expecting a ecdsa key

expecting a ecdsa key

expecting a dsa key

expecting a dsa key

expecting a dh key

expecting a dh key

expecting an rsa key

expecting an rsa key

different key types

different key types

ctrl operation not implemented

ctrl operation not implemented

command not supported

command not supported

camellia key setup failed

camellia key setup failed

bn pubkey error

bn pubkey error

bad key length

bad key length

aes key setup failed

aes key setup failed

PKEY_SET_TYPE

PKEY_SET_TYPE

PKCS5_v2_PBE_keyivgen

PKCS5_v2_PBE_keyivgen

PKCS5_PBE_keyivgen

PKCS5_PBE_keyivgen

EVP_PKEY_verify_recover_init

EVP_PKEY_verify_recover_init

EVP_PKEY_verify_recover

EVP_PKEY_verify_recover

EVP_PKEY_verify_init

EVP_PKEY_verify_init

EVP_PKEY_verify

EVP_PKEY_verify

EVP_PKEY_sign_init

EVP_PKEY_sign_init

EVP_PKEY_sign

EVP_PKEY_sign

EVP_PKEY_paramgen_init

EVP_PKEY_paramgen_init

EVP_PKEY_paramgen

EVP_PKEY_paramgen

EVP_PKEY_new

EVP_PKEY_new

EVP_PKEY_keygen_init

EVP_PKEY_keygen_init

EVP_PKEY_keygen

EVP_PKEY_keygen

EVP_PKEY_get1_RSA

EVP_PKEY_get1_RSA

EVP_PKEY_get1_EC_KEY

EVP_PKEY_get1_EC_KEY

EVP_PKEY_GET1_ECDSA

EVP_PKEY_GET1_ECDSA

EVP_PKEY_get1_DSA

EVP_PKEY_get1_DSA

EVP_PKEY_get1_DH

EVP_PKEY_get1_DH

EVP_PKEY_encrypt_old

EVP_PKEY_encrypt_old

EVP_PKEY_encrypt_init

EVP_PKEY_encrypt_init

EVP_PKEY_encrypt

EVP_PKEY_encrypt

EVP_PKEY_derive_set_peer

EVP_PKEY_derive_set_peer

EVP_PKEY_derive_init

EVP_PKEY_derive_init

EVP_PKEY_derive

EVP_PKEY_derive

EVP_PKEY_decrypt_old

EVP_PKEY_decrypt_old

EVP_PKEY_decrypt_init

EVP_PKEY_decrypt_init

EVP_PKEY_decrypt

EVP_PKEY_decrypt

EVP_PKEY_CTX_dup

EVP_PKEY_CTX_dup

EVP_PKEY_CTX_ctrl_str

EVP_PKEY_CTX_ctrl_str

EVP_PKEY_CTX_ctrl

EVP_PKEY_CTX_ctrl

EVP_PKEY_copy_parameters

EVP_PKEY_copy_parameters

EVP_PKEY2PKCS8_broken

EVP_PKEY2PKCS8_broken

EVP_PKCS82PKEY_BROKEN

EVP_PKCS82PKEY_BROKEN

EVP_PKCS82PKEY

EVP_PKCS82PKEY

EVP_CIPHER_CTX_set_key_length

EVP_CIPHER_CTX_set_key_length

ECKEY_PKEY2PKCS8

ECKEY_PKEY2PKCS8

ECDSA_PKEY2PKCS8

ECDSA_PKEY2PKCS8

DSA_PKEY2PKCS8

DSA_PKEY2PKCS8

DSAPKEY2PKCS8

DSAPKEY2PKCS8

D2I_PKEY

D2I_PKEY

CAMELLIA_INIT_KEY

CAMELLIA_INIT_KEY

AES_INIT_KEY

AES_INIT_KEY

invalid public key

invalid public key

PKEY_DH_KEYGEN

PKEY_DH_KEYGEN

PKEY_DH_DERIVE

PKEY_DH_DERIVE

GENERATE_KEY

GENERATE_KEY

COMPUTE_KEY

COMPUTE_KEY

rsa operations not supported

rsa operations not supported

key size too small

key size too small

