26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 53:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T43b,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Sample 7a71a886d46f… — Score 50/100 — Hybrid Analysis","description":"Malicious verdict for sample 7a71a886d46f…. Threat score 50/100. 0/24 AV engines flagged this file. 3 malicious and 17 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/7a71a886d46f90a91cd0994a372db22c11c7bc23f4b3fa88177c2ed4def4ba9f","keywords":["Malicious","malware analysis","sandbox report","threat intelligence","7a71a886d46f90a91cd0994a372db22c11c7bc23f4b3fa88177c2ed4def4ba9f"],"about":{"@type":"SoftwareApplication","name":"Ultimate_Defender_Pro_Shield-Installer","applicationCategory":["peexe","executable"],"identifier":"7a71a886d46f90a91cd0994a372db22c11c7bc23f4b3fa88177c2ed4def4ba9f","additionalType":"Malicious sample"},"threatScore":50,"antivirusDetections":{"malicious":0,"total":24},"behavioralIndicators":{"malicious":3,"suspicious":17},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T5b3,"Ultimate_Defender_Pro_Shield-Installer.exe" called "FindResourceW" with parameter "11111" - (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "FindResourceW" with parameter "80617676" - (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "FindResourceW" with parameter "80581292" - (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "FindResourceW" with parameter "80705332" - (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "FindResourceW" with parameter "80705276" - (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "FindResourceW" with parameter "80618204" - (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "FindResourceW" with parameter "80581452" - (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "FindResourceW" with parameter "80618300" - (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "FindResourceW" with parameter "80581932" - (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "FindResourceW" with parameter "80627228" - (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "FindResourceW" with parameter "80597692" - (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "FindResourceW" with parameter "80706452" - (UID: 00000000-00008068)28:T9a7,Found reference to API "WaitForSingleObject" (Indicator: "WaitForSingleObject"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "QueryPerformanceCounter" (Indicator: "QueryPerformanceCounter"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "QueryPerformanceFrequency" (Indicator: "QueryPerformanceFrequency"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "MsgWaitForMultipleObjects" (Indicator: "WaitForMultipleObjects"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "GetTickCount64" (Indicator: "GetTickCount64"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "GetSystemTimeAsFileTime" (Indicator: "GetSystemTimeAsFileTime"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "WaitForMultipleObjectsEx" (Indicator: "WaitForMultipleObjects"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "WaitForMultipleObjectsEx" (Indicator: "WaitForMultipleObjectsEx"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "SetTimer" (Indicator: "SetTimer"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "MsgWaitForMultipleObjectsEx" (Indicator: "WaitForMultipleObjects"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "MsgWaitForMultipleObjectsEx" (Indicator: "WaitForMultipleObjectsEx"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "QueryPerformanceFrequency" (Indicator: "QueryPerformanceFrequency"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API "QueryPerformanceCounter" (Indicator: "QueryPerformanceCounter"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API "WaitForSingleObject" (Indicator: "WaitForSingleObject"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API "MsgWaitForMultipleObjects" (Indicator: "WaitForMultipleObjects"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API "GetTickCount64" (Indicator: "GetTickCount64"; Source: "00000000-00002788.00000001.108982.00401000.00000020.mdmp") Found reference to API "SetTimer" (Indicator: "SetTimer"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.72F97000.00000002.mdmp")29:T558,"Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetWindowTextW" with parameter "Select the language to use during the installation." - (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetWindowTextW" with parameter "4f004b00" - (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetWindowTextW" with parameter "Cancel" - (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetWindowTextW" with parameter "License Agreement" - (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetWindowTextW" with parameter "Please read the following important information before continuing." - (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetWindowTextW" with parameter "Please read the following License Agreement. You must accept the terms of this agreement before continuing with the installation." - (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetWindowTextW" with parameter "I &accept the agreement" - (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetWindowTextW" with parameter "I &do not accept the agreement" - (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetWindowTextW" with parameter "&Next" - (UID: 00000000-00008068)2a:T2bf4,"Ultimate_Defender_Pro_Shield-Installer.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "RtlGetVersion" with parameter 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 (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "RtlGetVersion" with parameter 1c0100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "RtlGetVersion" with parameter 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 (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "RtlGetVersion" with parameter 000000000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "RtlGetVersion" with parameter 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 (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "RtlGetVersion" with parameter 1c0100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "RtlGetVersion" with parameter 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 (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "RtlGetVersion" with parameter 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 (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "RtlGetVersion" with parameter 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 (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "RtlGetVersion" with parameter 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 (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "RtlGetVersion" with parameter 1c0100000a00000000000000ab3f0000020000000000ffff00000000c8bf810038cfd7775436bd0234c08100010000000836bd025436bd020836bd02040000000400000000e011770010000034c08100010000000836bd02cd97d7779c97d7777518ff80b50f08770836bd020000d77700000000c42290760000000080ee0e770100000000000000f8e2117700000000040000000000000048401077f8e2117738c0810080e86577a8a7bd0280e8657734c081000000000080e8657700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000005e94c0027494c002 (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "RtlGetVersion" with parameter 1c0100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000005e49650776496507 (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "RtlGetVersion" with parameter 1c0100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000005e49650772496507 (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "RtlGetVersion" with parameter 1c0100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000007e98c0029498c002 (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "RtlGetVersion" with parameter 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 (UID: 00000000-00008068)2b:T483,Found reference to API "GetSystemInfo" (Indicator: "GetSystemInfo"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "GetMonitorInfoW" (Indicator: "GetMonitorInfo"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "GetSystemInfo" (Indicator: "GetSystemInfo"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API "GetNativeSystemInfo" (Indicator: "GetNativeSystemInfo"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API "GetMonitorInfoW" (Indicator: "GetMonitorInfo"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API "WTSRegisterSessionNotification" (Indicator: "WTSRegisterSessionNotification"; Source: "00000000-00008068.00000000.107182.006C4000.00000004.mdmp, 00000000-00008068.00000001.109102.006C4000.00000004.mdmp") Found reference to API "GetNativeSystemInfo" (Indicator: "GetNativeSystemInfo"; Source: "00000000-00008068.00000000.107182.006C4000.00000004.mdmp, 00000000-00008068.00000001.109102.006C4000.00000004.mdmp")2c:T50b,Found reference to API "GetForegroundWindow" (Indicator: "GetForegroundWindow"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "GetActiveWindow" (Indicator: "GetActiveWindow"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "GetWindowTextW" (Indicator: "GetWindowText"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "EnumWindows" (Indicator: "EnumWindows"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "FindWindowW" (Indicator: "FindWindow"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "FindWindowExW" (Indicator: "FindWindow"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "EnumWindows" (Indicator: "EnumWindows"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API "GetActiveWindow" (Indicator: "GetActiveWindow"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API "GetWindowTextW" (Indicator: "GetWindowText"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp")2d:Tc70,Observed string: "Ver %1" (Indicator: "ver ") in Source: 00000000-00002788.00000001.108982.04A60000.00000004.mdmp Observed string: "ver" (Indicator: "ver") in Source: 00000000-00002788.00000001.108982.04A60000.00000004.mdmp Observed string: "ver mindst [gb] GB ledig diskplads." (Indicator: "ver ") in Source: 00000000-00002788.00000001.108982.04A60000.00000004.mdmp Observed string: "ver mindst [mb] MB ledig diskplads." (Indicator: "ver ") in Source: 00000000-00002788.00000001.108982.04A60000.00000004.mdmp Observed string: "ver mindst %1 KB ledig diskplads for at kunne installere programmet, men det valgte drev har kun %2 KB ledig diskplads." (Indicator: "ver ") in Source: 00000000-00002788.00000001.108982.04A60000.00000004.mdmp Observed string: "ver administrator-rettigheder), eller for dig alene." (Indicator: "ver ") in Source: 00000000-00002788.00000001.108982.04A60000.00000004.mdmp Observed string: "ver administrator-rettigheder)." (Indicator: "ver ") in Source: 00000000-00002788.00000001.108982.04A60000.00000004.mdmp Observed string: "ver %1 med Service Pack %2 eller senere." (Indicator: "ver ") in Source: 00000000-00002788.00000001.108982.04A60000.00000004.mdmp Observed string: "ver %1 version %2 eller senere." (Indicator: "ver ") in Source: 00000000-00002788.00000001.108982.04A60000.00000004.mdmp Observed string: "ver mindst [gb] GB ledig diskplads." (Indicator: "ver ") in Source: 00000000-00008068.00000000.107182.04BE0000.00000004.mdmp 00000000-00008068.00000001.109102.04BE0000.00000004.mdmp Observed string: "ver mindst [mb] MB ledig diskplads." (Indicator: "ver ") in Source: 00000000-00008068.00000000.107182.04BE0000.00000004.mdmp 00000000-00008068.00000001.109102.04BE0000.00000004.mdmp Observed string: "ver mindst %1 KB ledig diskplads for at kunne installere programmet, men det valgte drev har kun %2 KB ledig diskplads." (Indicator: "ver ") in Source: 00000000-00008068.00000000.107182.04BE0000.00000004.mdmp 00000000-00008068.00000001.109102.04BE0000.00000004.mdmp Observed string: "ver administrator-rettigheder), eller for dig alene." (Indicator: "ver ") in Source: 00000000-00008068.00000000.107182.04BE0000.00000004.mdmp 00000000-00008068.00000001.109102.04BE0000.00000004.mdmp Observed string: "ver administrator-rettigheder)." (Indicator: "ver ") in Source: 00000000-00008068.00000000.107182.04BE0000.00000004.mdmp 00000000-00008068.00000001.109102.04BE0000.00000004.mdmp Observed string: "ver %1 med Service Pack %2 eller senere." (Indicator: "ver ") in Source: 00000000-00008068.00000000.107182.04BE0000.00000004.mdmp 00000000-00008068.00000001.109102.04BE0000.00000004.mdmp Observed string: "ver %1 version %2 eller senere." (Indicator: "ver ") in Source: 00000000-00008068.00000000.107182.04BE0000.00000004.mdmp 00000000-00008068.00000001.109102.04BE0000.00000004.mdmp Observed string: "Ver %1" (Indicator: "ver ") in Source: 00000000-00008068.00000000.107182.05EC0000.00000004.mdmp 00000000-00008068.00000001.109102.05EC0000.00000004.mdmp Observed string: "ver" (Indicator: "ver") in Source: 00000000-00008068.00000000.107182.05EC0000.00000004.mdmp 00000000-00008068.00000001.109102.05EC0000.00000004.mdmp2e:T605,Found reference to API "GetUserDefaultUILanguage" (Indicator: "GetUserDefaultUILanguage"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "GetUserDefaultLangID" (Indicator: "GetUserDefaultLangID"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "GetSystemDefaultUILanguage" (Indicator: "GetSystemDefaultUILanguage"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "GetKeyboardLayoutList" (Indicator: "GetKeyboardLayoutList"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "GetKeyboardLayout" (Indicator: "GetKeyboardLayout"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "GetKeyboardLayoutNameW" (Indicator: "GetKeyboardLayout"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "GetUserDefaultUILanguage" (Indicator: "GetUserDefaultUILanguage"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp, 00000000-00002788.00000001.108982.00401000.00000020.mdmp") Found reference to API "GetSystemDefaultUILanguage" (Indicator: "GetSystemDefaultUILanguage"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API "GetUserDefaultLangID" (Indicator: "GetUserDefaultLangID"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API "GetKeyboardLayoutList" (Indicator: "GetKeyboardLayoutList"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp")2f:T50c,Found