assemblyline-v4-service 4.4.0.24__py3-none-any.whl → 4.4.0.26__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of assemblyline-v4-service might be problematic. Click here for more details.

Files changed (42) hide show
  1. assemblyline_v4_service/VERSION +1 -1
  2. assemblyline_v4_service/common/api.py +3 -2
  3. assemblyline_v4_service/common/base.py +3 -4
  4. assemblyline_v4_service/common/helper.py +1 -2
  5. assemblyline_v4_service/common/{extractor/ocr.py → ocr.py} +0 -1
  6. assemblyline_v4_service/common/ontology_helper.py +7 -8
  7. assemblyline_v4_service/common/request.py +4 -5
  8. assemblyline_v4_service/common/result.py +3 -3
  9. assemblyline_v4_service/common/task.py +3 -3
  10. assemblyline_v4_service/common/utils.py +2 -2
  11. assemblyline_v4_service/updater/helper.py +4 -0
  12. {assemblyline_v4_service-4.4.0.24.dist-info → assemblyline_v4_service-4.4.0.26.dist-info}/METADATA +1 -1
  13. assemblyline_v4_service-4.4.0.26.dist-info/RECORD +28 -0
  14. assemblyline_v4_service/common/balbuzard/__init__.py +0 -0
  15. assemblyline_v4_service/common/balbuzard/balbuzard.py +0 -656
  16. assemblyline_v4_service/common/balbuzard/bbcrack.py +0 -830
  17. assemblyline_v4_service/common/balbuzard/patterns.py +0 -650
  18. assemblyline_v4_service/common/dynamic_service_helper.py +0 -3631
  19. assemblyline_v4_service/common/extractor/__init__.py +0 -1
  20. assemblyline_v4_service/common/extractor/base64.py +0 -86
  21. assemblyline_v4_service/common/extractor/pe_file.py +0 -51
  22. assemblyline_v4_service/common/icap.py +0 -149
  23. assemblyline_v4_service/common/keytool_parse.py +0 -66
  24. assemblyline_v4_service/common/pestudio/__init__.py +0 -0
  25. assemblyline_v4_service/common/pestudio/xml/__init__.py +0 -0
  26. assemblyline_v4_service/common/pestudio/xml/features.xml +0 -5607
  27. assemblyline_v4_service/common/pestudio/xml/functions.xml +0 -5824
  28. assemblyline_v4_service/common/pestudio/xml/languages.xml +0 -375
  29. assemblyline_v4_service/common/pestudio/xml/resources.xml +0 -511
  30. assemblyline_v4_service/common/pestudio/xml/signatures.xml +0 -29105
  31. assemblyline_v4_service/common/pestudio/xml/strings.xml +0 -2379
  32. assemblyline_v4_service/common/safelist_helper.py +0 -73
  33. assemblyline_v4_service/common/section_reducer.py +0 -43
  34. assemblyline_v4_service/common/tag_helper.py +0 -117
  35. assemblyline_v4_service/common/tag_reducer.py +0 -242
  36. assemblyline_v4_service/testing/__init__.py +0 -0
  37. assemblyline_v4_service/testing/helper.py +0 -463
  38. assemblyline_v4_service/testing/regenerate_results.py +0 -37
  39. assemblyline_v4_service-4.4.0.24.dist-info/RECORD +0 -53
  40. {assemblyline_v4_service-4.4.0.24.dist-info → assemblyline_v4_service-4.4.0.26.dist-info}/LICENCE.md +0 -0
  41. {assemblyline_v4_service-4.4.0.24.dist-info → assemblyline_v4_service-4.4.0.26.dist-info}/WHEEL +0 -0
  42. {assemblyline_v4_service-4.4.0.24.dist-info → assemblyline_v4_service-4.4.0.26.dist-info}/top_level.txt +0 -0
assemblyline_v4_service/common/pestudio/xml/strings.xml DELETED
@@ -1,2379 +0,0 @@
1
- <!--
2
- strings.mxl is part of the pestudio (www.winitor.com)
3
- It contains the strings that will be detected as blackListed by pestudio.
4
- -->
5
-
6
- <xml version="1.0" encoding="utf-8" md5="2DAF1731A644116D0965C0CA4B51C082">
7
-
8
- <settings>
9
- <setting>
10
-
11
- <!--
12
- the minimum character size of a string
13
- -->
14
- <minimum-size>4</minimum-size>
15
-
16
- <!--
17
- 1: Be case-sensitive when searching for strings
18
- 0: Dont be case-sensitive when searching for strings
19
- -->
20
- <CaseSensitive>0</CaseSensitive>
21
-
22
- <!--
23
- 1: Enable Substring when searching for strings (e.g. "soft" being a substring of "software")
24
- 0: Disable Substring when searching for strings
25
- -->
26
- <Substring>0</Substring>
27
-
28
- <!--
29
- 0: Show Imported Library Names in Strings collection
30
- 1: Hide Imported Library Names from Strings collection
31
- -->
32
- <HideImportedLibraryNames>0</HideImportedLibraryNames>
33
-
34
- <!--
35
- 0: Show Imported String Names in Strings collection
36
- 1: Hide Imported String Names from Strings collection
37
- -->
38
- <HideImportedFunctionNames>0</HideImportedFunctionNames>
39
-
40
- </setting>
41
- </settings>
42
-
43
- <privs>
44
- <priv>SeAssignPrimaryTokenPrivilege</priv>
45
- <priv>SeAuditPrivilege</priv>
46
- <priv>SeBackupPrivilege</priv>
47
- <priv>SeChangeNotifyPrivilege</priv>
48
- <priv>SeCreateGlobalPrivilege</priv>
49
- <priv>SeCreatePagefilePrivilege</priv>
50
- <priv>SeCreatePermanentPrivilege</priv>
51
- <priv>SeCreateSymbolicLinkPrivilege</priv>
52
- <priv>SeCreateTokenPrivilege</priv>
53
- <priv>SeDebugPrivilege</priv>
54
- <priv>SeEnableDelegationPrivilege</priv>
55
- <priv>SeImpersonatePrivilege</priv>
56
- <priv>SeIncreaseBasePriorityPrivilege</priv>
57
- <priv>SeIncreaseQuotaPrivilege</priv>
58
- <priv>SeIncreaseWorkingSetPrivilege</priv>
59
- <priv>SeLoadDriverPrivilege</priv>
60
- <priv>SeLockMemoryPrivilege</priv>
61
- <priv>SeMachineAccountPrivilege</priv>
62
- <priv>SeManageVolumePrivilege</priv>
63
- <priv>SeProfileSingleProcessPrivilege</priv>
64
- <priv>SeRelabelPrivilege</priv>
65
- <priv>SeRemoteShutdownPrivilege</priv>
66
- <priv>SeRestorePrivilege</priv>
67
- <priv>SeSecurityPrivilege</priv>
68
- <priv>SeShutdownPrivilege</priv>
69
- <priv>SeSyncAgentPrivilege</priv>
70
- <priv>SeSystemEnvironmentPrivilege</priv>
71
- <priv>SeSystemProfilePrivilege</priv>
72
- <priv>SeSystemtimePrivilege</priv>
73
- <priv>SeTakeOwnershipPrivilege</priv>
74
- <priv>SeTcbPrivilege</priv>
75
- <priv>SeTimeZonePrivilege</priv>
76
- <priv>SeTrustedCredManAccessPrivilege</priv>
77
- <priv>SeUndockPrivilege</priv>
78
- <priv>SeUnsolicitedInputPrivilege</priv>
79
- </privs>
80
-
81
- <oids>
82
- <oid>2.16.840.1.113730.4.1</oid>
83
- <oid>1.3.6.1.4.1.311.10.3.3</oid>
84
- <oid>1.3.6.1.5.5.7.3.2</oid>
85
- <oid>1.3.6.1.5.5.7.3.1</oid>
86
- <oid>1.2.840.113549.1.1.11</oid>
87
- <oid>1.2.840.113549.1.1.2</oid>
88
- <oid>1.2.840.113549.1.1.4</oid>
89
- <oid>1.2.840.113549.1.1.5</oid>
90
- <oid>1.2.840.113549.1.9.6</oid>
91
- <oid>1.2.840.113549.2.5</oid>
92
- <oid>1.2.840.113549.1.9.5</oid>
93
- <oid>1.2.840.113556.1.4.1221</oid>
94
- <oid>1.2.840.113556.1.4.1222</oid>
95
- <oid>1.2.840.113556.1.4.1362</oid>
96
- <oid>1.2.840.113556.1.4.1413</oid>
97
- <oid>1.2.840.113556.1.4.521</oid>
98
- <oid>1.2.840.113556.1.4.616</oid>
99
- <oid>1.2.840.113556.1.4.801</oid>
100
- <oid>1.2.840.113556.1.4.805</oid>
101
- <oid>1.2.840.113556.1.4.903</oid>
102
- <oid>1.2.840.113556.1.4.904</oid>
103
- <oid>1.2.840.113556.1.4.905</oid>
104
- <oid>1.2.840.113556.1.4.906</oid>
105
- <oid>1.2.840.113556.1.4.907</oid>
106
- <oid>1.3.14.3.2.26</oid>
107
- <oid>1.3.14.3.2.29</oid>
108
- <oid>1.3.14.3.2.3</oid>
109
- <oid>1.3.6.1.4.1.311.2.1.12</oid>
110
- <oid>1.3.6.1.4.1.1466.115.121.1.10</oid>
111
- <oid>1.3.6.1.4.1.1466.115.121.1.11</oid>
112
- <oid>1.3.6.1.4.1.1466.115.121.1.12</oid>
113
- <oid>1.3.6.1.4.1.1466.115.121.1.13</oid>
114
- <oid>1.3.6.1.4.1.1466.115.121.1.14</oid>
115
- <oid>1.3.6.1.4.1.1466.115.121.1.15</oid>
116
- <oid>1.3.6.1.4.1.1466.115.121.1.19</oid>
117
- <oid>1.3.6.1.4.1.1466.115.121.1.2</oid>
118
- <oid>1.3.6.1.4.1.1466.115.121.1.21</oid>
119
- <oid>1.3.6.1.4.1.1466.115.121.1.22</oid>
120
- <oid>1.3.6.1.4.1.1466.115.121.1.23</oid>
121
- <oid>1.3.6.1.4.1.1466.115.121.1.24</oid>
122
- <oid>1.3.6.1.4.1.1466.115.121.1.25</oid>
123
- <oid>1.3.6.1.4.1.1466.115.121.1.26</oid>
124
- <oid>1.3.6.1.4.1.1466.115.121.1.27</oid>
125
- <oid>1.3.6.1.4.1.1466.115.121.1.28</oid>
126
- <oid>1.3.6.1.4.1.1466.115.121.1.3</oid>
127
- <oid>1.3.6.1.4.1.1466.115.121.1.32</oid>
128
- <oid>1.3.6.1.4.1.1466.115.121.1.33</oid>
129
- <oid>1.3.6.1.4.1.1466.115.121.1.34</oid>
130
- <oid>1.3.6.1.4.1.1466.115.121.1.36</oid>
131
- <oid>1.3.6.1.4.1.1466.115.121.1.37</oid>
132
- <oid>1.3.6.1.4.1.1466.115.121.1.38</oid>
133
- <oid>1.3.6.1.4.1.1466.115.121.1.39</oid>
134
- <oid>1.3.6.1.4.1.1466.115.121.1.4</oid>
135
- <oid>1.3.6.1.4.1.1466.115.121.1.40</oid>
136
- <oid>1.3.6.1.4.1.1466.115.121.1.41</oid>
137
- <oid>1.3.6.1.4.1.1466.115.121.1.43</oid>
138
- <oid>1.3.6.1.4.1.1466.115.121.1.44</oid>
139
- <oid>1.3.6.1.4.1.1466.115.121.1.5</oid>
140
- <oid>1.3.6.1.4.1.1466.115.121.1.50</oid>
141
- <oid>1.3.6.1.4.1.1466.115.121.1.51</oid>
142
- <oid>1.3.6.1.4.1.1466.115.121.1.52</oid>
143
- <oid>1.3.6.1.4.1.1466.115.121.1.53</oid>
144
- <oid>1.3.6.1.4.1.1466.115.121.1.6</oid>
145
- <oid>1.3.6.1.4.1.1466.115.121.1.7</oid>
146
- <oid>1.3.6.1.4.1.1466.115.121.1.8</oid>
147
- <oid>1.3.6.1.4.1.1466.115.121.1.9</oid>
148
- <oid>1.3.6.1.4.1.311.10.3.6</oid>
149
- <oid>1.3.6.1.4.1.311.88.2.1</oid>
150
- <oid>1.3.6.1.4.1.311.88.2.2</oid>
151
- <oid>1.3.6.1.5.5.7.3.3</oid>
152
- </oids>
153
-
154
- <exts>
155
- <ext enable="1" risk="1">b64</ext>
156
- <ext enable="1" risk="1">bat</ext>
157
- <ext enable="1" risk="1">cert</ext>
158
- <ext enable="1" risk="1">cmd</ext>
159
- <ext enable="1" risk="1">dll</ext>
160
- <ext enable="1" risk="1">exe</ext>
161
- <ext enable="1" risk="1">ftp</ext>
162
- <ext enable="1" risk="1">gzip</ext>
163
- <ext enable="1" risk="1">hta</ext>
164
- <ext enable="1" risk="1">html</ext>
165
- <ext enable="1" risk="1">iso</ext>
166
- <ext enable="1" risk="1">jar</ext>
167
- <ext enable="1" risk="1">rsrc</ext>
168
- <ext enable="1" risk="1">tar</ext>
169
- <ext enable="1" risk="1">tmp</ext>
170
- <ext enable="1" risk="1">temp</ext>
171
- <ext enable="1" risk="1">tor</ext>
172
- <ext enable="1" risk="1">url</ext>
173
- <ext enable="1" risk="1">vb</ext>
174
- <ext enable="1" risk="1">vbe</ext>
175
- <ext enable="1" risk="1">vbs</ext>
176
- <ext enable="1" risk="1">vbp</ext>
177
- <ext enable="1" risk="1">xll</ext>
178
- <ext enable="1" risk="1">zip</ext>
179
- </exts>
180
-
181
- <agents>
182
- <agent>Mozilla/1.22</agent>
183
- <agent>Mozilla/3.0</agent>
184
- <agent>Mozilla/3.1</agent>
185
- <agent>Mozilla/3.6</agent>
186
- <agent>Mozilla/4.0</agent>
187
- <agent>Mozilla/4.08</agent>
188
- <agent>Mozilla/5.0</agent>
189
-
190
- <agent>Opera/8.90</agent>
191
- <agent>Opera/9.00</agent>
192
- <agent>Opera/9.25</agent>
193
- <agent>Opera/9.33</agent>
194
- <agent>Opera 9.4</agent>
195
- <agent>Opera/9.80</agent>
196
- </agents>
197
-
198
- <!-- guid -->
199
- <guids>
200
- <guid>27C3B8ED-0790-42BD-9AD7-18465E7F7696</guid>
201
- <guid>27C3B8ED-0790-42BD-9AD7-18465E7F7696</guid>
202
- <guid>27C3B8ED-0790-42BD-9AD7-18465E7F7696</guid>
203
- <guid>97808F6C-4769-49D5-9553-18AE9C62ACD7</guid>
204
- <guid>B196B286-BAB4-101A-B69C-00AA00341D07</guid>
205
- <guid>D27CDB6E-AE6D-11CF-96B8-444553540000</guid>
206
- <guid>abe2869f-9b47-4cd9-a358-c22904dba7f7</guid>
207
- <guid>00000000-0000-0000-C000-000000000046</guid>
208
- <guid>ADB880A6-D8FF-11CF-9377-00AA003B7A11</guid>
209
- <guid>5e7e8100-9138-11d1-945a-00c04fc308ff</guid>
210
- <guid>82bd0e67-9fea-4748-8672-d5efe5b779b0</guid>
211
- <guid>5e7e8100-9138-11d1-945a-00c04fc308ff</guid>
212
- <guid>82BD0E67-9FEA-4748-8672-D5EFE5B779B0</guid>
213
- <guid>8856F961-340A-11D0-A96B-00C04FD705A2</guid>
214
- </guids>
215
-
216
- <!-- Registry -->
217
- <regs>
218
- <reg>\Device\KeyboardClass0</reg>
219
- <reg>Software\Skype\Phone</reg>
220
- <reg>\registry\machine\system\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\</reg>
221
- <reg>Software\Microsoft</reg>
222
- <reg>System\WPA\</reg>
223
- <reg>HARDWARE\DEVICEMAP\SERIALCOMM</reg>
224
- <reg>HARDWARE\DEVICEMAP\PARALLEL PORTS</reg>
225
- <reg>Software\Microsoft\Windows\CurrentVersion\Run</reg>
226
- <reg>.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunServices</reg>
227
- <reg>.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Runonce</reg>
228
- <reg>.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run</reg>
229
- <reg>HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\UserReset</reg>
230
- <reg>HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\</reg>
231
- <reg>HKEY_CURRENT_USER\Software\Microsoft</reg>
232
- <reg>HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\UserInit</reg>
233
- <reg>HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell</reg>
234
- <reg>HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\wdfmgr</reg>
235
- <reg>HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\UserRestart</reg>
236
- <reg>Software\Policies\Microsoft\Cryptography\AutoEnrollment</reg>
237
- <reg>Software\KasperskyLab\protected\AVP9\settings</reg>
238
- <reg>Software\KasperskyLab\protected\AVP8\settings</reg>
239
- <reg>Software\kingsoft\AntiVirus</reg>
240
- <reg>Software\JiangMin</reg>
241
- <reg>Software\Norton\SecurityStatusSDK</reg>
242
- <reg>Software\ESET\ESET Security\CurrentVersion\Info</reg>
243
- <reg>Software\Cisco Systems\VPN Client\AllAccess</reg>
244
- <reg>Software\AVAST Software</reg>
245
- <reg>Software\ESET</reg>
246
- <reg>Software\Classes\TypeLib\{F9043C88-F6F2-101A-A3C9-08002B2F49FB}\1.2\0\win32</reg>
247
- <reg>CurrentVersion\Run</reg>
248
- <reg>Hardware\Description\System\CentralProcessor</reg>
249
- <reg>Hardware\ACPI\DSDT</reg>
250
- <reg>HARDWARE\DEVICEMAP</reg>
251
- <reg>hklm\SYSTEM\ControlSet001\Control\SafeBoot\Network\{4D36E967-E325-11CE-BFC1-08002BE10318}</reg>
252
- <reg>hklm\SYSTEM\ControlSet001\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}</reg>
253
- <reg>HARDWARE\DESCRIPTION\System\CentralProcessor\0</reg>
254
- <reg>DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run</reg>
255
- <reg>DisableTaskManager</reg>
256
- <reg>HKCU\Control Panel\Desktop</reg>
257
- <reg>LoadAppInit_DLLs</reg>
258
- <reg>AppInit_DLLs</reg>
259
- <reg>WarnOnIntranet</reg>
260
- <reg>NoProtectedModeBanner</reg>
261
- <reg>Global\{A3BD3259-3E4F-428a-84C8-F0463A9D3EB5}</reg>
262
- <reg>Global\{A64C7F33-DA35-459b-96CA-63B51FB0CDB9}</reg>
263
- <reg>CLSID\{6C736DB0-BD94-11D0-8A23-00AA00B58E10}\EnableEvents</reg>
264
- <reg>ROOT\SecurityCenter</reg>
265
- <reg>ROOT\SecurityCenter2</reg>
