Multi-OEM/Retail Project {MRP} - Mk3

Discussion in 'MDL Projects and Applications' started by mxman2k, Oct 15, 2016.

  1. Applegame12345

    Applegame12345 MDL Member

    Mar 13, 2016
    167
    149
    10
    I hope so. Thanks for your help!
     
  2. mxman2k

    mxman2k MDL Developer

    Jun 20, 2007
    6,324
    21,065
    210
    Query Tool v95.0 has been uploaded, 2nd post download link, password and hashes updated. :)

    + Fixed a strange bug with Enterprise/Education etc Editions that are KMS capable which may show the KMS data by mistake when no valid key, (or the default OS key), was used.

    + Reduced System Tray/Taskbar flickering by 98% during running of the Query Tool.

    + Fixed rare 'hang' in certain scenarios.

    + Extra Meltdown/Spectre data, depends on the OS's registry status, if available then you may see the CVE/Retpoline etc data. Most is done via Windows Updates and may not show anything on this line.

    + Code tidy up and some new rewording on results.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. mxman2k

    mxman2k MDL Developer

    Jun 20, 2007
    6,324
    21,065
    210
    yes, ie:

    OS Protection Status {REG} : CVE-2017-5715 {Spectre v2}, CVE-2017-5754 {Meltdown}.

    As i set the registry ages ago when the whole Meltdown/Spectre fiasco started. So i now show anything for that part. It will only show if the user has set the 'FeatureSettingsOverride' and 'FeatureSettingsOverrideMask' parts in the registry, even for Retpoline. :)

    Windows Updates now contain the microcodes etc and not use the registry as such.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. Carlos Detweiller

    Carlos Detweiller Emperor of Ice-Cream

    Dec 21, 2012
    6,771
    7,713
    210
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. mxman2k

    mxman2k MDL Developer

    Jun 20, 2007
    6,324
    21,065
    210
    #5047 mxman2k, Jun 4, 2019
    Last edited: Jun 5, 2019
    (OP)
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  6. whatever127

    whatever127 MDL PHP Wizard

    Nov 9, 2012
    1,050
    7,357
    60
    Not possible. All leaks were removed by Microsoft from the servers.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  7. mxman2k

    mxman2k MDL Developer

    Jun 20, 2007
    6,324
    21,065
    210
    Have updated my post above with some new information.

    Hopefully this will make things a bit clearer on some aspects of the QT's results. :)
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  8. Carlos Detweiller

    Carlos Detweiller Emperor of Ice-Cream

    Dec 21, 2012
    6,771
    7,713
    210
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  9. mxman2k

    mxman2k MDL Developer

    Jun 20, 2007
    6,324
    21,065
    210
    I will show the first three numbers of the MAC and the very last (6th) number. It's just to mask the whole MAC address to prevent any possible 'spoofing' etc, as it will take a lot of effort to work out the other numbers shown as xx - unless someone is very determined and have a lot of spare time. :D

    As for MAK key section, i will look into it more, but for now will leave it as i have re-written until i get more time to work out a plan of action later.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  10. Carlos Detweiller

    Carlos Detweiller Emperor of Ice-Cream

    Dec 21, 2012
    6,771
    7,713
    210
    There is no rhyme or reason for the last three numbers of the MAC, they simply are issued to devices serially. I have devices (Fritz!Box etc.) that use multiple successive MACs at once. Showing the first three is fine with me; I'm not interested in spoofing, however, knowing the manufacturer of the NIC hardware is useful information.

    As for MAK (MAC, MAK, ha!), no need to rush. Just wanted to point out that the stored pkey in Registry is an unreliable source of information. One can use WMIC for getting the channel used.

    Code:
    WMIC PATH SoftwareLicensingProduct WHERE (Name LIKE 'Windows%%' AND PartialProductKey is not NULL) GET Description /VALUE
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  11. mxman2k

    mxman2k MDL Developer

    Jun 20, 2007
    6,324
    21,065
    210
    The channel ID is present in the QT ;)

    #14 License Status : Licensed [Retail/HWID] {0x4004F401}

    That uses the WMIC method and then the QT parses other parts for KMS/HWID/Key etc from that.

    We know WMIC is not 100% reliable and some of the results can be a bit ambiguous at best!
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  12. Carlos Detweiller

    Carlos Detweiller Emperor of Ice-Cream

    Dec 21, 2012
    6,771
    7,713
    210
    Check my report, nothing about channel:

    Code:
     #14 License Status    : Licensed {0x00000000}
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  13. mxman2k

    mxman2k MDL Developer

    Jun 20, 2007
    6,324
    21,065
    210
    Hopefully get that sorted for next release :)
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  14. Dubioza Kolektiv

    Dubioza Kolektiv MDL Addicted

    Dec 27, 2012
    870
    1,470
    30
  15. mxman2k

    mxman2k MDL Developer

    Jun 20, 2007
    6,324
    21,065
    210
    @coleoptere2007 , you posted the text from the display version :p - luckily you edited the MSDM key.

    On your desktop should of been a saved version with all keys and other certain data masked or not shown which is safe to post as it is.

    Also a QT-MSDM txt file as your computer has the bios information - never post that file as it for your, (the user's), reference only.

    It's odd that it has a MSDM with no name, but saying that i have a ASUS desktop board that has a W10 Core MSDM which activates but the name is ALASKA :g: The name part is not important what matters is if it activates. :D
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  16. coleoptere2007

    coleoptere2007 MDL Guru

    Apr 8, 2008
    3,302
    1,936
    120
    Corrected with desktop file :p