HEUR:Trojan.Win32.Generic (Kaspersky), Trojan.GenericKD.3597719 (B) (Emsisoft), Trojan.GenericKD.3597719 (AdAware), Trojan.Win32.Delphi.FD, Trojan.Win32.Sasfis.FD, VirTool.Win32.DelfInject.FD, GenericPhysicalDrive0.YR (Lavasoft MAS)Behaviour: Trojan, VirTool
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: 8f41fe050982a89a721ec1502b6706aa
SHA1: a7af75e3cb31e6379b69d8081819a4b1ea63d17b
SHA256: e9a0df0a8e336a194451e6d065fcaaf0c4b965643b2ba81ca84d1457358f919b
SSDeep: 24576:ZOQ6aZgFFUj1Su7E 6mz6KeZPlxv0epyC9qNkcH7r/:ZOBaZgrUvA lzB8PL8wyC9cHX/
Size: 862720 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6, BorlandDelphi30, ACProtect141
Company: no certificate found
Created at: 2016-10-13 13:41:40
Analyzed on: Windows7 SP1 32-bit
Summary: Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).
Dynamic Analysis
Payload
No specific payload has been found.
Process activity
The Trojan creates the following process(es):
%original file name%.exe:1944
The Trojan injects its code into the following process(es):
Client.exe:2780
Mutexes
The following mutexes were created/opened:No objects were found.
File activity
The process %original file name%.exe:1944 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
C:\Users\"%CurrentUserName%"\AppData\Roaming\SubDir\Client.exe (7705 bytes)
Registry activity
The process Client.exe:2780 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Tracing\Client_RASMANCS]
"FileDirectory" = "%windir%\tracing"
"MaxFileSize" = "1048576"
[HKLM\SOFTWARE\Microsoft\Tracing\Client_RASAPI32]
"EnableConsoleTracing" = "0"
[HKLM\SOFTWARE\Microsoft\Tracing\Client_RASMANCS]
"FileTracingMask" = "4294901760"
[HKLM\SOFTWARE\Microsoft\Tracing\Client_RASAPI32]
"MaxFileSize" = "1048576"
[HKLM\SOFTWARE\Microsoft\Tracing\Client_RASMANCS]
"ConsoleTracingMask" = "4294901760"
[HKLM\SOFTWARE\Microsoft\Tracing\Client_RASAPI32]
"FileTracingMask" = "4294901760"
"ConsoleTracingMask" = "4294901760"
"FileDirectory" = "%windir%\tracing"
[HKLM\SOFTWARE\Microsoft\Tracing\Client_RASMANCS]
"EnableFileTracing" = "0"
[HKLM\SOFTWARE\Microsoft\Tracing\Client_RASAPI32]
"EnableFileTracing" = "0"
[HKLM\SOFTWARE\Microsoft\Tracing\Client_RASMANCS]
"EnableConsoleTracing" = "0"
To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam Client Bootstrapper" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\SubDir\Client.exe"
The process %original file name%.exe:1944 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Tracing\8f41fe050982a89a721ec1502b6706aa_RASMANCS]
"EnableConsoleTracing" = "0"
"FileTracingMask" = "4294901760"
"MaxFileSize" = "1048576"
"FileDirectory" = "%windir%\tracing"
[HKLM\SOFTWARE\Microsoft\Tracing\8f41fe050982a89a721ec1502b6706aa_RASAPI32]
"EnableFileTracing" = "0"
[HKLM\SOFTWARE\Microsoft\Tracing\8f41fe050982a89a721ec1502b6706aa_RASMANCS]
"EnableFileTracing" = "0"
[HKLM\SOFTWARE\Microsoft\Tracing\8f41fe050982a89a721ec1502b6706aa_RASAPI32]
"FileDirectory" = "%windir%\tracing"
[HKLM\SOFTWARE\Microsoft\Tracing\8f41fe050982a89a721ec1502b6706aa_RASMANCS]
"ConsoleTracingMask" = "4294901760"
[HKLM\SOFTWARE\Microsoft\Tracing\8f41fe050982a89a721ec1502b6706aa_RASAPI32]
"FileTracingMask" = "4294901760"
"EnableConsoleTracing" = "0"
"ConsoleTracingMask" = "4294901760"
"MaxFileSize" = "1048576"
To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam Client Bootstrapper" = "c:\%original file name%.exe"
Dropped PE files
There are no dropped PE files.
HOSTS file anomalies
No changes have been detected.
Rootkit activity
No anomalies have been detected.
Propagation
Removals
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Terminate malicious process(es) (How to End a Process With the Task Manager):
%original file name%.exe:1944
- Delete the original Trojan file.
- Delete or disinfect the following files created/modified by the Trojan:
C:\Users\"%CurrentUserName%"\AppData\Roaming\SubDir\Client.exe (7705 bytes)
- Delete the following value(s) in the autorun key (How to Work with System Registry):
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam Client Bootstrapper" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\SubDir\Client.exe"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam Client Bootstrapper" = "c:\%original file name%.exe" - Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
- Reboot the computer.
Static Analysis
VersionInfo
Company Name: Valve Corporation
Product Name: Steam Client Bootstrapper
Product Version: 1.2.3.4
Legal Copyright:
Legal Trademarks:
Original Filename: Steam.exe
Internal Name: Steam.exe
File Version: 5.6.7.8
File Description: Steam Client Bootstrapper
Comments:
Language: English (United States)
Company Name: Valve CorporationProduct Name: Steam Client BootstrapperProduct Version: 1.2.3.4Legal Copyright: Legal Trademarks: Original Filename: Steam.exeInternal Name: Steam.exeFile Version: 5.6.7.8File Description: Steam Client BootstrapperComments: Language: English (United States)
PE Sections
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
---|---|---|---|---|---|
8192 | 278528 | 148480 | 5.5436 | 71f28259b0c92abe827b5565d8c9366c | |
286720 | 8192 | 512 | 0.324135 | 0f43f7ef2139999c4d306db4b46c5e58 | |
294912 | 8192 | 0 | 0 | d41d8cd98f00b204e9800998ecf8427e | |
.rsrc | 303104 | 8192 | 2560 | 3.28361 | 108872bab7cebea47a74eed1de467fae |
311296 | 3547136 | 0 | 0 | d41d8cd98f00b204e9800998ecf8427e | |
.data | 3858432 | 712704 | 710144 | 5.53577 | 946864d527bb302d33cbeadbaffe1d9f |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
Network Activity
URLs
URL | IP |
---|---|
hxxp://telize.com/geoip | 163.172.140.38 |
hxxp://freegeoip.net/xml/ | 158.69.243.235 |
hxxp://www.telize.com/geoip | 163.172.140.38 |
thatgamerblue.ddns.net | 86.142.55.60 |
dns.msftncsi.com | 131.107.255.255 |
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
GET /geoip HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.3; rv:36.0) Gecko/20100101 Firefox/36.0
Host: telize.com
Connection: Keep-Alive
HTTP/1.1 301 Moved Permanently
Server: nginx/1.10.1
Date: Thu, 20 Oct 2016 10:33:18 GMT
Content-Type: text/html
Content-Length: 185
Connection: keep-alive
Location: hXXp://VVV.telize.com/geoip
<html>..<head><title>301 Moved Permanently</title></head>..<body bgcolor="white">..<center><h1>301 Moved Permanently</h1></center>..<hr><center>nginx/1.10.1</center>..</body>..</html>..HTTP/1.1 301 Moved Permanently..Server: nginx/1.10.1..Date: Thu, 20 Oct 2016 10:33:18 GMT..Content-Type: text/html..Content-Length: 185..Connection: keep-alive..Location: hXXp://VVV.telize.com/geoip..<html>..<head><title>301 Moved Permanently</title></head>..<body bgcolor="white">..<center><h1>301 Moved Permanently</h1></center>..<hr><center>nginx/1.10.1</center>..</body>..</html>....
GET /xml/ HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.3; rv:36.0) Gecko/20100101 Firefox/36.0
Host: freegeoip.net
Connection: Keep-Alive
HTTP/1.1 200 OK
Content-Type: application/xml
Vary: Origin
X-Database-Date: Tue, 04 Oct 2016 19:04:28 GMT
X-Ratelimit-Limit: 10000
X-Ratelimit-Remaining: 9998
X-Ratelimit-Reset: 3599
Date: Thu, 20 Oct 2016 10:34:00 GMT
Content-Length: 363
<Response>..<IP>194.242.96.218</IP>..<CountryCode>UA</CountryCode>..<CountryName>Ukraine</CountryName>..<RegionCode>63</RegionCode>..<RegionName>Kharkivs'ka Oblast'</RegionName>..<City>Kharkiv</City>..<ZipCode></ZipCode>..<TimeZone>Europe/Kiev</TimeZone>..<Latitude>49.9808</Latitude>..<Longitude>36.2527</Longitude>..<MetroCode>0</MetroCode>.</Response>.HTTP/1.1 200 OK..Content-Type: application/xml..Vary: Origin..X-Database-Date: Tue, 04 Oct 2016 19:04:28 GMT..X-Ratelimit-Limit: 10000..X-Ratelimit-Remaining: 9998..X-Ratelimit-Reset: 3599..Date: Thu, 20 Oct 2016 10:34:00 GMT..Content-Length: 363..<Response>..<IP>194.242.96.218</IP>..<CountryCode>UA</CountryCode>..<CountryName>Ukraine</CountryName>..<RegionCode>63</RegionCode>..<RegionName>Kharkivs'ka Oblast'</RegionName>..<City>Kharkiv</City>..<ZipCode></ZipCode>..<TimeZone>Europe/Kiev</TimeZone>..<Latitude>49.9808</Latitude>..<Longitude>36.2527</Longitude>..<MetroCode>0</MetroCode>.</Response>...
GET /geoip HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.3; rv:36.0) Gecko/20100101 Firefox/36.0
Host: telize.com
Connection: Keep-Alive
HTTP/1.1 301 Moved Permanently
Server: nginx/1.10.1
Date: Thu, 20 Oct 2016 10:33:19 GMT
Content-Type: text/html
Content-Length: 185
Connection: keep-alive
Location: hXXp://VVV.telize.com/geoip
<html>..<head><title>301 Moved Permanently</title></head>..<body bgcolor="white">..<center><h1>301 Moved Permanently</h1></center>..<hr><center>nginx/1.10.1</center>..</body>..</html>..HTTP/1.1 301 Moved Permanently..Server: nginx/1.10.1..Date: Thu, 20 Oct 2016 10:33:19 GMT..Content-Type: text/html..Content-Length: 185..Connection: keep-alive..Location: hXXp://VVV.telize.com/geoip..<html>..<head><title>301 Moved Permanently</title></head>..<body bgcolor="white">..<center><h1>301 Moved Permanently</h1></center>..<hr><center>nginx/1.10.1</center>..</body>..</html>....
GET /xml/ HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.3; rv:36.0) Gecko/20100101 Firefox/36.0
Host: freegeoip.net
Connection: Keep-Alive
HTTP/1.1 200 OK
Content-Type: application/xml
Vary: Origin
X-Database-Date: Tue, 04 Oct 2016 19:04:28 GMT
X-Ratelimit-Limit: 10000
X-Ratelimit-Remaining: 9999
X-Ratelimit-Reset: 3600
Date: Thu, 20 Oct 2016 10:33:59 GMT
Content-Length: 363
<Response>..<IP>194.242.96.218</IP>..<CountryCode>UA</CountryCode>..<CountryName>Ukraine</CountryName>..<RegionCode>63</RegionCode>..<RegionName>Kharkivs'ka Oblast'</RegionName>..<City>Kharkiv</City>..<ZipCode></ZipCode>..<TimeZone>Europe/Kiev</TimeZone>..<Latitude>49.9808</Latitude>..<Longitude>36.2527</Longitude>..<MetroCode>0</MetroCode>.</Response>.HTTP/1.1 200 OK..Content-Type: application/xml..Vary: Origin..X-Database-Date: Tue, 04 Oct 2016 19:04:28 GMT..X-Ratelimit-Limit: 10000..X-Ratelimit-Remaining: 9999..X-Ratelimit-Reset: 3600..Date: Thu, 20 Oct 2016 10:33:59 GMT..Content-Length: 363..<Response>..<IP>194.242.96.218</IP>..<CountryCode>UA</CountryCode>..<CountryName>Ukraine</CountryName>..<RegionCode>63</RegionCode>..<RegionName>Kharkivs'ka Oblast'</RegionName>..<City>Kharkiv</City>..<ZipCode></ZipCode>..<TimeZone>Europe/Kiev</TimeZone>..<Latitude>49.9808</Latitude>..<Longitude>36.2527</Longitude>..<MetroCode>0</MetroCode>.</Response>...
GET /geoip HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.3; rv:36.0) Gecko/20100101 Firefox/36.0
Host: VVV.telize.com
Connection: Keep-Alive
HTTP/1.1 404 Not Found
Server: nginx/1.10.1
Date: Thu, 20 Oct 2016 10:33:18 GMT
Content-Type: text/html
Content-Length: 169
Connection: close
<html>..<head><title>404 Not Found</title></head>..<body bgcolor="white">..<center><h1>404 Not Found</h1></center>..<hr><center>nginx/1.10.1</center>..</body>..</html>....
GET /geoip HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 6.3; rv:36.0) Gecko/20100101 Firefox/36.0
Host: VVV.telize.com
Connection: Keep-Alive
HTTP/1.1 404 Not Found
Server: nginx/1.10.1
Date: Thu, 20 Oct 2016 10:33:19 GMT
Content-Type: text/html
Content-Length: 169
Connection: close
<html>..<head><title>404 Not Found</title></head>..<body bgcolor="white">..<center><h1>404 Not Found</h1></center>..<hr><center>nginx/1.10.1</center>..</body>..</html>....