266
- <reg>\shell\open\command</reg>
267
- <reg>\Device\KeyboardClassC</reg>
268
- <reg>\DosDevices\KeyboardClassC</reg>
269
- </regs>
270
-
271
- <oss>
272
- <os>Microsoft Windows ME</os>
273
- <os>Microsoft Windows 98</os>
274
- <os>Microsoft Windows 95</os>
275
- <os>Microsoft Windows 2000</os>
276
- <os>Microsoft Windows XP</os>
277
- <os>Home-Basic-Edition</os>
278
- <os>Home-Premium-Edition</os>
279
- <os>Home_Edition</os>
280
- <os>Home_Server</os>
281
- <os>WinNT</os>
282
- <os>WIN32_NT</os>
283
- <os>WIN_2008R2</os>
284
- <os>WIN_7</os>
285
- <os>WIN_2008</os>
286
- <os>WIN_VISTA</os>
287
- <os>WIN_2003</os>
288
- <os>WIN_XPe</os>
289
- <os>WIN_XP</os>
290
- <os>WIN_2000</os>
291
- <os>Web_Server_Edition</os>
292
- <os>Standard_Edition_core_installation</os>
293
- <os>Standard_Edition</os>
294
- <os>Small_Business_Server_Premium_Edition</os>
295
- <os>Small_Business_Server</os>
296
- <os>Enterprise_Edition_for_ItaniumBased_System</os>
297
- <os>Enterprise_Edition_core_installation</os>
298
- <os>Datacenter_Edition_core_installation</os>
299
- <os>Datacenter_Edition</os>
300
- <os>Cluster_Server_Edition</os>
301
- <os>Starter_Edition</os>
302
- <os>Business_Edition</os>
303
- <os>Enterprise_Edition</os>
304
- <os>Home_Basic_Edition</os>
305
- <os>Home_Premium_Edition</os>
306
- <os>Ultimate_Edition</os>
307
- <os>Server2008R2</os>
308
- <os>Server2008</os>
309
- <os>Win8</os>
310
- <os>WinServer2012</os>
311
- <os>Win7</os>
312
- <os>WinServer2008R2</os>
313
- <os>WinServer2008</os>
314
- <os>Vista</os>
315
- <os>WinHomeServer</os>
316
- <os>WinServer2003R2</os>
317
- <os>WinServer2003</os>
318
- <os>WinXP64</os>
319
- <os>WinXP</os>
320
- <os>Win2K</os>
321
- <os>Windows Me</os>
322
- <os>Windows 98</os>
323
- <os>Windows 95</os>
324
- <os>Windows NT</os>
325
- <os>Windows Vista</os>
326
- <os>Windows 7</os>
327
- <os>Windows 8</os>
328
- <os>Windows 8.1</os>
329
- <os>Windows NT 3.51</os>
330
- <os>Windows NT 4.0</os>
331
- <os>Windows Server</os>
332
- <os>Windows Server 2012 R2</os>
333
- <os>Windows 10</os>
334
- <os>Windows Server 2016 Technical Preview</os>
335
- <os>Ultimate Edition</os>
336
- <os>Home Premium Edition</os>
337
- <os>Home Basic Edition</os>
338
- <os>Enterprise Edition</os>
339
- <os>Business Edition</os>
340
- <os>Starter Edition</os>
341
- <os>Cluster Server Edition</os>
342
- <os>Datacenter Edition</os>
343
- <os>Datacenter Edition (core installation)</os>
344
- <os>Enterprise Edition (core installation)</os>
345
- <os>Enterprise Edition for Itanium-based Systems</os>
346
- <os>Small Business Server</os>
347
- <os>Small Business Server Premium Edition</os>
348
- <os>Standard Edition</os>
349
- <os>Standard Edition (core installation)</os>
350
- <os>Web Server Edition</os>
351
- <os>Professional Edition</os>
352
- <os>Windows Server 2003</os>
353
- <os>Windows Server 2003 R2</os>
354
- <os>Windows Storage Server 2003</os>
355
- <os>Windows XP</os>
356
- <os>Windows XP Professional x64 Edition</os>
357
- <os>Windows XP Professional x64</os>
358
- <os>Datacenter Edition for Itanium-based Systems</os>
359
- <os>Datacenter x64 Edition</os>
360
- <os>Enterprise x64 Edition</os>
361
- <os>Standard x64 Edition</os>
362
- <os>Compute Cluster Edition</os>
363
- <os>Web Edition</os>
364
- <os>Home Edition</os>
365
- <os>Windows 2000</os>
366
- <os>Datacenter Server</os>
367
- <os>Advanced Server</os>
368
- <os>Windows Home Server</os>
369
- <os>Windows Server 2008</os>
370
- <os>Windows Server 2008 R2</os>
371
- <os>Windows Server R2</os>
372
- <os>Media Center Edition</os>
373
- <os>Tablet PC Edition</os>
374
- <os>Embedded Edition</os>
375
- <os>Professional x64 Edition</os>
376
- <os>Storage Server 2003 R2</os>
377
- <os>Storage Server 2003</os>
378
- <os>Server 2003 R2</os>
379
- <os>Server 2003</os>
380
- <os>Server 2008</os>
381
- <os>Business N</os>
382
- <os>Datacenter Edition(Core)</os>
383
- <os>Enterprise N</os>
384
- <os>Enterprise Edition(Core)</os>
385
- <os>Home Basic</os>
386
- <os>Home Basic N</os>
387
- <os>Home Premium</os>
388
- <os>Home Premium N</os>
389
- <os>Ultimate N</os>
390
- <os>Standard Edition(Core)</os>
391
- <os>NT3.1</os>
392
- <os>NT3.5</os>
393
- <os>NT3.51</os>
394
- <os>2003 Server</os>
395
- <os>2008 Server</os>
396
- <os>Win Vista</os>
397
- <os>Win Srv 2008</os>
398
- <os>Win 7</os>
399
- <os>Win 8</os>
400
- <os>Windows+8.1</os>
401
- <os>Win Srv 2003</os>
402
- <os>Win Srv</os>
403
- <os>Win XP</os>
404
- <os>Windows+XP</os>
405
- <os>Windows XP (5.1)</os>
406
- <os>Win 2000</os>
407
- <os>Windows Server 2012</os>
408
- <os>32-bit Edition</os>
409
- <os>64-bit Edition</os>
410
- <os>Windows Server 2000</os>
411
- <os>Windows Server 2000</os>
412
- <os>Windows+8</os>
413
- <os>Windows+7</os>
414
- <os>Windows+Vista</os>
415
- <os>Windows+Server+2003</os>
416
- <os>Windows+2000</os>
417
- <os>Windows 2000 (5.0)</os>
418
- <os>Windows 7 (6.1)</os>
419
- <os>Windows Server 2003 (5.2)</os>
420
- <os>Windows Server 2003 R2 (5.2)</os>
421
- <os>Windows Server 2008 (6.0)</os>
422
- <os>Windows Server 2008 R2 (6.1)</os>
423
- <os>Windows Vista (6.0)</os>
424
- </oss>
425
-
426
- <!--Sandbox Product IDs -->
427
- <products>
428
- <product>76487-640-1457236-23837</product>
429
- <product>76487-337-8429955-22614</product>
430
- <product>76487-644-3177037-23510</product>
431
- <product>76487-640-8834005-23195</product>
432
- <product>76487-640-0716662-23535</product>
433
- <product>76487-644-8648466-23106</product>
434
- <product>76487-341-5883812-22420</product>
435
- <product>76487-OEM-0027453-63796</product>
436
- <product>76497-640-6308873-23835</product>
437
- <product>55274-640-2673064-23950</product>
438
- <product>00426-293-8170032-85146</product>
439
- </products>
440
-
441
- <!-- SID (Security Identifiers -->
442
- <sids>
443
- <sid>S-1-0</sid>
444
- <sid>S-1-0-0</sid>
445
- <sid>S-1-1</sid>
446
- <sid>S-1-1-0</sid>
447
- <sid>S-1-2</sid>
448
- <sid>S-1-2-0</sid>
449
- <sid>S-1-2-1</sid>
450
- <sid>S-1-3</sid>
451
- <sid>S-1-3-0</sid>
452
- <sid>S-1-3-1</sid>
453
- <sid>S-1-3-2</sid>
454
- <sid>S-1-3-3</sid>
455
- <sid>S-1-3-4</sid>
456
- <sid>S-1-5-80-0</sid>
457
- <sid>S-1-4</sid>
458
- <sid>S-1-5</sid>
459
- <sid>S-1-5-1</sid>
460
- <sid>S-1-5-2</sid>
461
- <sid>S-1-5-3</sid>
462
- <sid>S-1-5-4</sid>
463
- <sid>S-1-5-6</sid>
464
- <sid>S-1-5-7</sid>
465
- <sid>S-1-5-8</sid>
466
- <sid>S-1-5-9</sid>
467
- <sid>S-1-5-10</sid>
468
- <sid>S-1-5-11</sid>
469
- <sid>S-1-5-12</sid>
470
- <sid>S-1-5-13</sid>
471
- <sid>S-1-5-14</sid>
472
- <sid>S-1-5-15</sid>
473
- <sid>S-1-5-17</sid>
474
- <sid>S-1-5-18</sid>
475
- <sid>S-1-5-19</sid>
476
- <sid>S-1-5-20</sid>
477
- <sid>S-1-5-32-544</sid>
478
- <sid>S-1-5-32-545</sid>
479
- <sid>S-1-5-32-546</sid>
480
- <sid>S-1-5-32-547</sid>
481
- <sid>S-1-5-32-548</sid>
482
- <sid>S-1-5-32-549</sid>
483
- <sid>S-1-5-32-550</sid>
484
- <sid>S-1-5-32-551</sid>
485
- <sid>S-1-5-32-552</sid>
486
- <sid>S-1-5-64-10</sid>
487
- <sid>S-1-5-64-14</sid>
488
- <sid>S-1-5-64-21</sid>
489
- <sid>S-1-5-80</sid>
490
- <sid>S-1-5-83-0</sid>
491
- <sid>S-1-16-0</sid>
492
- <sid>S-1-16-4096</sid>
493
- <sid>S-1-16-8192</sid>
494
- <sid>S-1-16-8448</sid>
495
- <sid>S-1-16-12288</sid>
496
- <sid>S-1-16-16384</sid>
497
- <sid>S-1-16-20480</sid>
498
- <sid>S-1-16-28672</sid>
499
- <sid>S-1-5-32-554</sid>
500
- <sid>S-1-5-32-555</sid>
501
- <sid>S-1-5-32-556</sid>
502
- <sid>S-1-5-32-557</sid>
503
- <sid>S-1-5-32-558</sid>
504
- <sid>S-1-5-32-559</sid>
505
- <sid>S-1-5-32-560</sid>
506
- <sid>S-1-5-32-561</sid>
507
- <sid>S-1-5-32-562</sid>
508
- <sid>S-1-5-32-569</sid>
509
- <sid>S-1-5-32-573</sid>
510
- <sid>S-1-5-32-574</sid>
511
- <sid>S-1-5-32-575</sid>
512
- <sid>S-1-5-32-576</sid>
513
- <sid>S-1-5-32-577</sid>
514
- <sid>S-1-5-32-578</sid>
515
- <sid>S-1-5-32-579</sid>
516
- <sid>S-1-5-32-580</sid>
517
- <sid>S-1-5-80-2006800713-1441093265-249754844-3404434343-1444102779</sid>
518
- <sid>S-1-5-80-3864065939-1897331054-469427076-3133256761-1570309435</sid>
519
- </sids>
520
-
521
- <protocols>
522
- <protocol enable="1" risk="1">httpmail</protocol>
523
- <protocol enable="1" risk="1">nntp</protocol>
524
- <protocol enable="1" risk="1">imap</protocol>
525
- <protocol enable="1" risk="1">pop3</protocol>
526
- <protocol enable="1" risk="1">smb</protocol>
527
- <protocol enable="1" risk="1">smtp</protocol>
528
- <protocol enable="1" risk="1">ftp</protocol>
529
- <protocol enable="1" risk="1">icmp</protocol>
530
- </protocols>
531
-
532
- <keys>
533
- <key enable="1" risk="1">[ESCAPE]</key>
534
- <key enable="1" risk="1">[ENTER]</key>
535
- <key enable="1" risk="1">[TAB]</key>
536
- <key enable="1" risk="1">[DELETE]</key>
537
- <key enable="1" risk="1">[CAPS LOCK]</key>
538
- <key enable="1" risk="1">[BACKCPACE]</key>
539
- <key enable="1" risk="1">[Backspace]</key>
540
- <key enable="1" risk="1">[Enter]</key>
541
- <key enable="1" risk="1">[Tab]</key>
542
- <key enable="1" risk="1">[Arrow Left]</key>
543
- <key enable="1" risk="1">[Arrow Up]</key>
544
- <key enable="1" risk="1">[Arrow Right]</key>
545
- <key enable="1" risk="1">[Arrow Down]</key>
546
- <key enable="1" risk="1">[Home]</key>
547
- <key enable="1" risk="1">[Page Up]</key>
548
- <key enable="1" risk="1">[Page Down]</key>
549
- <key enable="1" risk="1">[End]</key>
550
- <key enable="1" risk="1">[Break]</key>
551
- <key enable="1" risk="1">[Delete]</key>
552
- <key enable="1" risk="1">[Insert]</key>
553
- <key enable="1" risk="1">[Ent]</key>
554
- <key enable="1" risk="1">[Print Screen]</key>
555
- <key enable="1" risk="1">[Scroll Lock]</key>
556
- <key enable="1" risk="1">[Caps Lock]</key>
557
- <key enable="1" risk="1">[Alt]</key>
558
- <key enable="1" risk="1">[Esc]</key>
559
- <key enable="1" risk="1">[Back Space]</key>
560
- <key enable="1" risk="1">[CONTROL]</key>
561
- <key enable="1" risk="1">[PUSE]</key>
562
- <key enable="1" risk="1">[LEFT]</key>
563
- <key enable="1" risk="1">[RIGHT]</key>
564
- <key enable="1" risk="1">[UP]</key>
565
- <key enable="1" risk="1">[DOWN]</key>
566
- <key enable="1" risk="1">[NUM LOCK]</key>
567
- <key enable="1" risk="1">[RMOUSE]</key>
568
- <key enable="1" risk="1">[LMOUSE]</key>
569
- <key enable="1" risk="1">[AltRight]</key>
570
- <key enable="1" risk="1">[AltLeft]</key>
571
- <key enable="1" risk="1">[CtrlRight]</key>
572
- <key enable="1" risk="1">[CtrlLeft]</key>
573
- <key enable="1" risk="1">[ShiftRight]</key>
574
- <key enable="1" risk="1">[ShiftLeft]</key>
575
- <key enable="1" risk="1">[Scroll]</key>
576
- <key enable="1" risk="1">[NumLock]</key>
577
- <key enable="1" risk="1">[Sleep]</key>
578
- <key enable="1" risk="1">[Menu]</key>
579
- <key enable="1" risk="1">[WindowsRight]</key>
580
- <key enable="1" risk="1">[WindowsLeft]</key>
581
- <key enable="1" risk="1">[Suppr]</key>
582
- <key enable="1" risk="1">[PrintScreen]</key>
583
- <key enable="1" risk="1">[PageDown]</key>
584
- <key enable="1" risk="1">[PageUp]</key>
585
- <key enable="1" risk="1">[Caps]</key>
586
- <key enable="1" risk="1">[Pause]</key>
587
- <key enable="1" risk="1">[Ctrl]</key>
588
- <key enable="1" risk="1">[Shift]</key>
589
- <key enable="1" risk="1">[Clear]</key>
590
- <key enable="1" risk="1">[DownArrow]</key>
591
- <key enable="1" risk="1">[RightArrow]</key>
592
- <key enable="1" risk="1">[UpArrow]</key>
593
- <key enable="1" risk="1">[LeftArrow]</key>
594
- <key enable="1" risk="1">[Space]</key>
595
- <key enable="1" risk="1">[CapsLock]</key>
596
- <key enable="1" risk="1">[ALT-DOWN]</key>
597
- <key enable="1" risk="1">[ALT-UP]</key>
598
- <key enable="1" risk="1">[APPS]</key>
599
- <key enable="1" risk="1">[BACK]</key>
600
- <key enable="1" risk="1">[CLR]</key>
601
- <key enable="1" risk="1">[CTRL-DOWN]</key>
602
- <key enable="1" risk="1">[CTRL-UP]</key>
603
- <key enable="1" risk="1">[DEL]</key>
604
- <key enable="1" risk="1">[EXECUTE]</key>
605
- <key enable="1" risk="1">[F1]</key>
606
- <key enable="1" risk="1">[F2]</key>
607
- <key enable="1" risk="1">[F3]</key>
608
- <key enable="1" risk="1">[F4]</key>
609
- <key enable="1" risk="1">[F5]</key>
610
- <key enable="1" risk="1">[F6]</key>
611
- <key enable="1" risk="1">[F7]</key>
612
- <key enable="1" risk="1">[F8]</key>
613
- <key enable="1" risk="1">[F9]</key>
614
- <key enable="1" risk="1">[F10]</key>
615
- <key enable="1" risk="1">[F11]</key>
616
- <key enable="1" risk="1">[F12]</key>
617
- <key enable="1" risk="1">[HELP]</key>
618
- <key enable="1" risk="1">[BACK_SPACE]</key>
619
- <key enable="1" risk="1">[RETURN]</key>
620
- <key enable="1" risk="1">[Esc]</key>
621
- <key enable="1" risk="1">[TAB]</key>
622
- <key enable="1" risk="1">[CAPS LOCK]</key>
623
- <key enable="1" risk="1">[SPACE]</key>
624
- <key enable="1" risk="1">[LEFT_SHIFT]</key>
625
- <key enable="1" risk="1">[RIGHT_SHIFT]</key>
626
- <key enable="1" risk="1">[LEFT_CONTROL]</key>
627
- <key enable="1" risk="1">[RIGHT_CONTROL]</key>
628
- <key enable="1" risk="1">[LCONTROL-DOWN]</key>
629
- <key enable="1" risk="1">[LCONTROL-UP]</key>
630
- <key enable="1" risk="1">[LMENU-DOWN]</key>
631
- <key enable="1" risk="1">[LMENU-UP]</key>
632
- <key enable="1" risk="1">[LWIN-DOWN]</key>
633
- <key enable="1" risk="1">[LWIN-UP]</key>
634
- <key enable="1" risk="1">[PGDOWN]</key>
635
- <key enable="1" risk="1">[PGUP]</key>
636
- <key enable="1" risk="1">[PRINT]</key>
637
- <key enable="1" risk="1">[RCONTROL-DOWN]</key>
638
- <key enable="1" risk="1">[RCONTROL-UP]</key>
639
- <key enable="1" risk="1">[RMENU-DOWN]</key>
640
- <key enable="1" risk="1">[RMENU-UP]</key>
641
- <key enable="1" risk="1">[RWIN-DOWN]</key>
642
- <key enable="1" risk="1">[RWIN-UP]</key>
643
- <key enable="1" risk="1">[SELECT]</key>
644
- <key enable="1" risk="1">[SEPARATOR]</key>
645
- <key enable="1" risk="1">[SNAPSHOT]</key>
646
- <key enable="1" risk="1">[PRSC]</key>
647
- </keys>
648
-
649
- <events>
650
- <event enable="1" risk="1">OnActivate</event>
651
- <event enable="1" risk="1">OnCanClose</event>
652