invalid keybits

invalid keybits

illegal or unsupported padding mode

illegal or unsupported padding mode

digest too big for rsa key

digest too big for rsa key

data too small for key size

data too small for key size

RSA_generate_key

RSA_generate_key

RSA_check_key

RSA_check_key

RSA_BUILTIN_KEYGEN

RSA_BUILTIN_KEYGEN

PKEY_RSA_VERIFYRECOVER

PKEY_RSA_VERIFYRECOVER

PKEY_RSA_SIGN

PKEY_RSA_SIGN

PKEY_RSA_CTRL_STR

PKEY_RSA_CTRL_STR

PKEY_RSA_CTRL

PKEY_RSA_CTRL

.pp@0

.pp@0

aEÃ

aEÃ

(#EÃš

(#EÃš

ÃšE

ÃšE

RC2 part of OpenSSL 1.0.0d 8 Feb 2011

RC2 part of OpenSSL 1.0.0d 8 Feb 2011

IDEA part of OpenSSL 1.0.0d 8 Feb 2011

IDEA part of OpenSSL 1.0.0d 8 Feb 2011

libdes part of OpenSSL 1.0.0d 8 Feb 2011

libdes part of OpenSSL 1.0.0d 8 Feb 2011

DES part of OpenSSL 1.0.0d 8 Feb 2011

DES part of OpenSSL 1.0.0d 8 Feb 2011

NETSCAPE_CERT_SEQUENCE

NETSCAPE_CERT_SEQUENCE

.\crypto\asn1\x_pkey.c

.\crypto\asn1\x_pkey.c

RegDeleteKeyW

RegDeleteKeyW

RegCloseKey

RegCloseKey

RegCreateKeyExW

RegCreateKeyExW

RegOpenKeyExW

RegOpenKeyExW

RegQueryInfoKeyW

RegQueryInfoKeyW

RegEnumKeyExW

RegEnumKeyExW

ReportEventA

ReportEventA

UrlIsW

UrlIsW

SHLWAPI.dll

SHLWAPI.dll

PSAPI.DLL

PSAPI.DLL

WS2_32.dll

WS2_32.dll

COMCTL32.dll

COMCTL32.dll

ShellExecuteW

ShellExecuteW

ShellExecuteExW

ShellExecuteExW

SHELL32.dll

SHELL32.dll

FtpPutFileW

FtpPutFileW

FtpCreateDirectoryW

FtpCreateDirectoryW

FtpRemoveDirectoryW

FtpRemoveDirectoryW

FtpDeleteFileW

FtpDeleteFileW

FtpSetCurrentDirectoryW

FtpSetCurrentDirectoryW

WININET.dll

WININET.dll

MPR.dll

MPR.dll

WINMM.dll

WINMM.dll

VERSION.dll

VERSION.dll

GetWindowsDirectoryW

GetWindowsDirectoryW

GetCPInfo

GetCPInfo

GetConsoleOutputCP

GetConsoleOutputCP

GetProcessHeap

GetProcessHeap

KERNEL32.dll

KERNEL32.dll

UnregisterHotKey

UnregisterHotKey

RegisterHotKey

RegisterHotKey

GetKeyNameTextW

GetKeyNameTextW

MapVirtualKeyW

MapVirtualKeyW

EnumWindows

EnumWindows

EnumChildWindows

EnumChildWindows

UnhookWindowsHookEx

UnhookWindowsHookEx

SetWindowsHookExW

SetWindowsHookExW

GetKeyState

GetKeyState

USER32.dll

USER32.dll

GDI32.dll

GDI32.dll

COMDLG32.dll

COMDLG32.dll

ole32.dll

ole32.dll

OLEAUT32.dll

OLEAUT32.dll

1

1

<:>

<:>

/

/

<:>

<:>

<:>

<:>

?<:>

?<:>

?<:>

?<:>

1

1

:

:

<:>

<:>

<.>

<.>

(

(

<.>

<.>

<:>

<:>

<:>

<:>

<:>

<:>

<:>

<:>

/

/

[

[

.?AVECSmtp@@

.?AVECSmtp@@

zcÃ

zcÃ

,i%f

,i%f

\cmd'

\cmd'

.GL#!

