KMSpico Portable[.]rar

resource
unpack002/KMSpico Portable/DevComponents.DotNetBar2.dll
unpack002/KMSpico Portable/Vestris.ResourceLib.dll
unpack007/$PLUGINSDIR/InstallOptions.dll
unpack007/$PLUGINSDIR/System.dll
unpack007/bin/devcon.exe
unpack007/driver/tap0901.sys

resource	yara_rule
static1/unpack002/KMSpico Portable/driver/tap-windows-9.21.0.exe	nsis_installer_1
static1/unpack002/KMSpico Portable/driver/tap-windows-9.21.0.exe	nsis_installer_2

KMSpico Portable.rar

.zip

Password: India@2023@@

Device/HarddiskVolume6/Office_ProPlus_2016_x64_en_2017/Bonus/KMSpico 10.2.0/KMSpico Portable.rar

.rar

Password: India@2023@@

KMSpico Portable/AutoPico.exe

.exe windows:4 windows x86 arch:x86

Password: India@2023@@

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

34:36:ac:a3:85:b4:8f:21:ad:93:fe:c6:01:50:d3:64
Certificate

Issuer

CN=@ByELDI Certificate Authority

Not Before

11/01/2016, 22:33

Not After

11/01/2046, 22:33

Subject

CN=@ByELDI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

24:e9:45:5d:14:ff:a2:a6:48:fd:48:50:81:db:61:6c
Certificate

Issuer

CN=@ByELDI Certificate Authority

Not Before

11/01/2016, 22:33

Not After

11/01/2046, 22:33

Subject

CN=@ByELDI Certificate Authority

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

KeyUsageCertSign

KeyUsageCRLSign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

24:a8:33:49:f8:41:a9:6a:3e:d4:36:56:a4:71:83:c7:7d:53:55:d2
Signer

Actual PE Digest

24:a8:33:49:f8:41:a9:6a:3e:d4:36:56:a4:71:83:c7:7d:53:55:d2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 719KB - Virtual size: 718KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

KMSpico Portable/DevComponents.DotNetBar2.dll

.dll windows:4 windows x86 arch:x86

Password: India@2023@@

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.textxc
Size: 5.2MB - Virtual size: 5.2MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.datax
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

KMSpico Portable/DisableSmartScreen.reg

KMSpico Portable/KMSELDI.exe

.exe windows:4 windows x86 arch:x86

Password: India@2023@@

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

34:36:ac:a3:85:b4:8f:21:ad:93:fe:c6:01:50:d3:64
Certificate

Issuer

CN=@ByELDI Certificate Authority

Not Before

11/01/2016, 22:33

Not After

11/01/2046, 22:33

Subject

CN=@ByELDI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

24:e9:45:5d:14:ff:a2:a6:48:fd:48:50:81:db:61:6c
Certificate

Issuer

CN=@ByELDI Certificate Authority

Not Before

11/01/2016, 22:33

Not After

11/01/2046, 22:33

Subject

CN=@ByELDI Certificate Authority

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

KeyUsageCertSign

KeyUsageCRLSign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

44:48:f0:8d:c9:63:f8:df:40:5c:35:eb:71:9b:24:12:5e:6b:ca:12
Signer

Actual PE Digest

44:48:f0:8d:c9:63:f8:df:40:5c:35:eb:71:9b:24:12:5e:6b:ca:12

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 896KB - Virtual size: 895KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

KMSpico Portable/ReadMe KMSpico Portable.txt

KMSpico Portable/RemoveWaterMark.cmd

KMSpico Portable/Uninstall/EnableSmartScreen.cmd

KMSpico Portable/Uninstall/EnableSmartScreen.reg

KMSpico Portable/Uninstall/Remove_ScheduleTask.cmd

KMSpico Portable/Uninstall/Restore_Watermark.cmd

KMSpico Portable/Vestris.ResourceLib.dll

.dll windows:4 windows x86 arch:x86

Password: India@2023@@

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

c:\Users\dblock\Source\CodePlex\resourcelib\trunk\Source\ResourceLib\obj\Release\Vestris.ResourceLib.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

KMSpico Portable/cert/kmscert2010/Access/AccessVLReg32.reg

KMSpico Portable/cert/kmscert2010/Access/AccessVLReg64.reg

KMSpico Portable/cert/kmscert2010/Access/AccessVLRegWOW.reg

KMSpico Portable/cert/kmscert2010/Access/Access_KMS_Client.OOB.xrm-ms

KMSpico Portable/cert/kmscert2010/Access/Access_KMS_Client.PL.xrm-ms

KMSpico Portable/cert/kmscert2010/Access/Access_KMS_Client.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2010/Access/Access_KMS_Client.RAC_Priv.xrm-ms

KMSpico Portable/cert/kmscert2010/Access/Access_KMS_Client.RAC_Pub.xrm-ms

KMSpico Portable/cert/kmscert2010/Excel/ExcelVLReg32.reg

KMSpico Portable/cert/kmscert2010/Excel/ExcelVLReg64.reg

KMSpico Portable/cert/kmscert2010/Excel/ExcelVLRegWOW.reg

KMSpico Portable/cert/kmscert2010/Excel/Excel_KMS_Client.OOB.xrm-ms

KMSpico Portable/cert/kmscert2010/Excel/Excel_KMS_Client.PL.xrm-ms

KMSpico Portable/cert/kmscert2010/Excel/Excel_KMS_Client.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2010/Excel/Excel_KMS_Client.RAC_Priv.xrm-ms

KMSpico Portable/cert/kmscert2010/Excel/Excel_KMS_Client.RAC_Pub.xrm-ms

KMSpico Portable/cert/kmscert2010/Groove/GrooveVLReg32.reg

KMSpico Portable/cert/kmscert2010/Groove/GrooveVLReg64.reg

KMSpico Portable/cert/kmscert2010/Groove/GrooveVLRegWOW.reg

KMSpico Portable/cert/kmscert2010/Groove/Groove_KMS_Client.OOB.xrm-ms

KMSpico Portable/cert/kmscert2010/Groove/Groove_KMS_Client.PL.xrm-ms

KMSpico Portable/cert/kmscert2010/Groove/Groove_KMS_Client.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2010/Groove/Groove_KMS_Client.RAC_Priv.xrm-ms

KMSpico Portable/cert/kmscert2010/Groove/Groove_KMS_Client.RAC_Pub.xrm-ms

KMSpico Portable/cert/kmscert2010/InfoPath/InfoPathVLReg32.reg

KMSpico Portable/cert/kmscert2010/InfoPath/InfoPathVLReg64.reg

KMSpico Portable/cert/kmscert2010/InfoPath/InfoPathVLRegWOW.reg

KMSpico Portable/cert/kmscert2010/InfoPath/InfoPath_KMS_Client.OOB.xrm-ms

KMSpico Portable/cert/kmscert2010/InfoPath/InfoPath_KMS_Client.PL.xrm-ms

KMSpico Portable/cert/kmscert2010/InfoPath/InfoPath_KMS_Client.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2010/InfoPath/InfoPath_KMS_Client.RAC_Priv.xrm-ms

KMSpico Portable/cert/kmscert2010/InfoPath/InfoPath_KMS_Client.RAC_Pub.xrm-ms

KMSpico Portable/cert/kmscert2010/OneNote/OneNoteVLReg32.reg

KMSpico Portable/cert/kmscert2010/OneNote/OneNoteVLReg64.reg

KMSpico Portable/cert/kmscert2010/OneNote/OneNoteVLRegWOW.reg

KMSpico Portable/cert/kmscert2010/OneNote/OneNote_KMS_Client.OOB.xrm-ms

KMSpico Portable/cert/kmscert2010/OneNote/OneNote_KMS_Client.PL.xrm-ms

KMSpico Portable/cert/kmscert2010/OneNote/OneNote_KMS_Client.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2010/OneNote/OneNote_KMS_Client.RAC_Priv.xrm-ms

