Free Automated Malware Analysis Service - powered by Falcon Sandbox - Viewing online file analysis results for 'cheat CS GO.exe'

malicious

Threat Score: 100/100 AV Detection: 89% Labeled as: Trojan.Generic

cheat CS GO.exe

This report is generated from a file or URL submitted to this webservice on January 4th 2019 16:23:52 (UTC) and action script Heavy Anti-Evasion
Guest System: Windows 7 32 bit, Home Premium, 6.1 (build 7601), Service Pack 1
Report generated by Falcon Sandbox v8.20 © Hybrid Analysis

Overview Sample unavailable Re-analyze Hash Seen Before Show Similar Samples Request Report Deletion

Incident Response

Risk Assessment

Remote Access: Reads terminal service related keys (often RDP related)
Spyware: Accesses potentially sensitive information from local browsers
Fingerprint: Queries kernel debugger information
Queries sensitive IE security settings
Queries the internet cache settings (often used to hide footprints in index.dat or internet cache)
Reads the active computer name
Reads the cryptographic machine GUID

MITRE ATT&CK™ Techniques Detection

This report has 12 indicators that were mapped to 9 attack techniques and 8 tactics. View all details

Execution
ATT&CK ID	Name	Tactics	Description	Malicious Indicators	Suspicious Indicators	Informative Indicators
T1035	Service Execution	Execution	Adversaries may execute a binary, command, or script via a method that interacts with Windows services, such as the Service Control Manager. Learn more		Opened the service control manager
Persistence
ATT&CK ID	Name	Tactics	Description	Malicious Indicators	Suspicious Indicators	Informative Indicators
T1215	Kernel Modules and Extensions	Persistence	Loadable Kernel Modules (or LKMs) are pieces of code that can be loaded and unloaded into the kernel upon demand. Learn more			Opens the Kernel Security Device Driver (KsecDD) of Windows
T1179	Hooking	Credential Access Persistence Privilege Escalation	Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources. Learn more		Installs hooks/patches the running process
Privilege Escalation
ATT&CK ID	Name	Tactics	Description	Malicious Indicators	Suspicious Indicators	Informative Indicators
T1179	Hooking	Credential Access Persistence Privilege Escalation	Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources. Learn more		Installs hooks/patches the running process
Defense Evasion
ATT&CK ID	Name	Tactics	Description	Malicious Indicators	Suspicious Indicators	Informative Indicators
T1112	Modify Registry	Defense Evasion	Adversaries may interact with the Windows Registry to hide configuration information within Registry keys, remove information as part of cleaning up, or as part of other techniques to aid in [[Persistence]] and [[Execution]]. Learn more		Modifies proxy settings	Creates or modifies windows services
Credential Access
ATT&CK ID	Name	Tactics	Description	Malicious Indicators	Suspicious Indicators	Informative Indicators
T1179	Hooking	Credential Access Persistence Privilege Escalation	Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources. Learn more		Installs hooks/patches the running process
Discovery
ATT&CK ID	Name	Tactics	Description	Malicious Indicators	Suspicious Indicators	Informative Indicators
T1012	Query Registry	Discovery	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software. Learn more		Reads the active computer name Reads the cryptographic machine GUID Queries the internet cache settings (often used to hide footprints in index.dat or internet cache) Queries sensitive IE security settings Monitors specific registry key for changes
Lateral Movement
ATT&CK ID	Name	Tactics	Description	Malicious Indicators	Suspicious Indicators	Informative Indicators
T1076	Remote Desktop Protocol	Lateral Movement	Remote desktop is a common feature in operating systems. Learn more		Reads terminal service related keys (often RDP related)
Exfiltration
ATT&CK ID	Name	Tactics	Description	Malicious Indicators	Suspicious Indicators	Informative Indicators
T1002	Data Compressed	Exfiltration	An adversary may compress data (e. Learn more			Matched Compiler/Packer signature

Indicators

Not all malicious and suspicious indicators are displayed. Get your own cloud service or the full version to view all details.

Malicious Indicators 4
External Systems
- Sample was identified as malicious by a large number of Antivirus engines
  
  details
  
  53/69 Antivirus vendors marked sample as malicious (76% detection rate)
  
  source
  
  External System
  
  relevance
  
  10/10
- Sample was identified as malicious by at least one Antivirus engine
  
  details
  
  53/69 Antivirus vendors marked sample as malicious (76% detection rate)
  
  source
  
  External System
  
  relevance
  
  8/10
Network Related
- Found a reference to an external IP address lookup service
  
  details
  
  "http://ip-api.com/json" (Indicator: "ip-api.com"; File: "094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin")
  
  source
  
  String
  
  relevance
  
  6/10
Hiding 1 Malicious Indicators
- All indicators are available only in the private webservice or standalone version

Suspicious Indicators 15
Anti-Detection/Stealthyness
- Queries kernel debugger information
  
  details
  
  "cheatCSGO.exe" at 00025910-00003228-00000105-11727087576
  
  source
  
  API Call
  
  relevance
  
  6/10
- Queries the internet cache settings (often used to hide footprints in index.dat or internet cache)
  
  details
  
  "cheatCSGO.exe" (Access type: "QUERYVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS"; Key: "DISABLECACHINGOFSSLPAGES"; Value: "00000000040000000400000000000000")
  
  source
  
  Registry Access
  
  relevance
  
  3/10
  
  ATT&CK ID
  
  T1012 (Show technique in the MITRE ATT&CK™ matrix)
Environment Awareness
- Reads the active computer name
  
  details
  
  "cheatCSGO.exe" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\COMPUTERNAME\ACTIVECOMPUTERNAME"; Key: "COMPUTERNAME")
  
  source
  
  Registry Access
  
  relevance
  
  5/10
  
  ATT&CK ID
  
  T1012 (Show technique in the MITRE ATT&CK™ matrix)
- Reads the cryptographic machine GUID
  
  details
  
  "cheatCSGO.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\CRYPTOGRAPHY"; Key: "MACHINEGUID")
  
  source
  
  Registry Access
  
  relevance
  
  10/10
  
  ATT&CK ID
  
  T1012 (Show technique in the MITRE ATT&CK™ matrix)
External Systems
- Found an IP/URL artifact that was identified as malicious by at least one reputation engine
  
  details
  
  1/70 reputation engines marked "https://dotbit.me/a/" as malicious (1% detection rate)
  2/70 reputation engines marked "http://ip-api.com/json" as malicious (2% detection rate)
  
  source
  
  External System
  
  relevance
  
  10/10
General
- Opened the service control manager
  
  details
  
  "cheatCSGO.exe" called "OpenSCManager" requesting access rights "SC_MANAGER_CONNECT" (0x1)
  
  source
  
  API Call
  
  relevance
  
  10/10
  
  ATT&CK ID
  
  T1035 (Show technique in the MITRE ATT&CK™ matrix)
Installation/Persistance
- Monitors specific registry key for changes
  
  details
  
  "cheatCSGO.exe" monitors "\REGISTRY\MACHINE\SYSTEM\ControlSet001\services\WinSock2\Parameters\Protocol_Catalog9" (Filter: 1; Subtree: 0)
  "cheatCSGO.exe" monitors "\REGISTRY\MACHINE\SYSTEM\ControlSet001\services\WinSock2\Parameters\NameSpace_Catalog5" (Filter: 1; Subtree: 0)
  "cheatCSGO.exe" monitors "\REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing\cheatCSGO_RASAPI32" (Filter: 14; Subtree: 0)
  "cheatCSGO.exe" monitors "\REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing\cheatCSGO_RASMANCS" (Filter: 14; Subtree: 0)
  
  source
  
  API Call
  
  relevance
  
  4/10
  
  ATT&CK ID
  
  T1012 (Show technique in the MITRE ATT&CK™ matrix)
Remote Access Related
- Reads terminal service related keys (often RDP related)
  
  details
  
  "cheatCSGO.exe" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\TERMINAL SERVER"; Key: "TSUSERENABLED")
  
  source
  
  Registry Access
  
  relevance
  
  10/10
  
  ATT&CK ID
  
  T1076 (Show technique in the MITRE ATT&CK™ matrix)
Spyware/Information Retrieval
- Accesses potentially sensitive information from local browsers
  
  details
  
  "cheatCSGO.exe" had access to "%APPDATA%\Microsoft\Windows\Cookies\index.dat" (Type: "FileHandle")
  "cheatCSGO.exe" had access to "%APPDATA%\Microsoft\Windows\IETldCache\index.dat" (Type: "FileHandle")
  
  source
  
  Touched Handle
  
  relevance
  
  7/10
System Security
- Modifies proxy settings
  
  details
  
  "cheatCSGO.exe" (Access type: "SETVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS"; Key: "PROXYENABLE"; Value: "00000000")
  "cheatCSGO.exe" (Access type: "DELETEVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS"; Key: "PROXYSERVER")
  "cheatCSGO.exe" (Access type: "DELETEVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS"; Key: "PROXYOVERRIDE")
  "cheatCSGO.exe" (Access type: "DELETEVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\ZONEMAP"; Key: "PROXYBYPASS")
  "cheatCSGO.exe" (Access type: "DELETEVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\ZONEMAP"; Key: "PROXYBYPASS")
  
  source
  
  Registry Access
  
  relevance
  
  10/10
  
  ATT&CK ID
  
  T1112 (Show technique in the MITRE ATT&CK™ matrix)
- Queries sensitive IE security settings
  
  details
  
  "cheatCSGO.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SECURITY"; Key: "DISABLESECURITYSETTINGSCHECK")
  
  source
  
  Registry Access
  
  relevance
  
  8/10
  
  ATT&CK ID
  
  T1012 (Show technique in the MITRE ATT&CK™ matrix)
Unusual Characteristics
- Imports suspicious APIs
  
  details
  
  RegEnumKeyA
  RegCloseKey
  RegOpenKeyExA
  CopyFileW
  LoadLibraryA
  GetFileAttributesW
  GetModuleFileNameA
  UnhandledExceptionFilter
  LoadLibraryExW
  CreateDirectoryW
  GetCommandLineA
  GetProcAddress
  GetModuleHandleA
  FindNextFileW
  WriteFile
  GetStartupInfoA
  DeleteFileW
  FindFirstFileW
  Sleep
  GetTickCount
  VirtualAlloc
  
  source
  
  Static Parser
  
  relevance
  
  1/10
- Installs hooks/patches the running process
  
  details
  
  "cheatCSGO.exe" wrote bytes "92e6527779a85777be725777d62d57771de2527705a25777bee35277616f5777684155770050557700000000ad3706768b2d0676b641067600000000" to virtual address "0x74A81000" (part of module "WSHTCPIP.DLL")
  "cheatCSGO.exe" wrote bytes "4053557758585677186a5677653c57770000000000bfbf750000000056ccbf75000000007ccabf750000000037688d756a2c5777d62d57770000000020698d750000000029a6bf7500000000a48d8d7500000000f70ebf7500000000" to virtual address "0x77691000" (part of module "NSI.DLL")
  "cheatCSGO.exe" wrote bytes "7739537779a85777be725777d62d57771de2527705a25777c868567757d15d77bee35277616f5777684155770050557700000000ad3706768b2d0676b641067600000000" to virtual address "0x750A1000" (part of module "WSHIP6.DLL")
  
  source
  
  Hook Detection
  
  relevance
  
  10/10
  
  ATT&CK ID
  
  T1179 (Show technique in the MITRE ATT&CK™ matrix)
Hiding 2 Suspicious Indicators
- All indicators are available only in the private webservice or standalone version

