24:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/136wug8odqdqr.js"],"SampleDetailWrapper"] 4d:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T41f,{"@context":"https://schema.org","@type":"TechArticle","headline":"Sample 046f5669b747… — Score 0/100 — Hybrid Analysis","description":"Threat analysis for sample 046f5669b747…. Threat score 0/100. 0/24 AV engines flagged this file. 0 malicious and 13 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704","keywords":["malware analysis","sandbox report","threat intelligence","046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704"],"about":{"@type":"SoftwareApplication","name":"046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704","applicationCategory":["peexe","64bits","executable"],"identifier":"046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704"},"threatScore":0,"antivirusDetections":{"malicious":0,"total":24},"behavioralIndicators":{"malicious":0,"suspicious":13},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:Ta4c,Found string "enable-name-compression" (Source: "00000000-00006760.00000000.100022.79E80000.00000004.mdmp") Found string "unsupported Zip compression method" (Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found string "Sorry, requested compression method is not configured" (Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found string "%s compression support is not configured" (Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found string "PixarLog compression can't handle bits depth/data format combination (depth: %d)" (Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found string "PixarLog compression can't handle %d bit linear encodings" (Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found string "SGILog compression cannot handle non-contiguous data" (Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found string "Inappropriate photometric interpretation %d for SGILog compression; %s" (Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found string "SGILog compression supported only for %s, or raw data" (Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found string "Unknown data format %d for LogLuv compression" (Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found string "Unknown encoding %d for LogLuv compression" (Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found string "text compression mode is out of range" (Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found string "invalid compression buffer size" (Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found string "Unknown compression method in IHDR" (Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found string "bad compression method" (Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found string "unknown compression type" (Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found string "bad compression info" (Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found string "Invalid compression type specified" (Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found string "zTXt: invalid compression type" (Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found string "iTXt: invalid compression" (Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found string "unknown compression method" (Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp")26:Tb6f,Found reference to API "WaitForSingleObjectEx" (Indicator: "WaitForSingleObject"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WaitForSingleObjectEx" (Indicator: "WaitForSingleObjectEx"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "QueryPerformanceCounter" (Indicator: "QueryPerformanceCounter"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "GetSystemTimeAsFileTime" (Indicator: "GetSystemTimeAsFileTime"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WaitForMultipleObjects" (Indicator: "WaitForMultipleObjects"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "QueryPerformanceFrequency" (Indicator: "QueryPerformanceFrequency"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WaitForSingleObject" (Indicator: "WaitForSingleObject"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "MsgWaitForMultipleObjects" (Indicator: "WaitForMultipleObjects"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "SetTimer" (Indicator: "SetTimer"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "GetTickCount64" (Indicator: "GetTickCount64"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "QueryPerformanceCounter" (Indicator: "QueryPerformanceCounter"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "QueryPerformanceFrequency" (Indicator: "QueryPerformanceFrequency"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "WaitForSingleObject" (Indicator: "WaitForSingleObject"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "WaitForMultipleObjects" (Indicator: "WaitForMultipleObjects"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "GetSystemTimeAsFileTime" (Indicator: "GetSystemTimeAsFileTime"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "MsgWaitForMultipleObjects" (Indicator: "WaitForMultipleObjects"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "SetTimer" (Indicator: "SetTimer"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "WaitForSingleObjectEx" (Indicator: "WaitForSingleObject"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "WaitForSingleObjectEx" (Indicator: "WaitForSingleObjectEx"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp")27:T4f8,Found reference to API "FreeLibraryAndExitThread" (Indicator: "FreeLibrary"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "LoadLibraryW" (Indicator: "LoadLibrary"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "FreeLibrary" (Indicator: "FreeLibrary"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "LoadLibraryExW" (Indicator: "LoadLibrary"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "FreeLibraryWhenCallbackReturns" (Indicator: "FreeLibrary"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "FreeLibrary" (Indicator: "FreeLibrary"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "LoadLibraryExW" (Indicator: "LoadLibrary"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "LoadLibraryW" (Indicator: "LoadLibrary"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "FreeLibraryAndExitThread" (Indicator: "FreeLibrary"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp")28:T221c,Assembly shows XOR instruction xor rax rsp in Stream UID: 6855-325-0000000140349360 Assembly shows XOR instruction xor eax esp in Stream UID: 6855-325-0000000140349360 Assembly shows XOR instruction xor rcx rsp in Stream UID: 6855-325-0000000140349360 Assembly shows XOR instruction xor ecx esp in Stream UID: 6855-325-0000000140349360 Assembly shows XOR instruction xor rax rsp in Stream UID: 6855-8189-000000014022C580 Assembly shows XOR instruction xor eax esp in Stream UID: 6855-8189-000000014022C580 Assembly shows XOR instruction xor rcx rsp in Stream UID: 6855-8189-000000014022C580 Assembly shows XOR instruction xor ecx esp in Stream UID: 6855-8189-000000014022C580 Assembly shows XOR instruction xor rax rsp in Stream UID: 6855-8770-0000000140469DF0 Assembly shows XOR instruction xor eax esp in Stream UID: 6855-8770-0000000140469DF0 Assembly shows XOR instruction xor rcx rsp in Stream UID: 6855-8770-0000000140469DF0 Assembly shows XOR instruction xor ecx esp in Stream UID: 6855-8770-0000000140469DF0 Assembly shows XOR instruction xor rax rsp in Stream UID: 6855-8772-0000000140469B80 Assembly shows XOR instruction xor eax esp in Stream UID: 6855-8772-0000000140469B80 Assembly shows XOR instruction xor rcx rsp in Stream UID: 6855-8772-0000000140469B80 Assembly shows XOR instruction xor ecx esp in Stream UID: 6855-8772-0000000140469B80 Assembly shows XOR instruction xor rax rsp in Stream UID: 6855-8774-000000014046A070 Assembly shows XOR instruction xor eax esp in Stream UID: 6855-8774-000000014046A070 Assembly shows XOR instruction xor rcx rsp in Stream UID: 6855-8774-000000014046A070 Assembly shows XOR instruction xor ecx esp in Stream UID: 6855-8774-000000014046A070 Assembly shows XOR instruction xor rax rsp in Stream UID: 6855-8782-0000000140469060 Assembly shows XOR instruction xor eax esp in Stream UID: 6855-8782-0000000140469060 Assembly shows XOR instruction xor rcx rsp in Stream UID: 6855-8782-0000000140469060 Assembly shows XOR instruction xor ecx esp in Stream UID: 6855-8782-0000000140469060 Assembly shows XOR instruction xor rax rsp in Stream UID: 6855-9408-00000001403BE6F0 Assembly shows XOR instruction xor eax esp in Stream UID: 6855-9408-00000001403BE6F0 Assembly shows XOR instruction xor rcx rsp in Stream UID: 6855-9408-00000001403BE6F0 Assembly shows XOR instruction xor ecx esp in Stream UID: 6855-9408-00000001403BE6F0 Assembly shows XOR instruction xor rax rsp in Stream UID: 6855-9566-0000000140395130 Assembly shows XOR instruction xor eax esp in Stream UID: 6855-9566-0000000140395130 Assembly shows XOR instruction xor rcx rsp in Stream UID: 6855-9566-0000000140395130 Assembly shows XOR instruction xor ecx esp in Stream UID: 6855-9566-0000000140395130 Assembly shows XOR instruction xor rax rsp in Stream UID: 6855-9567-0000000140390E20 Assembly shows XOR instruction xor eax esp in Stream UID: 6855-9567-0000000140390E20 Assembly shows XOR instruction xor rcx rsp in Stream UID: 6855-9567-0000000140390E20 Assembly shows XOR instruction xor ecx esp in Stream UID: 6855-9567-0000000140390E20 Assembly shows XOR instruction xor rax rsp in Stream UID: 6855-9597-000000014037C170 Assembly shows XOR instruction xor eax esp in Stream UID: 6855-9597-000000014037C170 Assembly shows XOR instruction xor rcx rsp in Stream UID: 6855-9597-000000014037C170 Assembly shows XOR instruction xor ecx esp in Stream UID: 6855-9597-000000014037C170 Assembly shows XOR instruction xor rax rsp in Stream UID: 6855-9848-00000001403481F0 Assembly shows XOR instruction xor eax esp in Stream UID: 6855-9848-00000001403481F0 Assembly shows XOR instruction xor rcx rsp in Stream UID: 6855-9848-00000001403481F0 Assembly shows XOR instruction xor ecx esp in Stream UID: 6855-9848-00000001403481F0 Assembly shows XOR instruction xor rax rsp in Stream UID: 6855-9849-0000000140347930 Assembly shows XOR instruction xor eax esp in Stream UID: 6855-9849-0000000140347930 Assembly shows XOR instruction xor rcx rsp in Stream UID: 6855-9849-0000000140347930 Assembly shows XOR instruction xor ecx esp in Stream UID: 6855-9849-0000000140347930 Assembly shows XOR instruction xor rax rsp in Stream UID: 6855-9850-00000001403468E0 Assembly shows XOR instruction xor eax esp in Stream UID: 6855-9850-00000001403468E0 Assembly shows XOR instruction xor rcx rsp in Stream UID: 6855-9850-00000001403468E0 Assembly shows XOR instruction xor ecx esp in Stream UID: 6855-9850-00000001403468E0 Assembly shows XOR instruction xor rax rsp in Stream UID: 6855-9895-000000014032BDD0 Assembly shows XOR instruction xor eax esp in Stream UID: 6855-9895-000000014032BDD0 Assembly shows XOR instruction xor rcx rsp in Stream UID: 6855-9895-000000014032BDD0 Assembly shows XOR instruction xor ecx esp in Stream UID: 6855-9895-000000014032BDD0 Assembly shows XOR instruction xor rax rsp in Stream UID: 6855-9907-0000000140326270 Assembly shows XOR instruction xor eax esp in Stream UID: 6855-9907-0000000140326270 Assembly shows XOR instruction xor r8d 01h in Stream UID: 6855-9907-0000000140326270 Assembly shows XOR instruction xor eax 01h in Stream UID: 6855-9907-0000000140326270 Assembly shows XOR instruction xor rcx rsp in Stream UID: 6855-9907-0000000140326270 Assembly shows XOR instruction xor ecx esp in Stream UID: 6855-9907-0000000140326270 Assembly shows XOR instruction xor rax rsp in Stream UID: 6855-10055-0000000140287130 Assembly shows XOR instruction xor eax esp in Stream UID: 6855-10055-0000000140287130 Assembly shows XOR instruction xor rcx rsp in Stream UID: 6855-10055-0000000140287130 Assembly shows XOR instruction xor ecx esp in Stream UID: 6855-10055-0000000140287130 Assembly shows XOR instruction xor rax rsp in Stream UID: 6855-10058-0000000140285BE0 Assembly shows XOR instruction xor eax esp in Stream UID: 6855-10058-0000000140285BE0 Assembly shows XOR instruction xor rcx rsp in Stream UID: 6855-10058-0000000140285BE0 Assembly shows XOR instruction xor ecx esp in Stream UID: 6855-10058-0000000140285BE0 Assembly shows XOR instruction xor rax rsp in Stream UID: 6855-10060-00000001401EB7B0 Assembly shows XOR instruction xor eax esp in Stream UID: 6855-10060-00000001401EB7B0 Assembly shows XOR instruction xor rcx rsp in Stream UID: 6855-10060-00000001401EB7B0 Assembly shows XOR instruction xor ecx esp in Stream UID: 6855-10060-00000001401EB7B0 Assembly shows XOR instruction xor rax rsp in Stream UID: 6855-10090-000000014030D910 Assembly shows XOR instruction xor eax esp in Stream UID: 6855-10090-000000014030D910 Assembly shows XOR instruction xor rcx rsp in Stream UID: 6855-10090-000000014030D910 Assembly shows XOR instruction xor ecx esp in Stream UID: 6855-10090-000000014030D910 Assembly shows XOR instruction xor rax rsp in Stream UID: 6855-10113-000000014030AEC0 Assembly shows XOR instruction xor eax esp in Stream UID: 6855-10113-000000014030AEC0 Assembly shows XOR instruction xor rcx rsp in Stream UID: 6855-10113-000000014030AEC0 Assembly shows XOR instruction xor ecx esp in Stream UID: 6855-10113-000000014030AEC0 Assembly shows XOR instruction xor rax rsp in Stream UID: 6855-10117-000000014030AC60 Assembly shows XOR instruction xor eax esp in Stream UID: 6855-10117-000000014030AC60 Assembly shows XOR instruction xor rcx rsp in Stream UID: 6855-10117-000000014030AC60 Assembly shows XOR instruction xor ecx esp in Stream UID: 6855-10117-000000014030AC60 Assembly shows XOR instruction xor rax rsp in Stream UID: 6855-10118-0000000140276B40 Assembly shows XOR instruction xor eax esp in Stream UID: 6855-10118-0000000140276B40 Assembly shows XOR instruction xor rcx rsp in Stream UID: 6855-10118-0000000140276B40 Assembly shows XOR instruction xor ecx esp in Stream UID: 6855-10118-0000000140276B40 Assembly shows XOR instruction xor rax rsp in Stream UID: 6855-10119-0000000140276A80 Assembly shows XOR instruction xor eax esp in Stream UID: 6855-10119-0000000140276A80 Assembly shows XOR instruction xor rcx rsp in Stream UID: 6855-10119-0000000140276A80 Assembly shows XOR instruction xor ecx esp in Stream UID: 6855-10119-0000000140276A80 Assembly shows XOR instruction xor rax rsp in Stream UID: 6855-10121-000000014030A7E0 Assembly shows XOR instruction xor eax esp in Stream UID: 6855-10121-000000014030A7E0 Assembly shows XOR instruction