- <event enable="1" risk="1">OnChange</event>
653
- <event enable="1" risk="1">OnClick</event>
654
- <event enable="1" risk="1">OnClose</event>
655
- <event enable="1" risk="1">OnCloseQuery</event>
656
- <event enable="1" risk="1">OnCloseUp</event>
657
- <event enable="1" risk="1">OnClose</event>
658
- <event enable="1" risk="1">OnCreate</event>
659
- <event enable="1" risk="1">OnCreatePanelClass</event>
660
- <event enable="1" risk="1">OnData</event>
661
- <event enable="1" risk="1">OnDataFind</event>
662
- <event enable="1" risk="1">OnDataHint</event>
663
- <event enable="1" risk="1">OnDataStateChange</event>
664
- <event enable="1" risk="1">OnDeletion</event>
665
- <event enable="1" risk="1">OnDestroy</event>
666
- <event enable="1" risk="1">OnDockOver</event>
667
- <event enable="1" risk="1">OnDragDrop</event>
668
- <event enable="1" risk="1">OnDragOver</event>
669
- <event enable="1" risk="1">OnDropDown</event>
670
- <event enable="1" risk="1">OnEndDock</event>
671
- <event enable="1" risk="1">OnEndDrag</event>
672
- <event enable="1" risk="1">OnExit</event>
673
- <event enable="1" risk="1">OnKeyDown</event>
674
- <event enable="1" risk="1">OnKeyPress</event>
675
- <event enable="1" risk="1">OnKeyUp</event>
676
- <event enable="1" risk="1">OnMouseDown</event>
677
- <event enable="1" risk="1">OnMouseEnter</event>
678
- <event enable="1" risk="1">OnMouseLeave</event>
679
- <event enable="1" risk="1">OnMouseMove</event>
680
- <event enable="1" risk="1">OnMouseUp</event>
681
- <event enable="1" risk="1">OnProgress</event>
682
- <event enable="1" risk="1">OnTimer</event>
683
- <event enable="1" risk="1">OnUnDock</event>
684
- <event enable="1" risk="1">OnUpdate</event>
685
- </events>
686
-
687
- <strings>
688
- <string score="0">unzip</string>
689
- <string score="0">inflate</string>
690
- <string score="0">\\.\SICE</string>
691
- <string score="0">\\.\SIWVID</string>
692
- <string score="0">\\.\REGSYS</string>
693
- <string score="0">\\.\REGVXG</string>
694
- <string score="0">\\.\FILEVXG</string>
695
- <string score="0">\\.\FILEM</string>
696
- <string score="0">\\.\TR</string>
697
-
698
- <string score="0">MSXML2.ServerXMLHTTP$</string>
699
- <string score="0">MSXML2.DOMDocument$</string>
700
- <string score="0">MSXML2.DOMDocument.6.0</string>
701
- <string score="0">MSXML2.DOMDocument.5.0</string>
702
- <string score="0">MSXML2.DOMDocument.4.0</string>
703
- <string score="0">MSXML2.DOMDocument.3.0</string>
704
- <string score="0">Word.Document.8</string>
705
- <string score="0">PROJECT.THISDOCUMENT.AUTOOPEN</string>
706
- <string score="0">PROJECTwm</string>
707
-
708
- <string score="1">webcam</string>
709
- <string score="1">Please Enable Content* to see this document.</string>
710
- <string score="1">Enable Content</string>
711
- <string score="1">Program Files (x86)</string>
712
- <string score="1">Playx64</string>
713
- <string score="1">PlayWin32</string>
714
- <string score="1">PROCEXPLORER</string>
715
- <string score="1">MSScriptControl.ScriptControl.1</string>
716
- <string score="1">Embedded Control</string>
717
- <string score="1">Microsoft Word 10.0</string>
718
- <string score="1">OCXNAME</string>
719
- <string score="0">Accept-Language: </string>
720
- <string score="0">Accept-Encoding: </string>
721
- <string score="0">Mr.Black</string>
722
-
723
- <string score="0">WinZip Self-Extractor - Password</string>
724
- <string score="0">This self-extracting Zip file is password protected.</string>
725
- <string score="0">Windows Installer XML (3.0.5419.0)</string>
726
- <string score="0">ResponseText</string>
727
- <string score="0">Macros must be enabled to display the contents of the document.</string>
728
-
729
- <string score="0">Your decryption price will</string>
730
- <string score="0">Your personal files are encrypted!</string>
731
- <string score="0">!!!Rescue your files!!!</string>
732
- <string score="0">Any attempt to remove or corrupt this software will result</string>
733
- <string score="0">Now you have the last chance to decrypt your files.</string>
734
- <string score="0">Any attempt to remove or corrupt this software will result</string>
735
- <string score="0">in immediate elimination of the private key by the server.</string>
736
- <string score="0">the more chances are left to recover the files.</string>
737
- <string score="0">You must install this browser</string>
738
- <string score="0">Your decryption price will</string>
739
- <string score="0">Everything is fine now decrypting all files.</string>
740
- <string score="0">All files Decrypted</string>
741
- <string score="0">Enter Decrypt Key</string>
742
- <string score="0">WScript.Shell</string>
743
- <string score="0">System Volume Information</string>
744
- <string score="0">Boot</string>
745
- <string score="0">This document was edited in later version of Microsoft Word.</string>
746
- <string score="0">To load the document, please Enable Content.</string>
747
-
748
- <string score="0">wevtutil clear-log Security</string>
749
- <string score="0">wevtutil clear-log Setup</string>
750
- <string score="0">wevtutil clear-log System</string>
751
- <string score="0">wevtutil clear-log Application</string>
752
- <string score="0">SECG curve over a 256 bit prime field</string>
753
- <string score="0">SmartAssembly.Attributes</string>
754
- <string score="0">Copyright (c) 1998-2009 by Joergen Ibsen All Rights Reserved.</string>
755
- <string score="0">"Powered by SmartAssembly 6.8.0.121</string>
756
- <string score="0">!Powered by SmartAssembly 6.6.1.44</string>
757
-
758
- <string score="0">Microsoft Enhanced RSA and AES Cryptographic Provider</string>
759
-
760
- <string score="0">$Info: This file is packed with the UPX executable packer http://upx.sf.net $</string>
761
- <string score="0">$Id: UPX 3.91 Copyright (C) 1996-2013 the UPX Team. All Rights Reserved. $</string>
762
- <string score="0">Microsoft Application Compatibility Toolkit 5.6</string>
763
- <string score="0">System Manager</string>
764
- <string score="0">Screen Capture</string>
765
- <string score="0">Webcam Capture</string>
766
- <string score="0">Packet Sniffer</string>
767
- <string score="0">\\.\mailslot\%s</string>
768
- <string score="0">Network Performance and Security Manager</string>
769
- <string score="0">ProxyEnable</string>
770
- <string score="0">ProxyServer</string>
771
- <string score="0">ProxyOverride</string>
772
- <string score="0">ProxyUserName</string>
773
- <string score="0">ProxyPassword</string>
774
- <string score="0">SkpWnd</string>
775
- <string score="0">AdministratorsGroup</string>
776
- <string score="0">NtAuthority</string>
777
- <string score="0">masterkey</string>
778
- <string score="0">IEHistory</string>
779
- <string score="0">NT AUTHORITY</string>
780
-
781
- <!-- Firefox -->
782
- <string score="0">PR_Bind</string>
783
- <string score="0">PR_Accept</string>
784
- <string score="0">PR_AcceptRead</string>
785
- <string score="0">PR_Connect</string>
786
- <string score="0">PR_Listen</string>
787
- <string score="0">PR_Read</string>
788
- <string score="0">PR_Write</string>
789
- <string score="0">PR_Writev</string>
790
- <string score="0">PR_Close</string>
791
- <string score="0">PR_Send</string>
792
- <string score="0">PR_TransmitFile</string>
793
- <string score="0">PR_OpenTCPSocket</string>
794
- <string score="0">PR_GetSocketOption</string>
795
- <string score="0">PR_SetSocketOption</string>
796
- <string score="0">PR_Shutdown</string>
797
- <string score="0">PR_GetError</string>
798
- <string score="0">PR_SetError</string>
799
- <string score="0">PR_GetNameForIdentity</string>
800
-
801
- <!-- Unclassified -->
802
- <string score="0">PClock</string>
803
- <string score="0">Start scanner</string>
804
- <string score="0">Scanner completed</string>
805
- <string score="0">Start crypter</string>
806
- <string score="0">Files encrypted</string>
807
-
808
- <string score="0">TCustomDecompressor</string>
809
- <string score="0">TCompressedBlockReader</string>
810
- <string score="0">SoftDownloaderWnd</string>
811
- <string score="0">MemoryScanner</string>
812
- <string score="0">ActiveX Control</string>
813
- <string score="0">\\.\PhysicalDrive%d</string>
814
- <string score="0">Microsoft Windows Auto Update</string>
815
- <string score="0">PB_DropAccept</string>
816
- <string score="0">PB_WindowID</string>
817
- <string score="0">IsAdmin</string>
818
- <string score="0">CryptKeyType</string>
819
- <string score="0">CryptKeyId</string>
820
- <string score="0">NetAdapter</string>
821
- <string score="0">Gateway</string>
822
- <string score="0">PriWinsServer</string>
823
- <string score="0">SecWinsServer</string>
824
- <string score="0">DHCPServer</string>
825
- <string score="0">DnsServer</string>
826
- <string score="0">Microsoft Enhanced Cryptographic Provider v1.0</string>
827
- <string score="0">Microsoft Base Cryptographic Provider v1.0</string>
828
- <string score="0">Gestalt</string>
829
- <string score="0">stub_helper</string>
830
- <string score="0">vm_protect</string>
831
-
832
- <string score="0">FtpServer</string>
833
- <string score="0">FtpUserName</string>
834
- <string score="0">FtpPassword</string>
835
- <string score="0">FtpDirectory</string>
836
- <string score="0">ServerType</string>
837
- <string score="0">onEnterFrame</string>
838
- <string score="0">error to get HDD firmware serial</string>
839
- <string score="0">aPLib v1.01 - the smaller the better :)</string>
840
- <string score="0">TrojanEngine</string>
841
- <string score="0">NetMon</string>
842
- <string score="0">FileSmash</string>
843
- <string score="0">IERepair</string>
844
- <string score="0">KillVirus</string>
845
- <string score="0">SoftMove</string>
846
- <string score="0">SysClean</string>
847
- <string score="0">Trojan</string>
848
- <string score="0">CrashStackLen</string>
849
- <string score="0">CrashDumpLen</string>
850
- <string score="0">CrashStackBase64Len</string>
851
- <string score="0">CrashDumpBase64Len</string>
852
- <string score="0">CrashStack</string>
853
- <string score="0">MinDump</string>
854
- <string score="0">VIRUS</string>
855
- <string score="0">QEMU</string>
856
-
857
- <string score="0">Safengine Shielden v2.3.0.0</string>
858
- <string score="0">EnumProcess</string>
859
- <string score="0">InjectByPid</string>
860
- <string score="0">Send to Server failed.</string>
861
- <string score="0">HandShake with the server failed. Error:</string>
862
- <string score="0">Microsoft Unified Security Protocol Provider</string>
863
- <string score="0">ddos.bot</string>
864
- <string score="0">makedir</string>
865
- <string score="0">opencmd</string>
866
- <string score="0">ProcessorNameString</string>
867
- <string score="0">VendorIdentifier</string>
868
- <string score="0">SystemBiosVersion</string>
869
- <string score="0">SystemBiosDate</string>
870
- <string score="0">VideoBiosVersion</string>
871
- <string score="0">VideoBiosDate</string>
872
- <string score="0">Windows File Protection</string>
873
- <string score="0">LogonFailure</string>
874
- <string score="0">killthread</string>
875
- <string score="0">startkeylogger</string>
876
- <string score="0">stopkeylogger</string>
877
- <string score="0">listprocesses</string>
878
- <string score="0">killprocess</string>
879
- <string score="0">stopspy</string>
880
- <string score="0">redirectspy</string>
881
- <string score="0">stopredirectspy</string>
882
- <string score="0">kazaabackupfiles</string>
883
- <string score="0">SC_MONITORPOWER</string>
884
- <string score="0">HWND_BROADCAST</string>
885
- <string score="0">IsConnectedToInternet</string>
886
- <string score="0">get_MachineName</string>
887
- <string score="0">MacAddress</string>
888
- <string score="0">InternetExplorer.Application</string>
889
-
890
- <string score="0">EmailAddress</string>
891
- <string score="0">PopServer</string>
892
- <string score="0">PopPort</string>
893
- <string score="0">PopAccount</string>
894
- <string score="0">PopPassword</string>
895
- <string score="0">SmtpServer</string>
896
- <string score="0">SmtpPort</string>
897
- <string score="0">SmtpAccount</string>
898
- <string score="0">SmtpPassword</string>
899
- <string score="0">WininetCacheCredentials</string>
900
- <string score="0">PasswordType</string>
901
- <string score="0">OutpostMonitor</string>
902
-
903
- <string score="1">DisableAllPrivileges</string>
904
- <string score="1">SetPrivilege</string>
905
- <string score="0">telnet</string>
906
- <string score="0">Download.Complete</string>
907
- <string score="0">Download.Cancelled</string>
908
- <string score="0">Download.Failed</string>
909
- <string score="0">onLoadInit</string>
910
- <string score="0">onLoadProgress</string>
911
- <string score="0">onLoadError</string>
912
- <string score="0">onLoadComplete</string>
913
- <string score="0">onLoadStart</string>
914
- <string score="0">onScroller</string>
915
- <string score="0">onChanged</string>
916
- <string score="0">onConstruct</string>
917
- <string score="0">onDragOut</string>
918
- <string score="0">onDragOver</string>
919
- <string score="0">onRollOut</string>
920
- <string score="0">onRollOver</string>
921
- <string score="0">onReleaseOutside</string>
922
- <string score="0">onRelease</string>
923
- <string score="0">onPress</string>
924
- <string score="0">onInitialize</string>
925
- <string score="0">onKeyUp</string>
926
- <string score="0">onKeyDownv</string>
927
- <string score="0">onMouseUp</string>
928
- <string score="0">onMouseDown</string>
929
- <string score="0">onMouseMove</string>
930
- <string score="0">onUnload</string>
931
- <string score="0">onEnterFrame</string>
932
- <string score="0">location.href</string>
933
- <string score="0">xmlns:xlink</string>
934
-
935
- <string score="0">SMTP Password</string>
936
- <string score="0">HTTPMail Password</string>
937
- <string score="0">NNTP Password</string>
938
- <string score="0">IMAP Password</string>
939
- <string score="0">POP3 Password</string>
940