Informative 10
Anti-Reverse Engineering
- PE file contains zero-size sections
  
  details
  
  Raw size of "BSS" is zero
  
  source
  
  Static Parser
  
  relevance
  
  10/10
General
- Creates mutants
  
  details
  
  "\Sessions\1\BaseNamedObjects\A497A168-269BD080-06C773C9-23FFC67A-12EB044DF"
  "\Sessions\1\BaseNamedObjects\Local\_!MSFTHISTORY!_"
  "\Sessions\1\BaseNamedObjects\Local\c:!users!%OSUSER%!appdata!local!microsoft!windows!temporary internet files!content.ie5!"
  "\Sessions\1\BaseNamedObjects\Local\c:!users!%OSUSER%!appdata!roaming!microsoft!windows!cookies!"
  "\Sessions\1\BaseNamedObjects\Local\c:!users!%OSUSER%!appdata!local!microsoft!windows!history!history.ie5!"
  "\Sessions\1\BaseNamedObjects\Local\WininetStartupMutex"
  "\Sessions\1\BaseNamedObjects\Local\WininetConnectionMutex"
  "\Sessions\1\BaseNamedObjects\Local\WininetProxyRegistryMutex"
  "\Sessions\1\BaseNamedObjects\RasPbFile"
  "\Sessions\1\BaseNamedObjects\Local\ZonesCounterMutex"
  "\Sessions\1\BaseNamedObjects\Local\ZoneAttributeCacheCounterMutex"
  "\Sessions\1\BaseNamedObjects\Local\ZonesCacheCounterMutex"
  "\Sessions\1\BaseNamedObjects\Local\ZonesLockedCacheCounterMutex"
  "\Sessions\1\BaseNamedObjects\Local\!IETld!Mutex"
  "\Sessions\1\BaseNamedObjects\Local\c:!users!%OSUSER%!appdata!roaming!microsoft!windows!ietldcache!"
  "Local\WininetProxyRegistryMutex"
  "Local\ZonesCounterMutex"
  "Local\c:!users!%OSUSER%!appdata!local!microsoft!windows!history!history.ie5!"
  "Local\ZoneAttributeCacheCounterMutex"
  "Local\!IETld!Mutex"
  
  source
  
  Created Mutant
  
  relevance
  
  3/10
- Overview of unique CLSIDs touched in registry
  
  details
  
  "cheatCSGO.exe" touched "Free Threaded XML DOM Document" (Path: "HKCU\CLSID\{2933BF91-7B36-11D2-B20E-00C04F983E60}")
  "cheatCSGO.exe" touched "NetworkListManager" (Path: "HKCU\CLSID\{DCB00C01-570F-4A9B-8D69-199FDBA5723B}")
  "cheatCSGO.exe" touched "Network List Manager" (Path: "HKCR\SOFTWARE\CLASSES\CLSID\{A47979D2-C419-11D9-A5B4-001185AD2B89}")
  "cheatCSGO.exe" touched "PSFactoryBuffer" (Path: "HKCU\CLSID\{1299CF18-C4F5-4B6A-BB0F-2299F0398E27}\TREATAS")
  
  source
  
  Registry Access
  
  relevance
  
  3/10
Installation/Persistance
- Connects to LPC ports
  
  details
  
  "cheatCSGO.exe" connecting to "\ThemeApiPort"
  
  source
  
  API Call
  
  relevance
  
  1/10
- Touches files in the Windows directory
  
  details
  
  "cheatCSGO.exe" touched file "C:\Windows\System32\tzres.dll"
  "cheatCSGO.exe" touched file "C:\Windows\System32\en-US\tzres.dll.mui"
  "cheatCSGO.exe" touched file "C:\Windows\Globalization\Sorting\SortDefault.nls"
  "cheatCSGO.exe" touched file "%LOCALAPPDATA%\Microsoft\Windows\Temporary Internet Files"
  "cheatCSGO.exe" touched file "C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Cookies"
  "cheatCSGO.exe" touched file "C:\Users\%USERNAME%\AppData\Local\Microsoft\Windows\History"
  "cheatCSGO.exe" touched file "C:\Users\%USERNAME%\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat"
  "cheatCSGO.exe" touched file "C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\Cookies\index.dat"
  "cheatCSGO.exe" touched file "C:\Users\%USERNAME%\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat"
  "cheatCSGO.exe" touched file "C:\Windows\System32\rsaenh.dll"
  "cheatCSGO.exe" touched file "C:\Windows\System32\en-US\urlmon.dll.mui"
  "cheatCSGO.exe" touched file "C:\Windows\System32\en-US\KernelBase.dll.mui"
  "cheatCSGO.exe" touched file "C:\Windows\System32\msxml3r.dll"
  "cheatCSGO.exe" touched file "C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat"
  "cheatCSGO.exe" touched file "%LOCALAPPDATA%\Microsoft\Windows\Temporary Internet Files"
  "cheatCSGO.exe" touched file "%APPDATA%\Microsoft\Windows\Cookies"
  "cheatCSGO.exe" touched file "%LOCALAPPDATA%\Microsoft\Windows\History"
  "cheatCSGO.exe" touched file "%LOCALAPPDATA%\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat"
  
  source
  
  API Call
  
  relevance
  
  7/10
Network Related
- Found potential URL in binary/memory
  
  details
  
  Pattern match: "https://dotbit.me/a/"
  Pattern match: "http://ip-api.com/json"
  
  source
  
  String
  
  relevance
  
  10/10
System Security
- Creates or modifies windows services
  
  details
  
  "cheatCSGO.exe" (Access type: "CREATE"; Path: "HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS")
  
  source
  
  Registry Access
  
  relevance
  
  10/10
  
  ATT&CK ID
  
  T1112 (Show technique in the MITRE ATT&CK™ matrix)
- Opens the Kernel Security Device Driver (KsecDD) of Windows
  
  details
  
  "cheatCSGO.exe" opened "\Device\KsecDD"
  
  source
  
  API Call
  
  relevance
  
  10/10
  
  ATT&CK ID
  
  T1215 (Show technique in the MITRE ATT&CK™ matrix)
Unusual Characteristics
- Found Delphi 4 - Delphi 2006 artifact
  
  details
  
  "094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin" has a PE timestamp using the buggy magic timestamp 0x2A425E19.
  
  source
  
  Static Parser
  
  relevance
  
  10/10
- Matched Compiler/Packer signature
  
  details
  
  "094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin" was detected as "BobSoft Mini Delphi -> BoB / BobSoft"
  
  source
  
  Static Parser
  
  relevance
  
  10/10
  
  ATT&CK ID
  
  T1002 (Show technique in the MITRE ATT&CK™ matrix)

File Details

All Details:

cheat CS GO.exe

Filename: cheat CS GO.exe
Size: 113KiB (115200 bytes)
Type: peexe executable
Description: PE32 executable (GUI) Intel 80386, for MS Windows
Architecture
: WINDOWS
SHA256
: 094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02
MD5
: 12fe26e33008d89783088e130bb76ded
SHA1
: 07ea2387384c2fe4d4ff8387429df018b38aee2a
ssdeep
: 3072:tuOSXpMx7ZAlHsbfUkolNGti7lfqeSxM3SpyEYnE/Rxg/:Zzx7ZApszolIo7lf/ipT/R
imphash
: 6d1f2b41411eacafcf447fc002d8cb00
authentihash
: ffda327d12f4b384c55cc1c82f12c40dcb90df922c398a8d5356f0514d358a11
Compiler/Packer
: BobSoft Mini Delphi -> BoB / BobSoft

Resources

Icon

Visualization

Input File (PortEx)

File Sections

Details	Name	Entropy	Virtual Address	Virtual Size	Raw Size	MD5	Characteristics
Name CODE Entropy 6.23851493192 Virtual Address 0x1000 Virtual Size 0x19224 Raw Size 0x19400 MD5 03e46cfee0860251047e13790d281537	CODE	6.23851493192	0x1000	0x19224	0x19400	03e46cfee0860251047e13790d281537	-
Name DATA Entropy 3.74383828481 Virtual Address 0x1b000 Virtual Size 0x494 Raw Size 0x600 MD5 c7dc377d7e71437393ed15af2b9fef21	DATA	3.74383828481	0x1b000	0x494	0x600	c7dc377d7e71437393ed15af2b9fef21	-
Name BSS Entropy 0 Virtual Address 0x1c000 Virtual Size 0xb5d Raw Size 0x0 MD5 d41d8cd98f00b204e9800998ecf8427e	BSS	0	0x1c000	0xb5d	0x0	d41d8cd98f00b204e9800998ecf8427e	-
Name .idata Entropy 4.58440849171 Virtual Address 0x1d000 Virtual Size 0x79e Raw Size 0x800 MD5 556c360ee726e003c5e1f6a038e97572	.idata	4.58440849171	0x1d000	0x79e	0x800	556c360ee726e003c5e1f6a038e97572	-
Name .reloc Entropy 6.60440613531 Virtual Address 0x1e000 Virtual Size 0x1a58 Raw Size 0x1c00 MD5 4847242976d2ebd72c3df41b8b89504d	.reloc	6.60440613531	0x1e000	0x1a58	0x1c00	4847242976d2ebd72c3df41b8b89504d	-