xor rcx rsp in Stream UID: 6855-10121-000000014030A7E0 Assembly shows XOR instruction xor ecx esp in Stream UID: 6855-10121-000000014030A7E0 Assembly shows XOR instruction xor rax rsp in Stream UID: 6855-10145-00000001403031F0 Assembly shows XOR instruction xor eax esp in Stream UID: 6855-10145-00000001403031F029:T1d29,Found XOR loop in file "sample.bin" at offset 1320972; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 2655872; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 3801795; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 3801934; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 4999052; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 5355344; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 6076452; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 6261561; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 6731384; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 6937144; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 6937152; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 219097; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 900812; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 919589; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1463081; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1602022; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1602029; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1602291; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1602298; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1603158; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1603165; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1603429; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1603436; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1604326; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1604333; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1604597; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1604604; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1605414; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1605421; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1605685; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1605692; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1610266; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1610273; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1610502; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1610509; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1667169; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1667241; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1667293; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1667345; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1667397; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1667452; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1667504; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1667556; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1745761; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1746312; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1748279; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 2987389; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 3510135; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 3518292; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 3518311; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 4367771; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 4367812; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 4367852; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 4367893; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 4450485; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 4450813; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 4552407; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 4567452; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 4569916; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 4572143; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 4574947; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 4579187; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 4646332; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 4867774; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 4871455; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 89086; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 186994; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 671728; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1469675; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1528435; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1923103; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1923121; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1996165; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 2236816; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 2601780; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 2693022; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 2693035; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 2693071; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 2732420; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 3007452; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 3080513; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 3908204; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 5047980; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 5165760; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 5357368; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 5368280; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 5410088; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 5421816; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 5422032; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 5458784; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 5989066; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 6048211; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 6401181; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 6438475; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 6441973; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 6465772; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 6494332; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 6529973; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 6530852; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 6876900; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 6907500; code bytes = 80302a:T52b,Found reference to API "GetUserDefaultLCID" (Indicator: "GetUserDefaultLCID"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "EnumSystemLocalesW" (Indicator: "EnumSystemLocales"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "GetLocaleInfoW" (Indicator: "GetLocaleInfo"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "GetLocaleInfoEx" (Indicator: "GetLocaleInfo"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "EnumSystemLocalesEx" (Indicator: "EnumSystemLocales"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "GetUserDefaultLocaleName" (Indicator: "GetUserDefaultLocaleName"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "GetLocaleInfoW" (Indicator: "GetLocaleInfo"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "GetUserDefaultLCID" (Indicator: "GetUserDefaultLCID"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "EnumSystemLocalesW" (Indicator: "EnumSystemLocales"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp")2b:T424,Found system information discovery API: "GetNativeSystemInfo" in file "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704" Found system information discovery API: "ExpandEnvironmentStringsW" in file "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704" Found system information discovery API: "GetEnvironmentStringsW" in file "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704" Found system information discovery API: "GetMonitorInfoW" in file "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704" Found system information discovery API: "GetNativeSystemInfo" in "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp" Found system information discovery API: "ExpandEnvironmentStringsW" in "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp" Found system information discovery API: "GetMonitorInfoW" in "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp" Found system information discovery API: "GetEnvironmentStringsW" in "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp"2c:T5c2,Found reference to API "PostMessageW" (Indicator: "postmessage"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "EnumChildWindows" (Indicator: "enumchildwindows"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "FindWindowExW" (Indicator: "findwindow"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "SendMessageW" (Indicator: "sendmessage"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "an internal call to the PostMessage function has failed." (Indicator: "postmessage"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "an internal call to the PostMessage function has failed." (Indicator: "postmessage"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "SendMessageW" (Indicator: "sendmessage"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "EnumChildWindows" (Indicator: "enumchildwindows"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "PostMessageW" (Indicator: "postmessage"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "FindWindowExW" (Indicator: "findwindow"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp")2d:T80e,"046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "RtlGetVersion" with parameter 1c0100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "RtlGetVersion" with parameter 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 (UID: 00000000-00006760)2e:Tcd8,Found string "Set File Folder..." (Indicator: "set "; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found string "Set Generation..." (Indicator: "set "; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found string "Set Base Step..." (Indicator: "set "; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found string "Set Rule..." (Indicator: "set "; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found string "Set Scale 1:1" (Indicator: "set "; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found string "Set Scale 1:2" (Indicator: "set "; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found string "Set Scale 1:4" (Indicator: "set "; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found string "Set Scale 1:8" (Indicator: "set "; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found string "Set Scale 1:16" (Indicator: "set "; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found string "Set Scale 1:32" (Indicator: "set "; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found string "Set Layer Colors..." (Indicator: "set "; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found string "Set cursor:" (Indicator: "set "; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found string "Set scale:" (Indicator: "set "; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found string "Set Rule" (Indicator: "set "; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found string "set command has illegal x" (Indicator: "set "; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found string "set command has illegal y" (Indicator: "set "; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found string "set command requires coordinate pairs" (Indicator: "set "; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found string "set command has illegal coordinates" (Indicator: "set "; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found string "set location of specified directory" (Indicator: "set "; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found string "set given cell to given state" (Indicator: "set "; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found string "set cursor (returns old cursor)" (Indicator: "set "; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found string "set step exponent" (Indicator: "set "; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found string "set base step" (Indicator: "set "; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found string "set current generation to given string" (Indicator: "set "; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found string "set current algorithm using given string" (Indicator: "set "; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704")2f:T470,Found reference to API "GetWindowTextLengthW" (Indicator: "GetWindowText"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "FindWindowExW" (Indicator: "FindWindow"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "GetActiveWindow" (Indicator: "GetActiveWindow"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "GetWindowTextW" (Indicator: "GetWindowText"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "GetWindowTextW" (Indicator: "GetWindowText"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "GetWindowTextLengthW" (Indicator: "GetWindowText"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "GetActiveWindow" (Indicator: "GetActiveWindow"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "FindWindowExW" (Indicator: "FindWindow"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp")30:Tb9c,"046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "LoadLibrary" with a parameter api-ms-win-core-string-l1-1-0 (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "LoadLibrary" with a parameter api-ms-win-core-datetime-l1-1-1 (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-obsolete-l1-2-0 (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "LoadLibrary" with a parameter api-ms-win-core-sysinfo-l1-2-1 (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "LoadLibrary" with a parameter ntdll.dll (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "LoadLibrary" with a parameter user32.dll (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "LoadLibrary" with a parameter shell32.dll (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "LoadLibrary" with a parameter mpr.dll (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "LoadLibrary" with a parameter gdi32 (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-2 (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "LoadLibrary" with a parameter vm3dgl64.dll (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "LoadLibrary" with a parameter vm3dglhelper64.dll (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "LoadLibrary" with a parameter kernel32.dll (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "LoadLibrary" with a parameter gdi32.dll (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "LoadLibrary" with a parameter api-ms-win-appmodel-runtime-l1-1-2 (UID: 00000000-00006760)31:T5c0d,"046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter RtlGetVersion (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter CoCreateInstance (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter CoCreateInstanceEx (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter CoGetClassObject (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter CoGetInstanceFromFile (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter CoGetInstanceFromIStorage (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter FlsGetValue (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter InitializeCriticalSectionEx (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter FlsAlloc (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter FlsSetValue (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter LCMapStringEx (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter AreFileApisANSI (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter FlsFree (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter InitOnceExecuteOnce (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter CreateEventExW (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter CreateSemaphoreW (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter CreateSemaphoreExW (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter CreateThreadpoolTimer (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter SetThreadpoolTimer (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter WaitForThreadpoolTimerCallbacks (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter CloseThreadpoolTimer (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter CreateThreadpoolWait (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter SetThreadpoolWait (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter CloseThreadpoolWait (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter FlushProcessWriteBuffers (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter FreeLibraryWhenCallbackReturns (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter GetCurrentProcessorNumber (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter CreateSymbolicLinkW (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter GetCurrentPackageId (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter GetTickCount64 (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter GetFileInformationByHandleEx (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter SetFileInformationByHandle (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter GetSystemTimePreciseAsFileTime (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter InitializeConditionVariable (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter WakeConditionVariable (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter WakeAllConditionVariable (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter SleepConditionVariableCS (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter InitializeSRWLock (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter AcquireSRWLockExclusive (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter TryAcquireSRWLockExclusive (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter ReleaseSRWLockExclusive (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter SleepConditionVariableSRW (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter CreateThreadpoolWork (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter SubmitThreadpoolWork (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter CloseThreadpoolWork (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter CompareStringEx (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter GetLocaleInfoEx (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter EnumSystemLocalesEx (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter GetDateFormatEx (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter GetTimeFormatEx (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter GetUserDefaultLocaleName (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter IsValidLocaleName (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter LCIDToLocaleName (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter LocaleNameToLCID (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter GetDpiForWindow (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter GetWindowDpiAwarenessContext (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter AreDpiAwarenessContextsEqual (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter ChangeWindowMessageFilter (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter GetSystemMetricsForDpi (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter SystemParametersInfoForDpi (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter SHGetStockIconInfo (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter WNetOpenEnumW (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter WNetEnumResourceW (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter WNetCloseEnum (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTOpenAdapterFromHdc (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTQueryAdapterInfo (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTCloseAdapter (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter FlsGetValue2 (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter GetTempPath2W (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter IsWow64Process (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter DrvValidateVersion (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter DrvSetCallbackProcs (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter DrvCreateContext (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter DrvDeleteContext (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter DrvSetContext (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter DrvReleaseContext (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter DrvCopyContext (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter DrvCreateLayerContext (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter DrvShareLists (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter DrvGetProcAddress (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter DrvDescribeLayerPlane (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter DrvSetLayerPaletteEntries (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter DrvGetLayerPaletteEntries (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter DrvRealizeLayerPalette (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter DrvSwapLayerBuffers (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter DrvSwapMultipleBuffers (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter DrvDescribePixelFormat (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter DrvSetPixelFormat (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter DrvSwapBuffers (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter DrvPresentBuffers (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter VM3DGLHelperInit (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter VM3DGLHelperCleanup (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter VM3DGLHelperGetDevCapMaxCount (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter IsWow64Process2 (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter VM3DGLHelperSetLogLevels (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter VM3DGLHelperLog (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTCreateAllocation (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTDestroyAllocation (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTSetAllocationPriority (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTQueryAllocationResidency (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTQueryResourceInfo (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTOpenResource (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTCreateDevice (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTDestroyDevice (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTLock (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTUnlock (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTGetDisplayModeList (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTSetDisplayMode (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTGetMultisampleMethodList (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTPresent (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTRender (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTOpenAdapterFromDeviceName (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTGetSharedPrimaryHandle (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTEscape (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTSetVidPnSourceOwner (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTCreateOverlay (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTUpdateOverlay (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTFlipOverlay (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTDestroyOverlay (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTWaitForVerticalBlankEvent (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTSetGammaRamp (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTGetDeviceState (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTCreateDCFromMemory (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTDestroyDCFromMemory (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTSetContextSchedulingPriority (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTGetContextSchedulingPriority (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTSetProcessSchedulingPriorityClass (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTGetProcessSchedulingPriorityClass (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTReleaseProcessVidPnSourceOwners (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTGetScanLine (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTPollDisplayChildren (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTSetQueuedLimit (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTInvalidateActiveVidPn (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTCheckOcclusion (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTCreateContext (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTDestroyContext (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTCreateSynchronizationObject (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTDestroySynchronizationObject (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTWaitForSynchronizationObject (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTSignalSynchronizationObject (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTCheckMonitorPowerState (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTOpenAdapterFromGdiDisplayName (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTCheckExclusiveOwnership (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTSetDisplayPrivateDriverFormat (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTSharedPrimaryLockNotification (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter D3DKMTSharedPrimaryUnLockNotification (UID: 00000000-00006760) "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" called "GetProcAddress" with a parameter AppPolicyGetThreadInitializationType (UID: 00000000-00006760)32:T172a2,Found reference to API (Indicator: "RegEnumKeyW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "RegSetValueExW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetUserNameW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "RegOpenKeyExW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "RegDeleteKeyW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "RegCloseKey"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "RegDeleteValueW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "RegQueryValueExW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "RegCreateKeyExW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "RegEnumValueW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetSaveFileNameW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetOpenFileNameW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetDeviceCaps"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "CreateFontIndirectW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "CreateCompatibleBitmap"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "DeleteObject"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "RoundRect"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SelectObject"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "DeleteDC"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetStretchBltMode"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "CreateSolidBrush"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "DPtoLP"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "CreateCompatibleDC"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetBkColor"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetStockObject"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetDIBits"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetObjectW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "BitBlt"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "CreatePatternBrush"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "StretchBlt"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetMapMode"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "WriteConsoleW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "IsDebuggerPresent"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GlobalUnlock"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "FreeLibraryAndExitThread"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetCurrentProcessId"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetEnvironmentVariableW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetModuleFileNameW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetNativeSystemInfo"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetConsoleCursorPosition"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "LoadLibraryW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetStringTypeW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetExitCodeProcess"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "IsValidLocale"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetFilePointerEx"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetDateFormatW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "MultiByteToWideChar"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "PeekNamedPipe"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "DeleteCriticalSection"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "RaiseException"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "TlsFree"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "DecodePointer"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GlobalFree"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetHandleInformation"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "RtlVirtualUnwind"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "RtlLookupFunctionEntry"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "InitializeCriticalSection"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "WaitForSingleObjectEx"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "HeapSize"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetEvent"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "FormatMessageW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "TerminateProcess"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "WriteConsoleA"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "ExitProcess"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetUserDefaultLCID"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "FreeLibrary"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "MulDiv"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetTempFileNameW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "ResumeThread"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "OutputDebugStringW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GlobalHandle"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "WriteFile"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "MoveFileExW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetFullPathNameW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "QueryPerformanceCounter"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "LoadLibraryExW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetStdHandle"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SizeofResource"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "ReadConsoleW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetNamedPipeHandleState"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetSystemTimeAsFileTime"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "HeapAlloc"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetProcessHeap"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "InitializeSListHead"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "UnhandledExceptionFilter"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetACP"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetEndOfFile"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetThreadPriority"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetProcAddress"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "FlushFileBuffers"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetStdHandle"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "IsProcessorFeaturePresent"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "WaitForMultipleObjects"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "ExpandEnvironmentStringsW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "Sleep"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "EncodePointer"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetUnhandledExceptionFilter"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GlobalSize"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "CreateDirectoryW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetConsoleMode"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "FillConsoleOutputCharacterW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetFileTime"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "CreateFileW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "HeapFree"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "ResetEvent"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetEnvironmentVariableW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "CompareStringW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "FreeEnvironmentStringsW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetCurrentThreadId"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "QueryPerformanceFrequency"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "EnumSystemLocalesW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetLastError"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "RemoveDirectoryW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetModuleHandleExW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "FormatMessageA"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "RtlUnwind"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "FindFirstFileExW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetCPInfo"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "CreatePipe"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetTimeFormatW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "AttachConsole"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "TlsAlloc"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetDriveTypeW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "RtlPcToFileHeader"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetFileAttributesW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "CloseHandle"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "LCMapStringW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "LockResource"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "TlsGetValue"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetLongPathNameW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "WaitForSingleObject"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "RtlCaptureContext"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetConsoleCP"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetModuleHandleW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetComputerNameW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetCurrentDirectoryW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GlobalAlloc"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "ExitThread"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "DeleteFileW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "ReadFile"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetVersionExW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "HeapReAlloc"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "FindNextFileW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetLogicalDriveStringsW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "LocalFree"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "WideCharToMultiByte"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetFileSizeEx"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "LoadResource"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "LocalAlloc"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetUserDefaultUILanguage"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetStartupInfoW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "CreateEventW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetCommandLineA"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetEnvironmentStringsW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetFileAttributesExW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "LeaveCriticalSection"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetOEMCP"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SwitchToThread"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "CopyFileW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "ReadConsoleOutputCharacterA"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetLastError"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetCommandLineW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetConsoleScreenBufferInfo"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetTempPathW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetLocaleInfoW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetCurrentDirectoryW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "TlsSetValue"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "IsValidCodePage"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "CreateThread"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "FindClose"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "FindFirstFileW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "FreeConsole"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetDiskFreeSpaceExW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetTimeZoneInformation"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetErrorMode"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "InitializeCriticalSectionAndSpinCount"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "CreateProcessW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetCurrentProcess"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "DuplicateHandle"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "FindResourceW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "EnterCriticalSection"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GlobalLock"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetFileType"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SHGetPathFromIDListW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SHBrowseForFolderW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "ShellExecuteExW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "ExtractIconW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SHGetMalloc"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SHGetFileInfoW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SHFileOperationW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SHGetFolderPathW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "CommandLineToArgvW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "AssocQueryStringW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "PostQuitMessage"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetDC"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "HideCaret"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "EnableScrollBar"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "MapWindowPoints"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetSubMenu"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "UnregisterHotKey"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "DestroyMenu"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "InvalidateRect"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetCaretBlinkTime"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "DrawIconEx"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetRect"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetMenuItemCount"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "DestroyWindow"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "RegisterHotKey"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "KillTimer"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "LoadCursorW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetWindowRgn"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "TranslateMessage"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "RemoveMenu"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetDesktopWindow"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "IsWindowVisible"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "WindowFromPoint"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "UnhookWindowsHookEx"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetClientRect"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetSysColorBrush"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetCursor"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "IsZoomed"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetSystemMenu"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetMenuItemInfoW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "DefWindowProcW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "InsertMenuItemW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "LoadIconW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetMenuItemInfoW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetMessageTime"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "TranslateAcceleratorW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "CheckMenuRadioItem"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "MessageBeep"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "DestroyIcon"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "MessageBoxW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "InsertMenuW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "ScrollWindow"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetFocus"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "RegisterClassW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetScrollInfo"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "BeginPaint"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "UnregisterClassW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "ReleaseDC"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "CallNextHookEx"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "EnumChildWindows"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "CheckMenuItem"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "PtInRect"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetWindowPos"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "ModifyMenuW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "IsRectEmpty"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetFocus"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "CreateIconIndirect"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "CreateAcceleratorTableW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetWindowTextLengthW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetScrollInfo"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "OffsetRect"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "AnimateWindow"