Table of Contents
Lost Product key PID from hard drive
From: http://www.howtogeek.com/206329/how-to-find-your-lost-windows-or-office-product-keys/
The easiest way to get access to your product key is with a third-party utility, and there’s nobody better at those than NirSoft. Their utilities are always crapware-free, and are always really useful. The only issue with this particular utility is that some antivirus will detect it as a false positive, because some malware might try to steal your product key.
Ultimate PID Checker Determine valid PID validity check
From: http://janek2012.eu/ultimate-pid-checker/
The Ultimate PID Checker is a compact and portable utility whose purpose is to verify the integrity of Windows serial numbers. You can use this tool if you are planning to reinstall your operating system, for instance, and are unsure of the current product key you have at hand. http://www.softpedia.com/get/System/System-Info/The-Ultimate-PID-Checker.shtml
what version of Windows is installed on a hard drive
windows version
Look in the ../Windows/System32 folder for a file called "ntoskrnl.exe". If this file exists, it is at least an NT based system. (I assume you are not looking for Win95 or earlier.) Now do a properties and examine the details for a product version. 4.x: NT 4.x 5.0: Windows 2000 5.1: Windows XP 5.2: Windows 2003 Server or Windows XP-64-bit 6.0: Windows Vista 6.1: Windows 7 6.2; Windows 8 6.3: Windows 8.1 This does not however tell you which flavor of those systems (Pro, Home, etc). On one deviceI see 6.2.9200 so I can assume this is a Windows 8 disk. 2: Or, to make it even easier, you can open the file ../Windows/System32/license.rtf with Word pad. Guess what, it tells you EXACTLY what system is installed. On that same drive above, this file said "WINDOWS 8 PRO"
Arun Kumar, studied at University of Delhi Answered May 23, 2015 You can try ProduKey (Page on cnet.com), it also shows the current version of installed Widows OS as well as MS Office and also shows the keys of installed programs. Similar tools can be found here: 27 Best Free Product Key Finder Software For Windows
Also: https://blog.skullsecurity.org/2010/find-the-windows-version-offline
Step 1: Get the registry hive This step is pretty simple. The file is called software and is located in %SYSTEMROOT%\system32\config. You're going to have problems if you try grabbing this file from a running system, but fortunately we have an offline version of the harddrive. Copy that file to a USB stick, or some other device, following your standard evidence collection policies. I also recommend working from an image, not the live drive, if you're doing actual forensic work.
FREE Microsoft eBooks
I’m giving away MILLIONS of FREE Microsoft eBooks again! Including: Windows 10, Windows 8.1, Windows 8, Windows 7, Office 2013, Office 365, SharePoint 2013, Dynamics CRM, PowerShell, Exchange Server, Lync 2013, System Center, Azure, Cloud, SQL Server, and
Windows 7 for XP Professionals: Essential Planning and Support for the IT Pro
Web Services enable clients on noncorporate networksto locate resources such as shared folders and printers on the network.
WSD discovery method multicast discovery protocol
In Windows Server 2008, FDP (Function Discovery providers) uses various providers to enumerate discoverable resources. The built-in providers are NetBIOS, PnP, Registry, SSDP, WCN and WSD.
Provider Description NetBIOS provider The NetBIOS provider enumerates NetBIOS discoverable devices using the WNet functions. Plug and Play (PnP) provider The PnP provider constructs a function instance for each functional device object (FDO) installed on the system. The PnP provider also discovers network connected devices (NCD) that have been associated with the system through the PnP-X architecture. Registry provider The registry provider persists function instances based on resources registered through the system registry. SSDP provider The Simple Service Discovery Protocol (SSDP) provider provides Function Discovery with information regarding the presence of SSDP devices on the network. The SSDP provider discovers devices on the local subnet and, optionally, any other discoverable devices or local network resources. WS-Discovery (WSD) provider The Function Discovery WS-Discovery provider provides Function Discovery with information regarding the presence of Web services devices on the network. The WS-Discovery provider discovers devices across subnets. WCN provider The Windows Connect Now provider.
Download Center
From: http://www.microsoft.com/en-us/download/confirmation.aspx?id=29887
Popular downloads