File Imports

FreeSid

RegCloseKey

RegEnumKeyA

RegOpenKeyExA

RegQueryValueExA

BitBlt

CreateCompatibleBitmap

CreateCompatibleDC

DeleteDC

DeleteObject

SelectObject

CopyFileW

CreateDirectoryW

DeleteCriticalSection

DeleteFileW

EnterCriticalSection

ExitProcess

FindClose

FindFirstFileW

FindNextFileW

FreeLibrary

GetCommandLineA

GetCurrentProcess

GetCurrentProcessId

GetCurrentThreadId

GetFileAttributesW

GetLocaleInfoA

GetModuleFileNameA

GetModuleHandleA

GetProcAddress

GetStartupInfoA

GetStdHandle

GetSystemInfo

GetThreadLocale

GetTickCount

GetVersion

GlobalLock

GlobalUnlock

InitializeCriticalSection

LeaveCriticalSection

LoadLibraryA

LoadLibraryExW

LocalAlloc

LocalFree

MultiByteToWideChar

QueryPerformanceCounter

RaiseException

RtlUnwind

Sleep

UnhandledExceptionFilter

VirtualAlloc

VirtualFree

WideCharToMultiByte

WriteFile

CoCreateInstance

OleInitialize

SysAllocStringLen

SysFreeString

SysReAllocStringLen

CharNextA

CharToOemBuffA

GetDC

GetKeyboardType

GetSystemMetrics

MessageBoxA

ReleaseDC

Screenshots

Loading content, please wait...

Hybrid Analysis

Tip: Click an analysed process below to view more details.

Analysed 1 process in total.

cheatCSGO.exe (PID: 3228) 53/69

Logged Script Calls	Logged Stdout	Extracted Streams	Memory Dumps
Reduced Monitoring	Network Activityy	Network Error	Multiscan Match

Network Analysis

This report was generated with enabled TOR analysis

DNS Requests

No relevant DNS requests were made.

Contacted Hosts

No relevant hosts were contacted.

HTTP Traffic

No relevant HTTP requests were made.

Extracted Strings

Download All Memory Strings (2.2KiB)

"countryCode":"

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

"query":"

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%APPDATA%\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%APPDATA%\.purple\accounts.xml

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%appdata%\2fda\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%appdata%\Electrum-LTC\wallets\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%appdata%\Electrum\wallets\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%APPDATA%\Ethereum\keystore\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%APPDATA%\Exodus\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%APPDATA%\Jaxx\Local Storage\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%APPDATA%\MultiBitHD\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%Appdata%\Psi+\profiles\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%Appdata%\Psi\profiles\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%APPDATA%\Skype

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%appdata%\Telegram Desktop\tdata\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%comspec%

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%PROGRAMDATA%\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%TEMP%\2fda\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%TEMP%\curbuf.dat

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%windir%\tracing

Unicode based on Runtime Data (cheatCSGO.exe )

*.json,*.seco

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

.address.txt

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

/c %WINDIR%\system32\timeout.exe 3 & del "

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

0!030L0^0w0

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

0$0.080B0L0V0`0j0t0~0

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

0'0F0Z0i0y0

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

0(050B0O0

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

0(0@0L0\0|0

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

0.1:1M1R1i1

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

0123456789ABCDEF

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

0D0M0]0e0k0t0{0

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

0E1R1W1x1

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

1"1*121:1B1J1R1Z1b1j1r1z1

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

1(121<1F1P1Z1d1n1x1

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

1(141<1S1b1r1

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

1/161N1p1

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

122?2Q2d2w2

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

131?1L1^1k1w1

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

1610149366

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

192%333R3b3

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

1=2c2o2|2

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

1?1K1X1j1

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

1C1O1V1h1z1

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

2"2,262@2J2T2^2h2r2|2

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

2$242D2T2d2t2

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

2$3:3E3d3

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

2&2+2;2@2E2U2Z2_2o2t2y2

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

2-2a2f2m2u2z2

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

282V2f2l2t2

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

2FA4F32D

Unicode based on Runtime Data (cheatCSGO.exe )

3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

3"3)3.3I3N3U3]3e3j3q3v3

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

3#363U3g3

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

3$343D3T3d3t3

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

3%3+474D4V4t4

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

3&303:3D3N3X3b3l3v3

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

3+4<4V4^4g4z4

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

303E3m3}3

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

34,4?4e4p4

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

3<3F3k3u3

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

3]3d3t3~3

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4|4

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

4 4*444>4H4R4\4f4p4z4

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

4"474J4`4s4

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

4&494L4_4r4

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

4'434@4R4X4l4

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

4)444@4T4c4n4z4

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

4+4J4\4{4

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

4=4M4l4y4

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

5 5?5Q5p5

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

5$565`5v5

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

5$585G5W5s5

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

5)5F5[5j5

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

505C5V5i5|5

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

5267#7>7

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

6%7*7;7I7s7

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

6'646F6j6

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

6'6:6M6`6s6

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

6(6A6_6v6

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

6*676C6M6W6a6l6v6

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

6*676C6P6b6k6p6u6

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

6*7=7\7|7

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

6-6@6X6j6|6

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

7 7&7.7C7I7O7U7k7}7

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

7"878_8t8

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

7#70757B7G7T7Y7f7k7x7}7

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

7'8<8d8y8

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

7)818R8W8\8a8

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

70C0P0b0o0

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

717D7W7j7}7

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

717G7^7l7

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

7818T8t8

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

8"838R8e8

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

8$8)8>8C8X8]8r8w8

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

8(8;8N8a8t8

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

8,818>8C8P8U8b8g8t8y8

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

838;8Z8b8

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

8<9Q9d9x9

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

9 9)929;9I9

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

9"9'94999F9K9X9]9j9o9|9

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

9"9,9>9N9v9~9

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

9-929N9j91:r:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

9.9:9I9U9]9h9n9{9

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

929E9X9k9~9

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

969M9d9{9

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

999J99:Y:r:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

:!:R:W:v:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

:":C:[:z:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

:#:0:5:?:D:I:T:Y:^:i:n:s:~:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

:&:::?:D:R:f:k:p:~:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

:):<:O:b:u:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

:3:W:x:}:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

:8:>:D:L:Z:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

:; ;3;F;Y;l;

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

;);<;L;_;o;

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

;0;C;V;i;

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

;9;F;^;w;

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

< <9<R<p<

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

<!=+=F=R=d=

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

<#</<6<@<J<a<r<

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

<#<0<B<\<

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

<&<7<J<Y<l<{<

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

<*<=<P<c<v<

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

<*=J=_={=

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

<.pbk

Unicode based on Runtime Data (cheatCSGO.exe )

</account>

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

</password>

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

</protocol>

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

</roster-cache>

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

<7=C=P=b=~=

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

<="=W=c=p=

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

<=(=2=?=Q=[=h={=

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

<==R=c=$>H>

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

<I<O<W<l<

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

<roster-cache>

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

=!=4=G=Z=m=

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

=#=,=3=B=I=k=

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

=#=4=>=F=Q=b=n=s=x=

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

=%=8=G=Z=i=|=

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

=&=E=W=v=

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

=*>>>N>Y>

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

=:>A>n>)???]?v?

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

=Q>o>t>z>

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

>!?(?7?=?J?d?l?

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

>">*>2>:>B>J>R>Z>b>j>r>z>

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

>#>4>M>[>y>~>

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

>&>0>:>D>N>X>b>l>v>

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

>&>5>H>Z>s>

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

>.>8>K>{>

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

>:>L>k>}>

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

>?C?O?T?

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

? ?*?4?>?H?R?\?f?p?z?

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

? ?4?;?I?Q?_?g?t?

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

? ?8?=?J?f?

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

?"?*?2?:?k?w?

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

?)?6?d?l?t?|?

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

?+?8?J?P?f?n?

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

?/?A?`?u?

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

?0?@?S?c?|?

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

?1?J?\?u?

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

[($^|^$)]

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

\accounts.xml

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

\BitcoinCore_custom\wallet.dat

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

\Config\*.vdf

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

\electrum.dat

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

\places.sqlite

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

\Sessions\1\Windows\ApiPort

Unicode based on Runtime Data (cheatCSGO.exe )

\ThemeApiPort

Unicode based on Runtime Data (cheatCSGO.exe )

\wallet.dat

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

a2VybmVsMzIuZGxs

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

AddressFamily

Unicode based on Runtime Data (cheatCSGO.exe )

advapi32.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

AllocateAndInitializeSid

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

AlwaysDrainOnRedirect

Unicode based on Runtime Data (cheatCSGO.exe )

AppData

Unicode based on Runtime Data (cheatCSGO.exe )

Attributes

Unicode based on Runtime Data (cheatCSGO.exe )

AutoConfigCustomUA

Unicode based on Runtime Data (cheatCSGO.exe )

AutoConfigURL

Unicode based on Runtime Data (cheatCSGO.exe )

AutoDetect

Unicode based on Runtime Data (cheatCSGO.exe )

AutodialDLL

Unicode based on Runtime Data (cheatCSGO.exe )

AutoProxyDetectType

Unicode based on Runtime Data (cheatCSGO.exe )

BadProxyExpiresTime

Unicode based on Runtime Data (cheatCSGO.exe )

Browsers\Cookies

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Browsers\History

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

BypassHTTPNoCacheCheck

Unicode based on Runtime Data (cheatCSGO.exe )

BypassSSLNoCacheCheck

Unicode based on Runtime Data (cheatCSGO.exe )

Cache

Unicode based on Runtime Data (cheatCSGO.exe )

CacheLimit

Unicode based on Runtime Data (cheatCSGO.exe )