- <string score="0">NNTP Password</string>
941
- <string score="0">IMAP Password</string>
942
- <string score="0">POP3 Password</string>
943
- <string score="0">IMAP Port</string>
944
- <string score="0">SMTP Port</string>
945
- <string score="0">POP3 Port</string>
946
- <string score="0">SMTP User</string>
947
- <string score="0">HTTPMail Server</string>
948
- <string score="0">IMAP User</string>
949
- <string score="0">POP3 User</string>
950
- <string score="0">HTTP Server URL</string>
951
- <string score="0">HTTP User</string>
952
- <string score="0">Email</string>
953
- <string score="0">IMAP User Name</string>
954
- <string score="0">IMAP Server</string>
955
- <string score="0">NNTP Server</string>
956
- <string score="0">NNTP User Name</string>
957
- <string score="0">NNTP Email Address</string>
958
- <string score="0">SMTP User Name</string>
959
- <string score="0">SMTP Server</string>
960
- <string score="0">SMTP Email Address</string>
961
-
962
- <string score="0">Adobe ImageReadyq</string>
963
- <string score="0">ClearBrowsingHistoryOnExit</string>
964
- <string score="0">GetMACAddress</string>
965
- <string score="0">GetProcessesByName</string>
966
- <string score="0">WebRequest</string>
967
- <string score="0">WebResponse</string>
968
- <string score="0">GetResponse</string>
969
- <string score="0">GetVolumeSerial</string>
970
- <string score="0">ENCRYPtSTRING</string>
971
- <string score="0">ENCRYPTBYTe</string>
972
- <string score="0">VBRUN</string>
973
- <string score="0">Blowfish</string>
974
- <string score="0">CreateDecryptor</string>
975
- <string score="0">MD5CryptoServiceProvider</string>
976
- <string score="0">TripleDESCryptoServiceProvider</string>
977
- <string score="0">PaddingMode</string>
978
- <string score="0">iexplorer</string>
979
- <string score="0">Shell_TrayWnd</string>
980
- <string score="0">ExecuteCommand</string>
981
- <string score="0">RunPE</string>
982
- <string score="0">CCleaner</string>
983
- <string score="0">Binder</string>
984
- <string score="0">SpyTheSpy</string>
985
- <string score="0">TCPEye</string>
986
- <string score="0">SpeedGear</string>
987
- <string score="0">taskmgr</string>
988
- <string score="0">IPBlocker</string>
989
- <string score="0">CCleaner</string>
990
- <string score="0">procexp</string>
991
- <string score="0">Windows Update</string>
992
- <string score="0">Payment ok</string>
993
- <string score="0">Payment Received. Proceed to decryption.</string>
994
- <string score="0">Waiting Payment</string>
995
- <string score="0">Waiting TOR Connection</string>
996
- <string score="0">TorLocker</string>
997
- <string score="0">proxyPort = 58010</string>
998
- <string score="0">socksParentProxy = 127.0.0.1:9150</string>
999
- <string score="0">socksProxyType = socks5</string>
1000
- <string score="0">TorLocker_v0.9.3</string>
1001
- <string score="0">Wallpaper</string>
1002
- <string score="0">kippohome</string>
1003
- <string score="0">huffman</string>
1004
- <string score="0">DecodeHuffman</string>
1005
- <string score="0">Decode</string>
1006
- <string score="0">Inflate</string>
1007
- <string score="0">Unzip</string>
1008
- <string score="0">ZipAndEncrypt</string>
1009
- <string score="0">ZipAndAES</string>
1010
- <string score="0">LoadFile</string>
1011
- <string score="0">SafenSoft</string>
1012
- <string score="0">SysWatch</string>
1013
- <string score="0">McAfee</string>
1014
- <string score="0">Security Center</string>
1015
- <string score="0">Symantec</string>
1016
- <string score="0">Protection</string>
1017
- <string score="0">Norton</string>
1018
- <string score="0">Host OS</string>
1019
-
1020
- <string score="0">ReadPort</string>
1021
- <string score="0">WritePort</string>
1022
- <string score="0">cookie_module</string>
1023
- <string score="0">Proxy-Connection</string>
1024
- <string score="0">CompressAndSend</string>
1025
- <string score="0">EncryptFile</string>
1026
- <string score="0">RunAsShellUser</string>
1027
- <string score="0">SVNCStartServer</string>
1028
- <string score="0">Terminal Server</string>
1029
- <string score="0">Enterprise</string>
1030
- <string score="0">LanmanNT</string>
1031
- <string score="0">CONNECTED</string>
1032
- <string score="0">SENDME</string>
1033
- <string score="0">EXTEND</string>
1034
- <string score="0">EXTENDED</string>
1035
- <string score="0">TRUNCATE</string>
1036
- <string score="0">TRUNCATED</string>
1037
- <string score="0">RESOLVE</string>
1038
- <string score="0">RESOLVED</string>
1039
- <string score="0">BEGIN_DIR</string>
1040
- <string score="0">ESTABLISH_INTRO</string>
1041
- <string score="0">ESTABLISH_RENDEZVOUS</string>
1042
- <string score="0">INTRODUCE1</string>
1043
- <string score="0">INTRODUCE2</string>
1044
- <string score="0">RENDEZVOUS1</string>
1045
- <string score="0">RENDEZVOUS2</string>
1046
- <string score="0">INTRO_ESTABLISHED</string>
1047
- <string score="0">RENDEZVOUS_ESTABLISHED</string>
1048
- <string score="0">INTRODUCE_ACK</string>
1049
- <string score="0">.onion/</string>
1050
- <string score="0">TMemoryScanner</string>
1051
- <string score="0">Symantec Shared</string>
1052
- <string score="0">CWSandbox</string>
1053
- <string score="0">AVAST Software</string>
1054
- <string score="0">Registry optimiser</string>
1055
- <string score="0">Optimizing the registry...</string>
1056
- <string score="0">Virtual HD</string>
1057
- <string score="0">db2admin</string>
1058
- <string score="0">changeme</string>
1059
- <string score="0">MsComCtl.ocx</string>
1060
- <string score="0">HotTracking</string>
1061
- <string score="0">OpenProcessToken fail</string>
1062
- <string score="0">AdjustTokenPrivileges fail</string>
1063
- <string score="0">formgrabber</string>
1064
- <string score="0">redirects</string>
1065
- <string score="0">httpinjects</string>
1066
- <string score="0">Transfer-Encoding</string>
1067
- <string score="0">NtShutdownSystem</string>
1068
- <string score="0">coin-miner</string>
1069
- <string score="0">regwrite</string>
1070
- <string score="0">urlmon</string>
1071
- <string score="0">Internet Explorer</string>
1072
- <string score="0">inhibitPolicyMapping</string>
1073
- <string score="0">Bad time value</string>
1074
- <string score="0">pubkey.bin</string>
1075
- <string score="0">openssl</string>
1076
- <string score="0">relativename</string>
1077
- <string score="0">Polynomial</string>
1078
- <string score="0">cryptedcount.txt</string>
1079
- <string score="0">explicitText</string>
1080
- <string score="0">ASN1</string>
1081
- <string score="0">requireExplicitPolicy</string>
1082
- <string score="0">LanmanWorkstation</string>
1083
- <string score="0">LanmanServer</string>
1084
- <string score="0">Salt Length</string>
1085
- <string score="0">Seed</string>
1086
- <string score="0">Prime</string>
1087
- <string score="0">config.nt</string>
1088
- <string score="0">autoexec.nt</string>
1089
- <string score="0">protocol testing</string>
1090
- <string score="0">experience Destroy</string>
1091
- <string score="0">Dispatch</string>
1092
- <string score="0">winsock</string>
1093
- <string score="0">connection failed</string>
1094
- <string score="0">open internet failed</string>
1095
- <string score="0">payload</string>
1096
- <string score="0">Wscript.Shell</string>
1097
- <string score="0">Shell.Application</string>
1098
- <string score="0">createobject</string>
1099
- <string score="0">Extracting</string>
1100
- <string score="0">UltraVnc</string>
1101
- <string score="0">UltraVncSC</string>
1102
- <string score="0">RunProgram</string>
1103
- <string score="0">Fast decoding</string>
1104
- <string score="0">Gina</string>
1105
- <string score="0">cgets</string>
1106
- <string score="0">NetworkService\Cookies\</string>
1107
- <string score="0">Scheduler</string>
1108
- <string score="0">Local Settings\History\History.IE5</string>
1109
- <string score="0">leave the progress due to 10 attempts</string>
1110
- <string score="0">unrarw32</string>
1111
- <string score="0">server</string>
1112
- <string score="0">verifyinginstaller</string>
1113
- <string score="0">CONNECT</string>
1114
- <string score="0">AppData</string>
1115
- <string score="0">admin</string>
1116
- <string score="0">Microsoft.VisualBasic</string>
1117
- <string score="0">Protocol not supported</string>
1118
- <string score="0">referer</string>
1119
- <string score="0">partner_online_url</string>
1120
- <string score="0">partner_new_url</string>
1121
- <string score="0">exe.agent.mail</string>
1122
- <string score="0">mail.ru</string>
1123
- <string score="0">password</string>
1124
- <string score="0">Launcher</string>
1125
- <string score="0">remote</string>
1126
- <string score="0">inject</string>
1127
- <string score="0">hook</string>
1128
- <string score="0">crack</string>
1129
- <string score="0">script</string>
1130
- <string score="0">browse</string>
1131
- <string score="0">Event</string>
1132
- <string score="0">Privilege</string>
1133
- <string score="0">Reboot</string>
1134
- <string score="0">CabinetFile</string>
1135
- <string score="0">cabfile</string>
1136
- <string score="0">extract</string>
1137
- <string score="0">VB Runtime Installation</string>
1138
- <string score="0">Command.com</string>
1139
- <string score="0">Resume</string>
1140
- <string score="0">Pause</string>
1141
- <string score="0">Socket</string>
1142
- <string score="0">GetCode</string>
1143
- <string score="0">Console</string>
1144
- <string score="0">LZStart</string>
1145
- <string score="0">shell</string>
1146
- <string score="0">alert</string>
1147
- <string score="0">reverse</string>
1148
- <string score="0">swap</string>
1149
- <string score="0">logon</string>
1150
- <string score="0">logoff</string>
1151
- <string score="0">HookProc</string>
1152
- <string score="0">attempt</string>
1153
- <string score="0">users</string>
1154
- <string score="0">load</string>
1155
- <string score="0">query</string>
1156
- <string score="0">scan</string>
1157
- <string score="0">module</string>
1158
- <string score="0">drop</string>
1159
- <string score="0">loop</string>
1160
- <string score="0">Download</string>
1161
- <string score="0">Upload</string>
1162
- <string score="0">CONNECT</string>
1163
- <string score="0">pipe</string>
1164
- <string score="0">Transaction</string>
1165
- <string score="0">Created by</string>
1166
- <string score="0">WinDir</string>
1167
- <string score="0">exec error</string>
1168
- <string score="0">application/x-www-form-urlencoded</string>
1169
- <string score="0">LordPE</string>
1170
- <string score="0">deflate</string>
1171
- <string score="0">60794-12b3-e4169440</string>
1172
- <string score="0">Keep-Alive</string>
1173
- <string score="0">Referer</string>
1174
- <string score="0">WinSta0</string>
1175
- <string score="0">Update</string>
1176
- <string score="0">Forbidden</string>
1177
- <string score="0">Accepted</string>
1178
- <string score="0">sessionid</string>
1179
-
1180
- <string score="0">sharedaccess</string>
1181
- <string score="0">localgroup</string>
1182
- <string score="0">administrators</string>
1183
- <string score="0">Administrator</string>
1184
- <string score="0">guest</string>
1185
- <string score="0">RDP-Tcp</string>
1186
- <string score="0">UnknownProcess</string>
1187
- <string score="0">%d Day %d Hour %d Min</string>
1188
- <string score="0">termsrv_t</string>
1189
- <string score="0">Winlogon</string>
1190
- <string score="0">nsocket</string>
1191
- <string score="0">compression</string>
1192
- <string score="0">userprofile</string>
1193
- <string score="0">webkit</string>
1194
- <string score="0">command</string>
1195
- <string score="0">tracing</string>
1196
- <string score="0">sandbox</string>
1197
- <string score="0">keystroke</string>
1198
- <string score="0">scanning</string>
1199
- <string score="0">Callback</string>
1200
- <string score="0">torrent</string>
1201
- <string score="0">Outsanding</string>
1202
- <string score="0">localhost</string>
1203
- <string score="0">proxy</string>
1204
- <string score="0">downspeed</string>
1205
- <string score="0">webseeds</string>
1206
- <string score="0">POST</string>
1207
- <string score="0">fingerprint</string>
1208
- <string score="0">DNA_Proxy</string>
1209
- <string score="0">min_http_connections</string>
1210
- <string score="0">Unauthorized</string>
1211
- <string score="0">TOKEN</string>
1212
- <string score="0">multicast</string>
1213
- <string score="0">payload</string>
1214
- <string score="0">UPnP</string>
1215
- <string score="0">channel</string>
1216
- <string score="0">tracker</string>
1217
- <string score="0">NAT</string>
1218
- <string score="0">DHCP</string>
1219
- <string score="0">Host</string>
1220
- <string score="0">keyhash</string>
1221
- <string score="0">packet</string>
1222
- <string score="0">watchdog</string>
1223
- <string score="0">shared</string>
1224
- <string score="0">are you debugging me</string>
1225
- <string score="0">HHA Version 4.74.8702</string>
1226
-
1227
- <string score="0">ThisprogrammustberununderWin32</string>
1228
- <string score="0">Exefiles</string>
1229
- <string score="0">Scanning</string>
1230
- <string score="0">StdOut</string>
1231
- <string score="0">Codecs</string>
1232
- <string score="0">ProgramFilesDir</string>
1233
- <string score="0">Install</string>
1234
- <string score="0">\Temp</string>
1235
- <string score="0">SHFOLDER</string>
1236
- <string score="0">NullsoftInst</string>
1237
- <string score="0">WinRAR SFX</string>
1238
- <string score="0">287333.dat</string>
1239
- <string score="0">\\cryptme\\</string>
1240
- <string score="0">run.vbs</string>
1241
- <string score="0">{0000054f-0000-0010-8000-00aa006d2ea4}</string>
1242
- <string score="0">Expires</string>
1243
- <string score="0">User-Agent</string>
1244
- <string score="0">Cookie</string>
1245
- <string score="0">Windows Update Service</string>
1246
- <string score="0">serialNumber</string>
1247
- <string score="0">userPassword</string>
1248
- <string score="0">public_key</string>