Map
The Trojan connects to the servers at the folowing location(s):
Strings from Dumps
Client.exe_2780_rwx_01240000_0000C000:
.Mfi3
.Mfi3
^%Sij
^%Sij
Client.exe_2780_rwx_012A2000_00043000:
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPADi
hSystem.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aPADPADi
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
System.Drawing.Bitmap
System.Drawing.Bitmap
v4.0.30319
v4.0.30319
*.*O*
*.*O*
Client.exe
Client.exe
System.Windows.Forms
System.Windows.Forms
System.Drawing
System.Drawing
System.Core
System.Core
System.Runtime.Serialization
System.Runtime.Serialization
System.Management
System.Management
System.Xml
System.Xml
System.Security
System.Security
Microsoft.VisualBasic
Microsoft.VisualBasic
kernel32.dll
kernel32.dll
user32.dll
user32.dll
gdi32.dll
gdi32.dll
msvcrt.dll
msvcrt.dll
advapi32.dll
advapi32.dll
shlwapi.dll
shlwapi.dll
Kernel32.dll
Kernel32.dll
shell32.dll
shell32.dll
xClient.Properties.Resources.resources
xClient.Properties.Resources.resources
System.Runtime.CompilerServices
System.Runtime.CompilerServices
.ctor
.ctor
get_ExecutablePath
get_ExecutablePath
.cctor
.cctor
System.Threading
System.Threading
WindowsIdentity
WindowsIdentity
System.Security.Principal
System.Security.Principal
WindowsPrincipal
WindowsPrincipal
WindowsBuiltInRole
WindowsBuiltInRole
System.Diagnostics
System.Diagnostics
System.Text
System.Text
System.IO
System.IO
System.Text.RegularExpressions
System.Text.RegularExpressions
System.Collections.Generic
System.Collections.Generic
System.Linq
System.Linq
System.Collections
System.Collections
System.Runtime.InteropServices
System.Runtime.InteropServices
keyDown
keyDown
OperatingSystem
OperatingSystem
get_Is64BitOperatingSystem
get_Is64BitOperatingSystem
RegistryKey
RegistryKey
Microsoft.Win32
Microsoft.Win32
OpenBaseKey
OpenBaseKey
OpenSubKey
OpenSubKey
System.Drawing.Imaging
System.Drawing.Imaging
System.Net.NetworkInformation
System.Net.NetworkInformation
get_OperationalStatus
get_OperationalStatus
OperationalStatus
OperationalStatus
System.Net
System.Net
System.Net.Sockets
System.Net.Sockets
set_WindowStyle
set_WindowStyle
ProcessWindowStyle
ProcessWindowStyle
set_UseShellExecute
set_UseShellExecute
xClient.Core.NetSerializer
xClient.Core.NetSerializer
System.Reflection
System.Reflection
System.Reflection.Emit
System.Reflection.Emit
KeyValuePair`2
KeyValuePair`2
ContainsKey
ContainsKey
NotSupportedException
NotSupportedException
get_Key
get_Key
InvalidOperationException
InvalidOperationException
<.ctor>b__0
<.ctor>b__0
<.ctor>b__1
<.ctor>b__1
<.ctor>b__2
<.ctor>b__2
xClient.Core.NetSerializer.TypeSerializers
xClient.Core.NetSerializer.TypeSerializers
System.Collections.Generic.IEnumerable.GetEnumerator
System.Collections.Generic.IEnumerable.GetEnumerator
System.Collections.IEnumerable.GetEnumerator
System.Collections.IEnumerable.GetEnumerator
System.Collections.Generic.IEnumerator.get_Current
System.Collections.Generic.IEnumerator.get_Current
System.Collections.IEnumerator.Reset
System.Collections.IEnumerator.Reset
System.IDisposable.Dispose
System.IDisposable.Dispose
System.Collections.IEnumerator.get_Current
System.Collections.IEnumerator.get_Current
System.Collections.Generic.IEnumerator.Current
System.Collections.Generic.IEnumerator.Current
System.Collections.IEnumerator.Current
System.Collections.IEnumerator.Current
GetSupportedTypes
GetSupportedTypes
port
port
HttpWebRequest
HttpWebRequest
HttpWebResponse
HttpWebResponse
WebRequest
WebRequest
WebResponse
WebResponse
formattedKeyValue
formattedKeyValue
WebClient
WebClient
IWebProxy
IWebProxy
System.Security.Cryptography
System.Security.Cryptography
set_Key
set_Key
keyName
keyName
OpenReadonlySubKeySafe
OpenReadonlySubKeySafe
OpenWritableSubKeySafe
OpenWritableSubKeySafe
GetFormattedKeyValues
GetFormattedKeyValues
b__1
b__1
keyVal
keyVal
d__5
d__5
3__key
3__key
System.Collections.Generic.IEnumerable.GetEnumerator
System.Collections.Generic.IEnumerable.GetEnumerator
System.Collections.Generic.IEnumerator.get_Current
System.Collections.Generic.IEnumerator.get_Current
System.Collections.Generic.IEnumerator.Current
System.Collections.Generic.IEnumerator.Current
GetPasswordsResponse
GetPasswordsResponse
xClient.Core.Packets.ClientPackets
xClient.Core.Packets.ClientPackets
k__BackingField
k__BackingField
get_Passwords
get_Passwords
set_Passwords
set_Passwords
Passwords
Passwords
DoKeyboardEvent
DoKeyboardEvent
xClient.Core.Packets.ServerPackets
xClient.Core.Packets.ServerPackets
k__BackingField
k__BackingField
k__BackingField
k__BackingField
get_KeyDown
get_KeyDown
set_KeyDown
set_KeyDown
KeyDown
KeyDown
GetPasswords
GetPasswords
GetSubKeyNames
GetSubKeyNames
keyf
keyf
get_Port
get_Port
set_Port
set_Port
Port
Port
keybd_event
keybd_event
xClient.Core.Utilities
xClient.Core.Utilities
xClient.Core.Compression
xClient.Core.Compression
Keys
Keys
hotkeys
hotkeys
hotKeyDelegate
hotKeyDelegate
anyKeyInTheExclusiveOrSet
anyKeyInTheExclusiveOrSet
orKeySet
orKeySet
KeyEventArgs
KeyEventArgs
get_KeyCode
get_KeyCode
HotKeys
HotKeys
HotKeysActivated
HotKeysActivated
add_KeyDown
add_KeyDown
KeyEventHandler
KeyEventHandler
remove_KeyDown
remove_KeyDown
add_KeyPress
add_KeyPress
KeyPressEventHandler
KeyPressEventHandler
remove_KeyPress
remove_KeyPress
add_KeyUp
add_KeyUp
remove_KeyUp
remove_KeyUp
IKeyboardMouseEvents
IKeyboardMouseEvents
xClient.Core.MouseKeyHook
xClient.Core.MouseKeyHook
xClient.Core.MouseKeyHook.Implementation
xClient.Core.MouseKeyHook.Implementation
m_KeyListenerCache
m_KeyListenerCache
GetKeyListener
GetKeyListener
CreateKeyListener
CreateKeyListener
KeyPress
KeyPress
KeyUp
KeyUp
KeyListener
KeyListener
InvokeKeyDown
InvokeKeyDown
KeyPressEventArgs
KeyPressEventArgs
InvokeKeyPress
InvokeKeyPress
InvokeKeyUp
InvokeKeyUp
keyboardStateNative
keyboardStateNative
keys
keys
keyData
keyData
isKeyDown
isKeyDown
isKeyUp
isKeyUp
get_IsKeyDown
get_IsKeyDown
set_IsKeyDown
set_IsKeyDown
get_IsKeyUp
get_IsKeyUp
set_IsKeyUp
set_IsKeyUp
vKey
vKey
IsKeyDown
IsKeyDown
IsKeyUp
IsKeyUp
keyChar
keyChar
5__4
5__4
5__5
5__5
5__6
5__6
System.Collections.Generic.IEnumerable.GetEnumerator
System.Collections.Generic.IEnumerable.GetEnumerator
System.Collections.Generic.IEnumerator.get_Current
System.Collections.Generic.IEnumerator.get_Current
System.Collections.Generic.IEnumerator.Current
System.Collections.Generic.IEnumerator.Current
5__12
5__12
5__13
5__13
IsModifierKeysSet
IsModifierKeysSet
pressedKeys
pressedKeys
IsModifierKey
IsModifierKey
ContainsKeyChar
ContainsKeyChar
IsExcludedKey
IsExcludedKey
isMouseKeyDown
isMouseKeyDown
isMouseKeyUp
isMouseKeyUp
get_IsMouseKeyDown
get_IsMouseKeyDown
set_IsMouseKeyDown
set_IsMouseKeyDown
get_IsMouseKeyUp
get_IsMouseKeyUp
set_IsMouseKeyUp
set_IsMouseKeyUp
IsMouseKeyDown
IsMouseKeyDown
IsMouseKeyUp
IsMouseKeyUp
System.ComponentModel
System.ComponentModel
SetWindowsHookEx
SetWindowsHookEx
UnhookWindowsHookEx
UnhookWindowsHookEx
Microsoft.Win32.SafeHandles
Microsoft.Win32.SafeHandles
<.cctor>b__0
<.cctor>b__0
xClient.Core.MouseKeyHook.WinApi
xClient.Core.MouseKeyHook.WinApi
virtualKeyCode
virtualKeyCode
uVirtKey
uVirtKey
lpbKeyState
lpbKeyState
lpwTransKey
lpwTransKey
wVirtKey
wVirtKey
lpKeyState
lpKeyState
pbKeyState
pbKeyState
GetKeyboardState
GetKeyboardState
GetKeyState
GetKeyState
MapVirtualKeyEx
MapVirtualKeyEx
GetKeyboardLayout
GetKeyboardLayout
GetKeyloggerLogsResponse
GetKeyloggerLogsResponse
DoShellExecuteResponse
DoShellExecuteResponse
GetKeyloggerLogs
GetKeyloggerLogs
DoShellExecute
DoShellExecute
k__BackingField
k__BackingField
get_DownloadURL
get_DownloadURL
set_DownloadURL
set_DownloadURL
downloadurl
downloadurl
DownloadURL
DownloadURL
DoUploadAndExecute
DoUploadAndExecute
DoVisitWebsite
DoVisitWebsite
k__BackingField
k__BackingField
get_URL
get_URL
set_URL
set_URL
System.Globalization
System.Globalization
firefoxProfilePath
firefoxProfilePath
firefoxPath
firefoxPath
loadCerts
loadCerts
get_httpRealm
get_httpRealm
set_httpRealm
set_httpRealm
get_formSubmitURL
get_formSubmitURL
set_formSubmitURL
set_formSubmitURL
get_passwordField
get_passwordField
set_passwordField
set_passwordField
get_encryptedPassword
get_encryptedPassword
set_encryptedPassword
set_encryptedPassword
get_timePasswordChanged
get_timePasswordChanged
set_timePasswordChanged
set_timePasswordChanged
httpRealm
httpRealm
formSubmitURL
formSubmitURL
passwordField
passwordField
encryptedPassword
encryptedPassword
timePasswordChanged
timePasswordChanged
get_logins
get_logins
set_logins
set_logins
logins
logins
get_Password
get_Password
set_Password
set_Password
Password
Password
get_HttpOnly
get_HttpOnly
set_HttpOnly
set_HttpOnly
HttpOnly
HttpOnly
get_HostKey
get_HostKey
set_HostKey
set_HostKey
HostKey
HostKey
System.Runtime.Serialization.Json
System.Runtime.Serialization.Json
Microsoft.VisualBasic.CompilerServices
Microsoft.VisualBasic.CompilerServices
urlHash
urlHash
wstrURL
wstrURL
hKey
hKey
ExplorerUrlHistory
ExplorerUrlHistory
xClient.Core.Recovery.Browsers
xClient.Core.Recovery.Browsers
urlHistory
urlHistory
_urlHistoryList
_urlHistoryList
pocsUrl
pocsUrl
QueryUrl
QueryUrl
STATURLEnumerator
STATURLEnumerator
_staturl
_staturl
GetUrlHistory
GetUrlHistory
pszUrl
pszUrl
UrlCanonicalize
UrlCanonicalize
System.Runtime.InteropServices.ComTypes
System.Runtime.InteropServices.ComTypes
System.Collections.IComparer.Compare
System.Collections.IComparer.Compare
UrlString
UrlString
AddUrl
AddUrl
DeleteUrl
DeleteUrl
lpSTATURL
lpSTATURL
get_EnumUrls
get_EnumUrls
EnumUrls
EnumUrls
IUrlHistoryStg2
IUrlHistoryStg2
AddUrlAndNotify
AddUrlAndNotify
xClient.Core.ReverseProxy.Packets
xClient.Core.ReverseProxy.Packets
k__BackingField
k__BackingField
k__BackingField
k__BackingField
get_LocalPort
get_LocalPort
set_LocalPort
set_LocalPort
localPort
localPort
LocalPort
LocalPort
k__BackingField
k__BackingField
get_OperatingSystem
get_OperatingSystem
set_OperatingSystem
set_OperatingSystem
operatingsystem
operatingsystem
DoDownloadAndExecute
DoDownloadAndExecute
Keylogger
Keylogger
System.Timers
System.Timers
_pressedKeys
_pressedKeys
_pressedKeyChars
_pressedKeyChars
_ignoreSpecialKeys
_ignoreSpecialKeys
OnKeyDown
OnKeyDown
get_KeyChar
get_KeyChar
OnKeyPress
OnKeyPress
OnKeyUp
OnKeyUp
HighlightSpecialKeys
HighlightSpecialKeys
System.Resources
System.Resources
System.CodeDom.Compiler
System.CodeDom.Compiler
System.Configuration
System.Configuration
TKey
TKey
System.Runtime.Versioning
System.Runtime.Versioning
$3C374A42-BAE4-11CF-BF7D-00AA006946EE
$3C374A42-BAE4-11CF-BF7D-00AA006946EE
$3C374A41-BAE4-11CF-BF7D-00AA006946EE
$3C374A41-BAE4-11CF-BF7D-00AA006946EE
$AFA0DC11-C313-11D0-831A-00C04FD5AE38
$AFA0DC11-C313-11D0-831A-00C04FD5AE38
$3C374A40-BAE4-11CF-BF7D-00AA006946EE
$3C374A40-BAE4-11CF-BF7D-00AA006946EE
3System.Resources.Tools.StronglyTypedResourceBuilder
3System.Resources.Tools.StronglyTypedResourceBuilder
4.0.0.0
4.0.0.0
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
12.0.0.0
12.0.0.0
Client.Tests
Client.Tests
1.2.0.0
1.2.0.0
).NETFramework,Version=v4.0,Profile=Client
).NETFramework,Version=v4.0,Profile=Client
.NET Framework 4 Client Profile
.NET Framework 4 Client Profile
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
_CorExeMain
_CorExeMain
mscoree.dll
mscoree.dll
$1%`%X&>&
$1%`%X&>&
"!$#&%)( *,*-*.*/*0*2131415161718191>=?=MLQPUTWVkjljnmsrtr|{
"!$#&%)( *,*-*.*/*0*2131415161718191>=?=MLQPUTWVkjljnmsrtr|{
:Zone.Identifier
:Zone.Identifier
(.{2})(.{2})(.{2})(.{2})(.{2})(.{2})
(.{2})(.{2})(.{2})(.{2})(.{2})(.{2})
$1:$2:$3:$4:$5:$6
$1:$2:$3:$4:$5:$6
00:00:00:00:00:00
00:00:00:00:00:00
Mono.Runtime
Mono.Runtime
SELECT Caption FROM Win32_OperatingSystem
SELECT Caption FROM Win32_OperatingSystem
^.*(?=Windows)
^.*(?=Windows)
SELECT * FROM Win32_OperatingSystem WHERE Primary='true'
SELECT * FROM Win32_OperatingSystem WHERE Primary='true'
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run
Software\Microsoft\Windows\CurrentVersion\Run
Software\Microsoft\Windows\CurrentVersion\Run
Multi-dim arrays not supported: {0}
Multi-dim arrays not supported: {0}
Cannot serialize {0}: ISerializable not supported
Cannot serialize {0}: ISerializable not supported
No executable file
No executable file
hXXp://
hXXp://
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A
Visited Website
Visited Website
{0}{4}{1}{4}{2}{4}{3}
{0}{4}{1}{4}{2}{4}{3}
{0} [{1}, {2}]
{0} [{1}, {2}]
{0} ({1}) [{2}, {3}]
{0} ({1}) [{2}, {3}]
SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce
Only on 64-bit systems supported
Only on 64-bit systems supported
URL=file:///
URL=file:///
desktop.ini
desktop.ini
{0}||{1}
{0}||{1}
C# version only supports level 1 and 3
C# version only supports level 1 and 3
Key can not be empty.