KMSpico Portable/cert/kmscert2010/OneNote/OneNote_KMS_Client.RAC_Pub.xrm-ms

KMSpico Portable/cert/kmscert2010/Outlook/OutlookVLReg32.reg

KMSpico Portable/cert/kmscert2010/Outlook/OutlookVLReg64.reg

KMSpico Portable/cert/kmscert2010/Outlook/OutlookVLRegWOW.reg

KMSpico Portable/cert/kmscert2010/Outlook/Outlook_KMS_Client.OOB.xrm-ms

KMSpico Portable/cert/kmscert2010/Outlook/Outlook_KMS_Client.PL.xrm-ms

KMSpico Portable/cert/kmscert2010/Outlook/Outlook_KMS_Client.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2010/Outlook/Outlook_KMS_Client.RAC_Priv.xrm-ms

KMSpico Portable/cert/kmscert2010/Outlook/Outlook_KMS_Client.RAC_Pub.xrm-ms

KMSpico Portable/cert/kmscert2010/PowerPoint/PowerPointVLReg32.reg

KMSpico Portable/cert/kmscert2010/PowerPoint/PowerPointVLReg64.reg

KMSpico Portable/cert/kmscert2010/PowerPoint/PowerPointVLRegWOW.reg

KMSpico Portable/cert/kmscert2010/PowerPoint/PowerPoint_KMS_Client.OOB.xrm-ms

KMSpico Portable/cert/kmscert2010/PowerPoint/PowerPoint_KMS_Client.PL.xrm-ms

KMSpico Portable/cert/kmscert2010/PowerPoint/PowerPoint_KMS_Client.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2010/PowerPoint/PowerPoint_KMS_Client.RAC_Priv.xrm-ms

KMSpico Portable/cert/kmscert2010/PowerPoint/PowerPoint_KMS_Client.RAC_Pub.xrm-ms

KMSpico Portable/cert/kmscert2010/ProPlus/ProPlusVLReg32.reg

KMSpico Portable/cert/kmscert2010/ProPlus/ProPlusVLReg64.reg

KMSpico Portable/cert/kmscert2010/ProPlus/ProPlusVLRegWOW.reg

KMSpico Portable/cert/kmscert2010/ProPlus/ProPlus_KMS_Client.OOB.xrm-ms

KMSpico Portable/cert/kmscert2010/ProPlus/ProPlus_KMS_Client.PL.xrm-ms

KMSpico Portable/cert/kmscert2010/ProPlus/ProPlus_KMS_Client.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2010/ProPlus/ProPlus_KMS_Client.RAC_Priv.xrm-ms

KMSpico Portable/cert/kmscert2010/ProPlus/ProPlus_KMS_Client.RAC_Pub.xrm-ms

KMSpico Portable/cert/kmscert2010/ProjectPro/ProjectProVLReg32.reg

KMSpico Portable/cert/kmscert2010/ProjectPro/ProjectProVLReg64.reg

KMSpico Portable/cert/kmscert2010/ProjectPro/ProjectProVLRegWOW.reg

KMSpico Portable/cert/kmscert2010/ProjectPro/ProjectPro_KMS_Client.OOB.xrm-ms

KMSpico Portable/cert/kmscert2010/ProjectPro/ProjectPro_KMS_Client.PL.xrm-ms

KMSpico Portable/cert/kmscert2010/ProjectPro/ProjectPro_KMS_Client.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2010/ProjectPro/ProjectPro_KMS_Client.RAC_Priv.xrm-ms

KMSpico Portable/cert/kmscert2010/ProjectPro/ProjectPro_KMS_Client.RAC_Pub.xrm-ms

KMSpico Portable/cert/kmscert2010/ProjectStd/ProjectStdVLReg32.reg

KMSpico Portable/cert/kmscert2010/ProjectStd/ProjectStdVLReg64.reg

KMSpico Portable/cert/kmscert2010/ProjectStd/ProjectStdVLRegWOW.reg

KMSpico Portable/cert/kmscert2010/ProjectStd/ProjectStd_KMS_Client.OOB.xrm-ms

KMSpico Portable/cert/kmscert2010/ProjectStd/ProjectStd_KMS_Client.PL.xrm-ms

KMSpico Portable/cert/kmscert2010/ProjectStd/ProjectStd_KMS_Client.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2010/ProjectStd/ProjectStd_KMS_Client.RAC_Priv.xrm-ms

KMSpico Portable/cert/kmscert2010/ProjectStd/ProjectStd_KMS_Client.RAC_Pub.xrm-ms

KMSpico Portable/cert/kmscert2010/Publisher/PublisherVLReg32.reg

KMSpico Portable/cert/kmscert2010/Publisher/PublisherVLReg64.reg

KMSpico Portable/cert/kmscert2010/Publisher/PublisherVLRegWOW.reg

KMSpico Portable/cert/kmscert2010/Publisher/Publisher_KMS_Client.OOB.xrm-ms

KMSpico Portable/cert/kmscert2010/Publisher/Publisher_KMS_Client.PL.xrm-ms

KMSpico Portable/cert/kmscert2010/Publisher/Publisher_KMS_Client.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2010/Publisher/Publisher_KMS_Client.RAC_Priv.xrm-ms

KMSpico Portable/cert/kmscert2010/Publisher/Publisher_KMS_Client.RAC_Pub.xrm-ms

KMSpico Portable/cert/kmscert2010/SmallBusBasics/SmallBusBasicsVLReg32.reg

KMSpico Portable/cert/kmscert2010/SmallBusBasics/SmallBusBasicsVLReg64.reg

KMSpico Portable/cert/kmscert2010/SmallBusBasics/SmallBusBasicsVLRegWOW.reg

KMSpico Portable/cert/kmscert2010/SmallBusBasics/SmallBusBasics_KMS_Client.OOB.xrm-ms

KMSpico Portable/cert/kmscert2010/SmallBusBasics/SmallBusBasics_KMS_Client.PL.xrm-ms

KMSpico Portable/cert/kmscert2010/SmallBusBasics/SmallBusBasics_KMS_Client.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2010/SmallBusBasics/SmallBusBasics_KMS_Client.RAC_Priv.xrm-ms

KMSpico Portable/cert/kmscert2010/SmallBusBasics/SmallBusBasics_KMS_Client.RAC_Pub.xrm-ms

KMSpico Portable/cert/kmscert2010/Standard/StandardVLReg32.reg

KMSpico Portable/cert/kmscert2010/Standard/StandardVLReg64.reg

KMSpico Portable/cert/kmscert2010/Standard/StandardVLRegWOW.reg

KMSpico Portable/cert/kmscert2010/Standard/Standard_KMS_Client.OOB.xrm-ms

KMSpico Portable/cert/kmscert2010/Standard/Standard_KMS_Client.PL.xrm-ms

KMSpico Portable/cert/kmscert2010/Standard/Standard_KMS_Client.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2010/Standard/Standard_KMS_Client.RAC_Priv.xrm-ms

KMSpico Portable/cert/kmscert2010/Standard/Standard_KMS_Client.RAC_Pub.xrm-ms

KMSpico Portable/cert/kmscert2010/Visio/VisioPrem_KMS_Client.OOB.xrm-ms

KMSpico Portable/cert/kmscert2010/Visio/VisioPrem_KMS_Client.PL.xrm-ms

KMSpico Portable/cert/kmscert2010/Visio/VisioPrem_KMS_Client.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2010/Visio/VisioPrem_KMS_Client.RAC_Priv.xrm-ms

KMSpico Portable/cert/kmscert2010/Visio/VisioPrem_KMS_Client.RAC_Pub.xrm-ms

KMSpico Portable/cert/kmscert2010/Visio/VisioPro_KMS_Client.OOB.xrm-ms

KMSpico Portable/cert/kmscert2010/Visio/VisioPro_KMS_Client.PL.xrm-ms

KMSpico Portable/cert/kmscert2010/Visio/VisioPro_KMS_Client.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2010/Visio/VisioPro_KMS_Client.RAC_Priv.xrm-ms