1249
- <string score="0">serial</string>
1250
- <string score="0">Private-Key</string>
1251
- <string score="0">Seed:</string>
1252
- <string score="0">encryption</string>
1253
- <string score="0">PECompact2</string>
1254
- <string score="0">logFile</string>
1255
- <string score="0">application/pdf</string>
1256
- <string score="0">Run as a daemon</string>
1257
- <string score="0">http.c</string>
1258
- <string score="0">client.c</string>
1259
- <string score="0">127.0.0.1</string>
1260
- <string score="0">serverTimeout</string>
1261
- <string score="0">Server closed connection</string>
1262
- <string score="0">nameserver</string>
1263
- <string score="0">COMSPEC</string>
1264
- <string score="0">OLLYDBG</string>
1265
- <string score="0">WinDbgFrameClass</string>
1266
- <string score="0">BankID</string>
1267
- <string score="0">Mscomctl32.ocx</string>
1268
- <string score="0">WebBrowser</string>
1269
- <string score="0">9368265E-85FE-11d1-8BE3-0000F8754DA1</string>
1270
- <string score="0">Scripting.FileSystemObject</string>
1271
- <string score="0">KerNel32.dll</string>
1272
- <string score="0">downloader</string>
1273
- <string score="0">browser</string>
1274
- <string score="0">RemoveRange</string>
1275
- <string score="0">AuthenticationMode</string>
1276
- <string score="0">Downloader</string>
1277
- <string score="0">ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/</string>
1278
- <string score="0">FPC 2.7.1 [2013/10/22] for i386 - Win32</string>
1279
- <string score="0">pipedatacontinue</string>
1280
- <string score="0">Shell</string>
1281
- <string score="0">IE 8.5</string>
1282
- <string score="0">whoami</string>
1283
- <string score="0">pidrun</string>
1284
- <string score="0">geturl</string>
1285
- <string score="0">Destroy</string>
1286
- <string score="0">likubes</string>
1287
- <string score="0">file not found</string>
1288
- <string score="0">_RTL_CRITICAL_SECTION_DEBUG</string>
1289
- <string score="0">_RTL_CRITICAL_SECTION</string>
1290
- <string score="0">_SECURITY_ATTRIBUTES</string>
1291
- <string score="0">lpSecurityDescriptor</string>
1292
- <string score="0">SysUtils</string>
1293
- <string score="0">ActiveX</string>
1294
- <string score="0">Sitikat</string>
1295
- <string score="0">ping</string>
1296
- <string score="0">pkxm</string>
1297
- <string score="0">Reply from</string>
1298
- <string score="0">DCOM not installed</string>
1299
- <string score="0">PROXY_TYPE_DIRECT</string>
1300
- <string score="0">PROXY_TYPE_AUTO_DETECT</string>
1301
- <string score="0">downfile</string>
1302
- <string score="0">upfile</string>
1303
- <string score="0">quitz</string>
1304
- <string score="0">debugmessage</string>
1305
- <string score="0">debugclient</string>
1306
- <string score="0">debugfile</string>
1307
- <string score="0">delfile</string>
1308
- <string score="0">delmessage</string>
1309
- <string score="0">delclient</string>
1310
- <string score="0">listfiles</string>
1311
- <string score="0">listmessages</string>
1312
- <string score="0">listclients</string>
1313
- <string score="0">WinSta0\Default</string>
1314
- <string score="0">POST</string>
1315
- <string score="0">CONNECT</string>
1316
- <string score="0">NetSubKey</string>
1317
- <string score="0">FileDescrsiption</string>
1318
- <string score="0">state.ini</string>
1319
- <string score="0">sha256</string>
1320
- <string score="0">AckPacket</string>
1321
- <string score="0">Connection</string>
1322
- <string score="0">autoRunKeyPath</string>
1323
- <string score="0">SIGNATURE</string>
1324
- <string score="0">messageId</string>
1325
- <string score="0">HeartBeat</string>
1326
- <string score="0">Request</string>
1327
- <string score="0">Unload</string>
1328
- <string score="0">RequestLoop</string>
1329
- <string score="0">HeartBeatLoop</string>
1330
- <string score="0">TcpClient</string>
1331
- <string score="0">Connect</string>
1332
- <string score="0">Login</string>
1333
- <string score="0">CurrentUser</string>
1334
- <string score="0">CreateDomain</string>
1335
- <string score="0">ComputeHash</string>
1336
- <string score="0">cookies.*</string>
1337
- <string score="0">Tfrmrpcap</string>
1338
- <string score="0">ProcessLasso_Notification_Class</string>
1339
- <string score="0">TSystemExplorerTrayForm.UnicodeClass</string>
1340
- <string score="0">PROCMON_WINDOW_CLASS</string>
1341
- <string score="0">PROCEXPL</string>
1342
- <string score="0">WdcWindow</string>
1343
- <string score="0">ProcessHacker</string>
1344
- <string score="0">Dumper</string>
1345
- <string score="0">Dumper64</string>
1346
- <string score="0">APISpy32Class</string>
1347
- <string score="0">Zone.Identifier</string>
1348
- <string score="0">:Zone.Identifier</string>
1349
- <string score="0">Explorer.exe:Zone.Identifier</string>
1350
- <string score="0">Java Update Manager</string>
1351
- <string score="0">runas</string>
1352
- <string score="0">sysprep</string>
1353
- <string score="0">TokenPrivilege</string>
1354
- <string score="0">Shutdown</string>
1355
- <string score="0">WebKit2WebProcess</string>
1356
- <string score="0">Sleeping</string>
1357
- <string score="0">Rijndael</string>
1358
- <string score="0">SystemBiosVersion</string>
1359
- <string score="0">VideoBiosVersion</string>
1360
- <string score="0">UDPV6</string>
1361
- <string score="0">TCPV6</string>
1362
- <string score="0"> deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly</string>
1363
- <string score="0"> deflate 1.1.4 Copyright 1995-2002 Jean-loup Gailly</string>
1364
- <string score="0"> inflate 1.2.3 Copyright 1995-2005 Mark Adler </string>
1365
- <string score="0"> inflate 1.1.4 Copyright 1995-2002 Mark Adler </string>
1366
- <string score="0">RegisterRawInputDevices</string>
1367
- <string score="0">GetRawInputData</string>
1368
- <string score="0">sqlite3_open</string>
1369
- <string score="0">sqlite3_close</string>
1370
- <string score="0">sqlite3_prepare_v2</string>
1371
- <string score="0">sqlite3_step</string>
1372
- <string score="0">sqlite3_column_text</string>
1373
- <string score="0">Hibernating</string>
1374
- <string score="0">downtime-started</string>
1375
- <string score="0">uptime-started</string>
1376
- <string score="0">Intel Hardware Cryptographic Service Provider</string>
1377
- <string score="0">lpAddress</string>
1378
- <string score="0">BeginInvoke</string>
1379
- <string score="0">EndInvoke</string>
1380
- <string score="0">StatusChecker</string>
1381
- <string score="0">Encoding</string>
1382
- <string score="0">stand by</string>
1383
- <string score="0">startime</string>
1384
- <string score="0">throttle</string>
1385
- <string score="0">Mandatory Level</string>
1386
- <string score="0">_invoke_watson</string>
1387
- <string score="0">remove</string>
1388
- <string score="0">debug</string>
1389
- <string score="0">hostname</string>
1390
- <string score="0">clientkey</string>
1391
- <string score="0">reqfilepath</string>
1392
- <string score="0">reqfile</string>
1393
- <string score="0">postvalue</string>
1394
- <string score="0">postfile</string>
1395
- <string score="0">postdata</string>
1396
- <string score="0">mkdir</string>
1397
- <string score="0">rmdir</string>
1398
- <string score="0">chdir</string>
1399
- <string score="0">rpcsrv</string>
1400
- <string score="0">svchost</string>
1401
- <string score="0">Deleting Service...</string>
1402
- <string score="0">Service uninstall success.</string>
1403
- <string score="0">CompareString</string>
1404
- <string score="0">Engine started</string>
1405
- <string score="0">Running in background</string>
1406
- <string score="0">Stale thread</string>
1407
- <string score="0">Locking doors</string>
1408
- <string score="0">Rotors engaged</string>
1409
- <string score="0">\DosDevices\DKOM_Driver</string>
1410
- <string score="0">\Device\DKOM_Driver</string>
1411
- <string score="0">Process successfully hidden.</string>
1412
- <string score="0">Process ID: %d</string>
1413
- <string score="0">EPROCESS address: %#x</string>
1414
- <string score="0">ActiveProcessLinks offset: %#x</string>
1415
- <string score="0">Extracting %s</string>
1416
- <string score="0">Couponserver</string>
1417
- <string score="0">xmlUrl</string>
1418
- <string score="0">LoadXml</string>
1419
- <string score="0">LocalMachine</string>
1420
- <string score="0">DownloadAll</string>
1421
- <string score="0">DownloadComplete</string>
1422
- <string score="0">DownloadFile</string>
1423
- <string score="0">DownloadFileAsync</string>
1424
- <string score="0">DownloadServer</string>
1425
- <string score="0">DownloadThreads</string>
1426
- <string score="0">DownloadUrl</string>
1427
- <string score="0">Downloaded</string>
1428
- <string score="0">DownloadedBrowser</string>
1429
- <string score="0">Downloading...</string>
1430
- <string score="0">CorruptedMachine</string>
1431
- <string score="0">HtmlGenerator</string>
1432
- <string score="0">MachineInfo</string>
1433
- <string score="0">MachineRestriction</string>
1434
- <string score="0">RegSAM</string>
1435
- <string score="0">MemoryManagement</string>
1436
- <string score="0">Trackingurls</string>
1437
- <string score="0">DownloadUrl</string>
1438
- <string score="0">QueueDownloader</string>
1439
- <string score="0">ZipManager</string>
1440
- <string score="0">ZipStorer</string>
1441
- <string score="0">Firefox</string>
1442
- <string score="0">Chrome</string>
1443
- <string score="0">InternetExplorer</string>
1444
- <string score="0">GetIEVersion</string>
1445
- <string score="0">GetWBVersion</string>
1446
- <string score="0">webBrowser1</string>
1447
- <string score="0">changeHtmlCode</string>
1448
- <string score="0">retries</string>
1449
- <string score="0">completed</string>
1450
- <string score="0">addextension</string>
1451
- <string score="0">DownloadComplete</string>
1452
- <string score="0">add_DownloadComplete</string>
1453
- <string score="0">remove_DownloadComplete</string>
1454
- <string score="0">DownloadThreads</string>
1455
- <string score="0">Arquitecture</string>
1456
- <string score="0">internetTurbo</string>
1457
- <string score="0">strongvault</string>
1458
- <string score="0">amonetize</string>
1459
- <string score="0">Couponserver</string>
1460
- <string score="0">ShoppingChip</string>
1461
- <string score="0">UsedBrowser</string>
1462
- <string score="0">AndroidAPK</string>
1463
- <string score="0">IexplorerMinVersion</string>
1464
- <string score="0">checkMachineInfo</string>
1465
- <string score="0">checkCouponserver</string>
1466
- <string score="0">checkInternet</string>
1467
- <string score="0">hideWhenInstalling</string>
1468
- <string score="0">WebmasterId</string>
1469
- <string score="0">firewalls</string>
1470
- <string score="0">IsControlled</string>
1471
- <string score="0">Microsoft Network Monitoring Service</string>
1472
- <string score="0">Host Process for Windows Services</string>
1473
- <string score="0">MsNetMonitor</string>
1474
- <string score="0">HideWindow</string>
1475
- <string score="0">Windows Filter Driver</string>
1476
- <string score="0">firewall</string>
1477
- <string score="0">IsUserAdministrator</string>
1478
- <string score="0">CreateSubKey</string>
1479
- <string score="0">NotifyDownloading</string>
1480
- <string score="0">isvirtualMachine</string>
1481
- <string score="0">isdebugging</string>
1482
- <string score="0">HasDebugger</string>
1483
- <string score="0">debugging</string>
1484
- <string score="0">checkurls</string>
1485
- <string score="0">ListSoftwares</string>
1486
- <string score="0">CheckAdminPrivileges</string>
1487
- <string score="0">TrackOnDefaultBrowser</string>
1488
- <string score="0">GetDomain</string>
1489
- <string score="0">checkdomain</string>
1490
- <string score="0">bytesDownloaded</string>
1491
- <string score="0">logger</string>
1492
- <string score="0">This plugin is already loaded.</string>
1493
- <string score="0">The plugin you are trying to load does not exist</string>
1494
- <string score="0">Hook cleaning on</string>
1495
- <string score="0">PiD obfuscation on</string>
1496
- <string score="0">Code injection successful!</string>
1497
- <string score="0">Code injection failed!</string>
1498
- <string score="0">Injecting code ...</string>
1499
- <string score="0">Code Injection</string>
1500
- <string score="0">Creating a remote thread ...</string>
1501
- <string score="0">Keylogging disabled.</string>
1502
- <string score="0">failed to get memory</string>
1503
- <string score="0">#requireadmin</string>
1504
- <string score="0">#notrayicon</string>
1505
- <string score="0">#include-once</string>
1506
- <string score="0">D:\RECYCLER\</string>
1507
- <string score="0">Windows Registry Editor Version 5.00</string>
1508
- <string score="0">DisallowRun</string>
1509
- <string score="0">NoDriveTypeAutoRun</string>
1510
- <string score="0">HideFileExt</string>
1511
- <string score="0">Hidden</string>
1512
- <string score="0">Application cannot be run with debugger or monitoring tool(s) loaded!</string>
1513
- <string score="0">Logon User Name</string>
1514
- <string score="0">NoFolderOptions</string>
1515
-
1516
- <string score="0">Starting Hide myself ...</string>
1517
- <string score="0">Starting Killing myself ...</string>
1518
- <string score="0">newKeyPair</string>
1519
- <string score="0">privateKey</string>
1520
- <string score="0">publicKey</string>
1521
- <string score="0">cypherText</string>
1522
- <string score="0">LZO real-time data compression library.</string>
1523
-
1524
- <string score="0">Access denied!</string>
1525
- <string score="0">Total entries: %d</string>
1526
- <string score="0">Entries enumerated: %d</string>
1527
- <string score="0">Upload file ok!</string>
1528
- <string score="0">create remote file error!</string>
1529
- <string score="0">Download file ok!</string>
1530
- <string score="0">Reading remote file error!</string>
1531
- <string score="0">create pipe error!</string>
1532
- <string score="0">start cmd error!</string>
1533