Key can not be empty.
{0}\FileZilla\recentservers.xml
{0}\FileZilla\recentservers.xml
{0}\FileZilla\sitemanager.xml
{0}\FileZilla\sitemanager.xml
PublicKeyFile
PublicKeyFile
PortNumber
PortNumber
[PRIVATE KEY LOCATION: "{0}"]
[PRIVATE KEY LOCATION: "{0}"]
ControlKey
ControlKey
Google\Chrome\User Data\Default\Login Data
Google\Chrome\User Data\Default\Login Data
Chrome
Chrome
Google\Chrome\User Data\Default\Cookies
Google\Chrome\User Data\Default\Cookies
Firefox is not installed, or the install path could not be located
Firefox is not installed, or the install path could not be located
Firefox does not have any profiles, has it ever been launched?
Firefox does not have any profiles, has it ever been launched?
logins.json
logins.json
Firefox does not have any logins.json file
Firefox does not have any logins.json file
cookies.sqlite
cookies.sqlite
Firefox does not have any cookie file
Firefox does not have any cookie file
Firefox
Firefox
\firefox.exe
\firefox.exe
35.0.0
35.0.0
\msvcr100.dll
\msvcr100.dll
\msvcp100.dll
\msvcp100.dll
\msvcr120.dll
\msvcr120.dll
\msvcp120.dll
\msvcp120.dll
\mozglue.dll
\mozglue.dll
\nss3.dll
\nss3.dll
\Mozilla\Firefox\Profiles
\Mozilla\Firefox\Profiles
Firefox Application Data folder does not exist!
Firefox Application Data folder does not exist!
No Firefox profiles could be found
No Firefox profiles could be found
No Firefox logins.json was found
No Firefox logins.json was found
SOFTWARE\Mozilla\Mozilla Firefox
SOFTWARE\Mozilla\Mozilla Firefox
SOFTWARE\Wow6432Node\Mozilla\Mozilla Firefox
SOFTWARE\Wow6432Node\Mozilla\Mozilla Firefox
No installs of firefox recorded in its key.
No installs of firefox recorded in its key.
PK11_GetInternalKeySlot
PK11_GetInternalKeySlot
User: {0}{3}Pass: {1}{3}Host: {2}
User: {0}{3}Pass: {1}{3}Host: {2}
Domain: {1}{0}Cookie Name: {2}{0}Value: {3}{0}Path: {4}{0}Expired: {5}{0}HttpOnly: {6}{0}Secure: {7}
Domain: {1}{0}Cookie Name: {2}{0}Value: {3}{0}Path: {4}{0}Expired: {5}{0}HttpOnly: {6}{0}Secure: {7}
origin_url
origin_url
password_value
password_value
host_key
host_key
httponly
httponly
SQLite format 3
SQLite format 3
Not a valid SQLite 3 Database File
Not a valid SQLite 3 Database File
Auto-vacuum capable database is not supported
Auto-vacuum capable database is not supported
Opera Software\Opera Stable\Login Data
Opera Software\Opera Stable\Login Data
Opera
Opera
Opera Software\Opera Stable\Cookies
Opera Software\Opera Stable\Cookies
Yandex\YandexBrowser\User Data\Default\Login Data
Yandex\YandexBrowser\User Data\Default\Login Data
ad.png
ad.png
ae.png
ae.png
af.png
af.png
ag.png
ag.png
ai.png
ai.png
al.png
al.png
am.png
am.png
an.png
an.png
ao.png
ao.png
ar.png
ar.png
as.png
as.png
at.png
at.png
au.png
au.png
aw.png
aw.png
ax.png
ax.png
az.png
az.png
ba.png
ba.png
bb.png
bb.png
bd.png
bd.png
be.png
be.png
bf.png
bf.png
bg.png
bg.png
bh.png
bh.png
bi.png
bi.png
bj.png
bj.png
bm.png
bm.png
bn.png
bn.png
bo.png
bo.png
br.png
br.png
bs.png
bs.png
bt.png
bt.png
bv.png
bv.png
bw.png
bw.png
by.png
by.png
bz.png
bz.png
ca.png
ca.png
catalonia.png
catalonia.png
cc.png
cc.png
cd.png
cd.png
cf.png
cf.png
cg.png
cg.png
ch.png
ch.png
ci.png
ci.png
ck.png
ck.png
cl.png
cl.png
cm.png
cm.png
cn.png
cn.png
co.png
co.png
cr.png
cr.png
cs.png
cs.png
cu.png
cu.png
cv.png
cv.png
cx.png
cx.png
cy.png
cy.png
cz.png
cz.png
de.png
de.png
dj.png
dj.png
dk.png
dk.png
dm.png
dm.png
do.png
do.png
dz.png
dz.png
ec.png
ec.png
ee.png
ee.png
eg.png
eg.png
eh.png
eh.png
england.png
england.png
er.png
er.png
es.png
es.png
et.png
et.png
europeanunion.png
europeanunion.png
fam.png
fam.png
fi.png
fi.png
fj.png
fj.png
fk.png
fk.png
fm.png
fm.png
fo.png
fo.png
fr.png
fr.png
ga.png
ga.png
gb.png
gb.png
gd.png
gd.png
ge.png
ge.png
gf.png
gf.png
gh.png
gh.png
gi.png
gi.png
gl.png
gl.png
gm.png
gm.png
gn.png
gn.png
gp.png
gp.png
gq.png
gq.png
gr.png
gr.png
gs.png
gs.png
gt.png
gt.png
gu.png
gu.png
gw.png
gw.png
gy.png
gy.png
hk.png
hk.png
hm.png
hm.png
hn.png
hn.png
hr.png
hr.png
ht.png
ht.png
hu.png
hu.png
id.png
id.png
ie.png
ie.png
il.png
il.png
in.png
in.png
io.png
io.png
iq.png
iq.png
ir.png
ir.png
is.png
is.png
it.png
it.png
jm.png
jm.png
jo.png
jo.png
jp.png
jp.png
ke.png
ke.png
kg.png
kg.png
kh.png
kh.png
ki.png
ki.png
km.png
km.png
kn.png
kn.png
kp.png
kp.png
kr.png
kr.png
kw.png
kw.png
ky.png
ky.png
kz.png
kz.png
la.png
la.png
lb.png
lb.png
lc.png
lc.png
li.png
li.png
lk.png
lk.png
lr.png
lr.png
ls.png
ls.png
lt.png
lt.png
lu.png
lu.png
lv.png
lv.png
ly.png
ly.png
ma.png
ma.png
mc.png
mc.png
md.png
md.png
me.png
me.png
mg.png
mg.png
mh.png
mh.png
mk.png
mk.png
ml.png
ml.png
mm.png
mm.png
mn.png
mn.png
mo.png
mo.png
mp.png
mp.png
mq.png
mq.png
mr.png
mr.png
ms.png
ms.png
mt.png
mt.png
mu.png
mu.png
mv.png
mv.png
mw.png
mw.png
mx.png
mx.png
my.png
my.png
mz.png
mz.png
na.png
na.png
nc.png
nc.png
ne.png
ne.png
nf.png
nf.png
ng.png
ng.png
ni.png
ni.png
nl.png
nl.png
no.png
no.png
np.png
np.png
nr.png
nr.png
nu.png
nu.png
nz.png
nz.png
om.png
om.png
pa.png
pa.png
pe.png
pe.png
pf.png
pf.png
pg.png
pg.png
ph.png
ph.png
pk.png
pk.png
pl.png
pl.png
pm.png
pm.png
pn.png
pn.png
pr.png
pr.png
ps.png
ps.png
pt.png
pt.png
pw.png
pw.png
py.png
py.png
qa.png
qa.png
re.png
re.png
ro.png
ro.png
rs.png
rs.png
ru.png
ru.png
rw.png
rw.png
sa.png
sa.png
sb.png
sb.png
sc.png
sc.png
scotland.png
scotland.png
sd.png
sd.png
se.png
se.png
sg.png
sg.png
sh.png
sh.png
si.png
si.png
sj.png
sj.png
sk.png
sk.png
sl.png
sl.png
sm.png
sm.png
sn.png
sn.png
so.png
so.png
sr.png
sr.png
st.png
st.png
sv.png
sv.png
sy.png
sy.png
sz.png
sz.png
tc.png
tc.png
td.png
td.png
tf.png
tf.png
tg.png
tg.png
th.png
th.png
tj.png
tj.png
tk.png
tk.png
tl.png
tl.png
tm.png
tm.png
tn.png
tn.png
to.png
to.png
tr.png
tr.png
tt.png
tt.png
tv.png
tv.png
tw.png
tw.png
tz.png
tz.png
ua.png
ua.png
ug.png
ug.png
um.png
um.png
us.png
us.png
uy.png
uy.png
uz.png
uz.png
va.png
va.png
vc.png
vc.png
ve.png
ve.png
vg.png
vg.png
vi.png
vi.png
vn.png
vn.png
vu.png
vu.png
wales.png
wales.png
wf.png
wf.png
ws.png
ws.png
ye.png
ye.png
yt.png
yt.png
za.png
za.png
zm.png
zm.png
zw.png
zw.png
hXXp://telize.com/geoip
hXXp://telize.com/geoip
Mozilla/5.0 (Windows NT 6.3; rv:36.0) Gecko/20100101 Firefox/36.0
Mozilla/5.0 (Windows NT 6.3; rv:36.0) Gecko/20100101 Firefox/36.0
hXXp://freegeoip.net/xml/
hXXp://freegeoip.net/xml/
hXXp://api.ipify.org/
hXXp://api.ipify.org/
Log created on
Log created on
dd.MM.yyyy HH:mm
dd.MM.yyyy HH:mm
xClient.Properties.Resources
xClient.Properties.Resources
Client.exe_2780_rwx_012EC000_0040F000:
.idata
.idata
.edata
.edata
P.reloc
P.reloc
P.rsrc
P.rsrc
.reloc
.reloc
kernel32.dll
kernel32.dll
Windows
Windows
MSWHEEL_ROLLMSG
MSWHEEL_ROLLMSG
MSH_WHEELSUPPORT_MSG
MSH_WHEELSUPPORT_MSG
MSH_SCROLL_LINES_MSG
MSH_SCROLL_LINES_MSG
$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)
$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)
oleaut32.dll
oleaut32.dll
EVariantBadIndexError
EVariantBadIndexError
ssShift
ssShift
htKeyword
htKeyword
EInvalidOperation
EInvalidOperation
u%CNu
u%CNu
%s[%d]
%s[%d]
%s_%d
%s_%d
.Owner
.Owner
W:\3rdparty\ScreamSec\SecUtils.pas
W:\3rdparty\ScreamSec\SecUtils.pas
TCipher.CreateIntf: Algorithm mismatch
TCipher.CreateIntf: Algorithm mismatch
TBlockCipher.CreateIntf: Wrong VectorSize
TBlockCipher.CreateIntf: Wrong VectorSize
Cipher mode not supported
Cipher mode not supported
The vector for %s is %d blocks. Cannot initialize with a %d block vector.
The vector for %s is %d blocks. Cannot initialize with a %d block vector.
The block size for %s is %d bytes and the key is %d bytes. Cannot initialize with a %d block vector.
The block size for %s is %d bytes and the key is %d bytes. Cannot initialize with a %d block vector.
The minimum key and IV size for %s is %d bytes.
The minimum key and IV size for %s is %d bytes.
Not supported
Not supported
TRijndael_PipedPCFB
TRijndael_PipedPCFB
Rijndael: Invalid key size - %d
Rijndael: Invalid key size - %d
2.16.840.1.101.3.4.1.1
2.16.840.1.101.3.4.1.1
2.16.840.1.101.3.4.1.21
2.16.840.1.101.3.4.1.21
2.16.840.1.101.3.4.1.41
2.16.840.1.101.3.4.1.41
1.3.6.1.4.1.13085.1.22
1.3.6.1.4.1.13085.1.22
1.3.6.1.4.1.13085.1.23
1.3.6.1.4.1.13085.1.23
1.3.6.1.4.1.13085.1.24
1.3.6.1.4.1.13085.1.24
2.16.840.1.101.3.4.1.4
2.16.840.1.101.3.4.1.4
2.16.840.1.101.3.4.1.24
2.16.840.1.101.3.4.1.24
2.16.840.1.101.3.4.1.44
2.16.840.1.101.3.4.1.44
1.3.6.1.4.1.13085.1.7
1.3.6.1.4.1.13085.1.7
1.3.6.1.4.1.13085.1.8
1.3.6.1.4.1.13085.1.8
1.3.6.1.4.1.13085.1.9
1.3.6.1.4.1.13085.1.9
1.3.6.1.4.1.13085.1.4
1.3.6.1.4.1.13085.1.4
1.3.6.1.4.1.13085.1.5
1.3.6.1.4.1.13085.1.5
1.3.6.1.4.1.13085.1.6
1.3.6.1.4.1.13085.1.6
1.3.6.1.4.1.13085.1.10
1.3.6.1.4.1.13085.1.10
1.3.6.1.4.1.13085.1.11
1.3.6.1.4.1.13085.1.11
1.3.6.1.4.1.13085.1.12
1.3.6.1.4.1.13085.1.12
1.3.6.1.4.1.13085.1.1
1.3.6.1.4.1.13085.1.1
1.3.6.1.4.1.13085.1.2
1.3.6.1.4.1.13085.1.2
1.3.6.1.4.1.13085.1.3
1.3.6.1.4.1.13085.1.3
1.3.6.1.4.1.13085.1.16
1.3.6.1.4.1.13085.1.16
1.3.6.1.4.1.13085.1.17
1.3.6.1.4.1.13085.1.17
1.3.6.1.4.1.13085.1.18
1.3.6.1.4.1.13085.1.18
2.16.840.1.101.3.4.1.2
2.16.840.1.101.3.4.1.2
2.16.840.1.101.3.4.1.22
2.16.840.1.101.3.4.1.22
2.16.840.1.101.3.4.1.42
2.16.840.1.101.3.4.1.42
1.3.6.1.4.1.13085.1.19
1.3.6.1.4.1.13085.1.19
1.3.6.1.4.1.13085.1.20
1.3.6.1.4.1.13085.1.20
1.3.6.1.4.1.13085.1.21
1.3.6.1.4.1.13085.1.21
2.16.840.1.101.3.4.1.3
2.16.840.1.101.3.4.1.3
2.16.840.1.101.3.4.1.23
2.16.840.1.101.3.4.1.23
2.16.840.1.101.3.4.1.43
2.16.840.1.101.3.4.1.43
2.16.840.1.101.3.4.1.5
2.16.840.1.101.3.4.1.5
2.16.840.1.101.3.4.1.25
2.16.840.1.101.3.4.1.25
2.16.840.1.101.3.4.1.45
2.16.840.1.101.3.4.1.45
/* Dr Brian Gladman (gladman@seven77.demon.co.uk) 14th January 1999 */
/* Dr Brian Gladman (gladman@seven77.demon.co.uk) 14th January 1999 */
TGenerator.Create: Cipher mode must be cmCTR.