CacheMode

Unicode based on Runtime Data (cheatCSGO.exe )

CacheOptions

Unicode based on Runtime Data (cheatCSGO.exe )

CachePath

Unicode based on Runtime Data (cheatCSGO.exe )

CachePrefix

Unicode based on Runtime Data (cheatCSGO.exe )

CacheRepair

Unicode based on Runtime Data (cheatCSGO.exe )

Category

Unicode based on Runtime Data (cheatCSGO.exe )

CEIPEnable

Unicode based on Runtime Data (cheatCSGO.exe )

CertCacheNoValidate

Unicode based on Runtime Data (cheatCSGO.exe )

CertificateRevocation

Unicode based on Runtime Data (cheatCSGO.exe )

CharNextA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CharToOemBuffA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

cheatCSGO.exe

Unicode based on Runtime Data (cheatCSGO.exe )

CheckTokenMembership

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Class

Unicode based on Runtime Data (cheatCSGO.exe )

ClientAuthBuiltInUI

Unicode based on Runtime Data (cheatCSGO.exe )

CloseHandle

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

closesocket

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CoCreateInstance

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Coins\Electrum

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Coins\Electrum-LTC

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Coins\Ethereum

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Coins\Exodus

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Coins\Jaxx\Local Storage\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Coins\MultiBitHD

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Com+Enabled

Unicode based on Runtime Data (cheatCSGO.exe )

Computer(Username) :

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

ComputerName

Unicode based on Runtime Data (cheatCSGO.exe )

Connection: close

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

ConnectRetries

Unicode based on Runtime Data (cheatCSGO.exe )

ConnectTimeOut

Unicode based on Runtime Data (cheatCSGO.exe )

ConsoleTracingMask

Unicode based on Runtime Data (cheatCSGO.exe )

Content-Length:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Unicode based on Runtime Data (cheatCSGO.exe )

CopyFileW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CPU Count:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CPU Model:

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CreateCompatibleBitmap

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CreateCompatibleDC

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CreateDirectoryW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CreateEnvironmentBlock

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CreateFileW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CreateMutexA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CreateProcessAsUserW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CreateProcessW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CreateStreamOnHGlobal

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CreateToolhelp32Snapshot

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CreateUriCacheSize

Unicode based on Runtime Data (cheatCSGO.exe )

crtdll.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

crypt32.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CryptAcquireContextA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CryptCreateHash

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CryptDestroyHash

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CryptGetHashParam

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CryptHashData

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CryptReleaseContext

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CryptUnprotectData

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CWDIllegalInDLLSearch

Unicode based on Runtime Data (cheatCSGO.exe )

D877F783D5*,map*

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

DebugHeapFlags

Unicode based on Runtime Data (cheatCSGO.exe )

Default

Unicode based on Runtime Data (cheatCSGO.exe )

DefaultAccessPermission

Unicode based on Runtime Data (cheatCSGO.exe )

DefaultConnectionSettings

Unicode based on Runtime Data (cheatCSGO.exe )

DeleteCriticalSection

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

DeleteFileW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

DeleteObject

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Description

Unicode based on Runtime Data (cheatCSGO.exe )

DhcpDomain

Unicode based on Runtime Data (cheatCSGO.exe )

DhcpNameServer

Unicode based on Runtime Data (cheatCSGO.exe )

Dhcpv6Domain

Unicode based on Runtime Data (cheatCSGO.exe )

DialupUseLanSettings

Unicode based on Runtime Data (cheatCSGO.exe )

Disable

Unicode based on Runtime Data (cheatCSGO.exe )

DisableBasicOverClearChannel

Unicode based on Runtime Data (cheatCSGO.exe )

DisableBranchCache

Unicode based on Runtime Data (cheatCSGO.exe )

DisableCachingOfSSLPages

Unicode based on Runtime Data (cheatCSGO.exe )

DisableImprovedZoneCheck

Unicode based on Runtime Data (cheatCSGO.exe )

DisableKeepAlive

Unicode based on Runtime Data (cheatCSGO.exe )

DisableMetaFiles

Unicode based on Runtime Data (cheatCSGO.exe )

DisableNTLMPreAuth

Unicode based on Runtime Data (cheatCSGO.exe )

DisablePassport

Unicode based on Runtime Data (cheatCSGO.exe )

DisableReadRange

Unicode based on Runtime Data (cheatCSGO.exe )

DisableSecuritySettingsCheck

Unicode based on Runtime Data (cheatCSGO.exe )

DisableUserModeCallbackFilter

Unicode based on Runtime Data (cheatCSGO.exe )

DisableWorkerThreadHibernation

Unicode based on Runtime Data (cheatCSGO.exe )

DisplayScriptDownloadFailureUI

Unicode based on Runtime Data (cheatCSGO.exe )

DisplayString

Unicode based on Runtime Data (cheatCSGO.exe )

DllFile

Unicode based on Runtime Data (cheatCSGO.exe )

dnsapi.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

DnsCacheEnabled

Unicode based on Runtime Data (cheatCSGO.exe )

DnsCacheEntries

Unicode based on Runtime Data (cheatCSGO.exe )

DnsCacheTimeout

Unicode based on Runtime Data (cheatCSGO.exe )

DnsQuery_A

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Domain

Unicode based on Runtime Data (cheatCSGO.exe )

DontUseDNSLoadBalancing

Unicode based on Runtime Data (cheatCSGO.exe )

DV8CF101-053A-4498-98VA-EAB3719A088W-VF9A8B7AD-0FA0-4899-B4RD-D8006738DQCD

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

electrum.dat

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

en-US

Unicode based on Runtime Data (cheatCSGO.exe )

EnableAutodial

Unicode based on Runtime Data (cheatCSGO.exe )

EnableAutoProxyResultCache

Unicode based on Runtime Data (cheatCSGO.exe )

EnableConsoleTracing

Unicode based on Runtime Data (cheatCSGO.exe )

Enabled

Unicode based on Runtime Data (cheatCSGO.exe )

EnableDhcp

Unicode based on Runtime Data (cheatCSGO.exe )

EnableFileTracing

Unicode based on Runtime Data (cheatCSGO.exe )

EnableHttp1_1

Unicode based on Runtime Data (cheatCSGO.exe )

EnableHttpTrace

Unicode based on Runtime Data (cheatCSGO.exe )

EnableNegotiate

Unicode based on Runtime Data (cheatCSGO.exe )

EnablePunycode

Unicode based on Runtime Data (cheatCSGO.exe )

EnterCriticalSection

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

EnumDisplayDevicesA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

EnumDisplayDevicesW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

EXE_PATH :

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

ExitProcess

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

ExpandEnvironmentStringsW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Export

Unicode based on Runtime Data (cheatCSGO.exe )

Feature_ClientAuthCertFilter

Unicode based on Runtime Data (cheatCSGO.exe )

FileDirectory

Unicode based on Runtime Data (cheatCSGO.exe )

FileExtensions

Unicode based on Runtime Data (cheatCSGO.exe )

FileTracingMask

Unicode based on Runtime Data (cheatCSGO.exe )

FindClose

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

FindFirstFileW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

FindNextFileW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

FipsAlgorithmPolicy

Unicode based on Runtime Data (cheatCSGO.exe )

Flags

Unicode based on Runtime Data (cheatCSGO.exe )

FolderTypeID

Unicode based on Runtime Data (cheatCSGO.exe )

FPUMaskValue

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

FreeLibrary

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

FromCacheTimeout

Unicode based on Runtime Data (cheatCSGO.exe )

FtpDefaultExpiryTimeSecs

Unicode based on Runtime Data (cheatCSGO.exe )

gdi32.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GdipCreateBitmapFromHBITMAP

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GdipDisposeImage

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GdipGetImageEncoders

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GdipGetImageEncodersSize

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Gdiplus.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GdiplusShutdown

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GdiplusStartup

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GdipSaveImageToStream

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GDIScreenShot

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetCommandLineA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetComputerNameW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetCurrentDirectoryW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetCurrentProcess

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetCurrentProcessId

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetCurrentThreadId

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetDriveTypeA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetFileAttributesW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetFileSize

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetHGlobalFromStream

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

gethostbyname

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetKeyboardLayoutList

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetKeyboardType

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetLastError

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetLocaleInfoA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetLocalTime

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetLogicalDriveStringsA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetModuleFileNameA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetModuleFileNameW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetModuleHandleA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetProcAddress

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetStartupInfoA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetStdHandle

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetSystemInfo

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetSystemMetrics

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetThreadLocale

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetTickCount

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetTimeZoneInformation

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetUserNameW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetVersion

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GLOBALFUNC

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GlobalLock

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GlobalMemoryStatus

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GlobalMemoryStatusEx

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GlobalSession

Unicode based on Runtime Data (cheatCSGO.exe )

GlobalUnlock

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GlobalUserOffline

Unicode based on Runtime Data (cheatCSGO.exe )

GlobalVars

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

HeaderExclusionListForCache

Unicode based on Runtime Data (cheatCSGO.exe )

HelperDllName

Unicode based on Runtime Data (cheatCSGO.exe )

History

Unicode based on Runtime Data (cheatCSGO.exe )

Hostname

Unicode based on Runtime Data (cheatCSGO.exe )

HTTP/1.0

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

http://ip-api.com/json

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

HttpAddRequestHeadersA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

HttpDefaultExpiryTimeSecs

Unicode based on Runtime Data (cheatCSGO.exe )

HttpOpenRequestA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

https://dotbit.me/a/

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

HttpSendRequestA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

IdnEnabled

Unicode based on Runtime Data (cheatCSGO.exe )

IETldDllVersionHigh

Unicode based on Runtime Data (cheatCSGO.exe )

IETldDllVersionLow

Unicode based on Runtime Data (cheatCSGO.exe )

IETldVersionHigh

Unicode based on Runtime Data (cheatCSGO.exe )

IETldVersionLow

Unicode based on Runtime Data (cheatCSGO.exe )

Image Path

Unicode based on Runtime Data (cheatCSGO.exe )

image/jpeg

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

InfoTip

Unicode based on Runtime Data (cheatCSGO.exe )