- <string score="0">Logon user err!</string>
1534
- <string score="0">execute error!</string>
1535
- <string score="0">bind cmd frist!</string>
1536
- <string score="0">get user name error!</string>
1537
- <string score="0">cant get ver info!</string>
1538
- <string score="0">Windows?</string>
1539
- <string score="0">Remote</string>
1540
- <string score="0">Ramdisk</string>
1541
- <string score="0">Client process-%d-stoped!</string>
1542
- <string score="0">Create localfile error!</string>
1543
- <string score="0">DownloadEnd</string>
1544
- <string score="0">List domain server ok!#</string>
1545
- <string score="0">fileupload</string>
1546
- <string score="0">cruisenet</string>
1547
- <string score="0">javascript:</string>
1548
-
1549
- <string score="0">All the important files on your computer were encrypted.</string>
1550
- <string score="0">All the important files on your disks were encrypted.</string>
1551
-
1552
- <string score="0">Schedule service command line interface</string>
1553
- <string score="0">already running</string>
1554
- <string score="0">Botnet has been shutdown - restart bot?</string>
1555
- <string score="0">Botnet shutdown</string>
1556
- <string score="0">QUIT :Botnet shutdown</string>
1557
- <string score="0">PRIVMSG %s :bingo - botnet shutting down</string>
1558
- <string score="0">Anti-debug</string>
1559
- <string score="0">.detour</string>
1560
- <string score="0">Detoured</string>
1561
- <string score="0">Client hook allocation failure.</string>
1562
- <string score="0">silentpostback</string>
1563
- <string score="0">AlreadyRunning</string>
1564
- <string score="0">StubInfo</string>
1565
- <string score="0">wrapper</string>
1566
- <string score="0">keeplog</string>
1567
- <string score="0">pingdialog</string>
1568
- <string score="0">runonce</string>
1569
- <string score="0">noreq</string>
1570
- <string score="0">verifycookies</string>
1571
- <string score="0">account</string>
1572
- <string score="0">accountid</string>
1573
- <string score="0">selftest</string>
1574
- <string score="0">silenterr</string>
1575
- <string score="0">preload</string>
1576
- <string score="0">PostbackSent</string>
1577
- <string score="0">StubRun</string>
1578
- <string score="0">StubExtract</string>
1579
- <string score="0">WaitablePort</string>
1580
- <string score="0">Waiting</string>
1581
- <string score="0">Waiting Connections</string>
1582
- <string score="0">ServiceMain</string>
1583
- <string score="0">ServTestDos</string>
1584
- <string score="0">VBoxGuest</string>
1585
- <string score="0">Betabot</string>
1586
- <string score="0">HGFS</string>
1587
- <string score="0">Hashtable</string>
1588
- <string score="0">GetResourceString</string>
1589
- <string score="0">Monitor</string>
1590
- <string score="0">www.memtest86.com</string>
1591
- <string score="0">boxedapp.com</string>
1592
- <string score="0">RegServer</string>
1593
- <string score="0">Send ack is successful.</string>
1594
- <string score="0">Get the right data.</string>
1595
- <string score="0">Receiving acknowledgment is successful.</string>
1596
- <string score="0">Receiving packet failed.</string>
1597
- <string score="0">Sending packet success...</string>
1598
- <string score="0">Cant get the right data</string>
1599
- <string score="0">Initialization is successful.</string>
1600
- <string score="0">Initialization is failed.</string>
1601
- <string score="0">tempPass.txt</string>
1602
- <string score="0">POP3 Password2</string>
1603
- <string score="0">POP3 Server</string>
1604
- <string score="0">POP3 User Name</string>
1605
- <string score="0">HTTPMail Password2</string>
1606
- <string score="0">HTTPMail User Name</string>
1607
- <string score="0"> 2004 2005 Pierre le Riche / Professional Software Development</string>
1608
- <string score="0">Broadcast adress :</string>
1609
- <string score="0">Broadcasts : NO</string>
1610
- <string score="0">Broadcasts : YES</string>
1611
- <string score="0">SHELLEXECUTE</string>
1612
- <string score="0">SHELLEXECUTEWAIT</string>
1613
- <string score="0">#BOT#CloseServer</string>
1614
- <string score="0">#BOT#OpenUrl</string>
1615
- <string score="0">#BOT#Ping</string>
1616
- <string score="0">#BOT#RunPrompt</string>
1617
- <string score="0">#BOT#SvrUninstall</string>
1618
- <string score="0">#BOT#URLDownload</string>
1619
- <string score="0">#BOT#URLUpdate</string>
1620
- <string score="0">#BOT#VisitUrl</string>
1621
- <string score="0">#CAMEND</string>
1622
- <string score="0">#FreezeIO</string>
1623
- <string score="0">#GetClipboardText</string>
1624
- <string score="0">#GetScreenSize</string>
1625
- <string score="0">#KCMDDC51#-</string>
1626
- <string score="0">#KEEPALIVE#</string>
1627
- <string score="0">#RemoteScreenSize</string>
1628
- <string score="0">#SendClip</string>
1629
- <string score="0">#SendTaskMgr</string>
1630
- <string score="0">#UnFreezeIO</string>
1631
- <string score="0">%IPPORTSCAN</string>
1632
- <string score="0">ActiveOfflineKeylogger</string>
1633
- <string score="0">ActiveOnlineKeyStrokes</string>
1634
- <string score="0">ActiveOnlineKeylogger</string>
1635
- <string score="0">AntiVirusDisableNotify</string>
1636
- <string score="0">BTMemoryLoadLibary: Cant attach library</string>
1637
- <string score="0">Be Right Back</string>
1638
- <string score="0">DownloadFail</string>
1639
- <string score="0">DownloadSuccess</string>
1640
- <string score="0">Progman</string>
1641
- <string score="0">Sender</string>
1642
- <string score="0">UPLOADEXEC</string>
1643
- <string score="0">UPLOADFILE</string>
1644
- <string score="0">UnActiveOfflineKeylogger</string>
1645
- <string score="0">UnActiveOnlineKeyStrokes</string>
1646
- <string score="0">UnBlockContact</string>
1647
- <string score="0">Video Capture</string>
1648
- <string score="0">WEBCAMLIVE</string>
1649
- <string score="0">WEBCAMSTOP</string>
1650
- <string score="0">drivers\etc\hosts</string>
1651
- <string score="0">unknown compression method</string>
1652
- <string score="0">wscsvc</string>
1653
- <string score="0">httpstop</string>
1654
- <string score="0">logstop</string>
1655
- <string score="0">ftfpstop</string>
1656
- <string score="0">procsstop</string>
1657
- <string score="0">securestop</string>
1658
- <string score="0">reconnect</string>
1659
- <string score="0">disconnect</string>
1660
- <string score="0">botid</string>
1661
- <string score="0">aliases</string>
1662
- <string score="0">flusharp</string>
1663
- <string score="0">flushdns</string>
1664
- <string score="0">crash</string>
1665
- <string score="0">killthreads</string>
1666
- <string score="0">killproc</string>
1667
- <string score="0">killid</string>
1668
- <string score="0">.download</string>
1669
- <string score="0">.update</string>
1670
- <string score="0">Kennwort</string>
1671
- <string score="0">Object dump complete.</string>
1672
- <string score="0">PAYPAL</string>
1673
- <string score="0">PAYPAL.COM</string>
1674
- <string score="0">Ping flood</string>
1675
- <string score="0">ROOTED</string>
1676
- <string score="0">Rebooting system</string>
1677
- <string score="0">Reconnecting</string>
1678
- <string score="0">Referer: %s</string>
1679
- <string score="0">Remote Command Prompt</string>
1680
- <string score="0">Removing Bot</string>
1681
- <string score="0">[DDoS]</string>
1682
- <string score="0">[KEYLOG]: %s</string>
1683
- <string score="0">[PSNIFF]</string>
1684
- <string score="0">[PING]</string>
1685
- <string score="0">[TFTP]</string>
1686
- <string score="0">[UPD]</string>
1687
- <string score="0">Download complete</string>
1688
- <string score="0">ALIEN-Z</string>
1689
- <string score="0">\Google\Chrome\User Data</string>
1690
- <string score="0">VncSrvWndProc</string>
1691
- <string score="0">VncStopServer</string>
1692
- <string score="0">VncStartServer</string>
1693
- <string score="0">VNCCreateServer</string>
1694
- <string score="0">VNCServerThread</string>
1695
- <string score="0">VNCStartServer</string>
1696
- <string score="0">FPUMaskValue</string>
1697
- <string score="0">PhysicalDrive0</string>
1698
- <string score="0">Protection Error</string>
1699
- <string score="0">LOADER ERROR</string>
1700
- <string score="0">The procedure entry point</string>
1701
- <string score="0">Invalid DOS signature</string>
1702
- <string score="0">Invalid COFF signature</string>
1703
- <string score="0">Invalid Windows Image</string>
1704
- <string score="0">Host is down.</string>
1705
- <string score="0">No route to host.</string>
1706
- <string score="0">CoMessengerU</string>
1707
- <string score="0">debugger</string>
1708
- <string score="0">sample</string>
1709
- <string score="0">virtual</string>
1710
- <string score="0">emulat</string>
1711
- <string score="0">GetProcesses</string>
1712
- <string score="0">MemoryStream</string>
1713
- <string score="0">GZipStream</string>
1714
- <string score="0">MulticastDelegate</string>
1715
- <string score="0">IAT processed</string>
1716
- <string score="0">putfile:</string>
1717
- <string score="0">getfile:</string>
1718
- <string score="0">Connecting</string>
1719
- <string score="0">Downloading</string>
1720
- <string score="0">Connecting</string>
1721
- <string score="0">Reconnect Pause</string>
1722
- <string score="0">Terminated</string>
1723
- <string score="0">Transfer Error</string>
1724
- <string score="0">Connection Error</string>
1725
- <string score="0">OpenRequest Error</string>
1726
- <string score="0">SendRequest Error</string>
1727
- <string score="0">URL Parts Error</string>
1728
- <string score="0">CreateThread Error</string>
1729
- <string score="0">Request Error</string>
1730
- <string score="0">Server Error</string>
1731
- <string score="0">Redirection</string>
1732
- <string score="0">TypeLib</string>
1733
- <string score="0">Interface</string>
1734
- <string score="0">FileType</string>
1735
- <string score="0">Component Categories</string>
1736
- <string score="0">CLSID</string>
1737
- <string score="0">AppID</string>
1738
- <string score="0">Delete</string>
1739
- <string score="0">NoRemove</string>
1740
- <string score="0">ForceRemove</string>
1741
- <string score="0">Keylogger</string>
1742
- <string score="0">crypter</string>
1743
- <string score="0">vbox</string>
1744
- <string score="0">NetKeyLogger</string>
1745
- <string score="0">TARGET</string>
1746
- <string score="0">pipeline</string>
1747
- <string score="0">miner</string>
1748
- <string score="0">Execute ERROR</string>
1749
- <string score="0">Download ERROR</string>
1750
- <string score="0">Executed As</string>
1751
- <string score="0">Execute ERROR</string>
1752
- <string score="0">Update ERROR</string>
1753
- <string score="0">Updating To</string>
1754
- <string score="0">Update ERROR</string>
1755
- <string score="0">ASPNET</string>
1756
- <string score="0">IUSR_</string>
1757
- <string score="0">IWAM_</string>
1758
- <string score="0">ASPNET</string>
1759
- <string score="0">POP3</string>
1760
- <string score="0">Admins</string>
1761
- <string score="0">webBrowser2</string>
1762
- <string score="0">IEFrame</string>
1763
- <string score="0">\\.\pipe\</string>
1764
- <string score="0">permission denied</string>
1765
- <string score="0">permission_denied</string>
1766
- <string score="0">connection_already_in_progress</string>
1767
- <string score="0">connection_aborted</string>
1768
- <string score="0">connection_refused</string>
1769
- <string score="0">host_unreachable</string>
1770
- <string score="0">already_connected</string>
1771
- <string score="0">network_down</string>
1772
- <string score="0">network_reset</string>
1773
- <string score="0">network_unreachable</string>
1774
- <string score="0">not_connected</string>
1775
- <string score="0">wrong_protocol_type</string>
1776
- <string score="0">broken pipe</string>
1777
- <string score="0">connection aborted</string>
1778
- <string score="0">connection already in progress</string>
1779
- <string score="0">connection refused</string>
1780
- <string score="0">host unreachable</string>
1781
- <string score="0">network down</string>
1782
- <string score="0">network reset</string>
1783
- <string score="0">network unreachable</string>
1784
- <string score="0">owner dead</string>
1785
- <string score="0">protocol error</string>
1786
- <string score="0">wrong protocol type</string>
1787
- <string score="0">EXECUTABLE</string>
1788
- <string score="0">master</string>
1789
- <string score="0">debian</string>
1790
- <string score="0">mysql</string>
1791
- <string score="0">daemon</string>
1792
- <string score="0">backup</string>
1793
- <string score="0">redhat</string>
1794
- <string score="0">VNC%d.%d</string>
1795
- <string score="0">exploitable</string>
1796
- <string score="0">passwd</string>
1797
- <string score="0">proxypasswd</string>
1798
- <string score="0">proxyuser</string>
1799
- <string score="0">Login denied</string>
1800
- <string score="0">Remote file not found</string>
1801
- <string score="0">RenameFile</string>
1802
- <string score="0">RunPrompt</string>
1803
- <string score="0">RunSelectedAsAdmin</string>
1804
- <string score="0">RunSelectedHidden</string>
1805
- <string score="0">RunSelectedShow</string>
1806
- <string score="0">RemoteMachineName</string>
1807
- <string score="0">AheadLib</string>
1808
- <string score="0">PlusDLL</string>
1809
- <string score="0">PLUSUNIT</string>
1810
- <string score="0">web-browser</string>
1811
- <string score="0">SetHook</string>
1812
- <string score="0">TMemoryScanner</string>
1813
- <string score="0">Protect</string>
1814
- <string score="0">PAGE_NOACCESS</string>
1815
- <string score="0">PAGE_READONLY</string>
1816
- <string score="0">PAGE_READWRITE</string>
1817
- <string score="0">PAGE_WRITECOPY</string>
1818
- <string score="0">PAGE_EXECUTE</string>
1819
- <string score="0">PAGE_EXECUTE_READ</string>
1820
- <string score="0">PAGE_EXECUTE_READWRITE</string>
1821
- <string score="0">PAGE_EXECUTE_WRITECOPY</string>
1822
- <string score="0">PAGE_GUARD</string>
1823
