https://i.imgur.com/dsG1MGs.png
Spoiler. My solution: task manager take memory dump of activate.exe. Next find in him near some words: KL321nt0, KSTmzuHV^w&t5G8I1Guz, KL321, nt0. It is maybe hashmap... And find near some base64 string, this is a encoded key storage in memory. Decoded him with my decoder (created based on decompiled sources) (https://pastebin.com/n9PpLKZP) |
==> |