TGenerator.Create: Cipher mode must be cmCTR.
TMPPool.CheckThreadID: Called from the wrong thread.
TMPPool.CheckThreadID: Called from the wrong thread.
TMPPool.Cache: Invalid pointer
TMPPool.Cache: Invalid pointer
TMPPool.Obtain: Out of memory
TMPPool.Obtain: Out of memory
TMPPool.InternalCheck: Invalid pointer
TMPPool.InternalCheck: Invalid pointer
Portugal
Portugal
Turkey
Turkey
TKeyVerifyParams
TKeyVerifyParams
12345678-
12345678-
Windows 95
Windows 95
WIN_VER_WINDOWS95
WIN_VER_WINDOWS95
Windows 95 OSR2
Windows 95 OSR2
WIN_VER_WINDOWS95OSR2
WIN_VER_WINDOWS95OSR2
Windows 98
Windows 98
WIN_VER_WINDOWS98
WIN_VER_WINDOWS98
Windows 98 SE
Windows 98 SE
WIN_VER_WINDOWS98SE
WIN_VER_WINDOWS98SE
Windows ME
Windows ME
WIN_VER_WINDOWSME
WIN_VER_WINDOWSME
Windows 2000
Windows 2000
WIN_VER_WINDOWS2000
WIN_VER_WINDOWS2000
Windows 2000 Professional
Windows 2000 Professional
WIN_VER_WINDOWS2000PROF
WIN_VER_WINDOWS2000PROF
Windows 2000 Data Server
Windows 2000 Data Server
WIN_VER_WINDOWS2000DATASERVER
WIN_VER_WINDOWS2000DATASERVER
Windows 2000 Advanced Server
Windows 2000 Advanced Server
WIN_VER_WINDOWS2000ADVSERVER
WIN_VER_WINDOWS2000ADVSERVER
Windows 2000 Server
Windows 2000 Server
WIN_VER_WINDOWS2000SERVER
WIN_VER_WINDOWS2000SERVER
Windows XP
Windows XP
WIN_VER_WINDOWSXP
WIN_VER_WINDOWSXP
Windows XP Home
Windows XP Home
WIN_VER_WINDOWSXPHOME
WIN_VER_WINDOWSXPHOME
Windows XP Professional
Windows XP Professional
WIN_VER_WINDOWSXPPROF
WIN_VER_WINDOWSXPPROF
Windows XP Professional x64
Windows XP Professional x64
WIN_VER_WINDOWSXPPROFx64
WIN_VER_WINDOWSXPPROFx64
Windows XP Professional Datacenter x64
Windows XP Professional Datacenter x64
WIN_VER_WINDOWSXPPROFDATACENTERx64
WIN_VER_WINDOWSXPPROFDATACENTERx64
Windows XP Professional Enterprise x64
Windows XP Professional Enterprise x64
WIN_VER_WINDOWSXPPROFENERPRICEx64
WIN_VER_WINDOWSXPPROFENERPRICEx64
Windows XP Professional Standart x64
Windows XP Professional Standart x64
WIN_VER_WINDOWSXPPROFSTANDARTx64
WIN_VER_WINDOWSXPPROFSTANDARTx64
Windows 2003
Windows 2003
Windows 2003 Server
Windows 2003 Server
WIN_VER_WINDOWS2003SERVER
WIN_VER_WINDOWS2003SERVER
Windows 2003 Server R2
Windows 2003 Server R2
WIN_VER_WINDOWS2003SERVERR2
WIN_VER_WINDOWS2003SERVERR2
Windows 2003 Storage Server
Windows 2003 Storage Server
WIN_VER_WINDOWS2003STORAGESERVER
WIN_VER_WINDOWS2003STORAGESERVER
Windows 2003 Datacenter Itanium
Windows 2003 Datacenter Itanium
WIN_VER_WINDOWS2003DATACENTERITANIUM
WIN_VER_WINDOWS2003DATACENTERITANIUM
Windows 2003 Enterprise Itanium
Windows 2003 Enterprise Itanium
WIN_VER_WINDOWS2003ENTERPRICEITANIUM
WIN_VER_WINDOWS2003ENTERPRICEITANIUM
Windows 2003 Datacenter x64
Windows 2003 Datacenter x64
WIN_VER_WINDOWS2003DATACENTERx64
WIN_VER_WINDOWS2003DATACENTERx64
Windows 2003 Enterprise x64
Windows 2003 Enterprise x64
WIN_VER_WINDOWS2003ENERPRICEx64
WIN_VER_WINDOWS2003ENERPRICEx64
Windows 2003 Standart x64
Windows 2003 Standart x64
WIN_VER_WINDOWS2003STANDARTx64
WIN_VER_WINDOWS2003STANDARTx64
Windows 2003 Compute
Windows 2003 Compute
WIN_VER_WINDOWS2003COMPUTE
WIN_VER_WINDOWS2003COMPUTE
Windows 2003 Datacenter
Windows 2003 Datacenter
WIN_VER_WINDOWS2003DATACENTER
WIN_VER_WINDOWS2003DATACENTER
Windows 2003 Enterprise
Windows 2003 Enterprise
WIN_VER_WINDOWS2003ENTERPRICE
WIN_VER_WINDOWS2003ENTERPRICE
Windows 2003 Web
Windows 2003 Web
WIN_VER_WINDOWS2003WEB
WIN_VER_WINDOWS2003WEB
Windows 2003 Standart
Windows 2003 Standart
WIN_VER_WINDOWS2003STANDART
WIN_VER_WINDOWS2003STANDART
Windows Vista
Windows Vista
WIN_VER_WINDOWSVISTA
WIN_VER_WINDOWSVISTA
Windows Vista Business
Windows Vista Business
WIN_VER_WINDOWSVISTA_BUSINESS
WIN_VER_WINDOWSVISTA_BUSINESS
Windows Vista Cluster Server
Windows Vista Cluster Server
WIN_VER_WINDOWSVISTA_CLUSTER_SERVER
WIN_VER_WINDOWSVISTA_CLUSTER_SERVER
Windows Vista Datacenter Server
Windows Vista Datacenter Server
WIN_VER_WINDOWSVISTA_DATACENTER_SERVER
WIN_VER_WINDOWSVISTA_DATACENTER_SERVER
Windows Vista Datacenter Server Core
Windows Vista Datacenter Server Core
WIN_VER_WINDOWSVISTA_DATACENTER_SERVER_CORE
WIN_VER_WINDOWSVISTA_DATACENTER_SERVER_CORE
Windows Vista Datacenter Server Core V
Windows Vista Datacenter Server Core V
WIN_VER_WINDOWSVISTA_DATACENTER_SERVER_CORE_V
WIN_VER_WINDOWSVISTA_DATACENTER_SERVER_CORE_V
Windows Vista Datacenter Server V
Windows Vista Datacenter Server V
WIN_VER_WINDOWSVISTA_DATACENTER_SERVER_V
WIN_VER_WINDOWSVISTA_DATACENTER_SERVER_V
Windows Vista Enterprise
Windows Vista Enterprise
WIN_VER_WINDOWSVISTA_ENTERPRICE
WIN_VER_WINDOWSVISTA_ENTERPRICE
Windows Vista Enterprise Server
Windows Vista Enterprise Server
WIN_VER_WINDOWSVISTA_ENTERPRISE_SERVER
WIN_VER_WINDOWSVISTA_ENTERPRISE_SERVER
Windows Vista Enterprise Server Core
Windows Vista Enterprise Server Core
WIN_VER_WINDOWSVISTA_ENTERPRISE_SERVER_CORE
WIN_VER_WINDOWSVISTA_ENTERPRISE_SERVER_CORE
Windows Vista Enterprise Server V
Windows Vista Enterprise Server V
WIN_VER_WINDOWSVISTA_ENTERPRISE_SERVER_V
WIN_VER_WINDOWSVISTA_ENTERPRISE_SERVER_V
Windows Vista Enterprise Server Core V
Windows Vista Enterprise Server Core V
WIN_VER_WINDOWSVISTA_ENTERPRISE_SERVER_CORE_V
WIN_VER_WINDOWSVISTA_ENTERPRISE_SERVER_CORE_V
Windows Vista Enterprise Server IA64
Windows Vista Enterprise Server IA64
WIN_VER_WINDOWSVISTA_ENTERPRISE_SERVER_IA64
WIN_VER_WINDOWSVISTA_ENTERPRISE_SERVER_IA64
Windows Vista Home Basic
Windows Vista Home Basic
WIN_VER_WINDOWSVISTA_HOME_BASIC
WIN_VER_WINDOWSVISTA_HOME_BASIC
Windows Vista Home Premium
Windows Vista Home Premium
WIN_VER_WINDOWSVISTA_HOME_PREMIUM
WIN_VER_WINDOWSVISTA_HOME_PREMIUM
Windows Vista Home Server
Windows Vista Home Server
WIN_VER_WINDOWSVISTA_HOME_SERVER
WIN_VER_WINDOWSVISTA_HOME_SERVER
Windows Vista Server For Small Business
Windows Vista Server For Small Business
WIN_VER_WINDOWSVISTA_SERVER_FOR_SMALLBUSINESS
WIN_VER_WINDOWSVISTA_SERVER_FOR_SMALLBUSINESS
Windows Vista Small Business Server
Windows Vista Small Business Server
WIN_VER_WINDOWSVISTA_SMALLBUSINESS_SERVER
WIN_VER_WINDOWSVISTA_SMALLBUSINESS_SERVER
Windows Vista Small Business Server Premium
Windows Vista Small Business Server Premium
WIN_VER_WINDOWSVISTA_SMALLBUSINESS_SERVER_PREMIUM
WIN_VER_WINDOWSVISTA_SMALLBUSINESS_SERVER_PREMIUM
Windows Vista Medium Business Server Management
Windows Vista Medium Business Server Management
WIN_VER_WINDOWSVISTA_MEDIUMBUSINESS_SERVER_MANAGEMENT
WIN_VER_WINDOWSVISTA_MEDIUMBUSINESS_SERVER_MANAGEMENT
Windows Vista Medium Business Server Messaging
Windows Vista Medium Business Server Messaging
WIN_VER_WINDOWSVISTA_MEDIUMBUSINESS_SERVER_MESSAGING
WIN_VER_WINDOWSVISTA_MEDIUMBUSINESS_SERVER_MESSAGING
Windows Vista Medium Business Server Security
Windows Vista Medium Business Server Security
WIN_VER_WINDOWSVISTA_MEDIUMBUSINESS_SERVER_SECURITY
WIN_VER_WINDOWSVISTA_MEDIUMBUSINESS_SERVER_SECURITY
Windows Vista Standard Server
Windows Vista Standard Server
WIN_VER_WINDOWSVISTA_STANDARD_SERVER
WIN_VER_WINDOWSVISTA_STANDARD_SERVER
Windows Vista Standard Server V
Windows Vista Standard Server V
WIN_VER_WINDOWSVISTA_STANDARD_SERVER_V
WIN_VER_WINDOWSVISTA_STANDARD_SERVER_V
Windows Vista Standard Server Core
Windows Vista Standard Server Core
WIN_VER_WINDOWSVISTA_STANDARD_SERVER_CORE
WIN_VER_WINDOWSVISTA_STANDARD_SERVER_CORE
Windows Vista Standard Server Core V
Windows Vista Standard Server Core V
WIN_VER_WINDOWSVISTA_STANDARD_SERVER_CORE_V
WIN_VER_WINDOWSVISTA_STANDARD_SERVER_CORE_V
Windows Vista Starter
Windows Vista Starter
WIN_VER_WINDOWSVISTA_STARTER
WIN_VER_WINDOWSVISTA_STARTER
Windows Vista Storage Enterprise Server
Windows Vista Storage Enterprise Server
WIN_VER_WINDOWSVISTA_STORAGE_ENTERPRISE_SERVER
WIN_VER_WINDOWSVISTA_STORAGE_ENTERPRISE_SERVER
Windows Vista Storage Express Server
Windows Vista Storage Express Server
WIN_VER_WINDOWSVISTA_STORAGE_EXPRESS_SERVER
WIN_VER_WINDOWSVISTA_STORAGE_EXPRESS_SERVER
Windows Vista Storage Standard Server
Windows Vista Storage Standard Server
WIN_VER_WINDOWSVISTA_STORAGE_STANDARD_SERVER
WIN_VER_WINDOWSVISTA_STORAGE_STANDARD_SERVER
Windows Vista Storage Workgroup Server
Windows Vista Storage Workgroup Server
WIN_VER_WINDOWSVISTA_STORAGE_WORKGROUP_SERVER
WIN_VER_WINDOWSVISTA_STORAGE_WORKGROUP_SERVER
Windows Vista Undefined
Windows Vista Undefined
WIN_VER_WINDOWSVISTA_UNDEFINED
WIN_VER_WINDOWSVISTA_UNDEFINED
Windows Vista Ultimate
Windows Vista Ultimate
WIN_VER_WINDOWSVISTA_ULTIMATE
WIN_VER_WINDOWSVISTA_ULTIMATE
Windows Vista Web Server
Windows Vista Web Server
WIN_VER_WINDOWSVISTA_WEB_SERVER
WIN_VER_WINDOWSVISTA_WEB_SERVER
Windows Vista Web Server Core
Windows Vista Web Server Core
WIN_VER_WINDOWSVISTA_WEB_SERVER_CORE
WIN_VER_WINDOWSVISTA_WEB_SERVER_CORE
Windows Vista Unlicensed
Windows Vista Unlicensed
WIN_VER_WINDOWSVISTA_UNLICENSED
WIN_VER_WINDOWSVISTA_UNLICENSED
Windows 2008
Windows 2008
WIN_VER_WINDOWS2008
WIN_VER_WINDOWS2008
Windows 2008 Business
Windows 2008 Business
WIN_VER_WINDOWS2008_BUSINESS
WIN_VER_WINDOWS2008_BUSINESS
Windows 2008 Cluster Server
Windows 2008 Cluster Server
WIN_VER_WINDOWS2008_CLUSTER_SERVER
WIN_VER_WINDOWS2008_CLUSTER_SERVER
Windows 2008 Datacenter Server
Windows 2008 Datacenter Server