InitFolderHandler

Unicode based on Runtime Data (cheatCSGO.exe )

InitializeCriticalSection

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

InprocServer32

Unicode based on Runtime Data (cheatCSGO.exe )

InternetCloseHandle

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

InternetConnectA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

InternetCrackUrlA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

InternetExplorer

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

InternetOpenA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

InternetReadFile

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

InternetSetOptionA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

IntranetName

Unicode based on Runtime Data (cheatCSGO.exe )

IsWow64Process

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

KeepAliveTimeout

Unicode based on Runtime Data (cheatCSGO.exe )

kernel32.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Layouts:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

LdapClientIntegrity

Unicode based on Runtime Data (cheatCSGO.exe )

LeashLegacyCookies

Unicode based on Runtime Data (cheatCSGO.exe )

LeaveCriticalSection

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

LibraryPath

Unicode based on Runtime Data (cheatCSGO.exe )

LoadAppInit_DLLs

Unicode based on Runtime Data (cheatCSGO.exe )

LoadLibraryA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

LoadLibraryExW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Local AppData

Unicode based on Runtime Data (cheatCSGO.exe )

LocalAlloc

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

LocalFree

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

LocalizedName

Unicode based on Runtime Data (cheatCSGO.exe )

LocalRedirectOnly

Unicode based on Runtime Data (cheatCSGO.exe )

LocalTime:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

LookupAccountSidA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

MachineGuid

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

MachineID :

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

MachinePreferredUILanguages

Unicode based on Runtime Data (cheatCSGO.exe )

MachineThrottling

Unicode based on Runtime Data (cheatCSGO.exe )

Mapping

Unicode based on Runtime Data (cheatCSGO.exe )

MartaExtension

Unicode based on Runtime Data (cheatCSGO.exe )

MaxConnectionsPer1_0Server

Unicode based on Runtime Data (cheatCSGO.exe )

MaxConnectionsPerProxy

Unicode based on Runtime Data (cheatCSGO.exe )

MaxConnectionsPerServer

Unicode based on Runtime Data (cheatCSGO.exe )

MaxFileSize

Unicode based on Runtime Data (cheatCSGO.exe )

MaxHttpRedirects

Unicode based on Runtime Data (cheatCSGO.exe )

MaximumAllowedAllocationSize

Unicode based on Runtime Data (cheatCSGO.exe )

MaxRpcSize

Unicode based on Runtime Data (cheatCSGO.exe )

MaxSockaddrLength

Unicode based on Runtime Data (cheatCSGO.exe )

MaxSxSHashCount

Unicode based on Runtime Data (cheatCSGO.exe )

MBCSAPIforCrack

Unicode based on Runtime Data (cheatCSGO.exe )

MBCSServername

Unicode based on Runtime Data (cheatCSGO.exe )

mbhd.wallet.aes,mbhd.checkpoints,mbhd.spvchain,mbhd.yaml

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

MessageBoxA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

MigrateProxy

Unicode based on Runtime Data (cheatCSGO.exe )

MimeExclusionListForCache

Unicode based on Runtime Data (cheatCSGO.exe )

MinSockaddrLength

Unicode based on Runtime Data (cheatCSGO.exe )

Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1)

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

MozillaBased

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

MultiByteToWideChar

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

NameServer

Unicode based on Runtime Data (cheatCSGO.exe )

NameSpace_Callout

Unicode based on Runtime Data (cheatCSGO.exe )

NdrOleExtDLL

Unicode based on Runtime Data (cheatCSGO.exe )

Network

Unicode based on Runtime Data (cheatCSGO.exe )

Next_Catalog_Entry_ID

Unicode based on Runtime Data (cheatCSGO.exe )

NoCheckAutodialOverRide

Unicode based on Runtime Data (cheatCSGO.exe )

NoNetAutodial

Unicode based on Runtime Data (cheatCSGO.exe )

ntdll.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Num_Catalog_Entries

Unicode based on Runtime Data (cheatCSGO.exe )

ole32.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

oleaut32.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

OleInitialize

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

OOBEInProgress

Unicode based on Runtime Data (cheatCSGO.exe )

outlookDecrU

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

PackedCatalogItem

Unicode based on Runtime Data (cheatCSGO.exe )

PageAllocatorSystemHeapIsPrivate

Unicode based on Runtime Data (cheatCSGO.exe )

PageAllocatorUseSystemHeap

Unicode based on Runtime Data (cheatCSGO.exe )

ParentFolder

Unicode based on Runtime Data (cheatCSGO.exe )

ParsingName

Unicode based on Runtime Data (cheatCSGO.exe )

Password

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

PasswordsList.txt

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

PerUserCookies

Unicode based on Runtime Data (cheatCSGO.exe )

PerUserItem

Unicode based on Runtime Data (cheatCSGO.exe )

PortNumber

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

PreCreate

Unicode based on Runtime Data (cheatCSGO.exe )

PreferExternalManifest

Unicode based on Runtime Data (cheatCSGO.exe )

PreferredUILanguages

Unicode based on Runtime Data (cheatCSGO.exe )

PrivateKeyLifetimeSeconds

Unicode based on Runtime Data (cheatCSGO.exe )

PrivKeyCacheMaxItems

Unicode based on Runtime Data (cheatCSGO.exe )

PrivKeyCachePurgeIntervalSeconds

Unicode based on Runtime Data (cheatCSGO.exe )

Process32FirstW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Process32NextW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

ProductName

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

ProfileImagePath

Unicode based on Runtime Data (cheatCSGO.exe )

ProgramData

Unicode based on Runtime Data (cheatCSGO.exe )

ProviderId

Unicode based on Runtime Data (cheatCSGO.exe )

ProviderInfo

Unicode based on Runtime Data (cheatCSGO.exe )

ProxyBypass

Unicode based on Runtime Data (cheatCSGO.exe )

ProxyEnable

Unicode based on Runtime Data (cheatCSGO.exe )

ProxyHttp1.1

Unicode based on Runtime Data (cheatCSGO.exe )

ProxyOverride

Unicode based on Runtime Data (cheatCSGO.exe )

ProxyServer

Unicode based on Runtime Data (cheatCSGO.exe )

ProxySettingsPerUser

Unicode based on Runtime Data (cheatCSGO.exe )

PublishExpandedPath

Unicode based on Runtime Data (cheatCSGO.exe )

PVAULT_CRED8

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Q3JlYXRlVG9vbGhlbHAzMlNuYXBzaG90

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

QQQQQQQSV

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

QQQQQQQSVW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

QQQQQQSVW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

QQQQQQSVW3

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

QueryPerformanceCounter

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RaiseDefaultAuthnLevel

Unicode based on Runtime Data (cheatCSGO.exe )

RaiseException

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RASMAN

Ansi based on Runtime Data (cheatCSGO.exe )

rasman

Ansi based on Runtime Data (cheatCSGO.exe )

rasphone.pbk

Unicode based on Runtime Data (cheatCSGO.exe )

ReceiveTimeOut

Unicode based on Runtime Data (cheatCSGO.exe )

REG_SZ

Unicode based on Runtime Data (cheatCSGO.exe )

RegCloseKey

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RegCreateKeyExW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RegEnumKeyA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RegEnumKeyW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RegEnumValueW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RegisterAdapterName

Unicode based on Runtime Data (cheatCSGO.exe )

RegistrationEnabled

Unicode based on Runtime Data (cheatCSGO.exe )

RegOpenKeyExA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RegOpenKeyExW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RegOpenKeyW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RegQueryValueExA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RegQueryValueExW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RelativePath

Unicode based on Runtime Data (cheatCSGO.exe )

ReleaseDC

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

ReleaseMutex

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RemoteRpcDll

Unicode based on Runtime Data (cheatCSGO.exe )

RemoveDirectoryW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RGlzcGxheU5hbWU=

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RGlzcGxheVZlcnNpb24=

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Roamable

Unicode based on Runtime Data (cheatCSGO.exe )

RtlComputeCrc32

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RtlUnwind

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Runtime error at 00000000

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SafeDllSearchMode

Unicode based on Runtime Data (cheatCSGO.exe )

SafeProcessSearchMode

Unicode based on Runtime Data (cheatCSGO.exe )

SavedLegacySettings

Unicode based on Runtime Data (cheatCSGO.exe )

ScavengeCacheFileLifeTime

Unicode based on Runtime Data (cheatCSGO.exe )

ScavengeCacheFileLimit

Unicode based on Runtime Data (cheatCSGO.exe )

ScavengeCacheLowerBound

Unicode based on Runtime Data (cheatCSGO.exe )

SearchList

Unicode based on Runtime Data (cheatCSGO.exe )

SecureProtocols

Unicode based on Runtime Data (cheatCSGO.exe )

Security

Unicode based on Runtime Data (cheatCSGO.exe )

Security_HKLM_only

Unicode based on Runtime Data (cheatCSGO.exe )

SEFSRFdBUkVcREVTQ1JJUFRJT05cU3lzdGVtXENlbnRyYWxQcm9jZXNzb3JcMA==

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SELECT DATETIME( ((visits.visit_time/1000000)-11644473600),"unixepoch") , urls.title , urls.url FROM urls, visits WHERE urls.id = visits.url ORDER By visits.visit_time DESC LIMIT 0, 10000

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SELECT DATETIME(moz_historyvisits.visit_date/1000000, "unixepoch", "localtime"),moz_places.title,moz_places.url FROM moz_places, moz_historyvisits WHERE moz_places.id = moz_historyvisits.place_id ORDER By moz_historyvisits.visit_date DESC LIMIT 0, 10000

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SelectObject

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SendExtraCRLF

Unicode based on Runtime Data (cheatCSGO.exe )

SendTimeOut

Unicode based on Runtime Data (cheatCSGO.exe )

Serial_Access_Num

Unicode based on Runtime Data (cheatCSGO.exe )

ServerInfoTimeout

Unicode based on Runtime Data (cheatCSGO.exe )

SessionStartTimeDefaultDeltaSecs

Unicode based on Runtime Data (cheatCSGO.exe )

SetCurrentDirectoryW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SetDllDirectoryW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SetEnvironmentVariableW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