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetAsyncKeyState"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SystemParametersInfoW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "IsWindow"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "DestroyAcceleratorTable"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "DispatchMessageW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetWindowTextW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "BringWindowToTop"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetMenuInfo"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "IsIconic"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "EnableWindow"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "DrawFrameControl"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetCursorPos"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "ShowCursor"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetWindowPlacement"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "EnableMenuItem"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "LoadImageW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetWindowDC"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetForegroundWindow"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "PeekMessageW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "DestroyCursor"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "ClientToScreen"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "CopyRect"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetWindowRect"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "ShowWindow"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "TrackPopupMenu"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetSysColor"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "AdjustWindowRectEx"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "CreateMenu"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetWindow"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetMenuItemID"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "FillRect"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetCapture"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetParent"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "CreateWindowExW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "MoveWindow"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "InflateRect"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "RedrawWindow"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetCursorPos"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetActiveWindow"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetIconInfo"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetWindowTextW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "MsgWaitForMultipleObjects"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetCapture"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "IsWindowEnabled"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetSystemMetrics"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetTimer"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "AppendMenuW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "UpdateWindow"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "DrawFocusRect"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetMenuState"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetParent"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetMenu"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "CreatePopupMenu"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "DrawEdge"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetKeyState"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "ReleaseCapture"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "MessageBoxA"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "DrawMenuBar"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "ScreenToClient"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "getservbyname"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "htons"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "inet_addr"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "closesocket"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "recvfrom"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "gethostbyaddr"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "htonl"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "gethostbyname"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "getsockname"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "getsockopt"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "WSACleanup"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "WSAGetLastError"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "ntohl"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "WSAStartup"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "__WSAFDIsSet"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "ioctlsocket"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "ntohs"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "CoTaskMemAlloc"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "CoCreateInstance"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "OleInitialize"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "CoTaskMemFree"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "OleUninitialize"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "gethostname"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "WNetOpenEnumW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "WNetEnumResourceW"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "WNetCloseEnum"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "SetProcessUserModeExceptionPolicy"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetConsoleCommandHistory"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "GetConsoleCommandHistoryLength"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "CreateFont"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "WinHttpQueryOption"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "WinHttpQueryHeaders"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "WinHttpSetOption"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "WinHttpWriteData"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "WinHttpCloseHandle"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "WinHttpReceiveResponse"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "WinHttpCrackUrl"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "WinHttpConnect"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "WinHttpOpenRequest"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "WinHttpSetStatusCallback"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "WinHttpSendRequest"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "WinHttpReadData"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "WinHttpQueryAuthSchemes"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "WinHttpSetCredentials"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "WinHttpOpen"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API (Indicator: "WSAStartup"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "gethostname"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "gethostbyname"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "gethostbyaddr"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WSACleanup"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WNetOpenEnumW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WNetEnumResourceW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WNetCloseEnum"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetProcessUserModeExceptionPolicy"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetProcessUserModeExceptionPolicy"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetConsoleCommandHistory"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetConsoleCommandHistoryLength"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "RtlGetVersion"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "RegDeleteKeyEx"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SHGetKnownFolderPath"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WinHttpQueryOption"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WinHttpQueryHeaders"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WinHttpSetOption"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WinHttpWriteData"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WinHttpCloseHandle"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WinHttpReceiveResponse"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WinHttpCrackUrl"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WinHttpConnect"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WinHttpOpenRequest"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WinHttpSetStatusCallback"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WinHttpSendRequest"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WinHttpReadData"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WinHttpQueryAuthSchemes"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WinHttpSetCredentials"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WinHttpOpen"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WSAAsyncSelect"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "FlsAlloc"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "FlsFree"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "FlsGetValue"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "FlsSetValue"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "InitializeCriticalSectionEx"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "InitOnceExecuteOnce"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CreateEventExW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CreateSemaphoreW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CreateSemaphoreExW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CreateThreadpoolTimer"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetThreadpoolTimer"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WaitForThreadpoolTimerCallbacks"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CloseThreadpoolTimer"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CreateThreadpoolWait"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetThreadpoolWait"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CloseThreadpoolWait"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "FlushProcessWriteBuffers"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "FreeLibraryWhenCallbackReturns"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetCurrentProcessorNumber"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CreateSymbolicLinkW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetTickCount64"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetFileInformationByHandleEx"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetFileInformationByHandle"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetSystemTimePreciseAsFileTime"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "InitializeConditionVariable"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WakeConditionVariable"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WakeAllConditionVariable"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SleepConditionVariableCS"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "InitializeSRWLock"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "AcquireSRWLockExclusive"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "TryAcquireSRWLockExclusive"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "ReleaseSRWLockExclusive"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SleepConditionVariableSRW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CreateThreadpoolWork"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SubmitThreadpoolWork"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CloseThreadpoolWork"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CompareStringEx"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetLocaleInfoEx"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "LCMapStringEx"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "AreFileApisANSI"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "EnumSystemLocalesEx"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetDateFormatEx"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetTimeFormatEx"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetUserDefaultLocaleName"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "IsValidLocaleName"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "LCIDToLocaleName"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "LocaleNameToLCID"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "QueryPerformanceCounter"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "QueryPerformanceFrequency"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "EnterCriticalSection"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "LeaveCriticalSection"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "InitializeCriticalSectionAndSpinCount"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "DeleteCriticalSection"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "Sleep"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CreateThread"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetLastError"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "FreeLibrary"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetProcAddress"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "FormatMessageA"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetLastError"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetModuleFileNameW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "LoadLibraryExW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "MultiByteToWideChar"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WideCharToMultiByte"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "MulDiv"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "ExitProcess"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetCurrentThreadId"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "InitializeCriticalSection"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "LoadLibraryW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GlobalAlloc"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GlobalUnlock"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GlobalLock"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GlobalFree"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