WIN_VER_WINDOWS2008_DATACENTER_SERVER
WIN_VER_WINDOWS2008_DATACENTER_SERVER
Windows 2008 Datacenter Server Core
Windows 2008 Datacenter Server Core
WIN_VER_WINDOWS2008_DATACENTER_SERVER_CORE
WIN_VER_WINDOWS2008_DATACENTER_SERVER_CORE
Windows 2008 Datacenter Server Core V
Windows 2008 Datacenter Server Core V
WIN_VER_WINDOWS2008_DATACENTER_SERVER_CORE_V
WIN_VER_WINDOWS2008_DATACENTER_SERVER_CORE_V
Windows 2008 Datacenter Server V
Windows 2008 Datacenter Server V
WIN_VER_WINDOWS2008_DATACENTER_SERVER_V
WIN_VER_WINDOWS2008_DATACENTER_SERVER_V
Windows 2008 Enterprise
Windows 2008 Enterprise
WIN_VER_WINDOWS2008_ENTERPRICE
WIN_VER_WINDOWS2008_ENTERPRICE
Windows 2008 Enterprise Server
Windows 2008 Enterprise Server
WIN_VER_WINDOWS2008_ENTERPRISE_SERVER
WIN_VER_WINDOWS2008_ENTERPRISE_SERVER
Windows 2008 Enterprise Server Core
Windows 2008 Enterprise Server Core
WIN_VER_WINDOWS2008_ENTERPRISE_SERVER_CORE
WIN_VER_WINDOWS2008_ENTERPRISE_SERVER_CORE
Windows 2008 Enterprise Server V
Windows 2008 Enterprise Server V
WIN_VER_WINDOWS2008_ENTERPRISE_SERVER_V
WIN_VER_WINDOWS2008_ENTERPRISE_SERVER_V
Windows 2008 Enterprise Server Core V
Windows 2008 Enterprise Server Core V
WIN_VER_WINDOWS2008_ENTERPRISE_SERVER_CORE_V
WIN_VER_WINDOWS2008_ENTERPRISE_SERVER_CORE_V
Windows 2008 Enterprise Server IA64
Windows 2008 Enterprise Server IA64
WIN_VER_WINDOWS2008_ENTERPRISE_SERVER_IA64
WIN_VER_WINDOWS2008_ENTERPRISE_SERVER_IA64
Windows 2008 Home Basic
Windows 2008 Home Basic
WIN_VER_WINDOWS2008_HOME_BASIC
WIN_VER_WINDOWS2008_HOME_BASIC
Windows 2008 Home Premium
Windows 2008 Home Premium
WIN_VER_WINDOWS2008_HOME_PREMIUM
WIN_VER_WINDOWS2008_HOME_PREMIUM
Windows 2008 Home Server
Windows 2008 Home Server
WIN_VER_WINDOWS2008_HOME_SERVER
WIN_VER_WINDOWS2008_HOME_SERVER
Windows 2008 Server For Small Business
Windows 2008 Server For Small Business
WIN_VER_WINDOWS2008_SERVER_FOR_SMALLBUSINESS
WIN_VER_WINDOWS2008_SERVER_FOR_SMALLBUSINESS
Windows 2008 Small Business Server
Windows 2008 Small Business Server
WIN_VER_WINDOWS2008_SMALLBUSINESS_SERVER
WIN_VER_WINDOWS2008_SMALLBUSINESS_SERVER
Windows 2008 Small Business Server Premium
Windows 2008 Small Business Server Premium
WIN_VER_WINDOWS2008_SMALLBUSINESS_SERVER_PREMIUM
WIN_VER_WINDOWS2008_SMALLBUSINESS_SERVER_PREMIUM
Windows 2008 Medium Business Server Management
Windows 2008 Medium Business Server Management
WIN_VER_WINDOWS2008_MEDIUMBUSINESS_SERVER_MANAGEMENT
WIN_VER_WINDOWS2008_MEDIUMBUSINESS_SERVER_MANAGEMENT
Windows 2008 Medium Business Server Messaging
Windows 2008 Medium Business Server Messaging
WIN_VER_WINDOWS2008_MEDIUMBUSINESS_SERVER_MESSAGING
WIN_VER_WINDOWS2008_MEDIUMBUSINESS_SERVER_MESSAGING
Windows 2008 Medium Business Server Security
Windows 2008 Medium Business Server Security
WIN_VER_WINDOWS2008_MEDIUMBUSINESS_SERVER_SECURITY
WIN_VER_WINDOWS2008_MEDIUMBUSINESS_SERVER_SECURITY
Windows 2008 Standard Server
Windows 2008 Standard Server
WIN_VER_WINDOWS2008_STANDARD_SERVER
WIN_VER_WINDOWS2008_STANDARD_SERVER
Windows 2008 Standard Server V
Windows 2008 Standard Server V
WIN_VER_WINDOWS2008_STANDARD_SERVER_V
WIN_VER_WINDOWS2008_STANDARD_SERVER_V
Windows 2008 Standard Server Core
Windows 2008 Standard Server Core
WIN_VER_WINDOWS2008_STANDARD_SERVER_CORE
WIN_VER_WINDOWS2008_STANDARD_SERVER_CORE
Windows 2008 Standard Server Core V
Windows 2008 Standard Server Core V
WIN_VER_WINDOWS2008_STANDARD_SERVER_CORE_V
WIN_VER_WINDOWS2008_STANDARD_SERVER_CORE_V
Windows 2008 Starter
Windows 2008 Starter
WIN_VER_WINDOWS2008_STARTER
WIN_VER_WINDOWS2008_STARTER
Windows 2008 Storage Enterprise Server
Windows 2008 Storage Enterprise Server
WIN_VER_WINDOWS2008_STORAGE_ENTERPRISE_SERVER
WIN_VER_WINDOWS2008_STORAGE_ENTERPRISE_SERVER
Windows 2008 Storage Express Server
Windows 2008 Storage Express Server
WIN_VER_WINDOWS2008_STORAGE_EXPRESS_SERVER
WIN_VER_WINDOWS2008_STORAGE_EXPRESS_SERVER
Windows 2008 Storage Standard Server
Windows 2008 Storage Standard Server
WIN_VER_WINDOWS2008_STORAGE_STANDARD_SERVER
WIN_VER_WINDOWS2008_STORAGE_STANDARD_SERVER
Windows 2008 Storage Workgroup Server
Windows 2008 Storage Workgroup Server
WIN_VER_WINDOWS2008_STORAGE_WORKGROUP_SERVER
WIN_VER_WINDOWS2008_STORAGE_WORKGROUP_SERVER
Windows 2008 Undefined
Windows 2008 Undefined
WIN_VER_WINDOWS2008_UNDEFINED
WIN_VER_WINDOWS2008_UNDEFINED
Windows 2008 Ultimate
Windows 2008 Ultimate
WIN_VER_WINDOWS2008_ULTIMATE
WIN_VER_WINDOWS2008_ULTIMATE
Windows 2008 Web Server
Windows 2008 Web Server
WIN_VER_WINDOWS2008_WEB_SERVER
WIN_VER_WINDOWS2008_WEB_SERVER
Windows 2008 Web Server Core
Windows 2008 Web Server Core
WIN_VER_WINDOWS2008_WEB_SERVER_CORE
WIN_VER_WINDOWS2008_WEB_SERVER_CORE
Windows 2008 Unlicensed
Windows 2008 Unlicensed
WIN_VER_WINDOWS2008_UNLICENSED
WIN_VER_WINDOWS2008_UNLICENSED
Windows 2008 R2
Windows 2008 R2
WIN_VER_WINDOWS2008R2
WIN_VER_WINDOWS2008R2
Windows 2008 R2 Business
Windows 2008 R2 Business
WIN_VER_WINDOWS2008R2_BUSINESS
WIN_VER_WINDOWS2008R2_BUSINESS
Windows 2008 R2 Cluster Server
Windows 2008 R2 Cluster Server
WIN_VER_WINDOWS2008R2_CLUSTER_SERVER
WIN_VER_WINDOWS2008R2_CLUSTER_SERVER
Windows 2008 R2 Datacenter Server
Windows 2008 R2 Datacenter Server
WIN_VER_WINDOWS2008R2_DATACENTER_SERVER
WIN_VER_WINDOWS2008R2_DATACENTER_SERVER
Windows 2008 R2 Datacenter Server Core
Windows 2008 R2 Datacenter Server Core
WIN_VER_WINDOWS2008R2_DATACENTER_SERVER_CORE
WIN_VER_WINDOWS2008R2_DATACENTER_SERVER_CORE
Windows 2008 R2 Datacenter Server Core V
Windows 2008 R2 Datacenter Server Core V
WIN_VER_WINDOWS2008R2_DATACENTER_SERVER_CORE_V
WIN_VER_WINDOWS2008R2_DATACENTER_SERVER_CORE_V
Windows 2008 R2 Datacenter Server V
Windows 2008 R2 Datacenter Server V
WIN_VER_WINDOWS2008R2_DATACENTER_SERVER_V
WIN_VER_WINDOWS2008R2_DATACENTER_SERVER_V
Windows 2008 R2 Enterprise
Windows 2008 R2 Enterprise
WIN_VER_WINDOWS2008R2_ENTERPRICE
WIN_VER_WINDOWS2008R2_ENTERPRICE
Windows 2008 R2 Enterprise Server
Windows 2008 R2 Enterprise Server
WIN_VER_WINDOWS2008R2_ENTERPRISE_SERVER
WIN_VER_WINDOWS2008R2_ENTERPRISE_SERVER
Windows 2008 R2 Enterprise Server Core
Windows 2008 R2 Enterprise Server Core
WIN_VER_WINDOWS2008R2_ENTERPRISE_SERVER_CORE
WIN_VER_WINDOWS2008R2_ENTERPRISE_SERVER_CORE
Windows 2008 R2 Enterprise Server V
Windows 2008 R2 Enterprise Server V
WIN_VER_WINDOWS2008R2_ENTERPRISE_SERVER_V
WIN_VER_WINDOWS2008R2_ENTERPRISE_SERVER_V
Windows 2008 R2 Enterprise Server Core V
Windows 2008 R2 Enterprise Server Core V
WIN_VER_WINDOWS2008R2_ENTERPRISE_SERVER_CORE_V
WIN_VER_WINDOWS2008R2_ENTERPRISE_SERVER_CORE_V
Windows 2008 R2 Enterprise Server IA64
Windows 2008 R2 Enterprise Server IA64
WIN_VER_WINDOWS2008R2_ENTERPRISE_SERVER_IA64
WIN_VER_WINDOWS2008R2_ENTERPRISE_SERVER_IA64
Windows 2008 R2 Home Basic
Windows 2008 R2 Home Basic
WIN_VER_WINDOWS2008R2_HOME_BASIC
WIN_VER_WINDOWS2008R2_HOME_BASIC
Windows 2008 R2 Home Premium
Windows 2008 R2 Home Premium
WIN_VER_WINDOWS2008R2_HOME_PREMIUM
WIN_VER_WINDOWS2008R2_HOME_PREMIUM
Windows 2008 R2 Home Server
Windows 2008 R2 Home Server
WIN_VER_WINDOWS2008R2_HOME_SERVER
WIN_VER_WINDOWS2008R2_HOME_SERVER
Windows 2008 R2 Server For Small Business
Windows 2008 R2 Server For Small Business
WIN_VER_WINDOWS2008R2_SERVER_FOR_SMALLBUSINESS
WIN_VER_WINDOWS2008R2_SERVER_FOR_SMALLBUSINESS
Windows 2008 R2 Small Business Server
Windows 2008 R2 Small Business Server
WIN_VER_WINDOWS2008R2_SMALLBUSINESS_SERVER
WIN_VER_WINDOWS2008R2_SMALLBUSINESS_SERVER
Windows 2008 R2 Small Business Server Premium
Windows 2008 R2 Small Business Server Premium
WIN_VER_WINDOWS2008R2_SMALLBUSINESS_SERVER_PREMIUM
WIN_VER_WINDOWS2008R2_SMALLBUSINESS_SERVER_PREMIUM
Windows 2008 R2 Medium Business Server Management
Windows 2008 R2 Medium Business Server Management
WIN_VER_WINDOWS2008R2_MEDIUMBUSINESS_SERVER_MANAGEMENT
WIN_VER_WINDOWS2008R2_MEDIUMBUSINESS_SERVER_MANAGEMENT
Windows 2008 R2 Medium Business Server Messaging
Windows 2008 R2 Medium Business Server Messaging
WIN_VER_WINDOWS2008R2_MEDIUMBUSINESS_SERVER_MESSAGING
WIN_VER_WINDOWS2008R2_MEDIUMBUSINESS_SERVER_MESSAGING
Windows 2008 R2 Medium Business Server Security
Windows 2008 R2 Medium Business Server Security
WIN_VER_WINDOWS2008R2_MEDIUMBUSINESS_SERVER_SECURITY
WIN_VER_WINDOWS2008R2_MEDIUMBUSINESS_SERVER_SECURITY
Windows 2008 R2 Standard Server
Windows 2008 R2 Standard Server
WIN_VER_WINDOWS2008R2_STANDARD_SERVER
WIN_VER_WINDOWS2008R2_STANDARD_SERVER
Windows 2008 R2 Standard Server V
Windows 2008 R2 Standard Server V
WIN_VER_WINDOWS2008R2_STANDARD_SERVER_V
WIN_VER_WINDOWS2008R2_STANDARD_SERVER_V
Windows 2008 R2 Standard Server Core
Windows 2008 R2 Standard Server Core
WIN_VER_WINDOWS2008R2_STANDARD_SERVER_CORE
WIN_VER_WINDOWS2008R2_STANDARD_SERVER_CORE
Windows 2008 R2 Standard Server Core V
Windows 2008 R2 Standard Server Core V
WIN_VER_WINDOWS2008R2_STANDARD_SERVER_CORE_V
WIN_VER_WINDOWS2008R2_STANDARD_SERVER_CORE_V
Windows 2008 R2 Starter
Windows 2008 R2 Starter
WIN_VER_WINDOWS2008R2_STARTER
WIN_VER_WINDOWS2008R2_STARTER
Windows 2008 R2 Storage Enterprise Server
Windows 2008 R2 Storage Enterprise Server
WIN_VER_WINDOWS2008R2_STORAGE_ENTERPRISE_SERVER