KMSpico Portable/cert/kmscert2010/Visio/VisioPro_KMS_Client.RAC_Pub.xrm-ms

KMSpico Portable/cert/kmscert2010/Visio/VisioStd_KMS_Client.OOB.xrm-ms

KMSpico Portable/cert/kmscert2010/Visio/VisioStd_KMS_Client.PL.xrm-ms

KMSpico Portable/cert/kmscert2010/Visio/VisioStd_KMS_Client.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2010/Visio/VisioStd_KMS_Client.RAC_Priv.xrm-ms

KMSpico Portable/cert/kmscert2010/Visio/VisioStd_KMS_Client.RAC_Pub.xrm-ms

KMSpico Portable/cert/kmscert2010/Visio/VisioVLReg32.reg

KMSpico Portable/cert/kmscert2010/Visio/VisioVLReg64.reg

KMSpico Portable/cert/kmscert2010/Visio/VisioVLRegWOW.reg

KMSpico Portable/cert/kmscert2010/Word/WordVLReg32.reg

KMSpico Portable/cert/kmscert2010/Word/WordVLReg64.reg

KMSpico Portable/cert/kmscert2010/Word/WordVLRegWOW.reg

KMSpico Portable/cert/kmscert2010/Word/Word_KMS_Client.OOB.xrm-ms

KMSpico Portable/cert/kmscert2010/Word/Word_KMS_Client.PL.xrm-ms

KMSpico Portable/cert/kmscert2010/Word/Word_KMS_Client.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2010/Word/Word_KMS_Client.RAC_Priv.xrm-ms

KMSpico Portable/cert/kmscert2010/Word/Word_KMS_Client.RAC_Pub.xrm-ms

KMSpico Portable/cert/kmscert2013/Access/AccessVL_KMS_Client_OOB.xrm-ms

KMSpico Portable/cert/kmscert2013/Access/AccessVL_KMS_Client_PL.xrm-ms

KMSpico Portable/cert/kmscert2013/Access/AccessVL_KMS_Client_PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2013/Excel/LicenseSetData._F7461D52_7C2B_43B2_8744_EA958E0BD09A.OOB.xrm-ms

KMSpico Portable/cert/kmscert2013/Excel/LicenseSetData._F7461D52_7C2B_43B2_8744_EA958E0BD09A.PL.xrm-ms

KMSpico Portable/cert/kmscert2013/Excel/LicenseSetData._F7461D52_7C2B_43B2_8744_EA958E0BD09A.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2013/InfoPath/LicenseSetData._A30B8040_D68A_423F_B0B5_9CE292EA5A8F.OOB.xrm-ms

KMSpico Portable/cert/kmscert2013/InfoPath/LicenseSetData._A30B8040_D68A_423F_B0B5_9CE292EA5A8F.PL.xrm-ms

KMSpico Portable/cert/kmscert2013/InfoPath/LicenseSetData._A30B8040_D68A_423F_B0B5_9CE292EA5A8F.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2013/Licenses.sl.ISSUANCE.CLIENT_BRIDGE_OFFICE.xrm-ms

KMSpico Portable/cert/kmscert2013/Licenses.sl.ISSUANCE.CLIENT_ROOT.xrm-ms

KMSpico Portable/cert/kmscert2013/Licenses.sl.ISSUANCE.CLIENT_ROOT_BRIDGE_TEST.xrm-ms

KMSpico Portable/cert/kmscert2013/Licenses.sl.ISSUANCE.CLIENT_STIL.xrm-ms

KMSpico Portable/cert/kmscert2013/Licenses.sl.ISSUANCE.CLIENT_UL.xrm-ms

KMSpico Portable/cert/kmscert2013/Licenses.sl.ISSUANCE.CLIENT_UL_OOB.xrm-ms

KMSpico Portable/cert/kmscert2013/Lync/LicenseSetData._1B9F11E3_C85C_4E1B_BB29_879AD2C909E3.OOB.xrm-ms

KMSpico Portable/cert/kmscert2013/Lync/LicenseSetData._1B9F11E3_C85C_4E1B_BB29_879AD2C909E3.PL.xrm-ms

KMSpico Portable/cert/kmscert2013/Lync/LicenseSetData._1B9F11E3_C85C_4E1B_BB29_879AD2C909E3.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2013/OneNote/LicenseSetData._EFE1F3E6_AEA2_4144_A208_32AA872B6545.OOB.xrm-ms

KMSpico Portable/cert/kmscert2013/OneNote/LicenseSetData._EFE1F3E6_AEA2_4144_A208_32AA872B6545.PL.xrm-ms

KMSpico Portable/cert/kmscert2013/OneNote/LicenseSetData._EFE1F3E6_AEA2_4144_A208_32AA872B6545.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2013/Outlook/LicenseSetData._771C3AFA_50C5_443F_B151_FF2546D863A0.OOB.xrm-ms

KMSpico Portable/cert/kmscert2013/Outlook/LicenseSetData._771C3AFA_50C5_443F_B151_FF2546D863A0.PL.xrm-ms

KMSpico Portable/cert/kmscert2013/Outlook/LicenseSetData._771C3AFA_50C5_443F_B151_FF2546D863A0.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2013/PowerPoint/LicenseSetData._8C762649_97D1_4953_AD27_B7E2C25B972E.OOB.xrm-ms

KMSpico Portable/cert/kmscert2013/PowerPoint/LicenseSetData._8C762649_97D1_4953_AD27_B7E2C25B972E.PL.xrm-ms

KMSpico Portable/cert/kmscert2013/PowerPoint/LicenseSetData._8C762649_97D1_4953_AD27_B7E2C25B972E.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2013/ProPlus/LicenseSetData._B322DA9C_A2E2_4058_9E4E_F59A6970BD69.OOB.xrm-ms

KMSpico Portable/cert/kmscert2013/ProPlus/LicenseSetData._B322DA9C_A2E2_4058_9E4E_F59A6970BD69.PL.xrm-ms

KMSpico Portable/cert/kmscert2013/ProPlus/LicenseSetData._B322DA9C_A2E2_4058_9E4E_F59A6970BD69.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2013/ProPlus/proplus.reg

KMSpico Portable/cert/kmscert2013/ProjectPro/LicenseSetData._4A5D124A_E620_44BA_B6FF_658961B33B9A.OOB.xrm-ms

KMSpico Portable/cert/kmscert2013/ProjectPro/LicenseSetData._4A5D124A_E620_44BA_B6FF_658961B33B9A.PL.xrm-ms

KMSpico Portable/cert/kmscert2013/ProjectPro/LicenseSetData._4A5D124A_E620_44BA_B6FF_658961B33B9A.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2013/ProjectStd/LicenseSetData._427A28D1_D17C_4ABF_B717_32C780BA6F07.OOB.xrm-ms

KMSpico Portable/cert/kmscert2013/ProjectStd/LicenseSetData._427A28D1_D17C_4ABF_B717_32C780BA6F07.PL.xrm-ms

KMSpico Portable/cert/kmscert2013/ProjectStd/LicenseSetData._427A28D1_D17C_4ABF_B717_32C780BA6F07.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2013/Publisher/LicenseSetData._00C79FF1_6850_443D_BF61_71CDE0DE305F.OOB.xrm-ms

KMSpico Portable/cert/kmscert2013/Publisher/LicenseSetData._00C79FF1_6850_443D_BF61_71CDE0DE305F.PL.xrm-ms

KMSpico Portable/cert/kmscert2013/Publisher/LicenseSetData._00C79FF1_6850_443D_BF61_71CDE0DE305F.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2013/Standard/LicenseSetData._B13AFB38_CD79_4AE5_9F7F_EED058D750CA.OOB.xrm-ms

KMSpico Portable/cert/kmscert2013/Standard/LicenseSetData._B13AFB38_CD79_4AE5_9F7F_EED058D750CA.PL.xrm-ms