GlobalSize"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GlobalHandle"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetCurrentDirectoryW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetErrorMode"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetCommandLineW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "LocalFree"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetStdHandle"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "FreeConsole"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "AttachConsole"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WriteConsoleA"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WriteConsoleW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "FillConsoleOutputCharacterW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetConsoleScreenBufferInfo"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetConsoleCursorPosition"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "ReadConsoleOutputCharacterA"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CreateFileW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetFileAttributesW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetFileType"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CloseHandle"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CopyFileW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "FindClose"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "FindFirstFileW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetFileTime"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetLongPathNameW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetTempFileNameW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetTempPathW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetEnvironmentVariableW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetDiskFreeSpaceExW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "IsDebuggerPresent"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WaitForSingleObject"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetCurrentProcess"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetCurrentProcessId"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "TerminateProcess"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetVersionExW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetNativeSystemInfo"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "LoadResource"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "LockResource"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SizeofResource"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "FindResourceW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetComputerNameW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "IsValidCodePage"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetCPInfo"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "FindNextFileW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetThreadPriority"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "ResumeThread"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "TlsAlloc"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "TlsGetValue"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "TlsSetValue"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "TlsFree"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "FormatMessageW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetModuleHandleW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "ReadFile"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WriteFile"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetHandleInformation"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CreatePipe"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetNamedPipeHandleState"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "PeekNamedPipe"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetEvent"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CreateEventW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WaitForMultipleObjects"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetExitCodeProcess"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CreateProcessW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetSystemTimeAsFileTime"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetDriveTypeW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetLogicalDriveStringsW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "OutputDebugStringW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetACP"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetLocaleInfoW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "IsValidLocale"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetUserDefaultUILanguage"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "ExpandEnvironmentStringsW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "RaiseException"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetFileSizeEx"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "LocalAlloc"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetForegroundWindow"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "LoadIconW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "LoadImageW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetIconInfo"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "TranslateMessage"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "DispatchMessageW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "PeekMessageW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetDC"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "ReleaseDC"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetWindowTextW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetWindowTextLengthW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "MessageBeep"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetCursor"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetRect"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "RegisterHotKey"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "UnregisterHotKey"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetMessageTime"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "DefWindowProcW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "PostQuitMessage"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CreateWindowExW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "IsWindow"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "DestroyWindow"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "ShowWindow"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "AnimateWindow"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "MoveWindow"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetWindowPos"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "IsWindowVisible"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetFocus"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetActiveWindow"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetFocus"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetKeyState"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetAsyncKeyState"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetCapture"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetCapture"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "ReleaseCapture"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "EnableWindow"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "IsWindowEnabled"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetSystemMetrics"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetMenuItemCount"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "TrackPopupMenu"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetMenuItemInfoW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "UpdateWindow"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "InvalidateRect"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "RedrawWindow"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "ScrollWindow"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "EnableScrollBar"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetWindowTextW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetClientRect"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetWindowRect"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetCursorPos"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetCursorPos"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "ClientToScreen"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "ScreenToClient"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "MapWindowPoints"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WindowFromPoint"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetSysColor"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "FillRect"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "InflateRect"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "PtInRect"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetParent"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetParent"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetWindow"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "UnhookWindowsHookEx"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CallNextHookEx"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetScrollInfo"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetScrollInfo"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SystemParametersInfoW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetWindowRgn"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetWindowPlacement"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "RegisterClassW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "UnregisterClassW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "IsIconic"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "BringWindowToTop"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "IsZoomed"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "DrawMenuBar"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetSystemMenu"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "EnableMenuItem"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "DrawFocusRect"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CreateIconIndirect"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "HideCaret"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "MsgWaitForMultipleObjects"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "EnumChildWindows"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "LoadCursorW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "DestroyCursor"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "DrawIconEx"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CopyRect"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "OffsetRect"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "DrawEdge"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "DrawFrameControl"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetMenuState"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CheckMenuItem"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetSubMenu"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetMenuItemID"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetMenuItemInfoW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetSysColorBrush"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CheckMenuRadioItem"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CreateMenu"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CreatePopupMenu"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "DestroyMenu"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "InsertMenuW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "AppendMenuW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "ModifyMenuW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "RemoveMenu"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetMenuInfo"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "InsertMenuItemW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetMenu"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetCaretBlinkTime"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "DestroyIcon"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "MessageBoxW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CreateAcceleratorTableW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "DestroyAcceleratorTable"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "TranslateAcceleratorW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "IsRectEmpty"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetWindowDC"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "BeginPaint"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetDesktopWindow"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "AdjustWindowRectEx"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "ShowCursor"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetTimer"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "KillTimer"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "MessageBoxA"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "DeleteObject"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetObjectW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetBkColor"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetDeviceCaps"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CreateFontIndirectW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SelectObject"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "BitBlt"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CreateCompatibleBitmap"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CreateCompatibleDC"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "DeleteDC"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "StretchBlt"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetStretchBltMode"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetStockObject"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CreatePatternBrush"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CreateSolidBrush"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "RoundRect"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetMapMode"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "DPtoLP"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetDIBits"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetOpenFileNameW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetSaveFileNameW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "ExtractIconW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