WIN_VER_WINDOWS2008R2_STORAGE_ENTERPRISE_SERVER
Windows 2008 R2 Storage Express Server
Windows 2008 R2 Storage Express Server
WIN_VER_WINDOWS2008R2_STORAGE_EXPRESS_SERVER
WIN_VER_WINDOWS2008R2_STORAGE_EXPRESS_SERVER
Windows 2008 R2 Storage Standard Server
Windows 2008 R2 Storage Standard Server
WIN_VER_WINDOWS2008R2_STORAGE_STANDARD_SERVER
WIN_VER_WINDOWS2008R2_STORAGE_STANDARD_SERVER
Windows 2008 R2 Storage Workgroup Server
Windows 2008 R2 Storage Workgroup Server
WIN_VER_WINDOWS2008R2_STORAGE_WORKGROUP_SERVER
WIN_VER_WINDOWS2008R2_STORAGE_WORKGROUP_SERVER
Windows 2008 R2 Undefined
Windows 2008 R2 Undefined
WIN_VER_WINDOWS2008R2_UNDEFINED
WIN_VER_WINDOWS2008R2_UNDEFINED
Windows 2008 R2 Ultimate
Windows 2008 R2 Ultimate
WIN_VER_WINDOWS2008R2_ULTIMATE
WIN_VER_WINDOWS2008R2_ULTIMATE
Windows 2008 R2 Web Server
Windows 2008 R2 Web Server
WIN_VER_WINDOWS2008R2_WEB_SERVER
WIN_VER_WINDOWS2008R2_WEB_SERVER
Windows 2008 R2 Web Server Core
Windows 2008 R2 Web Server Core
WIN_VER_WINDOWS2008R2_WEB_SERVER_CORE
WIN_VER_WINDOWS2008R2_WEB_SERVER_CORE
Windows 2008 R2 Unlicensed
Windows 2008 R2 Unlicensed
WIN_VER_WINDOWS2008R2_UNLICENSED
WIN_VER_WINDOWS2008R2_UNLICENSED
Windows 7
Windows 7
WIN_VER_WINDOWSSEVEN
WIN_VER_WINDOWSSEVEN
Windows 7 Business
Windows 7 Business
WIN_VER_WINDOWSSEVEN_BUSINESS
WIN_VER_WINDOWSSEVEN_BUSINESS
Windows 7 Cluster Server
Windows 7 Cluster Server
WIN_VER_WINDOWSSEVEN_CLUSTER_SERVER
WIN_VER_WINDOWSSEVEN_CLUSTER_SERVER
Windows 7 Datacenter Server
Windows 7 Datacenter Server
WIN_VER_WINDOWSSEVEN_DATACENTER_SERVER
WIN_VER_WINDOWSSEVEN_DATACENTER_SERVER
Windows 7 Datacenter Server Core
Windows 7 Datacenter Server Core
WIN_VER_WINDOWSSEVEN_DATACENTER_SERVER_CORE
WIN_VER_WINDOWSSEVEN_DATACENTER_SERVER_CORE
Windows 7 Datacenter Server Core V
Windows 7 Datacenter Server Core V
WIN_VER_WINDOWSSEVEN_DATACENTER_SERVER_CORE_V
WIN_VER_WINDOWSSEVEN_DATACENTER_SERVER_CORE_V
Windows 7 Datacenter Server V
Windows 7 Datacenter Server V
WIN_VER_WINDOWSSEVEN_DATACENTER_SERVER_V
WIN_VER_WINDOWSSEVEN_DATACENTER_SERVER_V
Windows 7 Enterprise
Windows 7 Enterprise
WIN_VER_WINDOWSSEVEN_ENTERPRICE
WIN_VER_WINDOWSSEVEN_ENTERPRICE
Windows 7 Enterprise Server
Windows 7 Enterprise Server
WIN_VER_WINDOWSSEVEN_ENTERPRISE_SERVER
WIN_VER_WINDOWSSEVEN_ENTERPRISE_SERVER
Windows 7 Enterprise Server Core
Windows 7 Enterprise Server Core
WIN_VER_WINDOWSSEVEN_ENTERPRISE_SERVER_CORE
WIN_VER_WINDOWSSEVEN_ENTERPRISE_SERVER_CORE
Windows 7 Enterprise Server V
Windows 7 Enterprise Server V
WIN_VER_WINDOWSSEVEN_ENTERPRISE_SERVER_V
WIN_VER_WINDOWSSEVEN_ENTERPRISE_SERVER_V
Windows 7 Enterprise Server Core V
Windows 7 Enterprise Server Core V
WIN_VER_WINDOWSSEVEN_ENTERPRISE_SERVER_CORE_V
WIN_VER_WINDOWSSEVEN_ENTERPRISE_SERVER_CORE_V
Windows 7 Enterprise Server IA64
Windows 7 Enterprise Server IA64
WIN_VER_WINDOWSSEVEN_ENTERPRISE_SERVER_IA64
WIN_VER_WINDOWSSEVEN_ENTERPRISE_SERVER_IA64
Windows 7 Home Basic
Windows 7 Home Basic
WIN_VER_WINDOWSSEVEN_HOME_BASIC
WIN_VER_WINDOWSSEVEN_HOME_BASIC
Windows 7 Home Premium
Windows 7 Home Premium
WIN_VER_WINDOWSSEVEN_HOME_PREMIUM
WIN_VER_WINDOWSSEVEN_HOME_PREMIUM
Windows 7 Home Server
Windows 7 Home Server
WIN_VER_WINDOWSSEVEN_HOME_SERVER
WIN_VER_WINDOWSSEVEN_HOME_SERVER
Windows 7 Server For Small Business
Windows 7 Server For Small Business
WIN_VER_WINDOWSSEVEN_SERVER_FOR_SMALLBUSINESS
WIN_VER_WINDOWSSEVEN_SERVER_FOR_SMALLBUSINESS
Windows 7 Small Business Server
Windows 7 Small Business Server
WIN_VER_WINDOWSSEVEN_SMALLBUSINESS_SERVER
WIN_VER_WINDOWSSEVEN_SMALLBUSINESS_SERVER
Windows 7 Small Business Server Premium
Windows 7 Small Business Server Premium
WIN_VER_WINDOWSSEVEN_SMALLBUSINESS_SERVER_PREMIUM
WIN_VER_WINDOWSSEVEN_SMALLBUSINESS_SERVER_PREMIUM
Windows 7 Medium Business Server Management
Windows 7 Medium Business Server Management
WIN_VER_WINDOWSSEVEN_MEDIUMBUSINESS_SERVER_MANAGEMENT
WIN_VER_WINDOWSSEVEN_MEDIUMBUSINESS_SERVER_MANAGEMENT
Windows 7 Medium Business Server Messaging
Windows 7 Medium Business Server Messaging
WIN_VER_WINDOWSSEVEN_MEDIUMBUSINESS_SERVER_MESSAGING
WIN_VER_WINDOWSSEVEN_MEDIUMBUSINESS_SERVER_MESSAGING
Windows 7 Medium Business Server Security
Windows 7 Medium Business Server Security
WIN_VER_WINDOWSSEVEN_MEDIUMBUSINESS_SERVER_SECURITY
WIN_VER_WINDOWSSEVEN_MEDIUMBUSINESS_SERVER_SECURITY
Windows 7 Standard Server
Windows 7 Standard Server
WIN_VER_WINDOWSSEVEN_STANDARD_SERVER
WIN_VER_WINDOWSSEVEN_STANDARD_SERVER
Windows 7 Standard Server V
Windows 7 Standard Server V
WIN_VER_WINDOWSSEVEN_STANDARD_SERVER_V
WIN_VER_WINDOWSSEVEN_STANDARD_SERVER_V
Windows 7 Standard Server Core
Windows 7 Standard Server Core
WIN_VER_WINDOWSSEVEN_STANDARD_SERVER_CORE
WIN_VER_WINDOWSSEVEN_STANDARD_SERVER_CORE
Windows 7 Standard Server Core V
Windows 7 Standard Server Core V
WIN_VER_WINDOWSSEVEN_STANDARD_SERVER_CORE_V
WIN_VER_WINDOWSSEVEN_STANDARD_SERVER_CORE_V
Windows 7 Starter
Windows 7 Starter
WIN_VER_WINDOWSSEVEN_STARTER
WIN_VER_WINDOWSSEVEN_STARTER
Windows 7 Storage Enterprise Server
Windows 7 Storage Enterprise Server
WIN_VER_WINDOWSSEVEN_STORAGE_ENTERPRISE_SERVER
WIN_VER_WINDOWSSEVEN_STORAGE_ENTERPRISE_SERVER
Windows 7 Storage Express Server
Windows 7 Storage Express Server
WIN_VER_WINDOWSSEVEN_STORAGE_EXPRESS_SERVER
WIN_VER_WINDOWSSEVEN_STORAGE_EXPRESS_SERVER
Windows 7 Storage Standard Server
Windows 7 Storage Standard Server
WIN_VER_WINDOWSSEVEN_STORAGE_STANDARD_SERVER
WIN_VER_WINDOWSSEVEN_STORAGE_STANDARD_SERVER
Windows 7 Storage Workgroup Server
Windows 7 Storage Workgroup Server
WIN_VER_WINDOWSSEVEN_STORAGE_WORKGROUP_SERVER
WIN_VER_WINDOWSSEVEN_STORAGE_WORKGROUP_SERVER
Windows 7 Undefined
Windows 7 Undefined
WIN_VER_WINDOWSSEVEN_UNDEFINED
WIN_VER_WINDOWSSEVEN_UNDEFINED
Windows 7 Ultimate
Windows 7 Ultimate
WIN_VER_WINDOWSSEVEN_ULTIMATE
WIN_VER_WINDOWSSEVEN_ULTIMATE
Windows 7 Web Server
Windows 7 Web Server
WIN_VER_WINDOWSSEVEN_WEB_SERVER
WIN_VER_WINDOWSSEVEN_WEB_SERVER
Windows 7 Web Server Core
Windows 7 Web Server Core
WIN_VER_WINDOWSSEVEN_WEB_SERVER_CORE
WIN_VER_WINDOWSSEVEN_WEB_SERVER_CORE
Windows 7 Unlicensed
Windows 7 Unlicensed
WIN_VER_WINDOWSSEVEN_UNLICENSED
WIN_VER_WINDOWSSEVEN_UNLICENSED
Portuguese (Brazil)
Portuguese (Brazil)
Portuguese (Portugal)
Portuguese (Portugal)
Enigma_Plugin_OnSaveKey
Enigma_Plugin_OnSaveKey
Enigma_Plugin_OnLoadKey
Enigma_Plugin_OnLoadKey
ntdll.dll
ntdll.dll
LS_Enigma_Plugin_OnDeleteKey
LS_Enigma_Plugin_OnDeleteKey
ole32.dll
ole32.dll
comctl32.dll
comctl32.dll
!"#$%&*;@[]^_`{|}
!"#$%&*;@[]^_`{|}
TNT Internal Error: TWideComponentHelper.Create should never be encountered.
TNT Internal Error: TWideComponentHelper.Create should never be encountered.
%Program Files% (x86)\TntWare\Delphi Unicode Controls\Source\TntClasses.pas
%Program Files% (x86)\TntWare\Delphi Unicode Controls\Source\TntClasses.pas
Library not found: %s
Library not found: %s
Function not found: %s.%s
Function not found: %s.%s
RtlFormatCurrentUserKeyPath
RtlFormatCurrentUserKeyPath
TExported0
TExported0
gN%Fj
gN%Fj
USER32.DLL
USER32.DLL
EInvalidGraphicOperation
EInvalidGraphicOperation
uxtheme.dll
uxtheme.dll
%s%s%s%s%s%s%s%s%s%s
%s%s%s%s%s%s%s%s%s%s
Proportional
Proportional
MAPI32.DLL
MAPI32.DLL
TComboBoxExEnumerator
TComboBoxExEnumerator
ssHorizontal
ssHorizontal
OnKeyDown
OnKeyDown
OnKeyPress
OnKeyPress
OnKeyUp
OnKeyUp
IE(AL("%s",4),"AL(\"%0:s\",3)","JK(\"%1:s\",\"%0:s\")")
IE(AL("%s",4),"AL(\"%0:s\",3)","JK(\"%1:s\",\"%0:s\")")
JumpID("","%s")
JumpID("","%s")
HelpKeyword(;0
HelpKeyword(;0
OnExecute
OnExecute
ssHotTrack
ssHotTrack
TWindowState
TWindowState
poProportional
poProportional
TWMKey
TWMKey
KeyPreview
KeyPreview
WindowState
WindowState
System\CurrentControlSet\Control\Keyboard Layouts\%.8x
System\CurrentControlSet\Control\Keyboard Layouts\%.8x
vcltest3.dll
vcltest3.dll
User32.dll
User32.dll
AutoHotkeys
AutoHotkeys
TKeyEvent
TKeyEvent
TKeyPressEvent
TKeyPressEvent
HelpKeyword
HelpKeyword
crSQLWait
crSQLWait
%s (%s)
%s (%s)
imm32.dll
imm32.dll
%Program Files% (x86)\TntWare\Delphi Unicode Controls\Source\TntActnList.pas
%Program Files% (x86)\TntWare\Delphi Unicode Controls\Source\TntActnList.pas
PasswordChar
PasswordChar
%Program Files% (x86)\TntWare\Delphi Unicode Controls\Source\TntStdCtrls.pas
%Program Files% (x86)\TntWare\Delphi Unicode Controls\Source\TntStdCtrls.pas
%Program Files% (x86)\TntWare\Delphi Unicode Controls\Source\TntForms.pas
%Program Files% (x86)\TntWare\Delphi Unicode Controls\Source\TntForms.pas
%Program Files% (x86)\TntWare\Delphi Unicode Controls\Source\TntMenus.pas
%Program Files% (x86)\TntWare\Delphi Unicode Controls\Source\TntMenus.pas
Internal Error: SyncHotKeyPosition Failed ("%s" "%s").
Internal Error: SyncHotKeyPosition Failed ("%s" "%s").
%Program Files% (x86)\TntWare\Delphi Unicode Controls\Source\TntControls.pas
%Program Files% (x86)\TntWare\Delphi Unicode Controls\Source\TntControls.pas
Internal Error: SubClassUnicodeControl.Control is not Unicode.
Internal Error: SubClassUnicodeControl.Control is not Unicode.
.UnicodeClass
.UnicodeClass
TntUnicodeVcl.DestroyWindow
TntUnicodeVcl.DestroyWindow
Internal Error: Control does not support ITntGlyphButton.