- <string score="0">PAGE_NOCACHE</string>
1824
- <string score="0">PAGE_WRITECOMBINE</string>
1825
-
1826
- <string score="0">EXECUTE</string>
1827
- <string score="0">EXECUTE_READ</string>
1828
- <string score="0">EXECUTE_READWRITE</string>
1829
- <string score="0">EXECUTE_WRITECOPY</string>
1830
- <string score="0">NOACCESS</string>
1831
- <string score="0">READONLY</string>
1832
- <string score="0">READWRITE</string>
1833
- <string score="0">WRITECOPY</string>
1834
- <string score="0">MOVEFILE_REPLACE_EXISTING</string>
1835
- <string score="0">MOVEFILE_COPY_ALLOWED</string>
1836
- <string score="0">MOVEFILE_DELAY_UNTIL_REBOOT</string>
1837
- <string score="0">MOVEFILE_WRITE_THROUGH</string>
1838
-
1839
- <string score="0">TokenUser</string>
1840
- <string score="0">TokenGroups</string>
1841
- <string score="0">TokenPrivileges</string>
1842
- <string score="0">TokenOwner</string>
1843
- <string score="0">TokenPrimaryGroup</string>
1844
- <string score="0">TokenDefaultDacl</string>
1845
- <string score="0">TokenSource</string>
1846
- <string score="0">TokenType</string>
1847
- <string score="0">TokenImpersonationLevel</string>
1848
- <string score="0">TokenStatistics</string>
1849
- <string score="0">TokenRestrictedSids</string>
1850
- <string score="0">TokenSessionId</string>
1851
- <string score="0">TokenGroupsAndPrivileges</string>
1852
- <string score="0">TokenSessionReference</string>
1853
- <string score="0">TokenSandBoxInert</string>
1854
- <string score="0">TokenAuditPolicy</string>
1855
- <string score="0">TokenOrigin</string>
1856
- <string score="0">TokenElevationType</string>
1857
- <string score="0">TokenLinkedToken</string>
1858
- <string score="0">TokenElevation</string>
1859
- <string score="0">TokenHasRestrictions</string>
1860
- <string score="0">TokenAccessInformation</string>
1861
- <string score="0">TokenVirtualizationAllowed</string>
1862
- <string score="0">TokenVirtualizationEnabled</string>
1863
- <string score="0">TokenIntegrityLevel</string>
1864
- <string score="0">TokenUIAccess</string>
1865
- <string score="0">TokenMandatoryPolicy</string>
1866
- <string score="0">TokenLogonSid</string>
1867
- <string score="0">TokenPrimary</string>
1868
- <string score="0">TokenImpersonation</string>
1869
- <string score="0">SecurityAnonymous</string>
1870
- <string score="0">SecurityIdentification</string>
1871
- <string score="0">SecurityImpersonation</string>
1872
- <string score="0">SecurityDelegation</string>
1873
-
1874
- <string score="0">\\.\PhysicalDrive0</string>
1875
-
1876
- <!-- VM patterns -->
1877
- <string score="0">windowsupdate</string>
1878
- <string score="0">wilderssecurity</string>
1879
- <string score="0">castlecops</string>
1880
- <string score="0">spamhaus</string>
1881
- <string score="0">cpsecure</string>
1882
- <string score="0">arcabit</string>
1883
- <string score="0">emsisoft</string>
1884
- <string score="0">sunbelt</string>
1885
- <string score="0">securecomputing</string>
1886
- <string score="0">rising</string>
1887
- <string score="0">prevx</string>
1888
- <string score="0">computerassociates</string>
1889
- <string score="0">networkassociates</string>
1890
- <string score="0">etrust</string>
1891
- <string score="0">rootkit</string>
1892
- <string score="0">spyware</string>
1893
-
1894
- <string score="0">vmdebug</string>
1895
- <string score="0">VMware Replay Debugging Helper</string>
1896
- <string score="0">VMware VMCI Bus Driver</string>
1897
- <string score="0">vmci</string>
1898
- <string score="0">VMware Pointing Device</string>
1899
- <string score="0">vmmouse</string>
1900
- <string score="0">Virtual Machine Additions Mouse Integration Filter Driver</string>
1901
- <string score="0">msvmmouf</string>
1902
- <string score="0">MS Virtual SCSI Disk Device</string>
1903
- <string score="0">VMware Workstation v10</string>
1904
- <string score="0">VMwareDragDetWndClass</string>
1905
- <string score="0">VMwareSwitchUserControlClass</string>
1906
- <string score="0">VMware</string>
1907
- <string score="0">VMware Pointing</string>
1908
- <string score="0">VMware server memory</string>
1909
- <string score="0">VMware Replay</string>
1910
- <string score="0">AntiVirtualBox</string>
1911
- <string score="0">AntiVmWare</string>
1912
- <string score="0">AntiVirtualPC</string>
1913
- <string score="0">AntiMalwarebytes</string>
1914
- <string score="0">AntiOllydbg</string>
1915
- <string score="0">AntiWireshark</string>
1916
- <string score="0">antiSpyware</string>
1917
- <string score="0">Anti-Virus</string>
1918
- <string score="0">avast!</string>
1919
- <string score="0">AntiVir</string>
1920
- <string score="0">Inspection</string>
1921
- <string score="0">Malware</string>
1922
- <string score="0">Norton Personal Firewall</string>
1923
- <string score="0">ZoneAlarm</string>
1924
- <string score="0">Comodo Firewall</string>
1925
- <string score="0">eTrust EZ Firewall</string>
1926
- <string score="0">F-Secure Internet Security</string>
1927
- <string score="0">McAfee Personal Firewall</string>
1928
- <string score="0">Outpost Personal Firewall</string>
1929
- <string score="0">Panda Internet Seciruty Suite</string>
1930
- <string score="0">Panda Anti-Virus/Firewall</string>
1931
- <string score="0">BitDefnder/Bull Guard Antivirus</string>
1932
- <string score="0">Rising Firewall</string>
1933
- <string score="0">360Safe AntiArp</string>
1934
- <string score="0">Kingsoft Safe</string>
1935
- <string score="0">Fiddler</string>
1936
- <string score="0">wireshark</string>
1937
- <string score="0">Chromium</string>
1938
- <string score="80">!This is a PE executable</string>
1939
-
1940
- <string score="0">NEWGRAB</string>
1941
- <string score="0">SCREENSHOT</string>
1942
- <string score="0">sURL</string>
1943
- <string score="0">sFileName</string>
1944
-
1945
- <string score="0">AddressBook</string>
1946
- <string score="0">TrustedPeople</string>
1947
- <string score="0">TrustedPublisher</string>
1948
- <string score="0">RunProgram</string>
1949
- <string score="0">GUIMode</string>
1950
- <string score="0">@Install@</string>
1951
- <string score="0">@InstallEnd@</string>
1952
- <string score="0">protocol_not_supported</string>
1953
- <string score="0">network down</string>
1954
- <string score="0">network reset</string>
1955
- <string score="0">network unreachable</string>
1956
- <string score="0">network_down</string>
1957
- <string score="0">network_reset</string>
1958
- <string score="0">network_unreachable</string>
1959
- <string score="0">host unreachable</string>
1960
- <string score="0">host_unreachable</string>
1961
- <string score="0">PendingFileRenameOperations</string>
1962
- <string score="0">MyApplication.app</string>
1963
- <string score="0">Microsoft.Windows.MyCoolApp</string>
1964
- <string score="0">Application description here</string>
1965
- <string score="0">InstallHOOK</string>
1966
- <string score="0">InstallLocalHOOK</string>
1967
- <string score="0">UninstallHOOK</string>
1968
- <string score="0">ZLibEx</string>
1969
- <string score="0">PsAPI</string>
1970
- <string score="0">Xenocode Virtual Desktop</string>
1971
- <string score="0">start.spoon.net</string>
1972
- <string score="0">Spoon Virtual Machine</string>
1973
- <string score="0">Xenocode Virtual Appliance Runtime</string>
1974
- <string score="0">CPlApplet</string>
1975
- <string score="0">Java Security Plugin</string>
1976
- <string score="0">javaplugin</string>
1977
- <string score="0">Java Security Plugin</string>
1978
- <string score="0">Sun Java Security Plugin</string>
1979
- <string score="0">VMProtect begin</string>
1980
- <string score="0">VMProtect end</string>
1981
- <string score="0">[BeginChat]</string>
1982
- <string score="0">friend</string>
1983
- <string score="0">KernelUtil</string>
1984
- <string score="0">NETWORK SERVICE</string>
1985
- <string score="0">Cookies</string>
1986
- <string score="0">Administrative Tools</string>
1987
- <string score="0">WinFTP</string>
1988
- <string score="0">PortNumber</string>
1989
- <string score="0">CREATE_SUSPENDED</string>
1990
- <string score="0">VBScript.Encode</string>
1991
- <string score="0">JScript.Encode</string>
1992
- <string score="0">WScript</string>
1993
- <string score="0">ExeScriptPAD</string>
1994
- <string score="0">ExeScript</string>
1995
- <string score="0">silent</string>
1996
- <string score="0">ExeScript Host</string>
1997
- <string score="0">onbeforeunload</string>
1998
- <string score="0">onunload</string>
1999
- <string score="0">Godmode</string>
2000
- <string score="0">anonymous</string>
2001
- <string score="0">Connecting....</string>
2002
- <string score="0">DECOMPRESSOR</string>
2003
- <string score="0">antivirus</string>
2004
- <string score="0">AntivirusProduct</string>
2005
- <string score="0">DefaultBrowser</string>
2006
- <string score="0">MemoryProtection</string>
2007
- <string score="0">BaseScript</string>
2008
- <string score="0">Updater</string>
2009
- <string score="0">SafeStarter</string>
2010
- <string score="0">CreateProcessInternal</string>
2011
- <string score="0">IDetourHook</string>
2012
- <string score="0">DetourHook</string>
2013
-
2014
- <string score="0">productUptoDate</string>
2015
- <string score="0">productState</string>
2016
-
2017
- <!-- WMI-->
2018
- <string score="0">ScriptText</string>
2019
- <string score="0">ScriptingEngine</string>
2020
- <string score="0">ProbeScriptFint</string>
2021
- <string score="0">ActiveScriptEventConsumer</string>
2022
- <string score="0">__EventConsumer</string>
2023
- <string score="0">__EventFilter</string>
2024
- <string score="0">__FilterToConsumerBinding</string>
2025
- <string score="0">__TimerInstruction</string>
2026
- <string score="0">root/cimv2</string>
2027
- <string score="0">WbemScripting.SWbemLocator</string>
2028
- <string score="0">ROOT\CIMV2</string>
2029
- <string score="0">SELECT * from Win32_BaseBoard</string>
2030
- <string score="0">Manufacturer</string>
2031
- <string score="0">Model</string>
2032
- <string score="0">SerialNumber</string>
2033
- <string score="0">ChassisTypes</string>
2034
- <string score="0">SMBIOSAssetTag</string>
2035
-
2036
- <!-- SQL -->
2037
- <string score="0">CREATE %s %.*s</string>
2038
- <string score="0">CREATE TABLE</string>
2039
- <string score="0">CREATE TABLE %Q.%s(%s)</string>
2040
- <string score="0">CREATE TABLE sqlite_master(</string>
2041
- <string score="0">CREATE VIRTUAL TABLE %T</string>
2042
- <string score="0">CREATE%s INDEX %.*s</string>
2043
-
2044
- <string score="0">WMessages</string>
2045
- <string score="0">WM_HTML_GETOBJECT</string>
2046
- <string score="0">WM_MOUSEMOVE</string>
2047
- <string score="0">WM_LBUTTONUP</string>
2048
- <string score="0">WM_LBUTTONDOWN</string>
2049
- <string score="0">WM_COPYDATA</string>
2050
-
2051
- <string score="0">STANDARD_RIGHTS_REQUIRED</string>
2052
- <string score="0">STANDARD_RIGHTS_READ</string>
2053
- <string score="0">TOKEN_ASSIGN_PRIMARY</string>
2054
- <string score="0">TOKEN_DUPLICATE</string>
2055
- <string score="0">TOKEN_IMPERSONATE</string>
2056
- <string score="0">TOKEN_QUERY</string>
2057
- <string score="0">TOKEN_QUERY_SOURCE</string>
2058
- <string score="0">TOKEN_ADJUST_PRIVILEGES</string>
2059
- <string score="0">TOKEN_ADJUST_GROUPS</string>
2060
- <string score="0">TOKEN_ADJUST_DEFAULT</string>
2061
- <string score="0">TOKEN_ADJUST_SESSIONID</string>
2062
- <string score="0">TOKEN_READ</string>
2063
- <string score="0">TOKEN_ALL_ACCESS</string>
2064
- <string score="0">ERROR_INSUFFICIENT_BUFFER</string>
2065
- <string score="0">SECURITY_MANDATORY_UNTRUSTED_RID</string>
2066
- <string score="0">SECURITY_MANDATORY_LOW_RID</string>
2067
- <string score="0">SECURITY_MANDATORY_MEDIUM_RID</string>
2068
- <string score="0">SECURITY_MANDATORY_HIGH_RID</string>
2069
- <string score="0">SECURITY_MANDATORY_SYSTEM_RID</string>
2070
- <string score="0">SECURITY_MANDATORY_LABEL_AUTHORITY</string>
2071
-
2072
- <string score="0">SE_PRIVILEGE_ENABLED_BY_DEFAULT</string>
2073
- <string score="0">SE_PRIVILEGE_ENABLED</string>
2074
- <string score="0">SE_PRIVILEGE_REMOVED</string>
2075
- <string score="0">SE_PRIVILEGE_USED_FOR_ACCESS</string>
2076
- <string score="0">SE_PRIVILEGE_VALID_ATTRIBUTES</string>
2077
-
2078
- <string score="0">SE_CREATE_TOKEN_NAME</string>
2079
- <string score="0">SE_ASSIGNPRIMARYTOKEN_NAME</string>
2080
- <string score="0">SE_LOCK_MEMORY_NAME</string>
2081
- <string score="0">SE_INCREASE_QUOTA_NAME</string>
2082
- <string score="0">SE_UNSOLICITED_INPUT_NAME</string>
2083
- <string score="0">SE_MACHINE_ACCOUNT_NAME</string>
2084
- <string score="0">SE_TCB_NAME</string>
2085
- <string score="0">SE_SECURITY_NAME</string>
2086
- <string score="0">SE_TAKE_OWNERSHIP_NAME</string>
2087
- <string score="0">SE_LOAD_DRIVER_NAME</string>
2088
- <string score="0">SE_SYSTEM_PROFILE_NAME</string>
2089
- <string score="0">SE_SYSTEMTIME_NAME</string>
2090
- <string score="0">SE_PROF_SINGLE_PROCESS_NAME</string>
2091
- <string score="0">SE_INC_BASE_PRIORITY_NAME</string>
2092
- <string score="0">SE_CREATE_PAGEFILE_NAME</string>
2093
- <string score="0">SE_CREATE_PERMANENT_NAME</string>
2094
- <string score="0">SE_BACKUP_NAME</string>
2095
- <string score="0">SE_RESTORE_NAME</string>
2096
- <string score="0">SE_SHUTDOWN_NAME</string>
2097
- <string score="0">SE_DEBUG_NAME</string>
2098
- <string score="0">SE_AUDIT_NAME</string>
2099
- <string score="0">SE_SYSTEM_ENVIRONMENT_NAME</string>
2100
- <string score="0">SE_CHANGE_NOTIFY_NAME</string>
2101
- <string score="0">SE_REMOTE_SHUTDOWN_NAME</string>
2102
- <string score="0">SE_UNDOCK_NAME</string>
2103
- <string score="0">SE_SYNC_AGENT_NAME</string>
2104
- <string score="0">SE_ENABLE_DELEGATION_NAME</string>
2105
- <string score="0">SE_MANAGE_VOLUME_NAME</string>
2106
- <string score="0">SE_IMPERSONATE_NAME</string>
2107
- <string score="0">SE_CREATE_GLOBAL_NAME</string>
2108
- <string score="0">SE_TRUSTED_CREDMAN_ACCESS_NAME</string>
2109
- <string score="0">SE_RELABEL_NAME</string>