SHGetMalloc"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SHGetPathFromIDListW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SHBrowseForFolderW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CommandLineToArgvW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "ShellExecuteExW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SHGetFileInfoW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SHFileOperationW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SHGetFolderPathW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CoCreateInstance"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CoTaskMemAlloc"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CoTaskMemFree"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "OleInitialize"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "OleUninitialize"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetUserNameW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "RegCloseKey"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "RegCreateKeyExW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "RegDeleteKeyW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "RegDeleteValueW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "RegEnumKeyW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "RegEnumValueW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "RegOpenKeyExW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "RegQueryValueExW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "RegSetValueExW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "AssocQueryStringW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "RtlPcToFileHeader"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "EncodePointer"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "DecodePointer"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SwitchToThread"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CompareStringW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "LCMapStringW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetStringTypeW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "RtlCaptureContext"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "RtlLookupFunctionEntry"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "RtlVirtualUnwind"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "UnhandledExceptionFilter"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetUnhandledExceptionFilter"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "IsProcessorFeaturePresent"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "ResetEvent"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "WaitForSingleObjectEx"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetStartupInfoW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "InitializeSListHead"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "RtlUnwind"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetModuleHandleExW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "DuplicateHandle"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "MoveFileExW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "DeleteFileW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetFullPathNameW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "CreateDirectoryW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "RemoveDirectoryW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetStdHandle"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetFileAttributesExW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "FlushFileBuffers"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetConsoleMode"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "ReadConsoleW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetConsoleCP"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetFilePointerEx"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "ExitThread"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "FreeLibraryAndExitThread"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetTimeZoneInformation"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "HeapFree"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "HeapAlloc"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "HeapReAlloc"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetDateFormatW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetTimeFormatW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetUserDefaultLCID"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "EnumSystemLocalesW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetCurrentDirectoryW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetEndOfFile"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "SetEnvironmentVariableW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetOEMCP"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetEnvironmentStringsW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "FreeEnvironmentStringsW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "FindFirstFileExW"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetCommandLineA"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "GetProcessHeap"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API (Indicator: "HeapSize"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp")33:T458,Found reference to API "SizeofResource" (Indicator: "SizeofResource"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "LockResource" (Indicator: "LockResource"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "LoadResource" (Indicator: "LoadResource"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "FindResourceW" (Indicator: "FindResource"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "LoadResource" (Indicator: "LoadResource"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "LockResource" (Indicator: "LockResource"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "SizeofResource" (Indicator: "SizeofResource"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "FindResourceW" (Indicator: "FindResource"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp")34:T4ff,"Software\Policies\Microsoft\Control Panel" in Source: 046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704 "Software\Policies\Microsoft\Windows\Control Panel" in Source: 046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704 "Software\" in Source: 046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704 "Software\Classes\" in Source: 046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704 "Software\Wow6432`" in Source: 00000000-00006760.00000000.100022.79E80000.00000004.mdmp "Software\Wow6432" in Source: 00000000-00006760.00000000.100022.79E80000.00000004.mdmp "sSoftware\Wow6432" in Source: 00000000-00006760.00000000.100022.79E80000.00000004.mdmp "Registry\Machine\Software\Classes\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}" in Source: 00000000-00006760.00000000.100022.79E80000.00000004.mdmp "Software\Policies\Microsoft\Control Panel" in Source: 00000000-00006760.00000001.100128.61BBE000.00000002.mdmp "Software\Policies\Microsoft\Windows\Control Panel" in Source: 00000000-00006760.00000001.100128.61BBE000.00000002.mdmp "Software\" in Source: 00000000-00006760.00000001.100128.61BBE000.00000002.mdmp "Software\Classes\" in Source: 00000000-00006760.00000001.100128.61BBE000.00000002.mdmp35:Tfdc,"046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "%WINDIR%\TEMP\VXOLE64.DLL" at base 7ffe15a50000 "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "API-MS-WIN-CORE-SYNCH-L1-2-0" at base 7ffe39340000 "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "API-MS-WIN-CORE-FIBERS-L1-1-1" at base 7ffe39340000 "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "API-MS-WIN-CORE-LOCALIZATION-L1-2-1" at base 7ffe39340000 "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "KERNEL32" at base 7ffe3a880000 "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "API-MS-WIN-CORE-STRING-L1-1-0" at base 7ffe39340000 "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "API-MS-WIN-CORE-DATETIME-L1-1-1" at base 7ffe39340000 "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "API-MS-WIN-CORE-LOCALIZATION-OBSOLETE-L1-2-0" at base 7ffe39340000 "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "%WINDIR%\SYSTEM32\UXTHEME.DLL" at base 7ffe375b0000 "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "API-MS-WIN-CORE-SYSINFO-L1-2-1" at base 7ffe39340000 "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "KERNEL32.DLL" at base 7ffe3a880000 "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "NTDLL.DLL" at base 7ffe3cc20000 "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "USER32.DLL" at base 7ffe3a100000 "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "COMCTL32.DLL" at base 7ffe28780000 "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "SHELL32.DLL" at base 7ffe3ac50000 "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "MPR.DLL" at base 7ffe2f190000 "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "%WINDIR%\SYSTEM32\PROPSYS.DLL" at base 7ffe35450000 "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "RPCRT4.DLL" at base 7ffe3c300000 "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "CSCAPI.DLL" at base 7ffe2ba10000 "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "%WINDIR%\SYSTEM32\DRPROV.DLL" at base 7ffe2c140000 "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "%WINDIR%\SYSTEM32\NTLANMAN.DLL" at base 7ffe2c120000 "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "%WINDIR%\SYSTEM32\DAVCLNT.DLL" at base 7ffe2c100000 "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "COMCTL32" at base 7ffe28780000 "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "OPENGL32" at base 7ffe15b80000 "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "GDI32" at base 7ffe3ca20000 "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "API-MS-WIN-CORE-FIBERS-L1-1-2" at base 7ffe39340000 "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "VM3DGL64.DLL" at base 7ffe08610000 "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "VM3DGLHELPER64.DLL" at base 7ffe202e0000 "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "GDI32.DLL" at base 7ffe3ca20000 "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "API-MS-WIN-APPMODEL-RUNTIME-L1-1-2" at base 7ffe38f90000 "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" loaded module "EXT-MS-WIN-KERNEL32-ERRORHANDLING-L1-1-0.DLL" at base 7ffe3a88000036:T925,"046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\SESSION MANAGER\SEGMENT HEAP"; Key: ""; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\SESSION MANAGER"; Key: ""; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\SAFEBOOT\OPTION"; Key: ""; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\SRP\GP\DLL"; Key: ""; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\WINDOWS\SAFER\CODEIDENTIFIERS"; Key: ""; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "OPEN"; Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\WINDOWS\SAFER\CODEIDENTIFIERS"; Key: ""; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\FILESYSTEM"; Key: ""; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS"; Key: ""; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "OPEN"; Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\SHELL FOLDERS"; Key: ""; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\SIDEBYSIDE\ASSEMBLYSTORAGEROOTS"; Key: ""; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\SORTING\VERSIONS"; Key: ""; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\LSA\FIPSALGORITHMPOLICY"; Key: ""; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\LSA"; Key: ""; Value: "")37:T1015,"046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\SESSION MANAGER"; Key: "RESOURCEPOLICIES"; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\WINDOWS\SAFER\CODEIDENTIFIERS"; Key: "TRANSPARENTENABLED"; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\FILESYSTEM"; Key: "LONGPATHSENABLED"; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS"; Key: "LOGFLAGS"; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS"; Key: "SHOWDEBUGINFO"; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "QUERYVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\SHELL FOLDERS"; Key: "CACHE"; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\SORTING\VERSIONS"; Key: ""; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\LSA\FIPSALGORITHMPOLICY"; Key: "ENABLED"; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\LSA"; Key: "FIPSALGORITHMPOLICY"; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\LSA\FIPSALGORITHMPOLICY"; Key: "MDMENABLED"; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\OLE"; Key: "PAGEALLOCATORUSESYSTEMHEAP"; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\OLE"; Key: "PAGEALLOCATORSYSTEMHEAPISPRIVATE"; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\OLE"; Key: "AGGRESSIVEMTATESTING"; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\GRE_INITIALIZE"; Key: "DISABLEMETAFILES"; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "QUERYVAL"; Path: "HKCU\CONTROL PANEL\DESKTOP"; Key: "ENABLEPERPROCESSSYSTEMDPI"; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\COMPATIBILITY32"; Key: "046F5669B747269376CF798589D4358DFB0C38C6E63E322434D579C628299704"; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS"; Key: "LOADAPPINIT_DLLS"; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "QUERYVAL"; Path: "HKCU\CONTROL PANEL\DESKTOP"; Key: "PREFERREDUILANGUAGES"; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "QUERYVAL"; Path: "HKCU\CONTROL PANEL\DESKTOP\MUICACHED"; Key: "MACHINEPREFERREDUILANGUAGES"; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\SIDEBYSIDE"; Key: "PREFEREXTERNALMANIFEST"; Value: "") "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\WMI\SECURITY"; Key: "12E1DDAC-7EBB-434F-BC58-54C27D745F8F"; Value: "")38:T722,"046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to touch file "C:\Windows\System32\apphelp.dll" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to touch file "C:\046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to touch file "C:\Windows\System32\ntdll.dll" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to touch file "C:\Windows\System32\kernel32.dll" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to touch file "C:\Windows\System32\KernelBase.dll" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to touch file "C:\Windows\apppatch\sysmain.sdb" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to touch file "C:\046F5669B747269376CF798589D4358DFB0C38C6E63E322434D579C628299704.EXE.LOCAL" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to