ShareCredsWithWinHttp

Unicode based on Runtime Data (cheatCSGO.exe )

shell32.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

ShellExecuteExW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Signature

Unicode based on Runtime Data (cheatCSGO.exe )

SocketReceiveBufferLength

Unicode based on Runtime Data (cheatCSGO.exe )

SocketSendBufferLength

Unicode based on Runtime Data (cheatCSGO.exe )

Software\Bitcoin\Bitcoin-Qt

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SOFTWARE\Borland\Delphi\RTL

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Software\Martin Prikryl\WinSCP 2\Sessions\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SOFTWARE\Microsoft\Cryptography

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SOFTWARE\Microsoft\Windows NT\CurrentVersion

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Software\monero-project\monero-core

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Software\Valve\Steam

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SQMServiceList

Unicode based on Runtime Data (cheatCSGO.exe )

StaleIETldCache

Unicode based on Runtime Data (cheatCSGO.exe )

SteamPath

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

StoresServiceClassInfo

Unicode based on Runtime Data (cheatCSGO.exe )

strDataDir

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Stream

Unicode based on Runtime Data (cheatCSGO.exe )

StreamResource

Unicode based on Runtime Data (cheatCSGO.exe )

StreamResourceType

Unicode based on Runtime Data (cheatCSGO.exe )

SupportedNameSpace

Unicode based on Runtime Data (cheatCSGO.exe )

SyncMode5

Unicode based on Runtime Data (cheatCSGO.exe )

SysAllocStringLen

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SysFreeString

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SysReAllocStringLen

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SYSTEM

Unicode based on Runtime Data (cheatCSGO.exe )

System.txt

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SystemSetupInProgress

Unicode based on Runtime Data (cheatCSGO.exe )

t-Rf;t f;J

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

TcpAutotuning

Unicode based on Runtime Data (cheatCSGO.exe )

ThemeApiConnectionRequest

Unicode based on Runtime Data (cheatCSGO.exe )

This program must be run under Win32$7

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

ThreadingModel

Unicode based on Runtime Data (cheatCSGO.exe )

TLDUpdates

Unicode based on Runtime Data (cheatCSGO.exe )

TPwdArray

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

TransparentEnabled

Unicode based on Runtime Data (cheatCSGO.exe )

Transports

Unicode based on Runtime Data (cheatCSGO.exe )

TSAppCompat

Unicode based on Runtime Data (cheatCSGO.exe )

TStringArray

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

TSUserEnabled

Unicode based on Runtime Data (cheatCSGO.exe )

U29mdHdhcmVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb25cVW5pbnN0YWxs

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

U29mdHdhcmVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb25cVW5pbnN0YWxsXA==

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

uFileFinderU

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

UHJvY2Vzc29yTmFtZVN0cmluZw==

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

UHJvY2VzczMyRmlyc3RX

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

UHJvY2VzczMyTmV4dFc=

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

uIE7_decodeU

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

UNCAsIntranet

Unicode based on Runtime Data (cheatCSGO.exe )

UnhandledExceptionFilter

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

uProgAndProc

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

UseDelayedAcceptance

Unicode based on Runtime Data (cheatCSGO.exe )

UseFilter

Unicode based on Runtime Data (cheatCSGO.exe )

UseHostnameAsAlias

Unicode based on Runtime Data (cheatCSGO.exe )

UseOldHostResolutionOrder

Unicode based on Runtime Data (cheatCSGO.exe )

User-agent:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

user32.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

userenv.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

UTF8ServerNameRes

Unicode based on Runtime Data (cheatCSGO.exe )

uURLHistory

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Version

Unicode based on Runtime Data (cheatCSGO.exe )

Video Info

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

VirtualAlloc

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

VirtualFree

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

wallet.dat

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

wallet_path

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

WarnAlwaysOnPost

Unicode based on Runtime Data (cheatCSGO.exe )

WarnOnBadCertRecving

Unicode based on Runtime Data (cheatCSGO.exe )

WarnOnHTTPSToHTTPRedirect

Unicode based on Runtime Data (cheatCSGO.exe )

WarnOnPost

Unicode based on Runtime Data (cheatCSGO.exe )

WarnOnPostRedirect

Unicode based on Runtime Data (cheatCSGO.exe )

WarnOnZoneCrossing

Unicode based on Runtime Data (cheatCSGO.exe )

WideCharToMultiByte

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

WideString

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Windows :

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

wininet.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

WinSock 2.0 Provider ID

Unicode based on Runtime Data (cheatCSGO.exe )

WinSock_Registry_Version

Unicode based on Runtime Data (cheatCSGO.exe )

WpadDecision

Unicode based on Runtime Data (cheatCSGO.exe )

WpadDecisionReason

Unicode based on Runtime Data (cheatCSGO.exe )

WpadDecisionTime

Unicode based on Runtime Data (cheatCSGO.exe )

WpadExpirationDays

Unicode based on Runtime Data (cheatCSGO.exe )

WpadLastNetwork

Unicode based on Runtime Data (cheatCSGO.exe )

WpadNetworkName

Unicode based on Runtime Data (cheatCSGO.exe )

WpadOverride

Unicode based on Runtime Data (cheatCSGO.exe )

WpadSearchAllDomains

Unicode based on Runtime Data (cheatCSGO.exe )

WriteFile

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Ws2_32NumHandleBuckets

Unicode based on Runtime Data (cheatCSGO.exe )

Ws2_32SpinCount

Unicode based on Runtime Data (cheatCSGO.exe )

WSAStartup

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

wsock32.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

wtsapi32.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

WTSGetActiveConsoleSessionId

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

WTSQueryUserToken

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

wvsprintfA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

{09477111-DE61-43CD-A5AA-D9F7B489301F}

Unicode based on Runtime Data (cheatCSGO.exe )

|||<[{99C3}]>|||

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%APPDATA%\.purple\accounts.xml

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%appdata%\Electrum-LTC\wallets\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%APPDATA%\Ethereum\keystore\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%APPDATA%\Jaxx\Local Storage\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%comspec%

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

*.json,*.seco

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

.address.txt

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

/c %WINDIR%\system32\timeout.exe 3 & del "

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

9.9:9I9U9]9h9n9{9

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

:!:R:W:v:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

:":C:[:z:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

:#:0:5:?:D:I:T:Y:^:i:n:s:~:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

:&:::?:D:R:f:k:p:~:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

:):<:O:b:u:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

:3:W:x:}:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

:8:>:D:L:Z:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

[($^|^$)]

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

\Sessions\1\Windows\ApiPort

Unicode based on Runtime Data (cheatCSGO.exe )

\ThemeApiPort

Unicode based on Runtime Data (cheatCSGO.exe )

AddressFamily

Unicode based on Runtime Data (cheatCSGO.exe )

BypassHTTPNoCacheCheck

Unicode based on Runtime Data (cheatCSGO.exe )

cheatCSGO.exe

Unicode based on Runtime Data (cheatCSGO.exe )

CloseHandle

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CoCreateInstance

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Coins\Electrum

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Coins\Electrum-LTC

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Coins\Ethereum

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Coins\Exodus

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Coins\Jaxx\Local Storage\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Coins\MultiBitHD

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Com+Enabled

Unicode based on Runtime Data (cheatCSGO.exe )

Computer(Username) :

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

ComputerName

Unicode based on Runtime Data (cheatCSGO.exe )

Connection: close

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CreateCompatibleBitmap

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CreateCompatibleDC

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CreateFileW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CreateMutexA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CreateProcessAsUserW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CreateProcessW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CreateToolhelp32Snapshot

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CryptGetHashParam

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

DefaultConnectionSettings

Unicode based on Runtime Data (cheatCSGO.exe )

Description

Unicode based on Runtime Data (cheatCSGO.exe )

DisablePassport

Unicode based on Runtime Data (cheatCSGO.exe )

DisplayScriptDownloadFailureUI

Unicode based on Runtime Data (cheatCSGO.exe )

DV8CF101-053A-4498-98VA-EAB3719A088W-VF9A8B7AD-0FA0-4899-B4RD-D8006738DQCD

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

EnableHttp1_1

Unicode based on Runtime Data (cheatCSGO.exe )

EnableHttpTrace

Unicode based on Runtime Data (cheatCSGO.exe )

EXE_PATH :

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

ExitProcess

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

ExpandEnvironmentStringsW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Export

Unicode based on Runtime Data (cheatCSGO.exe )

FtpDefaultExpiryTimeSecs

Unicode based on Runtime Data (cheatCSGO.exe )

GdipGetImageEncoders

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GdipGetImageEncodersSize

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GdipSaveImageToStream

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GDIScreenShot

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetCommandLineA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetComputerNameW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetCurrentDirectoryW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetCurrentProcess

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetCurrentProcessId

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetCurrentThreadId

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetDriveTypeA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetFileAttributesW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetFileSize

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetHGlobalFromStream

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

gethostbyname

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetKeyboardLayoutList

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetKeyboardType

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetLastError

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetLocaleInfoA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetLocalTime

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetLogicalDriveStringsA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetModuleFileNameA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetModuleFileNameW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetModuleHandleA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetProcAddress

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetStartupInfoA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetStdHandle

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetSystemInfo

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetSystemMetrics

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetThreadLocale

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetTickCount

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetTimeZoneInformation

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetUserNameW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetVersion

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GlobalMemoryStatus

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GlobalMemoryStatusEx

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

HTTP/1.0

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

http://ip-api.com/json

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

HttpAddRequestHeadersA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

HttpDefaultExpiryTimeSecs

Unicode based on Runtime Data (cheatCSGO.exe )

HttpOpenRequestA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

https://dotbit.me/a/

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

HttpSendRequestA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

IETldDllVersionHigh

Unicode based on Runtime Data (cheatCSGO.exe )

IETldDllVersionLow

Unicode based on Runtime Data (cheatCSGO.exe )

IETldVersionHigh

Unicode based on Runtime Data (cheatCSGO.exe )

IETldVersionLow

Unicode based on Runtime Data (cheatCSGO.exe )

InfoTip

Unicode based on Runtime Data (cheatCSGO.exe )