KMSpico Portable/cert/kmscert2013/Standard/LicenseSetData._B13AFB38_CD79_4AE5_9F7F_EED058D750CA.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2013/VisioPro/LicenseSetData._E13AC10E_75D0_4AFF_A0CD_764982CF541C.OOB.xrm-ms

KMSpico Portable/cert/kmscert2013/VisioPro/LicenseSetData._E13AC10E_75D0_4AFF_A0CD_764982CF541C.PL.xrm-ms

KMSpico Portable/cert/kmscert2013/VisioPro/LicenseSetData._E13AC10E_75D0_4AFF_A0CD_764982CF541C.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2013/VisioPro/visio.reg

KMSpico Portable/cert/kmscert2013/VisioStd/LicenseSetData._AC4EFAF0_F81F_4F61_BDF7_EA32B02AB117.OOB.xrm-ms

KMSpico Portable/cert/kmscert2013/VisioStd/LicenseSetData._AC4EFAF0_F81F_4F61_BDF7_EA32B02AB117.PL.xrm-ms

KMSpico Portable/cert/kmscert2013/VisioStd/LicenseSetData._AC4EFAF0_F81F_4F61_BDF7_EA32B02AB117.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2013/Word/LicenseSetData._D9F5B1C6_5386_495A_88F9_9AD6B41AC9B3.OOB.xrm-ms

KMSpico Portable/cert/kmscert2013/Word/LicenseSetData._D9F5B1C6_5386_495A_88F9_9AD6B41AC9B3.PL.xrm-ms

KMSpico Portable/cert/kmscert2013/Word/LicenseSetData._D9F5B1C6_5386_495A_88F9_9AD6B41AC9B3.PPDLIC.xrm-ms

KMSpico Portable/cert/kmscert2013/pkeyconfig-office.xrm-ms

KMSpico Portable/cert/kmscert2016/Access/AccessVL_KMS_Client-ppd.xrm-ms

KMSpico Portable/cert/kmscert2016/Access/AccessVL_KMS_Client-ul-oob.xrm-ms

KMSpico Portable/cert/kmscert2016/Access/AccessVL_KMS_Client-ul.xrm-ms

KMSpico Portable/cert/kmscert2016/Excel/ExcelVL_KMS_Client-ppd.xrm-ms

KMSpico Portable/cert/kmscert2016/Excel/ExcelVL_KMS_Client-ul-oob.xrm-ms

KMSpico Portable/cert/kmscert2016/Excel/ExcelVL_KMS_Client-ul.xrm-ms

KMSpico Portable/cert/kmscert2016/Mondo/MondoVL_KMS_Client-ppd.xrm-ms

KMSpico Portable/cert/kmscert2016/Mondo/MondoVL_KMS_Client-ul-oob.xrm-ms

KMSpico Portable/cert/kmscert2016/Mondo/MondoVL_KMS_Client-ul.xrm-ms

KMSpico Portable/cert/kmscert2016/OneNote/OneNoteVL_KMS_Client-ppd.xrm-ms

KMSpico Portable/cert/kmscert2016/OneNote/OneNoteVL_KMS_Client-ul-oob.xrm-ms

KMSpico Portable/cert/kmscert2016/OneNote/OneNoteVL_KMS_Client-ul.xrm-ms

KMSpico Portable/cert/kmscert2016/Outlook/OutlookVL_KMS_Client-ppd.xrm-ms

KMSpico Portable/cert/kmscert2016/Outlook/OutlookVL_KMS_Client-ul-oob.xrm-ms

KMSpico Portable/cert/kmscert2016/Outlook/OutlookVL_KMS_Client-ul.xrm-ms

KMSpico Portable/cert/kmscert2016/PowerPoint/PowerPointVL_KMS_Client-ppd.xrm-ms

KMSpico Portable/cert/kmscert2016/PowerPoint/PowerPointVL_KMS_Client-ul-oob.xrm-ms

KMSpico Portable/cert/kmscert2016/PowerPoint/PowerPointVL_KMS_Client-ul.xrm-ms

KMSpico Portable/cert/kmscert2016/ProPlus/ProPlusVL_KMS_Client-ppd.xrm-ms

KMSpico Portable/cert/kmscert2016/ProPlus/ProPlusVL_KMS_Client-ul-oob.xrm-ms

KMSpico Portable/cert/kmscert2016/ProPlus/ProPlusVL_KMS_Client-ul.xrm-ms

KMSpico Portable/cert/kmscert2016/ProjectPro/ProjectProVL_KMS_Client-ppd.xrm-ms

KMSpico Portable/cert/kmscert2016/ProjectPro/ProjectProVL_KMS_Client-ul-oob.xrm-ms

KMSpico Portable/cert/kmscert2016/ProjectPro/ProjectProVL_KMS_Client-ul.xrm-ms

KMSpico Portable/cert/kmscert2016/ProjectStd/ProjectStdVL_KMS_Client-ppd.xrm-ms

KMSpico Portable/cert/kmscert2016/ProjectStd/ProjectStdVL_KMS_Client-ul-oob.xrm-ms

KMSpico Portable/cert/kmscert2016/ProjectStd/ProjectStdVL_KMS_Client-ul.xrm-ms

KMSpico Portable/cert/kmscert2016/Publisher/PublisherVL_KMS_Client-ppd.xrm-ms

KMSpico Portable/cert/kmscert2016/Publisher/PublisherVL_KMS_Client-ul-oob.xrm-ms

KMSpico Portable/cert/kmscert2016/Publisher/PublisherVL_KMS_Client-ul.xrm-ms

KMSpico Portable/cert/kmscert2016/SkypeforBusiness/SkypeforBusinessVL_KMS_Client-ppd.xrm-ms

KMSpico Portable/cert/kmscert2016/SkypeforBusiness/SkypeforBusinessVL_KMS_Client-ul-oob.xrm-ms

KMSpico Portable/cert/kmscert2016/SkypeforBusiness/SkypeforBusinessVL_KMS_Client-ul.xrm-ms

KMSpico Portable/cert/kmscert2016/Standard/StandardVL_KMS_Client-ppd.xrm-ms

KMSpico Portable/cert/kmscert2016/Standard/StandardVL_KMS_Client-ul-oob.xrm-ms

KMSpico Portable/cert/kmscert2016/Standard/StandardVL_KMS_Client-ul.xrm-ms

KMSpico Portable/cert/kmscert2016/VisioPro/VisioProVL_KMS_Client-ppd.xrm-ms

KMSpico Portable/cert/kmscert2016/VisioPro/VisioProVL_KMS_Client-ul-oob.xrm-ms

KMSpico Portable/cert/kmscert2016/VisioPro/VisioProVL_KMS_Client-ul.xrm-ms

KMSpico Portable/cert/kmscert2016/VisioStd/VisioStdVL_KMS_Client-ppd.xrm-ms

KMSpico Portable/cert/kmscert2016/VisioStd/VisioStdVL_KMS_Client-ul-oob.xrm-ms

KMSpico Portable/cert/kmscert2016/VisioStd/VisioStdVL_KMS_Client-ul.xrm-ms

KMSpico Portable/cert/kmscert2016/Word/WordVL_KMS_Client-ppd.xrm-ms

KMSpico Portable/cert/kmscert2016/Word/WordVL_KMS_Client-ul-oob.xrm-ms

KMSpico Portable/cert/kmscert2016/Word/WordVL_KMS_Client-ul.xrm-ms

KMSpico Portable/cert/kmscert2016/client-issuance-bridge-office.xrm-ms

KMSpico Portable/cert/kmscert2016/client-issuance-root-bridge-test.xrm-ms

KMSpico Portable/cert/kmscert2016/client-issuance-root.xrm-ms

KMSpico Portable/cert/kmscert2016/client-issuance-stil.xrm-ms

KMSpico Portable/cert/kmscert2016/client-issuance-ul-oob.xrm-ms

KMSpico Portable/cert/kmscert2016/client-issuance-ul.xrm-ms

KMSpico Portable/cert/kmscert2016/pkeyconfig-office.xrm-ms

KMSpico Portable/cert/kmscertW10/Core/Core-Volume-GVLK-1-ul-oob-rtm.xrm-ms

KMSpico Portable/cert/kmscertW10/Core/Core-Volume-GVLK-1-ul-rtm.xrm-ms

KMSpico Portable/cert/kmscertW10/Education/Education-Volume-GVLK-1-ul-oob-rtm.xrm-ms