touch file "C:\046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe.Local\" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to touch file "C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.16299.248_none_15ced204935f55d7\comctl32.dll" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to touch file "C:\WINDOWS\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.16299.248_none_15ced204935f55d7\COMCTL32.dll" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to touch file "C:\WINSPOOL.DRV" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to touch file "C:\Windows\System32\winspool.drv"39:Tba4,"046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\WINMM.DLL" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\WINMM.dll" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\IPHLPAPI.DLL" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\BCRYPT.DLL" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\bcrypt.dll" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\WINMMBASE.DLL" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\WINMMBASE.dll" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\WSOCK32.DLL" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\WSOCK32.dll" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\OPENGL32.DLL" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\OPENGL32.dll" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\DSOUND.DLL" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\DSOUND.dll" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\UXTHEME.DLL" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\UxTheme.dll" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\MSIMG32.DLL" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\MSIMG32.dll" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\GLU32.DLL" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\GLU32.dll" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\FLTLIB.DLL" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\MSVCP140.DLL" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\MSVCP140.dll" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\VCRUNTIME140.DLL" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\VCRUNTIME140.dll"3a:T93d,"046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\046F5669B747269376CF798589D4358DFB0C38C6E63E322434D579C628299704.EXE.LOCAL" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe.Local\" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\WINSPOOL.DRV" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Roaming\GOLLY" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\Temp\GOLC757.TMP" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\GOLLYPREFS" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Roaming\Golly\GOLLYPREFS" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Roaming\Golly\RULES" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Roaming\Golly\DOWNLOADS" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "\Device\NamedPipe\DAV RPC SERVICE" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\Windows\System32\UXTHEME.DLL.CONFIG" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Roaming\Golly\Rules\B3_S23.RULE" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Roaming\Golly\Rules\B3_S23.COLORS" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Roaming\Golly\Rules\B3_S23.ICONS" "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Roaming\Golly\Rules\B3_S23.icons"3b:Tb48,Found reference to API "WSAStartup" (Indicator: "WSAStartup"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WinHttpQueryHeaders" (Indicator: "WinHttpQueryHeaders"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WinHttpConnect" (Indicator: "WinHttpConnect"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WinHttpOpenRequest" (Indicator: "HttpOpenRequest"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WinHttpOpenRequest" (Indicator: "WinHttpOpen"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WinHttpOpenRequest" (Indicator: "WinHttpOpenRequest"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WinHttpSendRequest" (Indicator: "HttpSendRequest"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WinHttpSendRequest" (Indicator: "WinHttpSendRequest"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WinHttpReadData" (Indicator: "WinHttpReadData"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WinHttpOpen" (Indicator: "WinHttpOpen"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WSAStartup" (Indicator: "WSAStartup"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "WinHttpQueryHeaders" (Indicator: "WinHttpQueryHeaders"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "WinHttpConnect" (Indicator: "WinHttpConnect"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "WinHttpOpenRequest" (Indicator: "HttpOpenRequest"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "WinHttpOpenRequest" (Indicator: "WinHttpOpen"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "WinHttpOpenRequest" (Indicator: "WinHttpOpenRequest"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "WinHttpSendRequest" (Indicator: "HttpSendRequest"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "WinHttpSendRequest" (Indicator: "WinHttpSendRequest"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "WinHttpReadData" (Indicator: "WinHttpReadData"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "WinHttpOpen" (Indicator: "WinHttpOpen"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp")3c:Tfcd,Found reference to API "WinHttpQueryOption" (Indicator: "WinHttpQueryOption"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WinHttpQueryHeaders" (Indicator: "WinHttpQueryHeaders"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WinHttpSetOption" (Indicator: "WinHttpSetOption"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WinHttpWriteData" (Indicator: "WinHttpWriteData"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WinHttpCloseHandle" (Indicator: "WinHttpCloseHandle"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WinHttpReceiveResponse" (Indicator: "WinHttpReceiveResponse"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WinHttpCrackUrl" (Indicator: "WinHttpCrackUrl"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WinHttpConnect" (Indicator: "WinHttpConnect"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WinHttpOpenRequest" (Indicator: "WinHttpOpen"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WinHttpOpenRequest" (Indicator: "WinHttpOpenRequest"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WinHttpSetStatusCallback" (Indicator: "WinHttpSetStatusCallback"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WinHttpSendRequest" (Indicator: "WinHttpSendRequest"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WinHttpReadData" (Indicator: "WinHttpReadData"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WinHttpQueryAuthSchemes" (Indicator: "WinHttpQueryAuthSchemes"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WinHttpSetCredentials" (Indicator: "WinHttpSetCredentials"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WinHttpOpen" (Indicator: "WinHttpOpen"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WinHttpQueryOption" (Indicator: "WinHttpQueryOption"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "WinHttpQueryHeaders" (Indicator: "WinHttpQueryHeaders"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "WinHttpSetOption" (Indicator: "WinHttpSetOption"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "WinHttpWriteData" (Indicator: "WinHttpWriteData"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "WinHttpCloseHandle" (Indicator: "WinHttpCloseHandle"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "WinHttpReceiveResponse" (Indicator: "WinHttpReceiveResponse"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "WinHttpCrackUrl" (Indicator: "WinHttpCrackUrl"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "WinHttpConnect" (Indicator: "WinHttpConnect"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "WinHttpOpenRequest" (Indicator: "WinHttpOpen"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "WinHttpOpenRequest" (Indicator: "WinHttpOpenRequest"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "WinHttpSetStatusCallback" (Indicator: "WinHttpSetStatusCallback"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp")3d:T721,Found reference to API "inet_addr" (Indicator: "inet_addr"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "gethostbyname" (Indicator: "gethostbyname"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WSACleanup" (Indicator: "wsacleanup"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WSAGetLastError" (Indicator: "wsagetlasterror"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WSAStartup" (Indicator: "wsastartup"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "__WSAFDIsSet" (Indicator: "__wsafdisset"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "gethostname" (Indicator: "gethostname"; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "Failed to send DDE advise notification" (Indicator: " send "; File: "046f5669b747269376cf798589d4358dfb0c38c6e63e322434d579c628299704") Found reference to API "WSAStartup" (Indicator: "wsastartup"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "gethostname" (Indicator: "gethostname"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "gethostbyname" (Indicator: "gethostbyname"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "WSACleanup" (Indicator: "wsacleanup"; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp") Found reference to API "Failed to send DDE advise notification" (Indicator: " send "; Source: "00000000-00006760.00000001.100128.61BBE000.00000002.mdmp")3e:Tc17,Heuristic match: "golly_clip.pl" Heuristic match: "golly_clip.py" Heuristic match: "golly-start.py" Pattern match: "www.www" Pattern match: "www.ww" Pattern match: "www.wwwwww" Pattern match: "www...www" Pattern match: "www.....www" Pattern match: "www.wwwwwwwwwwwww" Pattern match: "www.wwwwwww.www" Pattern match: "www...wwwww...www" Pattern match: "www.....www.....www" Pattern match: "www.......w.......www" Heuristic match: "|script (*.lua;*.py)|*.lua;*.py" Pattern match: "www.wwwwwwwwwww" Pattern match: "www.wwwwwwwwwwwwwwwwwwwwwwwwwww" Heuristic match: "|macrocell (*.mc)|*.mc" Heuristic match: "lua or python (*.lua;*.py)|*.lua;*.py" Heuristic match: "|python (*.py)|*.py" Heuristic match: "macrocell (*.mc)|*.mc" Pattern match: "http://www.w3.org/2001/xmlschema-instance" Pattern match: "http://www.virtualbox.org" Pattern match: "http://go.microsoft.com/fwlink/?linkid=215117" Pattern match: "http://go.microsoft.com/fwlink/?linkid=223554" Pattern match: "http://support.microsoft.com/kb/4023057" Pattern match: "http://www.cacetech.com" Pattern match: "http://www.winpcap.org" Pattern match: "http://www.autoitscript.com/autoit3" Pattern match: "https://www.wireshark.org" Pattern match: "https://ask.wireshark.org/" Pattern match: "https://www.wireshark.org/download.html" Pattern match: "http://www.adobe.com/support/main.html" Pattern match: "http://www.adobe.com/products/acrobat/readstep.html" Pattern match: "http://www.adobe.com" Pattern match: "www.onet[1].xml" Pattern match: "http://java.com/help" Pattern match: "http://java.com" Pattern match: "http://java.sun.com" Pattern match: "https://support.mozilla.org" Pattern match: "https://www.mozilla.org" Pattern match: "https://www.mozilla.org/firefox/64.0/releasenotes" Pattern match: "https://npcap.com/#download" Pattern match: "https://npcap.com/" Heuristic match: ".data.rel.ro" Pattern match: "http://jimmac.musichall.cz" Pattern match: "http://www.gimp.orgg" Heuristic match: "rkww.gt" Pattern match: "www.inkscape.org" Heuristic match: "bhd.by" Pattern match: "https://www.msn.com=" Heuristic match: ":\users\hapubws\appdata\roaming\golly\golly_clip.pl" Heuristic match: ":\users\hapubws\appdata\roaming\golly\golly_clip.py" Pattern match: "https://www.msn.com/favicon.ico" Heuristic match: "ystem.activityhistory.id" Heuristic match: "ystem.appusermodel.id" Heuristic match: "ystem.identityprovider.name" Heuristic match: "ystem.protocol.name" Heuristic match: "ystem.sam.name" Heuristic match: "ystem.structuredquery.is" Heuristic match: "ystem.structuredquery.virtual.cc" Heuristic match: "ystem.structuredquery.virtual.to" Heuristic match: "system.activityhistory.id" Heuristic match: "system.identityprovider.name" Heuristic match: "system.sam.name" Heuristic match: "system.structuredquery.virtual.cc" Heuristic match: "system.structuredquery.virtual.to" Heuristic match: "system.structuredquery.is" Heuristic match: "system.protocol.name" Heuristic match: "system.appusermodel.id" Heuristic match: "system.structuredquerytype.implicit.is"3f:T13b9,Found URL "http://www.w3.org/2001/xmlschema-instance" - Source: "00000000-00006760.00000000.100022.63910000.00000004.mdmp") Found URL "http://www.virtualbox.orgoracle" - Source: "00000000-00006760.00000000.100022.79E80000.00000004.mdmp") Found URL "http://go.microsoft.com/fwlink/?linkid=215117microsoft" - Source: "00000000-00006760.00000000.100022.79E80000.00000004.mdmp") Found URL "http://support.microsoft.com/kb/4023057c:\windows\softwaredistribution\download\eb561161694e9fba93423cc2a2678b78\img\update" - Source: "00000000-00006760.00000000.100022.79E80000.00000004.mdmp") Found URL "http://www.cacetech.comwinpcap" - Source: "00000000-00006760.00000000.100022.79E80000.00000004.mdmp") Found URL "http://www.autoitscript.com/autoit3autoit" - Source: "00000000-00006760.00000000.100022.79E80000.00000004.mdmp") Found URL "https://www.wireshark.orgc:\program" - Source: "00000000-00006760.00000000.100022.79E80000.00000004.mdmp") Found URL "https://ask.wireshark.org/wireshark" - Source: "00000000-00006760.00000000.100022.79E80000.00000004.mdmp") Found URL "http://www.adobe.com/support/main.htmlc:\windows\installer\" - Source: "00000000-00006760.00000000.100022.79E80000.00000004.mdmp") Found URL "http://support.microsoft.com/kb/4023057c:\windows\softwaredistribution\download\1eb060e9b9d3cbeb39c83f2a9722294e\img\update" - Source: "00000000-00006760.00000000.100022.79E80000.00000004.mdmp") Found URL "http://java.com/helpc:\users\hapubws\appdata\locallow\oracle\java\jre1.8.0_161\http://java.comjava" - Source: "00000000-00006760.00000000.100022.79E80000.00000004.mdmp") Found URL "https://support.mozilla.orgmozilla" - Source: "00000000-00006760.00000000.100022.79E80000.00000004.mdmp") Found URL "https://npcap.com/" - Source: "00000000-00006760.00000000.100022.79E80000.00000004.mdmp") Found URL "https://npcap.com/