.GL#!

*%S_A

*%S_A

nÃ‚zj

nÃ‚zj

\StringFileInfo\lx\%s

\StringFileInfo\lx\%s

%Y-%m-%d_%H-%M-%S.mp3

%Y-%m-%d_%H-%M-%S.mp3

smtps.uol.com.br

smtps.uol.com.br

*@uol.com.br

*@uol.com.br

smtp.comcast.net

smtp.comcast.net

*@comcast.net

*@comcast.net

smtp.aol.com

smtp.aol.com

*@aol.com

*@aol.com

smtp.gawab.com

smtp.gawab.com

*@gawab.com

*@gawab.com

mail.messagingengine.com

mail.messagingengine.com

*@fastmail.fm

*@fastmail.fm

smtp.live.com

smtp.live.com

*@hotmail.com

*@hotmail.com

smtp.hotpop.com

smtp.hotpop.com

*@hotpop.com

*@hotpop.com

smtp.ig.com.br

smtp.ig.com.br

*@ig.com.br

*@ig.com.br

smtp.gmx.com

smtp.gmx.com

*@gmx.com;*@gmx.us

*@gmx.com;*@gmx.us

smtps.bol.com.br

smtps.bol.com.br

*@bol.com.br

*@bol.com.br

smtp.mail.yahoo.com

smtp.mail.yahoo.com

*@yahoo.com

*@yahoo.com

smtp.aim.com

smtp.aim.com

*@aim.com

*@aim.com

smtp.googlemail.com

smtp.googlemail.com

*@gmail.com;*@googlemail.com

*@gmail.com;*@googlemail.com

smtp.mail.yahoo.com.br

smtp.mail.yahoo.com.br

*@yahoo.com.br

*@yahoo.com.br

Shell32.dll

Shell32.dll

RICHED20.DLL

RICHED20.DLL

WAdvapi32.dll

WAdvapi32.dll

HKEY_CLASSES_ROOT

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_PERFORMANCE_DATA

HKEY_DYN_DATA

HKEY_DYN_DATA

HKEY_CURRENT_CONFIG

HKEY_CURRENT_CONFIG

@uxtheme.dll

@uxtheme.dll

@(),;:\"[]

@(),;:\"[]

ASoftware\Microsoft\Windows\CurrentVersion\Run

ASoftware\Microsoft\Windows\CurrentVersion\Run

Software\Microsoft\Windows\CurrentVersion

Software\Microsoft\Windows\CurrentVersion

test234.txt

test234.txt

TEST816.txt

TEST816.txt

TEST816.txt/test234.txt

TEST816.txt/test234.txt

All Files (*.*)

All Files (*.*)

*.exe

*.exe

Viewer.exe

Viewer.exe

\TEST996.txt

\TEST996.txt

@USER32.DLL

@USER32.DLL

4.5.1

4.5.1

&regkey=

&regkey=

4.5.1

4.5.1

\Install.exe

\Install.exe

(*.exe)

(*.exe)

S.ICO

S.ICO

\WinInit.Ini

\WinInit.Ini

wininet.dll

wininet.dll

netmsg.dll

netmsg.dll

%Y-%m-%d_%H-%M-%S.jpg

%Y-%m-%d_%H-%M-%S.jpg

@hXXp://

@hXXp://

S%Y-%m-%d_%H-%M-%S

S%Y-%m-%d_%H-%M-%S

CWebcam_

CWebcam_

Keys_

Keys_

.html

.html

comctl32.dll

comctl32.dll

DNSAPI.DLL

DNSAPI.DLL

WTL_CmdBar_InternalAutoPopupMsg

WTL_CmdBar_InternalAutoPopupMsg

WTL_CmdBar_InternalGetBarMsg

WTL_CmdBar_InternalGetBarMsg

mscoree.dll

mscoree.dll

V*(%F@4 F7*

V*(%F@4 F7*

72.JA1'

72.JA1'

[,'&"?4-

[,'&"?4-

C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.exe

C:\Users\"%CurrentUserName%"\AppData\Roaming\HIQXPJ\CDT.exe