Internal Error: Control does not support ITntGlyphButton.
dtPostMsg
dtPostMsg
Software\Microsoft\Windows\CurrentVersion
Software\Microsoft\Windows\CurrentVersion
ProductKey
ProductKey
Software\Microsoft\Windows NT\CurrentVersion
Software\Microsoft\Windows NT\CurrentVersion
\\.\PhysicalDrive0
\\.\PhysicalDrive0
\\.\%s
\\.\%s
\\.\Scsi0:
\\.\Scsi0:
\\.\SMARTVSD
\\.\SMARTVSD
%Program Files% (x86)\TntWare\Delphi Unicode Controls\Source\TntRegistry.pas
%Program Files% (x86)\TntWare\Delphi Unicode Controls\Source\TntRegistry.pas
#$%&'()* ,-./01234
#$%&'()* ,-./01234
PSAPI.dll
PSAPI.dll
I*Rc
I*Rc
VBoxService.exe
VBoxService.exe
ÞFAULT FOLDER%
ÞFAULT FOLDER%
%SYSTEM FOLDER%
%SYSTEM FOLDER%
%WINDOWS FOLDER%
%WINDOWS FOLDER%
Mutex object: Unique: %d-%d. Number: %d
Mutex object: Unique: %d-%d. Number: %d
Uh%s:
Uh%s:
^%V!%X
^%V!%X
THookWindowsAPI
THookWindowsAPI
EP_RegCheckKey
EP_RegCheckKey
EP_RegCheckKeyA
EP_RegCheckKeyA
EP_RegCheckKeyW
EP_RegCheckKeyW
EP_RegSaveKey
EP_RegSaveKey
EP_RegSaveKeyA
EP_RegSaveKeyA
EP_RegSaveKeyW
EP_RegSaveKeyW
EP_RegLoadKey
EP_RegLoadKey
EP_RegLoadKeyA
EP_RegLoadKeyA
EP_RegLoadKeyW
EP_RegLoadKeyW
EP_RegLoadAndCheckKey
EP_RegLoadAndCheckKey
EP_RegCheckAndSaveKey
EP_RegCheckAndSaveKey
EP_RegCheckAndSaveKeyA
EP_RegCheckAndSaveKeyA
EP_RegCheckAndSaveKeyW
EP_RegCheckAndSaveKeyW
EP_RegDeleteKey
EP_RegDeleteKey
EP_RegKeyExpirationDate
EP_RegKeyExpirationDate
EP_RegKeyExpirationDateEx
EP_RegKeyExpirationDateEx
EP_RegKeyCreationDate
EP_RegKeyCreationDate
EP_RegKeyCreationDateEx
EP_RegKeyCreationDateEx
EP_RegKeyExecutions
EP_RegKeyExecutions
EP_RegKeyExecutionsTotal
EP_RegKeyExecutionsTotal
EP_RegKeyExecutionsLeft
EP_RegKeyExecutionsLeft
EP_RegKeyDays
EP_RegKeyDays
EP_RegKeyDaysTotal
EP_RegKeyDaysTotal
EP_RegKeyDaysLeft
EP_RegKeyDaysLeft
EP_RegKeyRuntime
EP_RegKeyRuntime
EP_RegKeyRuntimeTotal
EP_RegKeyRuntimeTotal
EP_RegKeyRuntimeLeft
EP_RegKeyRuntimeLeft
EP_RegKeyGlobalTime
EP_RegKeyGlobalTime
EP_RegKeyGlobalTimeTotal
EP_RegKeyGlobalTimeTotal
EP_RegKeyGlobalTimeLeft
EP_RegKeyGlobalTimeLeft
EP_RegKeyRegisterAfterDate
EP_RegKeyRegisterAfterDate
EP_RegKeyRegisterAfterDateEx
EP_RegKeyRegisterAfterDateEx
EP_RegKeyRegisterBeforeDate
EP_RegKeyRegisterBeforeDate
EP_RegKeyRegisterBeforeDateEx
EP_RegKeyRegisterBeforeDateEx
EP_TrialExecutions
EP_TrialExecutions
EP_TrialExecutionsTotal
EP_TrialExecutionsTotal
EP_TrialExecutionsLeft
EP_TrialExecutionsLeft
EP_TrialExecutionTime
EP_TrialExecutionTime
EP_TrialExecutionTimeTotal
EP_TrialExecutionTimeTotal
EP_TrialExecutionTimeLeft
EP_TrialExecutionTimeLeft
EP_RegCheckKeyEx
EP_RegCheckKeyEx
EP_RegSaveKeyEx
EP_RegSaveKeyEx
EP_RegLoadKeyEx
EP_RegLoadKeyEx
EP_CheckUpStartupPasswordHashString
EP_CheckUpStartupPasswordHashString
EP_ProtectedStringByKey
EP_ProtectedStringByKey
EP_RegKeyInformation
EP_RegKeyInformation
EP_RegKeyInformationA
EP_RegKeyInformationA
EP_RegKeyInformationW
EP_RegKeyInformationW
EP_RegKeyStatus
EP_RegKeyStatus
DLL_Loader_Import_Unit
DLL_Loader_Import_Unit
TInitImport
TInitImport
Could not load library: %s
Could not load library: %s
.gnu}
.gnu}
Function %s not found in module %s
Function %s not found in module %s
File not found: %s
File not found: %s
Can't find DLL entry point %s in %s
Can't find DLL entry point %s in %s
"%s" %s
"%s" %s
%s %s
%s %s
mscorwks.dll
mscorwks.dll
mscoreei.dll
mscoreei.dll
Jo.Ys
Jo.Ys
C9=O.WA
C9=O.WA
B.JAZ
B.JAZ
coRegistratioKey
coRegistratioKey
ZwOpenKey
ZwOpenKey
ZwEnumerateValueKey
ZwEnumerateValueKey
ZwQueryKey
ZwQueryKey
ZwQueryValueKey
ZwQueryValueKey
ZwCreateKey
ZwCreateKey
ZwEnumerateKey
ZwEnumerateKey
ZwSetValueKey
ZwSetValueKey
ZwDeleteKey
ZwDeleteKey
ZwDeleteValueKey
ZwDeleteValueKey
ZwFlushKey
ZwFlushKey
ZwLoadKey
ZwLoadKey
ZwLoadKey2
ZwLoadKey2
ZwNotifyChangeKey
ZwNotifyChangeKey
ZwQueryMultipleValueKey
ZwQueryMultipleValueKey
ZwReplaceKey
ZwReplaceKey
ZwRestoreKey
ZwRestoreKey
ZwSaveKey
ZwSaveKey
ZwSetInformationKey
ZwSetInformationKey
ZwUnloadKey
ZwUnloadKey
ZwOpenKeyEx
ZwOpenKeyEx
ZwQuerySection, Unsupported class %d
ZwQuerySection, Unsupported class %d
KeySetValue unsupported value type
KeySetValue unsupported value type
ZwQueryValueKey, unsupported class %d
ZwQueryValueKey, unsupported class %d
ZwQueryKey, unsupported class %d
ZwQueryKey, unsupported class %d
ZwQueryObject with unsupported class
ZwQueryObject with unsupported class
ZwReadFileInformation with unsupported class
ZwReadFileInformation with unsupported class
ZwSetInformationFile with unsupported class
ZwSetInformationFile with unsupported class
THookWindowsAPI
THookWindowsAPI
E.oNhZC
E.oNhZC
\\.\NTICE
\\.\NTICE
\\.\SICE
\\.\SICE
\\.\SIWDEBUG
\\.\SIWDEBUG
R.fm6$C
R.fm6$C
)O.bVJ
)O.bVJ
\.Na)
\.Na)
.xDHT
.xDHT
%s\%.8x%.8x-%.8x%.8x
%s\%.8x%.8x-%.8x%.8x
)TEnigmaProtectorLoaderFormStartuppassword
)TEnigmaProtectorLoaderFormStartuppassword
DLL_Loader_RunPassword_Unit
DLL_Loader_RunPassword_Unit
^5(
^5(
b.HNNM
b.HNNM
decrypt_on_execute_begin
decrypt_on_execute_begin
ECRONEXECB
ECRONEXECB
decrypt_on_execute_end
decrypt_on_execute_end
ECRONEXECE
ECRONEXECE
.section
.section
DLL_Loader.dll
DLL_Loader.dll
@``@``@``@``@``@``@``@
@``@``@``@``@``@``@``@
@``@``@``@``@``
@``@``@``@``@``
333333333333333333
333333333333333333
33333833
33333833
3333339
3333339
3333333333333338
3333333333333338
:*"*"$3338
:*"*"$3338
3333333
3333333
33333333
33333333
33333333333
33333333333
3333333333338
3333333333338
33338?383
33338?383
333333333333
333333333333
:*3:"$3338
:*3:"$3338
333333333333333
333333333333333
KWindows
KWindows
_enigma_keygen_routines
_enigma_keygen_routines
TntWindows
TntWindows
UrlMon
UrlMon
virtualboximportunit
virtualboximportunit
KeyRoutines
KeyRoutines
nJwaWindows
nJwaWindows
DLL_Loader_Import_Unit
DLL_Loader_Import_Unit
i.nLn
i.nLn
%.byh?2
%.byh?2
B.KI1d
B.KI1d
.zhe=
.zhe=
.Pc 5
.Pc 5
%xQ
%xQ
iu2.iu
iu2.iu
user32.dll
user32.dll
advapi32.dll
advapi32.dll
version.dll
version.dll
gdi32.dll
gdi32.dll
shell32.dll
shell32.dll
SHFolder.dll
SHFolder.dll
shlwapi.dll
shlwapi.dll
GetWindowsDirectoryW
GetWindowsDirectoryW
GetWindowsDirectoryA
GetWindowsDirectoryA
GetCPInfo
GetCPInfo
GetKeyboardType
GetKeyboardType
VkKeyScanW
VkKeyScanW
UnhookWindowsHookEx
UnhookWindowsHookEx
SetWindowsHookExW
SetWindowsHookExW
SetWindowsHookExA
SetWindowsHookExA
MsgWaitForMultipleObjects
MsgWaitForMultipleObjects
MapVirtualKeyW
MapVirtualKeyW
MapVirtualKeyA
MapVirtualKeyA
LoadKeyboardLayoutA
LoadKeyboardLayoutA
GetKeyboardState
GetKeyboardState
GetKeyboardLayoutList
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyboardLayout
GetKeyState
GetKeyState
GetKeyNameTextW
GetKeyNameTextW
GetKeyNameTextA
GetKeyNameTextA
EnumWindows
EnumWindows
EnumThreadWindows
EnumThreadWindows
ActivateKeyboardLayout
ActivateKeyboardLayout
RegOpenKeyExA
RegOpenKeyExA
RegCloseKey
RegCloseKey
RegOpenKeyA
RegOpenKeyA
RegFlushKey
RegFlushKey
RegCreateKeyExA
RegCreateKeyExA
SetViewportOrgEx
SetViewportOrgEx
ShellExecuteW
ShellExecuteW
ShellExecuteA
ShellExecuteA
2-3i3}3
2-3i3}3
:&:.:6:>:
:&:.:6:>:
>!>%>)>->1>5>9>=>
>!>%>)>->1>5>9>=>
; ;$;(;,;0;
; ;$;(;,;0;
1#1'1 1/13171;162\2
1#1'1 1/13171;162\2
$141$3:3
$141$3:3
? ?$?(?,?0?
? ?$?(?,?0?
8 :`:{:,;>;
8 :`:{:,;>;
?*?.???`?
?*?.???`?
4 4$4(4,4044484
4 4$4(4,4044484
6h6X6g6r6
6h6X6g6r6
70848
70848
8!9%9)9-949
8!9%9)9-949
9&9*9=9^9
9&9*9=9^9
4]5R5`5
4]5R5`5
4G4C4O4X4a4f4y4
4G4C4O4X4a4f4y4
0 0$0(0,000
0 0$0(0,000
=!=$=)=-=1=5=9===
=!=$=)=-=1=5=9===
6%7x9
6%7x9
1 1$1(1,1
1 1$1(1,1
: :(:,:0:4:|:
: :(:,:0:4:|:
mscoree.dll
mscoree.dll
_CorExeMain
_CorExeMain
.idat
.idat
}&@_~"$)
}&@_~"$)
.Jx1?
.Jx1?
:z.dk>d
:z.dk>d
%SJBy$1!
%SJBy$1!
%U%>_
%U%>_
?qkX%SX
?qkX%SX
>h.MR
>h.MR
%s[idr,
%s[idr,
%s_id]9x
%s_id]9x
aY.sG
aY.sG
1BK%u
1BK%u
DE.BY
DE.BY
0123456
0123456
S.ANR
S.ANR
Prkey
Prkey
P{rþ_)
P{rþ_)
88E8F8A8U8L6T)
88E8F8A8U8L6T)
2.qSne
2.qSne
),-./:?
),-./:?
&*;@[
&*;@[
]^_`{|}>
]^_`{|}>
tPSsh
tPSsh
)O3k%D
)O3k%D
xport
xport
$.Est'7
$.Est'7
_%uL@K
_%uL@K
a.nrw
a.nrw
$)S%d
$)S%d
>X.PC$'E(x':E
>X.PC$'E(x':E
w`%do(
w`%do(
T$%Ci~
T$%Ci~
Ivy%u
Ivy%u
12345678
12345678
%UG %
%UG %
YS~.DZ
YS~.DZ
<.tr>
<.tr>
x(t7.aFz
x(t7.aFz
%SD3
%SD3
uX%XN(
uX%XN(
f.Pr7F
f.Pr7F
;AKeyC
;AKeyC
jXLV%u
jXLV%u
Ê[n
Ê[n
I@TG.ly
I@TG.ly
h.cp0Sn
h.cp0Sn
#$%&'()*
#$%&'()*
,-./012834
,-./012834
)%sHMJ
)%sHMJ
.VB22Z
.VB22Z
KW.HK
KW.HK
hfTPh(
hfTPh(
UrlQ
UrlQ
f
f
L.ug$
L.ug$
#!v%U
#!v%U
u).ia
u).ia
O.bVJ
O.bVJ
5(
5(
("%D
("%D
}1)JO%c
}1)JO%c
"ÕD
"ÕD
-Ah}`
-Ah}`
{.Xtj
{.Xtj
%.byh?
%.byh?
%xQ
%xQ
%5x^Cb
%5x^Cb
P|%u!uM
P|%u!uM
KHT%x
KHT%x
L%dr{
L%dr{
?J.fJk
?J.fJk
V0wXXNÝ
V0wXXNÝ
'%cJ/
'%cJ/
.il\-yX
.il\-yX
?D.dh^
?D.dh^
2^(UDP[N
2^(UDP[N
.eht:
.eht:
YP.xm
YP.xm
JKzV%xb
JKzV%xb
Site : hXXp://VVV.enigmaprotector.com/
Site : hXXp://VVV.enigmaprotector.com/
E-mail : support@enigmaprotector.com
E-mail : support@enigmaprotector.com
Lisence holder: %s
Lisence holder: %s
%Cookies FOLDER%
%Cookies FOLDER%
Unspecified error (%d) from %s.