IsWow64Process

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Local AppData

Unicode based on Runtime Data (cheatCSGO.exe )

LocalAlloc

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

LocalFree

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

LocalizedName

Unicode based on Runtime Data (cheatCSGO.exe )

LocalRedirectOnly

Unicode based on Runtime Data (cheatCSGO.exe )

LocalTime:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

LookupAccountSidA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

MaxConnectionsPer1_0Server

Unicode based on Runtime Data (cheatCSGO.exe )

MaxConnectionsPerProxy

Unicode based on Runtime Data (cheatCSGO.exe )

MaxConnectionsPerServer

Unicode based on Runtime Data (cheatCSGO.exe )

MaxHttpRedirects

Unicode based on Runtime Data (cheatCSGO.exe )

MBCSAPIforCrack

Unicode based on Runtime Data (cheatCSGO.exe )

mbhd.wallet.aes,mbhd.checkpoints,mbhd.spvchain,mbhd.yaml

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

MinSockaddrLength

Unicode based on Runtime Data (cheatCSGO.exe )

Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1)

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

MozillaBased

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

PortNumber

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

PrivateKeyLifetimeSeconds

Unicode based on Runtime Data (cheatCSGO.exe )

PrivKeyCacheMaxItems

Unicode based on Runtime Data (cheatCSGO.exe )

PrivKeyCachePurgeIntervalSeconds

Unicode based on Runtime Data (cheatCSGO.exe )

Process32FirstW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Process32NextW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

ProviderInfo

Unicode based on Runtime Data (cheatCSGO.exe )

ProxyHttp1.1

Unicode based on Runtime Data (cheatCSGO.exe )

REG_SZ

Unicode based on Runtime Data (cheatCSGO.exe )

RegCloseKey

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RegCreateKeyExW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RegEnumKeyA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RegEnumKeyW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RegEnumValueW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RegisterAdapterName

Unicode based on Runtime Data (cheatCSGO.exe )

RegistrationEnabled

Unicode based on Runtime Data (cheatCSGO.exe )

RegOpenKeyExA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RegOpenKeyExW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RegOpenKeyW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RegQueryValueExA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RegQueryValueExW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

ReleaseMutex

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RemoteRpcDll

Unicode based on Runtime Data (cheatCSGO.exe )

RtlComputeCrc32

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Runtime error at 00000000

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SafeProcessSearchMode

Unicode based on Runtime Data (cheatCSGO.exe )

SELECT DATETIME( ((visits.visit_time/1000000)-11644473600),"unixepoch") , urls.title , urls.url FROM urls, visits WHERE urls.id = visits.url ORDER By visits.visit_time DESC LIMIT 0, 10000

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

ServerInfoTimeout

Unicode based on Runtime Data (cheatCSGO.exe )

SetCurrentDirectoryW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SetDllDirectoryW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SetEnvironmentVariableW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

ShareCredsWithWinHttp

Unicode based on Runtime Data (cheatCSGO.exe )

ShellExecuteExW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Software\Martin Prikryl\WinSCP 2\Sessions\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SOFTWARE\Microsoft\Windows NT\CurrentVersion

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Software\monero-project\monero-core

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SQMServiceList

Unicode based on Runtime Data (cheatCSGO.exe )

StoresServiceClassInfo

Unicode based on Runtime Data (cheatCSGO.exe )

SupportedNameSpace

Unicode based on Runtime Data (cheatCSGO.exe )

ThemeApiConnectionRequest

Unicode based on Runtime Data (cheatCSGO.exe )

Transports

Unicode based on Runtime Data (cheatCSGO.exe )

TSAppCompat

Unicode based on Runtime Data (cheatCSGO.exe )

User-agent:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Version

Unicode based on Runtime Data (cheatCSGO.exe )

Video Info

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

WarnAlwaysOnPost

Unicode based on Runtime Data (cheatCSGO.exe )

WarnOnHTTPSToHTTPRedirect

Unicode based on Runtime Data (cheatCSGO.exe )

WarnOnPost

Unicode based on Runtime Data (cheatCSGO.exe )

WarnOnPostRedirect

Unicode based on Runtime Data (cheatCSGO.exe )

WinSock 2.0 Provider ID

Unicode based on Runtime Data (cheatCSGO.exe )

WinSock_Registry_Version

Unicode based on Runtime Data (cheatCSGO.exe )

WpadSearchAllDomains

Unicode based on Runtime Data (cheatCSGO.exe )

WTSGetActiveConsoleSessionId

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

{09477111-DE61-43CD-A5AA-D9F7B489301F}

Unicode based on Runtime Data (cheatCSGO.exe )

|||<[{99C3}]>|||

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

"countryCode":"

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

"query":"

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%APPDATA%\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%APPDATA%\.purple\accounts.xml

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%appdata%\2fda\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%appdata%\Electrum-LTC\wallets\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%appdata%\Electrum\wallets\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%APPDATA%\Ethereum\keystore\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%APPDATA%\Exodus\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%APPDATA%\Jaxx\Local Storage\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%APPDATA%\MultiBitHD\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%Appdata%\Psi+\profiles\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%Appdata%\Psi\profiles\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%APPDATA%\Skype

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%appdata%\Telegram Desktop\tdata\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%comspec%

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%PROGRAMDATA%\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%TEMP%\2fda\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%TEMP%\curbuf.dat

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

*.json,*.seco

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

.address.txt

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

/c %WINDIR%\system32\timeout.exe 3 & del "

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

0!030L0^0w0

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

0$0.080B0L0V0`0j0t0~0

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

0'0F0Z0i0y0

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

0(050B0O0

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

0(0@0L0\0|0

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

0.1:1M1R1i1

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

0123456789ABCDEF

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

0D0M0]0e0k0t0{0

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

0E1R1W1x1

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

1"1*121:1B1J1R1Z1b1j1r1z1

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

1(121<1F1P1Z1d1n1x1

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

1(141<1S1b1r1

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

1/161N1p1

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

122?2Q2d2w2

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

131?1L1^1k1w1

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

1610149366

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

192%333R3b3

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

1=2c2o2|2

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

1?1K1X1j1

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

1C1O1V1h1z1

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

2"2,262@2J2T2^2h2r2|2

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

2$242D2T2d2t2

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

2$3:3E3d3

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

2&2+2;2@2E2U2Z2_2o2t2y2

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

2-2a2f2m2u2z2

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

282V2f2l2t2

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

3"3)3.3I3N3U3]3e3j3q3v3

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

3#363U3g3

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

3$343D3T3d3t3

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

3%3+474D4V4t4

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

3&303:3D3N3X3b3l3v3

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

3+4<4V4^4g4z4

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

303E3m3}3

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

34,4?4e4p4

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

3<3F3k3u3

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

3]3d3t3~3

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4|4

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

4 4*444>4H4R4\4f4p4z4

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

4"474J4`4s4

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

4&494L4_4r4

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

4'434@4R4X4l4

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

4)444@4T4c4n4z4

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

4+4J4\4{4

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

4=4M4l4y4

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

5 5?5Q5p5

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

5$565`5v5

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

5$585G5W5s5

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

5)5F5[5j5

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

505C5V5i5|5

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

5267#7>7

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

6%7*7;7I7s7

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

6'646F6j6

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

6'6:6M6`6s6

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

6(6A6_6v6

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

6*676C6M6W6a6l6v6

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

6*676C6P6b6k6p6u6

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

6*7=7\7|7

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

6-6@6X6j6|6

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

7 7&7.7C7I7O7U7k7}7

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

7"878_8t8

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

7#70757B7G7T7Y7f7k7x7}7

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

7'8<8d8y8

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

7)818R8W8\8a8

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

70C0P0b0o0

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

717D7W7j7}7

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

717G7^7l7

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

7818T8t8

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

8"838R8e8

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

8$8)8>8C8X8]8r8w8

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

8(8;8N8a8t8

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

8,818>8C8P8U8b8g8t8y8

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

838;8Z8b8

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

8<9Q9d9x9

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

9 9)929;9I9

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

9"9'94999F9K9X9]9j9o9|9

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

9"9,9>9N9v9~9

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

9-929N9j91:r:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

9.9:9I9U9]9h9n9{9

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

929E9X9k9~9

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

969M9d9{9

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

999J99:Y:r:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

:!:R:W:v:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

:":C:[:z:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

:#:0:5:?:D:I:T:Y:^:i:n:s:~:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

:&:::?:D:R:f:k:p:~:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

:):<:O:b:u:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

:3:W:x:}:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

:8:>:D:L:Z:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

:; ;3;F;Y;l;

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

;);<;L;_;o;

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

;0;C;V;i;

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

;9;F;^;w;

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

< <9<R<p<

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

<!=+=F=R=d=

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

<#</<6<@<J<a<r<

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

<#<0<B<\<

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

<&<7<J<Y<l<{<

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

<*<=<P<c<v<

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

<*=J=_={=

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

</account>

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

</password>

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

</protocol>

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

</roster-cache>

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

<7=C=P=b=~=

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

<="=W=c=p=

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

<=(=2=?=Q=[=h={=

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

<==R=c=$>H>

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

<I<O<W<l<

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

<roster-cache>

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

=!=4=G=Z=m=

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

=#=,=3=B=I=k=

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

=#=4=>=F=Q=b=n=s=x=

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

=%=8=G=Z=i=|=

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

=&=E=W=v=

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

=*>>>N>Y>

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

=:>A>n>)???]?v?

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

=Q>o>t>z>

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

>!?(?7?=?J?d?l?

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

>">*>2>:>B>J>R>Z>b>j>r>z>

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

>#>4>M>[>y>~>

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

>&>0>:>D>N>X>b>l>v>

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

>&>5>H>Z>s>

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

>.>8>K>{>

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

>:>L>k>}>

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

>?C?O?T?

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

? ?*?4?>?H?R?\?f?p?z?

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

? ?4?;?I?Q?_?g?t?

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

? ?8?=?J?f?

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

?"?*?2?:?k?w?

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

?)?6?d?l?t?|?

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

?+?8?J?P?f?n?

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

?/?A?`?u?

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

?0?@?S?c?|?

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

?1?J?\?u?