KMSpico Portable/cert/kmscertW10/Education/Education-Volume-GVLK-1-ul-rtm.xrm-ms

KMSpico Portable/cert/kmscertW10/Enterprise/Enterprise-Volume-GVLK-1-ul-oob-rtm.xrm-ms

KMSpico Portable/cert/kmscertW10/Enterprise/Enterprise-Volume-GVLK-1-ul-rtm.xrm-ms

KMSpico Portable/cert/kmscertW10/EnterpriseS/EnterpriseS-Volume-GVLK-1-ul-oob-rtm.xrm-ms

KMSpico Portable/cert/kmscertW10/EnterpriseS/EnterpriseS-Volume-GVLK-1-ul-rtm.xrm-ms

KMSpico Portable/cert/kmscertW10/EnterpriseS/EnterpriseS-Volume-GVLK-2-ul-oob.xrm-ms

KMSpico Portable/cert/kmscertW10/EnterpriseS/EnterpriseS-Volume-GVLK-2-ul.xrm-ms

KMSpico Portable/cert/kmscertW10/Professional/Professional-Volume-GVLK-1-ul-oob-rtm.xrm-ms

KMSpico Portable/cert/kmscertW10/Professional/Professional-Volume-GVLK-1-ul-rtm.xrm-ms

KMSpico Portable/cert/kmscertW10/pkeyconfig.xrm-ms

KMSpico Portable/cert/kmscertW6/Business/Security-Licensing-SLC-Component-SKU-Business-VL-BYPASS-RAC-private.xrm-ms

KMSpico Portable/cert/kmscertW6/Business/Security-Licensing-SLC-Component-SKU-Business-VL-BYPASS-RAC-public.xrm-ms

KMSpico Portable/cert/kmscertW6/Business/Security-Licensing-SLC-Component-SKU-Business-VL-BYPASS-ul-oob.xrm-ms

KMSpico Portable/cert/kmscertW6/Business/Security-Licensing-SLC-Component-SKU-Business-VL-BYPASS-ul.xrm-ms

KMSpico Portable/cert/kmscertW6/Business/Security-Licensing-SLC-Component-SKU-Business-VL-KMS-pl.xrm-ms

KMSpico Portable/cert/kmscertW6/Business/Security-Licensing-SLC-Component-SKU-Business-VL-KMS-ul-oob.xrm-ms

KMSpico Portable/cert/kmscertW6/Business/Security-Licensing-SLC-Component-SKU-Business-VL-KMS-ul-phn.xrm-ms

KMSpico Portable/cert/kmscertW6/Business/Security-Licensing-SLC-Component-SKU-Business-VL-KMS1-pl.xrm-ms

KMSpico Portable/cert/kmscertW6/Business/Security-Licensing-SLC-Component-SKU-Business-VL-KMS1-ul-oob.xrm-ms

KMSpico Portable/cert/kmscertW6/Business/Security-Licensing-SLC-Component-SKU-Business-VL-KMS1-ul-phn.xrm-ms

KMSpico Portable/cert/kmscertW6/Business/Security-Licensing-SLC-Component-SKU-Business-ul-oob.xrm-ms

KMSpico Portable/cert/kmscertW6/Business/Security-Licensing-SLC-Component-SKU-Business-ul-phn.xrm-ms

KMSpico Portable/cert/kmscertW6/BusinessN/Security-Licensing-SLC-Component-SKU-BusinessN-VL-BYPASS-RAC-private.xrm-ms

KMSpico Portable/cert/kmscertW6/BusinessN/Security-Licensing-SLC-Component-SKU-BusinessN-VL-BYPASS-RAC-public.xrm-ms

KMSpico Portable/cert/kmscertW6/BusinessN/Security-Licensing-SLC-Component-SKU-BusinessN-VL-BYPASS-ul-oob.xrm-ms

KMSpico Portable/cert/kmscertW6/BusinessN/Security-Licensing-SLC-Component-SKU-BusinessN-VL-BYPASS-ul.xrm-ms

KMSpico Portable/cert/kmscertW6/BusinessN/Security-Licensing-SLC-Component-SKU-BusinessN-VL-KMS-pl.xrm-ms

KMSpico Portable/cert/kmscertW6/BusinessN/Security-Licensing-SLC-Component-SKU-BusinessN-VL-KMS-ul-oob.xrm-ms

KMSpico Portable/cert/kmscertW6/BusinessN/Security-Licensing-SLC-Component-SKU-BusinessN-VL-KMS-ul-phn.xrm-ms

KMSpico Portable/cert/kmscertW6/BusinessN/Security-Licensing-SLC-Component-SKU-BusinessN-VL-KMS1-pl.xrm-ms

KMSpico Portable/cert/kmscertW6/BusinessN/Security-Licensing-SLC-Component-SKU-BusinessN-VL-KMS1-ul-oob.xrm-ms

KMSpico Portable/cert/kmscertW6/BusinessN/Security-Licensing-SLC-Component-SKU-BusinessN-VL-KMS1-ul-phn.xrm-ms

KMSpico Portable/cert/kmscertW6/BusinessN/Security-Licensing-SLC-Component-SKU-BusinessN-ul-oob.xrm-ms

KMSpico Portable/cert/kmscertW6/BusinessN/Security-Licensing-SLC-Component-SKU-BusinessN-ul-phn.xrm-ms

KMSpico Portable/cert/kmscertW6/Enterprise/Security-Licensing-SLC-Component-SKU-Enterprise-VL-BYPASS-RAC-private.xrm-ms

KMSpico Portable/cert/kmscertW6/Enterprise/Security-Licensing-SLC-Component-SKU-Enterprise-VL-BYPASS-RAC-public.xrm-ms

KMSpico Portable/cert/kmscertW6/Enterprise/Security-Licensing-SLC-Component-SKU-Enterprise-VL-BYPASS-ul-oob.xrm-ms

KMSpico Portable/cert/kmscertW6/Enterprise/Security-Licensing-SLC-Component-SKU-Enterprise-VL-BYPASS-ul.xrm-ms

KMSpico Portable/cert/kmscertW6/Enterprise/Security-Licensing-SLC-Component-SKU-Enterprise-VL-KMS-pl.xrm-ms

KMSpico Portable/cert/kmscertW6/Enterprise/Security-Licensing-SLC-Component-SKU-Enterprise-VL-KMS-ul-oob.xrm-ms

KMSpico Portable/cert/kmscertW6/Enterprise/Security-Licensing-SLC-Component-SKU-Enterprise-VL-KMS-ul-phn.xrm-ms

KMSpico Portable/cert/kmscertW6/Enterprise/Security-Licensing-SLC-Component-SKU-Enterprise-VL-KMS1-pl.xrm-ms

KMSpico Portable/cert/kmscertW6/Enterprise/Security-Licensing-SLC-Component-SKU-Enterprise-VL-KMS1-ul-oob.xrm-ms

KMSpico Portable/cert/kmscertW6/Enterprise/Security-Licensing-SLC-Component-SKU-Enterprise-VL-KMS1-ul-phn.xrm-ms

KMSpico Portable/cert/kmscertW6/Enterprise/Security-Licensing-SLC-Component-SKU-Enterprise-ul-oob.xrm-ms

KMSpico Portable/cert/kmscertW6/Enterprise/Security-Licensing-SLC-Component-SKU-Enterprise-ul-phn.xrm-ms