Unspecified error (%d) from %s.
debug.log
debug.log
enigma_ide.dll
enigma_ide.dll
ÚysToKeyExp%
ÚysToKeyExp%
%RegKey%
%RegKey%
%KeyExpYear%
%KeyExpYear%
%KeyExpMonth%
%KeyExpMonth%
%KeyExpDay%
%KeyExpDay%
%CU_EXTFILES%
%CU_EXTFILES%
%CU_EXECPR%
%CU_EXECPR%
%CU_INSTSERV%
%CU_INSTSERV%
%CU_WINVER%
%CU_WINVER%
%CU_VIRTTOOLS%
%CU_VIRTTOOLS%
%TrialExecsTotal%
%TrialExecsTotal%
%TrialExecsLeft%
%TrialExecsLeft%
%TrialExecMinsTotal%
%TrialExecMinsTotal%
%TrialExecMinsLeft%
%TrialExecMinsLeft%
hh.exe
hh.exe
write.exe
write.exe
attrib.exe
attrib.exe
chkdsk.exe
chkdsk.exe
compact.exe
compact.exe
find.exe
find.exe
help.exe
help.exe
winver.exe
winver.exe
regsvr32.exe
regsvr32.exe
replace.exe
replace.exe
dllhost.exe
dllhost.exe
ntvdm.exe
ntvdm.exe
tcpsvcs.exe
tcpsvcs.exe
Was not able to create virtual value at ImportCall_ZwSetValueKey
Was not able to create virtual value at ImportCall_ZwSetValueKey
Was not able to create virtual key at ImportCall_ZwSetValueKey
Was not able to create virtual key at ImportCall_ZwSetValueKey
ImportCall_ZwLoadKey
ImportCall_ZwLoadKey
ImportCall_ZwLoadKey2
ImportCall_ZwLoadKey2
ImportCall_ZwNotifyChangeKey
ImportCall_ZwNotifyChangeKey
ImportCall_ZwQueryMultipleValueKey
ImportCall_ZwQueryMultipleValueKey
ImportCall_ZwReplaceKey
ImportCall_ZwReplaceKey
ImportCall_ZwRestoreKey
ImportCall_ZwRestoreKey
ImportCall_ZwSaveKey
ImportCall_ZwSaveKey
ImportCall_ZwSetInformationKey
ImportCall_ZwSetInformationKey
ImportCall_ZwUnloadKey
ImportCall_ZwUnloadKey
evb*.tmp
evb*.tmp
Unsupported call of ZwSetVolumeInformationFile
Unsupported call of ZwSetVolumeInformationFile
Application requires password to start
Application requires password to start
Enter password
Enter password
Change password
Change password
New password:
New password:
Confirm new password:
Confirm new password:
% )*0./(&'312-,
% )*0./(&'312-,
RichEdit line insertion error=This control requires version 4.70 or greater of COMCTL32.DLL
RichEdit line insertion error=This control requires version 4.70 or greater of COMCTL32.DLL
No help keyword specified.
No help keyword specified.
No help found for %s#No context-sensitive help installed$No topic-based help system installed
No help found for %s#No context-sensitive help installed$No topic-based help system installed
Alt Clipboard does not support Icons
Alt Clipboard does not support Icons
Text exceeds memo capacity/Menu '%s' is already being used by another form
Text exceeds memo capacity/Menu '%s' is already being used by another form
Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window
Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window
Thread creation error: %s
Thread creation error: %s
Thread Error: %s (%d)7CreateClone not implemented for class %s with source %s
Thread Error: %s (%d)7CreateClone not implemented for class %s with source %s
OLE error %.8x.Method '%s' not supported by automation object/Variant does not reference an automation object7Dispatch methods do not support more than 64 parameters
OLE error %.8x.Method '%s' not supported by automation object/Variant does not reference an automation object7Dispatch methods do not support more than 64 parameters
Unsupported clipboard format
Unsupported clipboard format
Invalid data type for '%s' List capacity out of bounds (%d)
Invalid data type for '%s' List capacity out of bounds (%d)
List count out of bounds (%d)
List count out of bounds (%d)
List index out of bounds (%d) Out of memory while expanding memory stream
List index out of bounds (%d) Out of memory while expanding memory stream
Error reading %s%s%s: %s
Error reading %s%s%s: %s
Failed to get data for '%s'
Failed to get data for '%s'
Failed to set data for '%s'
Failed to set data for '%s'
Resource %s not found
Resource %s not found
%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group
%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group
Property %s does not exist
Property %s does not exist
Cannot assign a %s to a %s
Cannot assign a %s to a %s
Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread
Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread
Class %s not found
Class %s not found
A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates
A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates
Cannot create file "%s". %s
Cannot create file "%s". %s
Cannot open file "%s". %s
Cannot open file "%s". %s
'%s' is an invalid mask at (%d)$''%s'' is not a valid component name
'%s' is an invalid mask at (%d)$''%s'' is not a valid component name
Ancestor for '%s' not found
Ancestor for '%s' not found
Interface not supported
Interface not supported
%s (%s, line %d)
%s (%s, line %d)
Abstract Error?Access violation at address %p in module '%s'. %s of address %p
Abstract Error?Access violation at address %p in module '%s'. %s of address %p
System Error. Code: %d.
System Error. Code: %d.
Invalid variant operation
Invalid variant operation
Invalid NULL variant operation%Invalid variant operation (%s%.8x)
Invalid NULL variant operation%Invalid variant operation (%s%.8x)
%s5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)
%s5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)
Operation not supported
Operation not supported
External exception %x
External exception %x
Invalid pointer operation
Invalid pointer operation
Invalid class typecast0Access violation at address %p. %s of address %p
Invalid class typecast0Access violation at address %p. %s of address %p
Privileged instruction(Exception %s in module %s at %p.
Privileged instruction(Exception %s in module %s at %p.
Application Error1Format '%s' invalid or incompatible with argument
Application Error1Format '%s' invalid or incompatible with argument
No argument for format '%s'"Variant method calls not supported
No argument for format '%s'"Variant method calls not supported
!'%s' is not a valid integer value
!'%s' is not a valid integer value
I/O error %d
I/O error %d
Integer overflow Invalid floating point operation
Integer overflow Invalid floating point operation
Client.exe_2780_rwx_01850000_00004000:
Invalid NULL variant operation
Invalid NULL variant operation
Invalid variant operation
Invalid variant operation
Variant method calls not supported
Variant method calls not supported
Access violation at address %p. %s of address %p
Access violation at address %p. %s of address %p
Invalid pointer operation
Invalid pointer operation
Invalid floating point operation
Invalid floating point operation
I/O error %d
I/O error %d
'%s' is not a valid integer value
'%s' is not a valid integer value
Client.exe_2780_rwx_019E0000_00038000:
C:\Windows\system32\IPHLPAPI.DLL0
C:\Windows\system32\IPHLPAPI.DLL0
C:\Windows\system32\CFGMGR32.dll0
C:\Windows\system32\CFGMGR32.dll0
/* Dr Brian Gladman (gladman@seven77.demon.co.uk) 14th January 1999 */
/* Dr Brian Gladman (gladman@seven77.demon.co.uk) 14th January 1999 */
1.3.3.7
1.3.3.7
"C:\Users\"%CurrentUserName%"\AppData\Roaming\SubDir\Client.exe"
"C:\Users\"%CurrentUserName%"\AppData\Roaming\SubDir\Client.exe"
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dlD
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dlD
wntdll.dll
wntdll.dll
ukernel32.dll
ukernel32.dll
Mukernelbase.dll
Mukernelbase.dll
huuser32.dll
huuser32.dll
dvgdi32.dll
dvgdi32.dll
)wlpk.dll
)wlpk.dll
wusp10.dll
wusp10.dll
vmsvcrt.dll
vmsvcrt.dll
vadvapi32.dll
vadvapi32.dll
,wsechost.dll
,wsechost.dll
]urpcrt4.dll
]urpcrt4.dll
uoleaut32.dll
uoleaut32.dll
vole32.dll
vole32.dll
ushell32.dll
ushell32.dll
vshlwapi.dll
vshlwapi.dll
}tversion.dll
}tversion.dll
lmscoree.dll
lmscoree.dll
*wimm32.dll
*wimm32.dll
vmsctf.dll
vmsctf.dll
ocomctl32.dll
ocomctl32.dll
pshfolder.dll
pshfolder.dll
-uprofapi.dll
-uprofapi.dll
usspicli.dll
usspicli.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dllH
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dllH
C:\Windows\system32\NSI.(
C:\Windows\system32\NSI.(
44ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
44ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
Steam Client Bootstrapper\license.dat
Steam Client Bootstrapper\license.dat
application.exe
application.exe
taskhost.exe_2808:
.text
.text
`.data
`.data
.rsrc
.rsrc
@.reloc
@.reloc
msvcrt.dll
msvcrt.dll
ole32.dll
ole32.dll
OLEAUT32.dll
OLEAUT32.dll
KERNEL32.dll
KERNEL32.dll
NTDLL.DLL
NTDLL.DLL
API-MS-Win-Core-LocalRegistry-L1-1-0.dll
API-MS-Win-Core-LocalRegistry-L1-1-0.dll
API-MS-Win-Core-ProcessThreads-L1-1-0.dll
API-MS-Win-Core-ProcessThreads-L1-1-0.dll
API-MS-Win-Security-Base-L1-1-0.dll
API-MS-Win-Security-Base-L1-1-0.dll
USER32.dll
USER32.dll
RPCRT4.dll
RPCRT4.dll
d:\w7rtm\admin\wmi\jobs\ubpmlibs\comtaskhost\comtaskapi.cpp
d:\w7rtm\admin\wmi\jobs\ubpmlibs\comtaskhost\comtaskapi.cpp
The likely culprit task is stuck on the same stack with %S.
The likely culprit task is stuck on the same stack with %S.
d:\w7rtm\admin\wmi\jobs\ubpmlibs\closewinapp\closewinapp.cpp
d:\w7rtm\admin\wmi\jobs\ubpmlibs\closewinapp\closewinapp.cpp
Invalid parameter passed to C runtime function.
Invalid parameter passed to C runtime function.
taskhost.pdb
taskhost.pdb
_wcmdln
_wcmdln
_amsg_exit
_amsg_exit
InitOnceExecuteOnce
InitOnceExecuteOnce
SetProcessShutdownParameters
SetProcessShutdownParameters
MsgWaitForMultipleObjects
MsgWaitForMultipleObjects
EnumThreadWindows
EnumThreadWindows
EnumWindows
EnumWindows
ntdll.dll
ntdll.dll
GetProcessHeap
GetProcessHeap
CATCH_KNOWN: %S ==> hr=0x%x [%S(),%d,%S]
CATCH_KNOWN: %S ==> hr=0x%x [%S(),%d,%S]
bStartComTask() --> h=0x%x ret=%d
bStartComTask() --> h=0x%x ret=%d
StopComTask(0x%x) --> ret=%d
StopComTask(0x%x) --> ret=%d
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule
ComTaskMgrWnd(0x%x)::ShutdownTasksWorker()
ComTaskMgrWnd(0x%x)::ShutdownTasksWorker()
ComTaskMgrWnd(0x%x)::Shutdown(%ws)
ComTaskMgrWnd(0x%x)::Shutdown(%ws)
gCleanupSet()::Remove(0x%x)
gCleanupSet()::Remove(0x%x)
ComTaskHost(0x%x)::WaitForTaskStartCompletion() --> 0x%x
ComTaskHost(0x%x)::WaitForTaskStartCompletion() --> 0x%x
ComTaskHost(0x%x)::WaitForTaskStartCompletion()
ComTaskHost(0x%x)::WaitForTaskStartCompletion()
ComTaskHost(0x%x)::%ws() --> ReleaseLifetimeRef(this)
ComTaskHost(0x%x)::%ws() --> ReleaseLifetimeRef(this)
ComTaskHost(0x%x)::StopTaskWorker() --> 0x%x
ComTaskHost(0x%x)::StopTaskWorker() --> 0x%x
ComTaskHost(0x%x)::StopTaskWorker()
ComTaskHost(0x%x)::StopTaskWorker()
ComTaskHost(0x%x)::Shutdown()
ComTaskHost(0x%x)::Shutdown()
ComTaskHost(0x%x)::HandleReportingState(0x%x) --> 0x%x
ComTaskHost(0x%x)::HandleReportingState(0x%x) --> 0x%x
ComTaskHost(0x%x): UbpmReportTaskStatus(0x%x) --> 0x%x
ComTaskHost(0x%x): UbpmReportTaskStatus(0x%x) --> 0x%x
ComTaskHost(0x%x)::StartTaskWorker() --> 0x%x
ComTaskHost(0x%x)::StartTaskWorker() --> 0x%x
ITaskHandler::Start(0x%x,"%ws") --> 0x%x
ITaskHandler::Start(0x%x,"%ws") --> 0x%x
ComTaskHost(0x%x)::StartTaskWorker() --> ITaskHandler(0x%x)::Start(0x%x,"%ws")
ComTaskHost(0x%x)::StartTaskWorker() --> ITaskHandler(0x%x)::Start(0x%x,"%ws")
ComTaskHost(0x%x)::StartTaskWorker()
ComTaskHost(0x%x)::StartTaskWorker()
ComTaskHost(0x%x)::Stop --> 0x%x
ComTaskHost(0x%x)::Stop --> 0x%x
ComTaskHost(0x%x)::Stop - CreateThread failed with 0x%x
ComTaskHost(0x%x)::Stop - CreateThread failed with 0x%x
StartTaskThread(0x%x) bailed out because of shutdown
StartTaskThread(0x%x) bailed out because of shutdown
ComTaskHost(0x%x)::~ComTaskHost()
ComTaskHost(0x%x)::~ComTaskHost()
ComTaskHost(0x%x)::Start --> 0x%x
ComTaskHost(0x%x)::Start --> 0x%x
ComTaskHost(0x%x)::TaskCompleted() skipped because of shutdown
ComTaskHost(0x%x)::TaskCompleted() skipped because of shutdown
ComTaskHost(0x%x)::TaskCompleted(0x%x)
ComTaskHost(0x%x)::TaskCompleted(0x%x)
ComTaskHost(0x%x)::AddRef -> m_cRef = %d
ComTaskHost(0x%x)::AddRef -> m_cRef = %d
ComTaskHost(0x%x)::Release -> m_cRef = %d
ComTaskHost(0x%x)::Release -> m_cRef = %d
WinAppTerminator: found wnd 0x%x for pid %d.
WinAppTerminator: found wnd 0x%x for pid %d.
WinAppTerminator: forced WM_CLOSE sent to top wnd 0x%x.
WinAppTerminator: forced WM_CLOSE sent to top wnd 0x%x.
WinAppTerminator: EnumThreadWindows failed err=%d.
WinAppTerminator: EnumThreadWindows failed err=%d.
Host Process for Windows Tasks
Host Process for Windows Tasks
6.1.7601.17514 (win7sp1_rtm.101119-1850)
6.1.7601.17514 (win7sp1_rtm.101119-1850)
taskhost.exe
taskhost.exe
Windows
Windows
Operating System
Operating System
6.1.7601.17514
6.1.7601.17514
Client.exe_2780_rwx_01A20000_00014000:
API-MS-WIN-Service-winsvc-L1-1-0.dll4
API-MS-WIN-Service-winsvc-L1-1-0.dll4
C:\Windo
C:\Windo
\\.\C:
\\.\C:
1.3.3.7
1.3.3.7