2110
- <string score="0">SE_INC_WORKING_SET_NAME</string>
2111
- <string score="0">SE_TIME_ZONE_NAME</string>
2112
- <string score="0">SE_CREATE_SYMBOLIC_LINK_NAME</string>
2113
-
2114
- <string score="0">SE_GROUP_ENABLED_BY_DEFAULT</string>
2115
- <string score="0">SE_GROUP_ENABLED</string>
2116
- <string score="0">SE_GROUP_OWNER</string>
2117
- <string score="0">SE_GROUP_USE_FOR_DENY_ONLY</string>
2118
- <string score="0">SE_GROUP_INTEGRITY</string>
2119
- <string score="0">SE_GROUP_INTEGRITY_ENABLED</string>
2120
- <string score="0">SE_GROUP_LOGON_ID</string>
2121
- <string score="0">SE_GROUP_RESOURCE</string>
2122
- <string score="0">SE_GROUP_VALID_ATTRIBUTES</string>
2123
-
2124
- <!-- DOT NET-->
2125
- <string score="0">RuntimeHelpers</string>
2126
- <string score="0">System.Security</string>
2127
- <string score="0">System.Runtime.CompilerServices</string>
2128
- <string score="0">System.Security.Cryptography</string>
2129
- <string score="0">System.Reflection</string>
2130
- <string score="0">System.Text.RegularExpressions</string>
2131
- <string score="0">System.Runtime.InteropServices</string>
2132
- <string score="0">System.Security.Principal</string>
2133
- <string score="0">System.Threading</string>
2134
- <string score="0">System.IO.Compression</string>
2135
- <string score="0">System.Net.Configuration</string>
2136
- <string score="0">System.Net.Sockets</string>
2137
- <string score="0">Microsoft.VisualBasic.CompilerServices</string>
2138
- <string score="0">Internet Explorer_Server</string>
2139
- <string score="0">vbscript</string>
2140
- <string score="0">javascript</string>
2141
- <string score="0">JavaScript</string>
2142
- <string score="0">execScript</string>
2143
- <string score="0">AutoRun</string>
2144
- <string score="0">HashSize</string>
2145
- <string score="0">Algorithm</string>
2146
- <string score="0">BlockSize</string>
2147
- <string score="0">CipherMode</string>
2148
- <string score="0">Twofish</string>
2149
- <string score="0">Wrong password</string>
2150
- <string score="0">Proxy-Connection:</string>
2151
- <string score="0">WWW-Authenticate:</string>
2152
- <string score="0">Proxy-authenticate:</string>
2153
- <string score="0">Content-Length:</string>
2154
- <string score="0">Connection:</string>
2155
- <string score="0">Transfer-Encoding:</string>
2156
- <string score="0">GOPHER</string>
2157
- <string score="0">Digest</string>
2158
- <string score="0">nonce</string>
2159
- <string score="0">stale</string>
2160
- <string score="0">realm</string>
2161
- <string score="0">opaque</string>
2162
- <string score="0">Referer:</string>
2163
- <string score="0">Range:</string>
2164
- <string score="0">ConfuserEx v0.1.0</string>
2165
- <string score="0">ConfuserEx v0.1.1</string>
2166
- <string score="0">ConfuserEx v0.1.2</string>
2167
- <string score="0">ConfuserEx v0.2.0</string>
2168
- <string score="0">ConfuserEx v0.2.1</string>
2169
- <string score="0">ConfuserEx v0.2.2</string>
2170
- <string score="0">ConfuserEx v0.2.3</string>
2171
- <string score="0">ConfuserEx v0.3.0</string>
2172
- <string score="0">ConfuserEx v0.4.0</string>
2173
- <string score="0">ConfuserEx v0.5.0</string>
2174
-
2175
- <!-- Well-known (local) directories -->
2176
- <string score="0">AppData\Local</string>
2177
- <string score="0">AppData\Local\Microsoft\Windows\History</string>
2178
- <string score="0">AppData\Local\Microsoft\Windows\Temporary Internet Files</string>
2179
- <string score="0">AppData\Roaming</string>
2180
- <string score="0">AppData\Roaming\Microsoft\Windows\Cookies</string>
2181
- <string score="0">AppData\Roaming\Microsoft\Windows\Network Shortcuts</string>
2182
- <string score="0">AppData\Roaming\Microsoft\Windows\Printer Shortcuts</string>
2183
- <string score="0">AppData\Roaming\Microsoft\Windows\Recent</string>
2184
- <string score="0">AppData\Roaming\Microsoft\Windows\SendTo</string>
2185
- <string score="0">AppData\Roaming\Microsoft\Windows\Start Menu</string>
2186
- <string score="0">AppData\Roaming\Microsoft\Windows\Start Menu\Programs</string>
2187
- <string score="0">AppData\Roaming\Microsoft\Windows\Templates</string>
2188
- <string score="0">Microsoft\Windows\Start Menu</string>
2189
- <string score="0">Microsoft\Windows\Start Menu\Programs</string>
2190
- <string score="0">Microsoft\Windows\Templates</string>
2191
- <string score="0">Public\Desktop</string>
2192
- <string score="0">Public\Documents</string>
2193
- <string score="0">Public\Favorites</string>
2194
- <string score="0">Public\Music</string>
2195
- <string score="0">Public\Pictures</string>
2196
- <string score="0">Public\Videos</string>
2197
- <string score="0">System</string>
2198
- <string score="0">Videos</string>
2199
- <string score="0">Windows NT\Accessories</string>
2200
- <string score="0">Explorer\Shell Folders</string>
2201
-
2202
- <!-- Borland -->
2203
- <string score="0">TCoreThread</string>
2204
- <string score="0">EObserver</string>
2205
- <string score="0">TStream</string>
2206
- <string score="0">TFiler</string>
2207
- <string score="0">TReaderH</string>
2208
- <string score="0">TWriter4</string>
2209
- <string score="0">TComponent</string>
2210
- <string score="0">TFPList</string>
2211
- <string score="0">TList</string>
2212
- <string score="0">TThreadList</string>
2213
- <string score="0">TPersistent</string>
2214
- <string score="0">TCollection</string>
2215
- <string score="0">TStrings</string>
2216
- <string score="0">TStringList</string>
2217
- <string score="0">TOwnerStream</string>
2218
- <string score="0">THandleStream</string>
2219
- <string score="0">TFileStream</string>
2220
- <string score="0">TCustomMemoryStream</string>
2221
- <string score="0">TRegExpr</string>
2222
- <string score="0">ERegExpr</string>
2223
-
2224
- <!-- AutoIt -->
2225
- <string score="0">/AutoIt3ExecuteLine</string>
2226
- <string score="0">/AutoIt3ExecuteScript</string>
2227
- <string score="0">/AutoIt3OutputDebug</string>
2228
- <string score="0">AutoIt3GUI</string>
2229
- <string score="0">AutoIt v3</string>
2230
- <string score="0">AutoIt script files (*.au3 *.a3x)</string>
2231
- <string score="0">AutoIt</string>
2232
- <string score="0">AUTOIT SCRIPT</string>
2233
- <string score="0">AUTOIT NO CMDEXECUTE</string>
2234
- <string score="0">AutoIt3OutputDebug</string>
2235
- <string score="0">AutoIt3ExecuteScript</string>
2236
- <string score="0">AutoIt3ExecuteLine</string>
2237
- <string score="0">#NoAutoIt3Execute</string>
2238
- <string score="0">Software\AutoIt v3\AutoIt</string>
2239
- <string score="0">*.au3;*.a3x</string>
2240
- <string score="0">AutoIt Error</string>
2241
- <string score="0">AutoIt has detected the stack has become corrupt.</string>
2242
- <string score="0">CompiledScript</string>
2243
- <string score="0">AutoIt v3 Script: 3 3 8 1</string>
2244
- <string score="0">AutoIt v3 Script: 3 3 8 0</string>
2245
- <string score="0">AutoIt3</string>
2246
- <string score="0">AUTOITPID</string>
2247
- <string score="0">AUTOITEXE</string>
2248
- <string score="0">AUTOITVERSION</string>
2249
- <string score="0">AUTOITSETOPTION</string>
2250
- <string score="0">AUTOITWINGETTITLE</string>
2251
- <string score="0">AUTOITWINSETTITLE</string>
2252
- <string score="0">powershell</string>
2253
- <string score="0">bitsadmin</string>
2254
- <string score="0">bitstransfer</string>
2255
- <string score="0">certutil</string>
2256
- <string score="0">downloadstring</string>
2257
- <string score="0">webclient</string>
2258
- <string score="0">ADODB.Stream</string>
2259
- <string score="0">SaveToFile</string>
2260
- <string score="0">Microsoft.XMLHTTP</string>
2261
- <string score="0">WinHttpRequest</string>
2262
-
2263
- </strings>
2264
-
2265
- <powershells>
2266
- <!-- https://blogs.technet.microsoft.com/heyscriptingguy/2015/06/11/table-of-basic-powershell-commands/ -->
2267
- <powershell score="0">Add-Content</powershell>
2268
- <powershell score="0">Add-PSSnapIn</powershell>
2269
- <powershell score="0">AppData</powershell>
2270
- <powershell score="0">Clear-Content</powershell>
2271
- <powershell score="0">Clear-Host</powershell>
2272
- <powershell score="0">Clear-History</powershell>
2273
- <powershell score="0">Clear-Item</powershell>
2274
- <powershell score="0">Clear-ItemProperty</powershell>
2275
- <powershell score="0">Clear-Variable</powershell>
2276
- <powershell score="0">Compare-Object</powershell>
2277
- <powershell score="0">Connect-PSSession</powershell>
2278
- <powershell score="0">Copy-Item</powershell>
2279
- <powershell score="0">Copy-ItemProperty</powershell>
2280
- <powershell score="0">Convert-Path</powershell>
2281
- <powershell score="0">cmd</powershell>
2282
- <powershell score="0">Disable-PSBreakpoint</powershell>
2283
- <powershell score="0">Disconnect-PSSession</powershell>
2284
- <powershell score="0">Enable-PSBreakpoint</powershell>
2285
- <powershell score="0">Enter-PSSession</powershell>
2286
- <powershell score="0">Export-Alias</powershell>
2287
- <powershell score="0">Export-Csv</powershell>
2288
- <powershell score="0">Export-PSSession</powershell>
2289
- <powershell score="0">Exit-PSSession</powershell>
2290
- <powershell score="0">Format-Custom</powershell>
2291
- <powershell score="0">Format-List</powershell>
2292
- <powershell score="0">ForEach-Object</powershell>
2293
- <powershell score="0">Format-Table</powershell>
2294
- <powershell score="0">Format-Wide</powershell>
2295
- <powershell score="0">Get-Alias</powershell>
2296
- <powershell score="0">Get-Content</powershell>
2297
- <powershell score="0">Get-ChildItem</powershell>
2298
- <powershell score="0">Get-Command</powershell>
2299
- <powershell score="0">Get-History</powershell>
2300
- <powershell score="0">Get-Item</powershell>
2301
- <powershell score="0">Get-Job</powershell>
2302
- <powershell score="0">Get-Location</powershell>
2303
- <powershell score="0">Get-Member</powershell>
2304
- <powershell score="0">Get-Module</powershell>
2305
- <powershell score="0">Get-ItemProperty</powershell>
2306
- <powershell score="0">Get-Location</powershell>
2307
- <powershell score="0">Get-Process</powershell>
2308
- <powershell score="0">Get-PSBreakpoint</powershell>
2309
- <powershell score="0">Get-PSCallStack</powershell>
2310
- <powershell score="0">Get-PSDrive</powershell>
2311
- <powershell score="0">Get-PSSession</powershell>
2312
- <powershell score="0">Get-PSSnapIn</powershell>
2313
- <powershell score="0">Get-Service</powershell>
2314
- <powershell score="0">Get-Unique</powershell>
2315
- <powershell score="0">Get-Variable</powershell>
2316
- <powershell score="0">Get-WmiObject</powershell>
2317
- <powershell score="0">Group-Object</powershell>
2318
- <powershell score="0">Import-Alias</powershell>
2319
- <powershell score="0">Import-Csv</powershell>
2320
- <powershell score="0">Import-Module</powershell>
2321
- <powershell score="0">Import-PSSession</powershell>
2322
- <powershell score="0">Invoke-Command</powershell>
2323
- <powershell score="0">Invoke-Expression</powershell>
2324
- <powershell score="0">Invoke-History</powershell>
2325
- <powershell score="0">Invoke-Item</powershell>
2326
- <powershell score="0">Invoke-RestMethod</powershell>
2327
- <powershell score="0">Invoke-WebRequest</powershell>
2328
- <powershell score="0">Invoke-WMIMethod</powershell>
2329
- <powershell score="0">Measure-Object</powershell>
2330
- <powershell score="0">Move-Item</powershell>
2331
- <powershell score="0">Move-ItemProperty</powershell>
2332
- <powershell score="0">New-Alias</powershell>
2333
- <powershell score="0">New-Item</powershell>
2334
- <powershell score="0">New-Module</powershell>
2335
- <powershell score="0">New-PSDrive</powershell>
2336
- <powershell score="0">New-PSSession</powershell>
2337
- <powershell score="0">New-PSSessionConfigurationFile</powershell>
2338
- <powershell score="0">New-Variable</powershell>
2339
- <powershell score="0">New-Object</powershell>
2340
- <powershell score="0">Out-GridView</powershell>
2341
- <powershell score="0">Out-Host</powershell>
2342
- <powershell score="0">Out-Printer</powershell>
2343
- <powershell score="0">Pop-Location</powershell>
2344
- <powershell score="0">Push-Location</powershell>
2345
- <powershell score="0">Receive-Job</powershell>
2346
- <powershell score="0">Receive-PSSession</powershell>
2347
- <powershell score="0">Remove-Job</powershell>
2348
- <powershell score="0">Remove-Item</powershell>
2349
- <powershell score="0">Remove-ItemProperty</powershell>
2350
- <powershell score="0">Remove-Module</powershell>
2351
- <powershell score="0">Remove-PSBreakpoint</powershell>
2352
- <powershell score="0">Remove-PSDrive</powershell>
2353
- <powershell score="0">Remove-PSSession</powershell>
2354
- <powershell score="0">Remove-PSSnapin</powershell>
2355
- <powershell score="0">Remove-Variable</powershell>
2356
- <powershell score="0">Remove-WMIObject</powershell>
2357
- <powershell score="0">Rename-Item</powershell>
2358
- <powershell score="0">Rename-ItemProperty</powershell>
2359
- <powershell score="0">Resolve-Path</powershell>
2360
- <powershell score="0">Resume-Job</powershell>
2361
- <powershell score="0">Select-Object</powershell>
2362
- <powershell score="0">Set-Alias</powershell>
2363
- <powershell score="0">Set-Content</powershell>
2364
- <powershell score="0">Set-Item</powershell>
2365
- <powershell score="0">Set-Location</powershell>
2366
- <powershell score="0">Set-PSBreakpoint</powershell>
2367
- <powershell score="0">Set-Variable</powershell>
2368
- <powershell score="0">Shell</powershell>
2369
- <powershell score="0">Show-Command</powershell>
2370
- <powershell score="0">Start-Job</powershell>
2371
- <powershell score="0">Start-Process</powershell>
2372
- <powershell score="0">Start-Service</powershell>
2373
- <powershell score="0">Stop-Process</powershell>
2374
- <powershell score="0">Where-Object</powershell>
2375
- <powershell score="0">Write-Output</powershell>
2376
-
2377
- </powershells>
2378
- </xml>
2379
-