KMSpico Portable/cert/kmscertW6/pkeyconfig.xrm-ms

KMSpico Portable/cert/kmscertW7/Embedded/Security-SPP-Component-SKU-Embedded-VLBA-ul-oob.xrm-ms

KMSpico Portable/cert/kmscertW7/Embedded/Security-SPP-Component-SKU-Embedded-VLBA-ul.xrm-ms

KMSpico Portable/cert/kmscertW7/Embedded/Security-SPP-Component-SKU-Embedded-pl.xrm-ms

KMSpico Portable/cert/kmscertW7/Embedded/Security-SPP-Component-SKU-Embedded-ul-oob.xrm-ms

KMSpico Portable/cert/kmscertW7/Embedded/Security-SPP-Component-SKU-Embedded-ul-phn.xrm-ms

KMSpico Portable/cert/kmscertW7/Embedded/pkeyconfig-embedded.xrm-ms

KMSpico Portable/cert/kmscertW7/Professional/Security-SPP-Component-SKU-Professional-VL-BYPASS-RAC-private.xrm-ms

KMSpico Portable/cert/kmscertW7/Professional/Security-SPP-Component-SKU-Professional-VL-BYPASS-RAC-public.xrm-ms

KMSpico Portable/cert/kmscertW7/Professional/Security-SPP-Component-SKU-Professional-VL-BYPASS-ul-oob.xrm-ms

KMSpico Portable/cert/kmscertW7/Professional/Security-SPP-Component-SKU-Professional-VL-BYPASS-ul.xrm-ms

KMSpico Portable/cert/kmscertW7/Professional/Security-SPP-Component-SKU-Professional-VLKMS1-pl.xrm-ms

KMSpico Portable/cert/kmscertW7/Professional/Security-SPP-Component-SKU-Professional-VLKMS1-ul-oob.xrm-ms

KMSpico Portable/cert/kmscertW7/Professional/Security-SPP-Component-SKU-Professional-VLKMS1-ul-phn.xrm-ms

KMSpico Portable/cert/kmscertW7/Professional/Security-SPP-Component-SKU-Professional-ul-oob.xrm-ms

KMSpico Portable/cert/kmscertW7/Professional/Security-SPP-Component-SKU-Professional-ul-phn.xrm-ms

KMSpico Portable/cert/kmscertW7/Professional/pkeyconfig.xrm-ms

KMSpico Portable/cert/kmscertW8/Core/Core-Volume-GVLK-1-ul-oob-rtm.xrm-ms

KMSpico Portable/cert/kmscertW8/Core/Core-Volume-GVLK-1-ul-rtm.xrm-ms

KMSpico Portable/cert/kmscertW8/CoreN/CoreN-Volume-GVLK-1-ul-oob-rtm.xrm-ms

KMSpico Portable/cert/kmscertW8/CoreN/CoreN-Volume-GVLK-1-ul-rtm.xrm-ms

KMSpico Portable/cert/kmscertW8/CoreSingleLanguage/CoreSingleLanguage-Volume-GVLK-1-ul-oob-rtm.xrm-ms

KMSpico Portable/cert/kmscertW8/CoreSingleLanguage/CoreSingleLanguage-Volume-GVLK-1-ul-rtm.xrm-ms

KMSpico Portable/cert/kmscertW8/Enterprise/Enterprise-Volume-GVLK-1-ul-oob-rtm.xrm-ms

KMSpico Portable/cert/kmscertW8/Enterprise/Enterprise-Volume-GVLK-1-ul-rtm.xrm-ms

KMSpico Portable/cert/kmscertW8/EnterpriseN/EnterpriseN-Volume-GVLK-1-ul-oob-rtm.xrm-ms

KMSpico Portable/cert/kmscertW8/EnterpriseN/EnterpriseN-Volume-GVLK-1-ul-rtm.xrm-ms

KMSpico Portable/cert/kmscertW8/Professional/Professional-Volume-GVLK-1-ul-oob-rtm.xrm-ms

KMSpico Portable/cert/kmscertW8/Professional/Professional-Volume-GVLK-1-ul-rtm.xrm-ms

KMSpico Portable/cert/kmscertW8/ProfessionalN/ProfessionalN-Volume-GVLK-1-ul-oob-rtm.xrm-ms

KMSpico Portable/cert/kmscertW8/ProfessionalN/ProfessionalN-Volume-GVLK-1-ul-rtm.xrm-ms

KMSpico Portable/cert/kmscertW8/ProfessionalWMC/ProfessionalWMC-Volume-GVLK-1-ul-oob-rtm.xrm-ms

KMSpico Portable/cert/kmscertW8/ProfessionalWMC/ProfessionalWMC-Volume-GVLK-1-ul-rtm.xrm-ms

KMSpico Portable/cert/kmscertW8/pkeyconfig.xrm-ms

KMSpico Portable/cert/kmscertW81/Core/Core-Volume-GVLK-1-ul-oob-rtm.xrm-ms

KMSpico Portable/cert/kmscertW81/Core/Core-Volume-GVLK-1-ul-rtm.xrm-ms

KMSpico Portable/cert/kmscertW81/CoreConnectedSingleLanguage/CoreConnectedSingleLanguage-Volume-GVLK-1-ul-oob-rtm.xrm-ms

KMSpico Portable/cert/kmscertW81/CoreConnectedSingleLanguage/CoreConnectedSingleLanguage-Volume-GVLK-1-ul-rtm.xrm-ms

KMSpico Portable/cert/kmscertW81/EmbeddedIndustry/EmbeddedIndustry-Volume-GVLK-1-ul-oob-rtm.xrm-ms

KMSpico Portable/cert/kmscertW81/EmbeddedIndustry/EmbeddedIndustry-Volume-GVLK-1-ul-rtm.xrm-ms

KMSpico Portable/cert/kmscertW81/Enterprise/Enterprise-Volume-GVLK-1-ul-oob-rtm.xrm-ms

KMSpico Portable/cert/kmscertW81/Enterprise/Enterprise-Volume-GVLK-1-ul-rtm.xrm-ms

KMSpico Portable/cert/kmscertW81/Professional/Professional-Volume-GVLK-1-ul-oob-rtm.xrm-ms

KMSpico Portable/cert/kmscertW81/Professional/Professional-Volume-GVLK-1-ul-rtm.xrm-ms

KMSpico Portable/cert/kmscertW81/ProfessionalWMC/ProfessionalWMC-Volume-GVLK-1-ul-oob-rtm.xrm-ms

KMSpico Portable/cert/kmscertW81/ProfessionalWMC/ProfessionalWMC-Volume-GVLK-1-ul-rtm.xrm-ms

KMSpico Portable/cert/kmscertW81/ServerDatacenter/ServerDatacenter-Volume-GVLK-1-ul-oob-rtm.xrm-ms

KMSpico Portable/cert/kmscertW81/ServerDatacenter/ServerDatacenter-Volume-GVLK-1-ul-rtm.xrm-ms

KMSpico Portable/cert/kmscertW81/ServerStandard/ServerStandard-Volume-GVLK-1-ul-oob-rtm.xrm-ms

KMSpico Portable/cert/kmscertW81/ServerStandard/ServerStandard-Volume-GVLK-1-ul-rtm.xrm-ms

KMSpico Portable/cert/kmscertW81/pkeyconfig.xrm-ms

KMSpico Portable/driver/OpenVPN.cer

KMSpico Portable/driver/UnInstallDriver.cmd

KMSpico Portable/driver/tap-windows-9.21.0.exe

.exe windows:4 windows x86 arch:x86

Password: India@2023@@

7fa974366048f9c551ef45714595665e

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

03:39:14:24:ea:27:7b:64:5e:ee:9b:d7:c0:63:82:24
Certificate

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/08/2013, 00:00

Not After

02/09/2016, 12:00

Subject

CN=OpenVPN Technologies\, Inc.,O=OpenVPN Technologies\, Inc.,L=Pleasanton,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