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

[($^|^$)]

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

\accounts.xml

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

\BitcoinCore_custom\wallet.dat

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

\Config\*.vdf

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

\electrum.dat

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

\places.sqlite

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

\wallet.dat

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

a2VybmVsMzIuZGxs

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

advapi32.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

AllocateAndInitializeSid

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Browsers\Cookies

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Browsers\History

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CharNextA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CharToOemBuffA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CheckTokenMembership

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CloseHandle

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

closesocket

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CoCreateInstance

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Coins\Electrum

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Coins\Electrum-LTC

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Coins\Ethereum

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Coins\Exodus

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Coins\Jaxx\Local Storage\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Coins\MultiBitHD

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Computer(Username) :

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Connection: close

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Content-Length:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CopyFileW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CPU Count:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CPU Model:

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CreateCompatibleBitmap

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CreateCompatibleDC

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CreateDirectoryW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CreateEnvironmentBlock

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CreateFileW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CreateMutexA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CreateProcessAsUserW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CreateProcessW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CreateStreamOnHGlobal

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CreateToolhelp32Snapshot

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

crtdll.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

crypt32.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CryptAcquireContextA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CryptCreateHash

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CryptDestroyHash

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CryptGetHashParam

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CryptHashData

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CryptReleaseContext

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

CryptUnprotectData

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

D877F783D5*,map*

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

DeleteCriticalSection

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

DeleteFileW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

DeleteObject

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

dnsapi.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

DnsQuery_A

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

DV8CF101-053A-4498-98VA-EAB3719A088W-VF9A8B7AD-0FA0-4899-B4RD-D8006738DQCD

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

electrum.dat

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

EnterCriticalSection

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

EnumDisplayDevicesA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

EnumDisplayDevicesW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

EXE_PATH :

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

ExitProcess

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

ExpandEnvironmentStringsW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

FindClose

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

FindFirstFileW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

FindNextFileW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

FPUMaskValue

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

FreeLibrary

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

gdi32.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GdipCreateBitmapFromHBITMAP

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GdipDisposeImage

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GdipGetImageEncoders

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GdipGetImageEncodersSize

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Gdiplus.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GdiplusShutdown

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GdiplusStartup

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GdipSaveImageToStream

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GDIScreenShot

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetCommandLineA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetComputerNameW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetCurrentDirectoryW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetCurrentProcess

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetCurrentProcessId

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetCurrentThreadId

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetDriveTypeA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetFileAttributesW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetFileSize

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetHGlobalFromStream

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

gethostbyname

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetKeyboardLayoutList

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetKeyboardType

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetLastError

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetLocaleInfoA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetLocalTime

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetLogicalDriveStringsA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetModuleFileNameA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetModuleFileNameW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetModuleHandleA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetProcAddress

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetStartupInfoA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetStdHandle

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetSystemInfo

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetSystemMetrics

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetThreadLocale

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetTickCount

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetTimeZoneInformation

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetUserNameW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GetVersion

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GLOBALFUNC

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GlobalLock

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GlobalMemoryStatus

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GlobalMemoryStatusEx

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GlobalUnlock

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

GlobalVars

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

HTTP/1.0

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

http://ip-api.com/json

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

HttpAddRequestHeadersA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

HttpOpenRequestA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

https://dotbit.me/a/

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

HttpSendRequestA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

image/jpeg

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

InitializeCriticalSection

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

InternetCloseHandle

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

InternetConnectA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

InternetCrackUrlA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

InternetExplorer

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

InternetOpenA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

InternetReadFile

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

InternetSetOptionA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

IsWow64Process

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

kernel32.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Layouts:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

LeaveCriticalSection

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

LoadLibraryA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

LoadLibraryExW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

LocalAlloc

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

LocalFree

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

LocalTime:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

LookupAccountSidA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

MachineGuid

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

MachineID :

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

mbhd.wallet.aes,mbhd.checkpoints,mbhd.spvchain,mbhd.yaml

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

MessageBoxA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.1)

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

MozillaBased

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

MultiByteToWideChar

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

ntdll.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

ole32.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

oleaut32.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

OleInitialize

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

outlookDecrU

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Password

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

PasswordsList.txt

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

PortNumber

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Process32FirstW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Process32NextW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

ProductName

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

PVAULT_CRED8

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Q3JlYXRlVG9vbGhlbHAzMlNuYXBzaG90

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

QQQQQQQSV

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

QQQQQQQSVW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

QQQQQQSVW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

QQQQQQSVW3

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

QueryPerformanceCounter

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RaiseException

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RegCloseKey

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RegCreateKeyExW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RegEnumKeyA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RegEnumKeyW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RegEnumValueW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RegOpenKeyExA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RegOpenKeyExW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RegOpenKeyW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RegQueryValueExA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RegQueryValueExW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

ReleaseDC

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

ReleaseMutex

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RemoveDirectoryW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RGlzcGxheU5hbWU=

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RGlzcGxheVZlcnNpb24=

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RtlComputeCrc32

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

RtlUnwind

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Runtime error at 00000000

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SEFSRFdBUkVcREVTQ1JJUFRJT05cU3lzdGVtXENlbnRyYWxQcm9jZXNzb3JcMA==

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SELECT DATETIME( ((visits.visit_time/1000000)-11644473600),"unixepoch") , urls.title , urls.url FROM urls, visits WHERE urls.id = visits.url ORDER By visits.visit_time DESC LIMIT 0, 10000

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SelectObject

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SetCurrentDirectoryW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SetDllDirectoryW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SetEnvironmentVariableW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

shell32.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

ShellExecuteExW

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Software\Bitcoin\Bitcoin-Qt

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SOFTWARE\Borland\Delphi\RTL

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Software\Martin Prikryl\WinSCP 2\Sessions\

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SOFTWARE\Microsoft\Cryptography

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SOFTWARE\Microsoft\Windows NT\CurrentVersion

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Software\monero-project\monero-core

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Software\Valve\Steam

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SteamPath

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

strDataDir

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SysAllocStringLen

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SysFreeString

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

SysReAllocStringLen

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

System.txt

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

t-Rf;t f;J

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

This program must be run under Win32$7

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

TPwdArray

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

TStringArray

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

U29mdHdhcmVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb25cVW5pbnN0YWxs

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

U29mdHdhcmVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb25cVW5pbnN0YWxsXA==

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

uFileFinderU

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

UHJvY2Vzc29yTmFtZVN0cmluZw==

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

UHJvY2VzczMyRmlyc3RX

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

UHJvY2VzczMyTmV4dFc=

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

uIE7_decodeU

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

UnhandledExceptionFilter

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

uProgAndProc

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

User-agent:

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

user32.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

userenv.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

uURLHistory

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Video Info

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

VirtualAlloc

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

VirtualFree

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

wallet.dat

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

wallet_path

Unicode based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

WideCharToMultiByte

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

WideString

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

Windows :

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

wininet.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

WriteFile

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

WSAStartup

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

wsock32.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

wtsapi32.dll

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

WTSGetActiveConsoleSessionId

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

WTSQueryUserToken

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

wvsprintfA

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

|||<[{99C3}]>|||

Ansi based on Memory/File Scan (094b703ae10cc35826aa30f7f57ab39cad571459a922721a48113a4536c92a02.bin)

%windir%\tracing

Unicode based on Runtime Data (cheatCSGO.exe )

2FA4F32D

Unicode based on Runtime Data (cheatCSGO.exe )

<.pbk

Unicode based on Runtime Data (cheatCSGO.exe )

\Sessions\1\Windows\ApiPort

Unicode based on Runtime Data (cheatCSGO.exe )

\ThemeApiPort

Unicode based on Runtime Data (cheatCSGO.exe )

AddressFamily

Unicode based on Runtime Data (cheatCSGO.exe )

AlwaysDrainOnRedirect

Unicode based on Runtime Data (cheatCSGO.exe )

AppData

Unicode based on Runtime Data (cheatCSGO.exe )

Attributes

Unicode based on Runtime Data (cheatCSGO.exe )

AutoConfigCustomUA

Unicode based on Runtime Data (cheatCSGO.exe )

AutoConfigURL

Unicode based on Runtime Data (cheatCSGO.exe )

AutoDetect

Unicode based on Runtime Data (cheatCSGO.exe )

AutodialDLL

Unicode based on Runtime Data (cheatCSGO.exe )

AutoProxyDetectType

Unicode based on Runtime Data (cheatCSGO.exe )

BadProxyExpiresTime

Unicode based on Runtime Data (cheatCSGO.exe )

BypassHTTPNoCacheCheck

Unicode based on Runtime Data (cheatCSGO.exe )

BypassSSLNoCacheCheck

Unicode based on Runtime Data (cheatCSGO.exe )

Cache

Unicode based on Runtime Data (cheatCSGO.exe )

CacheLimit

Unicode based on Runtime Data (cheatCSGO.exe )

CacheMode

Unicode based on Runtime Data (cheatCSGO.exe )

CacheOptions

Unicode based on Runtime Data (cheatCSGO.exe )

CachePath

Unicode based on Runtime Data (cheatCSGO.exe )

CachePrefix

Unicode based on Runtime Data (cheatCSGO.exe )

CacheRepair

Unicode based on Runtime Data (cheatCSGO.exe )

Extracted Files

No significant files were extracted.

Notifications

Runtime

Added comment to Virus Total report

Enforcing malicious verdict, as a reliable source indicates high confidence

Not all sources for indicator ID "api-55" are available in the report

Not all sources for indicator ID "mutant-0" are available in the report

Not all sources for indicator ID "string-64" are available in the report

Community

There are no community comments.

You must be logged in to submit a comment.

cheat CS GO.exe

Incident Response

Risk Assessment

MITRE ATT&CK™ Techniques Detection

Indicators

Malicious Indicators 4

Suspicious Indicators 15

Informative 10

File Details

cheat CS GO.exe

Resources

Visualization

File Sections

File Imports

Screenshots

System Resource Monitor

Hybrid Analysis

Network Analysis

DNS Requests

Contacted Hosts

HTTP Traffic

Extracted Strings

Extracted Files

Notifications

Runtime

Community

Latest News

Vetting required

Request Report Deletion

Link