4a:1c:cb:e7:60:c0:1f:fc:33:9a:7f:b3:12:14:88:9b:72:91:39:3c
Signer

Actual PE Digest

4a:1c:cb:e7:60:c0:1f:fc:33:9a:7f:b3:12:14:88:9b:72:91:39:3c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime

SearchPathA

GetShortPathNameA

GetFullPathNameA

MoveFileA

SetCurrentDirectoryA

GetFileAttributesA

GetLastError

CreateDirectoryA

SetFileAttributesA

Sleep

GetTickCount

GetFileSize

GetModuleFileNameA

GetCurrentProcess

CopyFileA

ExitProcess

GetWindowsDirectoryA

SetFileTime

GetCommandLineA

SetErrorMode

LoadLibraryA

lstrcpynA

GetDiskFreeSpaceA

GlobalUnlock

GlobalLock

CreateThread

CreateProcessA

RemoveDirectoryA

CreateFileA

GetTempFileNameA

lstrlenA

lstrcatA

GetSystemDirectoryA

GetVersion

CloseHandle

lstrcmpiA

lstrcmpA

ExpandEnvironmentStringsA

GlobalFree

GlobalAlloc

WaitForSingleObject

GetExitCodeProcess

GetModuleHandleA

LoadLibraryExA

GetProcAddress

FreeLibrary

MultiByteToWideChar

WritePrivateProfileStringA

GetPrivateProfileStringA

WriteFile

ReadFile

MulDiv

SetFilePointer

FindClose

FindNextFileA

FindFirstFileA

DeleteFileA

GetTempPathA

user32

EndDialog

ScreenToClient

GetWindowRect

EnableMenuItem

GetSystemMenu

SetClassLongA

IsWindowEnabled

SetWindowPos

GetSysColor

GetWindowLongA

SetCursor

LoadCursorA

CheckDlgButton

GetMessagePos

LoadBitmapA

CallWindowProcA

IsWindowVisible

CloseClipboard

SetClipboardData

EmptyClipboard

RegisterClassA

TrackPopupMenu

AppendMenuA

CreatePopupMenu

GetSystemMetrics

SetDlgItemTextA

GetDlgItemTextA

MessageBoxIndirectA

CharPrevA

DispatchMessageA

PeekMessageA

DestroyWindow

CreateDialogParamA

SetTimer

SetWindowTextA

PostQuitMessage

SetForegroundWindow

wsprintfA

SendMessageTimeoutA

FindWindowExA

SystemParametersInfoA

CreateWindowExA

GetClassInfoA

DialogBoxParamA

CharNextA

OpenClipboard

ExitWindowsEx

IsWindow

GetDlgItem

SetWindowLongA

LoadImageA

GetDC

EnableWindow

InvalidateRect

SendMessageA

DefWindowProcA

BeginPaint

GetClientRect

FillRect

DrawTextA

EndPaint

ShowWindow

gdi32

SetBkColor

GetDeviceCaps

DeleteObject

CreateBrushIndirect

CreateFontIndirectA

SetBkMode

SetTextColor

SelectObject

shell32

SHGetPathFromIDListA

SHBrowseForFolderA

SHGetFileInfoA

ShellExecuteA

SHFileOperationA

SHGetSpecialFolderLocation

advapi32

RegQueryValueExA

RegSetValueExA

RegEnumKeyA

RegEnumValueA

RegOpenKeyExA

RegDeleteKeyA

RegDeleteValueA

RegCloseKey

RegCreateKeyExA

comctl32

ImageList_AddMasked

ImageList_Destroy

ord17

ImageList_Create

ole32

CoTaskMemFree

OleInitialize

OleUninitialize

CoCreateInstance

version

GetFileVersionInfoSizeA

GetFileVersionInfoA

VerQueryValueA

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

$PLUGINSDIR/InstallOptions.dll

.dll windows:4 windows x86 arch:x86

Password: India@2023@@

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA

GetCurrentDirectoryA

MultiByteToWideChar

GetPrivateProfileIntA

GlobalLock

GetModuleHandleA

lstrcmpiA

GetPrivateProfileStringA

lstrcatA

lstrcpynA

WritePrivateProfileStringA

lstrlenA

lstrcpyA

GlobalFree

GlobalUnlock

GlobalAlloc

user32

MapWindowPoints

GetDlgCtrlID

CloseClipboard

GetClipboardData

OpenClipboard

PtInRect

SetWindowRgn

LoadIconA

LoadImageA

SetWindowLongA

CreateWindowExA

MapDialogRect

SetWindowPos

GetWindowRect

CreateDialogParamA

ShowWindow

EnableMenuItem

GetSystemMenu

EnableWindow

GetDlgItem

DestroyIcon

DestroyWindow

DispatchMessageA

TranslateMessage

GetMessageA

IsDialogMessageA

LoadCursorA

SetCursor

DrawTextA

GetWindowLongA

DrawFocusRect

CallWindowProcA

PostMessageA

MessageBoxA

CharNextA

wsprintfA

GetWindowTextA

SetWindowTextA

SendMessageA

GetClientRect

gdi32

SetTextColor

CreateCompatibleDC

GetObjectA

GetDIBits

CreateRectRgn

CombineRgn

DeleteObject

SelectObject

shell32

SHBrowseForFolderA

SHGetDesktopFolder

SHGetPathFromIDListA

ShellExecuteA

comdlg32

GetOpenFileNameA

GetSaveFileNameA

CommDlgExtendedError

ole32

CoTaskMemFree

Exports

dialog

initDialog

show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

$PLUGINSDIR/System.dll

.dll windows:4 windows x86 arch:x86

Password: India@2023@@

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc

GlobalFree

GlobalSize

GetLastError

lstrcpyA

lstrcpynA

FreeLibrary

lstrcatA

GetProcAddress

LoadLibraryA

GetModuleHandleA

MultiByteToWideChar

lstrlenA

WideCharToMultiByte

VirtualAlloc

VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2

CLSIDFromString

Exports

Alloc

Call

Copy

Free

Get

Int64Op

Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

$PLUGINSDIR/ioSpecial.ini

$PLUGINSDIR/modern-header.bmp

$PLUGINSDIR/modern-wizard.bmp

bin/devcon.exe

.exe windows:6 windows x64 arch:x64

ce4a5cfcfb0452b87e013f07f4d59f9c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\users\administrator\documents\tap-windows6-mattock3\devcon\objfre_wlh_amd64\amd64\devcon.pdb

Imports

advapi32

OpenProcessToken

RegQueryValueExW

LookupPrivilegeValueW

AdjustTokenPrivileges

InitiateSystemShutdownExW

RegCloseKey

CloseServiceHandle

OpenSCManagerW

OpenServiceW

RegDeleteValueW

RegSetValueExW

kernel32

GetCurrentProcess

FormatMessageW

lstrlenW

GetLastError

CloseHandle

LocalFree

GetDateFormatW

FreeLibrary

LoadLibraryW

FileTimeToSystemTime

GetProcAddress

GetFullPathNameW

FindFirstFileW

GetFileAttributesW

FindClose

FindNextFileW

GetWindowsDirectoryW

Sleep

TerminateProcess

GetSystemTimeAsFileTime

GetCurrentProcessId

GetCurrentThreadId

GetTickCount

QueryPerformanceCounter

GetModuleHandleW

SetUnhandledExceptionFilter

UnhandledExceptionFilter

msvcrt

wcschr

_wcsicmp

towlower

_wcsnicmp

fputs

__iob_func

wcsrchr

fputws

?terminate@@YAXXZ

memset

__set_app_type

_fmode

_commode

__setusermatherr

_amsg_exit

_initterm

exit

_cexit

_exit

_XcptFilter

__C_specific_handler

__wgetmainargs

wprintf

??2@YAPEAX_K@Z

towupper

??3@YAXPEAX@Z

iswalpha

ntdll

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

ole32

CLSIDFromString

setupapi

SetupScanFileQueueW

SetupDiGetClassDevsExW

SetupDiGetDeviceRegistryPropertyW

SetupDiSetClassInstallParamsW

SetupDiClassNameFromGuidExW

CM_Reenumerate_DevNode_Ex

SetupCopyOEMInfW

SetupDiSetDeviceRegistryPropertyW

SetupDiGetINFClassW

CM_Disconnect_Machine

SetupDiBuildClassInfoListExW

SetupDiCreateDeviceInfoW

SetupDiCreateDeviceInfoList

CM_Connect_MachineW

CM_Locate_DevNode_ExW

CM_Get_DevNode_Status_Ex

SetupDiBuildDriverInfoList

SetupDiGetDeviceInstallParamsW

SetupDiOpenDevRegKey

SetupDiSetSelectedDriverW

SetupGetStringFieldW

CM_Get_Res_Des_Data_Size_Ex

SetupDiEnumDriverInfoW

CM_Free_Log_Conf_Handle

CM_Get_Device_ID_ExW

CM_Get_Next_Res_Des_Ex

SetupCloseFileQueue

SetupDiGetDriverInstallParamsW

CM_Get_Res_Des_Data_Ex

SetupDiOpenClassRegKeyExW

SetupCloseInfFile

SetupOpenFileQueue

SetupDiCallClassInstaller

SetupDiDestroyDriverInfoList

SetupOpenInfFileW

CM_Free_Res_Des_Handle

CM_Get_First_Log_Conf_Ex

SetupDiSetDeviceInstallParamsW

SetupFindFirstLineW

SetupDiGetDriverInfoDetailW

SetupDiGetClassDescriptionExW

SetupDiClassGuidsFromNameExW

SetupDiOpenDeviceInfoW

SetupDiGetDeviceInfoListDetailW

SetupDiCreateDeviceInfoListExW

SetupDiEnumDeviceInfo

SetupDiDestroyDeviceInfoList

user32

CharNextW

CharPrevW

LoadStringW

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

driver/OemVista.inf

driver/tap0901.cat

driver/tap0901.sys

.sys windows:6 windows x64 arch:x64

a13cebc938af36dab20cc614c6fb7e94

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\users\administrator\documents\tap-windows6-mattock3\src\amd64\tap0901.pdb

Imports

ntoskrnl.exe

KeBugCheckEx

IoCsqInitialize

IoCsqRemoveNextIrp

IoCsqInsertIrp

MmMapLockedPagesSpecifyCache

IofCompleteRequest

RtlAppendUnicodeStringToString

_vsnprintf

KeAcquireSpinLockRaiseToDpc

RtlFreeAnsiString

KeReleaseSpinLock

RtlUnicodeStringToAnsiString

__C_specific_handler

ndis.sys

NdisCloseConfiguration

NdisAllocateMemoryWithTag

NdisMSendNetBufferListsComplete

NdisAllocateNetBufferAndNetBufferList

NdisSetEvent

NdisAllocateMdl

NdisMIndicateReceiveNetBufferLists

NdisFreeMdl

NdisFreeNetBufferList

NdisRegisterDeviceEx

NdisMIndicateStatusEx

NdisDeregisterDeviceEx

NdisMSetMiniportAttributes

NdisOpenConfigurationEx

NdisReadConfiguration

NdisMRegisterMiniportDriver

NdisMDeregisterMiniportDriver

NdisInitializeReadWriteLock

NdisFreeNetBufferListPool

NdisAllocateMemoryWithTagPriority

NdisInitializeEvent

NdisAcquireReadWriteLock

NdisResetEvent

NdisReleaseReadWriteLock

NdisFreeMemory

NdisAllocateNetBufferListPool

NdisWaitEvent

NdisGetSystemUpTimeEx

NdisGetDataBuffer

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

PAGE
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

KMSpico Portable/sounds/affirmative.mp3

KMSpico Portable/sounds/begin.mp3

KMSpico Portable/sounds/complete.mp3

KMSpico Portable/sounds/diagnostic.mp3

KMSpico Portable/sounds/enterauthorizationcode.mp3

KMSpico Portable/sounds/incomingtransmission.mp3

KMSpico Portable/sounds/inputfailed.mp3

KMSpico Portable/sounds/inputok.mp3

KMSpico Portable/sounds/processing.mp3

KMSpico Portable/sounds/transfer.mp3

KMSpico Portable/sounds/verified.mp3

KMSpico Portable/sounds/warning.mp3

manifest.json

Sharing

General

Malware Config

Signatures

Files

Password: India@2023@@

Password: India@2023@@

Password: India@2023@@

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

34:36:ac:a3:85:b4:8f:21:ad:93:fe:c6:01:50:d3:64Certificate

Extended Key Usages

Key Usages

24:e9:45:5d:14:ff:a2:a6:48:fd:48:50:81:db:61:6cCertificate

Key Usages

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

24:a8:33:49:f8:41:a9:6a:3e:d4:36:56:a4:71:83:c7:7d:53:55:d2Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 719KB - Virtual size: 718KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 512B - Virtual size: 12B

Password: India@2023@@

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.textxc Size: 5.2MB - Virtual size: 5.2MB

.datax Size: 4KB - Virtual size: 2KB

.idata Size: 4KB - Virtual size: 86B

.reloc Size: 4KB - Virtual size: 12B

.rsrc Size: 4KB - Virtual size: 1KB

Password: India@2023@@

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

34:36:ac:a3:85:b4:8f:21:ad:93:fe:c6:01:50:d3:64Certificate

Extended Key Usages

Key Usages

24:e9:45:5d:14:ff:a2:a6:48:fd:48:50:81:db:61:6cCertificate

Key Usages

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

44:48:f0:8d:c9:63:f8:df:40:5c:35:eb:71:9b:24:12:5e:6b:ca:12Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 896KB - Virtual size: 895KB

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 512B - Virtual size: 12B

Password: India@2023@@

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 76KB - Virtual size: 73KB

.rsrc Size: 4KB - Virtual size: 1008B

.reloc Size: 4KB - Virtual size: 12B

34:36:ac:a3:85:b4:8f:21:ad:93:fe:c6:01:50:d3:64
Certificate

24:e9:45:5d:14:ff:a2:a6:48:fd:48:50:81:db:61:6c
Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

24:a8:33:49:f8:41:a9:6a:3e:d4:36:56:a4:71:83:c7:7d:53:55:d2
Signer

.text
Size: 719KB - Virtual size: 718KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 12B

.textxc
Size: 5.2MB - Virtual size: 5.2MB

.datax
Size: 4KB - Virtual size: 2KB

.idata
Size: 4KB - Virtual size: 86B

.reloc
Size: 4KB - Virtual size: 12B

.rsrc
Size: 4KB - Virtual size: 1KB

34:36:ac:a3:85:b4:8f:21:ad:93:fe:c6:01:50:d3:64
Certificate

24:e9:45:5d:14:ff:a2:a6:48:fd:48:50:81:db:61:6c
Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

44:48:f0:8d:c9:63:f8:df:40:5c:35:eb:71:9b:24:12:5e:6b:ca:12
Signer

.text
Size: 896KB - Virtual size: 895KB

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 76KB - Virtual size: 73KB

.rsrc
Size: 4KB - Virtual size: 1008B

.reloc
Size: 4KB - Virtual size: 12B

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

61:20:4d:b4:00:00:00:00:00:27
Certificate

03:39:14:24:ea:27:7b:64:5e:ee:9b:d7:c0:63:82:24
Certificate

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f
Certificate

4a:1c:cb:e7:60:c0:1f:fc:33:9a:7f:b3:12:14:88:9b:72:91:39:3c
Signer

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 107KB

.ndata
Size: - Virtual size: 44KB

.rsrc
Size: 27KB - Virtual size: 27KB

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 1024B - Virtual size: 784B

.data
Size: 512B - Virtual size: 100B

.reloc
Size: 1024B - Virtual size: 520B