reference to API "VerifyVersionInfoW" (Indicator: "VerifyVersionInfo"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "GetVersion" (Indicator: "GetVersion"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "GetVersionExW" (Indicator: "GetVersionExW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "GetVersionExW" (Indicator: "GetVersion"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "VerSetConditionMask" (Indicator: "VerSetConditionMask"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "GetVersion" (Indicator: "GetVersion"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API "GetVersionExW" (Indicator: "GetVersionExW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API "GetVersionExW" (Indicator: "GetVersion"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API "VerifyVersionInfoW" (Indicator: "VerifyVersionInfo"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API "VerSetConditionMask" (Indicator: "VerSetConditionMask"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp")30:Tcca,"Ultimate_Defender_Pro_Shield-Installer.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "LoadLibrary" with a parameter kernel32.dll (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "LoadLibrary" with a parameter %WINDIR%\system32\shell32.dll (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "LoadLibrary" with a parameter kernel32.dll (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "LoadLibrary" with a parameter Msctf.dll (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "LoadLibrary" with a parameter imm32.dll (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "LoadLibrary" with a parameter wtsapi32.dll (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "LoadLibrary" with a parameter uxtheme.dll (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "LoadLibrary" with a parameter %WINDIR%\system32\uxtheme.dll (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "LoadLibrary" with a parameter %WINDIR%\system32\shell32.dll (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "LoadLibrary" with a parameter DWMAPI.DLL (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "LoadLibrary" with a parameter %WINDIR%\system32\shfolder.dll (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "LoadLibrary" with a parameter %WINDIR%\system32\Rstrtmgr.dll (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "LoadLibrary" with a parameter Shcore.dll (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "LoadLibrary" with a parameter user32.dll (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "LoadLibrary" with a parameter %WINDIR%\system32\shlwapi.dll (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "LoadLibrary" with a parameter %WINDIR%\system32\MSFTEDIT.DLL (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "LoadLibrary" with a parameter %WINDIR%\system32\sfc.dll (UID: 00000000-00008068)31:T8b39,"Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter InitializeCriticalSectionEx (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter FlsAlloc (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter FlsSetValue (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter FlsGetValue (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter LCMapStringEx (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter FlsFree (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter InitOnceExecuteOnce (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter CreateEventExW (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter CreateSemaphoreW (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter CreateSemaphoreExW (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter CreateThreadpoolTimer (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter SetThreadpoolTimer (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter WaitForThreadpoolTimerCallbacks (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter CloseThreadpoolTimer (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter CreateThreadpoolWait (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter SetThreadpoolWait (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter CloseThreadpoolWait (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter FlushProcessWriteBuffers (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter FreeLibraryWhenCallbackReturns (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter GetCurrentProcessorNumber (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter CreateSymbolicLinkW (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter GetCurrentPackageId (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter GetTickCount64 (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter GetFileInformationByHandleEx (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter SetFileInformationByHandle (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter GetSystemTimePreciseAsFileTime (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter InitializeConditionVariable (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter WakeConditionVariable (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter WakeAllConditionVariable (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter SleepConditionVariableCS (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter InitializeSRWLock (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter AcquireSRWLockExclusive (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter TryAcquireSRWLockExclusive (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter ReleaseSRWLockExclusive (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter SleepConditionVariableSRW (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter CreateThreadpoolWork (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter SubmitThreadpoolWork (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter CloseThreadpoolWork (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter CompareStringEx (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter GetLocaleInfoEx (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter AreFileApisANSI (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter RtlGetVersion (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter CoCreateInstance (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter CoCreateInstanceEx (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter CoGetClassObject (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter wine_get_version (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter GetLogicalProcessorInformation (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter GetThreadPreferredUILanguages (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter SetThreadPreferredUILanguages (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter GetThreadUILanguage (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter SetDefaultDllDirectories (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter SetSearchPathMode (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter SetProcessDEPPolicy (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter GetNativeSystemInfo (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter CompareStringOrdinal (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter VariantChangeTypeEx (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter VarNeg (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter VarNot (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter VarAdd (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter VarSub (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter VarMul (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter VarDiv (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter VarIdiv (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter VarMod (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter VarAnd (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter VarOr (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter VarXor (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter VarCmp (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter VarI4FromStr (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter VarR4FromStr (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter VarR8FromStr (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter VarDateFromStr (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter VarCyFromStr (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter VarBoolFromStr (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter VarBstrFromCy (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter VarBstrFromDate (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter VarBstrFromBool (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter Wow64DisableWow64FsRedirection (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter Wow64RevertWow64FsRedirection (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter GetUserDefaultUILanguage (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter CheckTokenMembership (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter DecodePointer (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.exe" called "GetProcAddress" with a parameter EncodePointer (UID: 00000000-00002788) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter InitializeCriticalSectionEx (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter FlsAlloc (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter FlsSetValue (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter FlsGetValue (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter LCMapStringEx (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter FlsFree (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter InitOnceExecuteOnce (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter CreateEventExW (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter CreateSemaphoreW (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter CreateSemaphoreExW (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter CreateThreadpoolTimer (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter SetThreadpoolTimer (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter WaitForThreadpoolTimerCallbacks (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter CloseThreadpoolTimer (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter CreateThreadpoolWait (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter SetThreadpoolWait (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter CloseThreadpoolWait (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter FlushProcessWriteBuffers (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter FreeLibraryWhenCallbackReturns (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetCurrentProcessorNumber (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter CreateSymbolicLinkW (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetCurrentPackageId (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetTickCount64 (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetFileInformationByHandleEx (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter SetFileInformationByHandle (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetSystemTimePreciseAsFileTime (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter InitializeConditionVariable (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter WakeConditionVariable (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter WakeAllConditionVariable (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter SleepConditionVariableCS (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter InitializeSRWLock (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter AcquireSRWLockExclusive (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter TryAcquireSRWLockExclusive (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter ReleaseSRWLockExclusive (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter SleepConditionVariableSRW (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter CreateThreadpoolWork (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter SubmitThreadpoolWork (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter CloseThreadpoolWork (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter CompareStringEx (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetLocaleInfoEx (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter AreFileApisANSI (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter RtlGetVersion (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter CoCreateInstance (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter CoCreateInstanceEx (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter CoGetClassObject (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter wine_get_version (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetLogicalProcessorInformation (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetThreadPreferredUILanguages (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter SetThreadPreferredUILanguages (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetThreadUILanguage (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter SetDefaultDllDirectories (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter SetSearchPathMode (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter SetProcessDEPPolicy (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetNativeSystemInfo (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter CompareStringOrdinal (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter VariantChangeTypeEx (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter VarNeg (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter VarNot (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter VarAdd (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter VarSub (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter VarMul (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter VarDiv (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter VarIdiv (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter VarMod (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter VarAnd (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter VarOr (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter VarXor (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter VarCmp (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter VarI4FromStr (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter VarR4FromStr (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter VarR8FromStr (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter VarDateFromStr (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter VarCyFromStr (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter VarBoolFromStr (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter VarBstrFromCy (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter VarBstrFromDate (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter VarBstrFromBool (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter CoInitializeEx (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter CoAddRefServerProcess (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter CoReleaseServerProcess (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter CoResumeClassObjects (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter CoSuspendClassObjects (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter WTSRegisterSessionNotification (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter BufferedPaintInit (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter AnimateWindow (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter InitializeFlatSB (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter UninitializeFlatSB (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter FlatSB_GetScrollProp (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter FlatSB_SetScrollProp (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter FlatSB_EnableScrollBar (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter FlatSB_ShowScrollBar (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter FlatSB_GetScrollRange (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter FlatSB_GetScrollInfo (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter FlatSB_GetScrollPos (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter FlatSB_SetScrollPos (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter FlatSB_SetScrollInfo (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter FlatSB_SetScrollRange (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter SetLayeredWindowAttributes (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter OpenThemeData (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter CloseThemeData (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter DrawThemeBackground (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter DrawThemeText (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter DrawThemeTextEx (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetThemeBackgroundContentRect (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetThemePartSize (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetThemeTextExtent (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetThemeTextMetrics (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetThemeBackgroundRegion (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter HitTestThemeBackground (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter DrawThemeEdge (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter DrawThemeIcon (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter IsThemePartDefined (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter IsThemeBackgroundPartiallyTransparent (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetThemeColor (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetThemeMetric (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetThemeString (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetThemeBool (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetThemeInt (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetThemeEnumValue (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetThemePosition (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetThemeFont (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetThemeRect (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetThemeMargins (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetThemeIntList (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetThemePropertyOrigin (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter SetWindowTheme (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetThemeFilename (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetThemeSysColor (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetThemeSysColorBrush (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetThemeSysBool (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetThemeSysSize (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetThemeSysFont (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetThemeSysString (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetThemeSysInt (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter IsThemeActive (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter IsAppThemed (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetWindowTheme (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter EnableThemeDialogTexture (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter IsThemeDialogTextureEnabled (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetThemeAppProperties (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter SetThemeAppProperties (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetCurrentThemeName (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetThemeDocumentationProperty (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter DrawThemeParentBackground (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter EnableTheming (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter NotifyWinEvent (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter SHPathPrepareForWriteW (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter Wow64DisableWow64FsRedirection (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter Wow64RevertWow64FsRedirection (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter SHCreateItemFromParsingName (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter TaskDialogIndirect (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter IsWow64Process2 (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetSystemWow64DirectoryA (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter RegDeleteKeyExA (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetMachineTypeAttributes (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter IsWow64GuestMachineSupported (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter SHGetKnownFolderPath (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter DisableProcessWindowsGhosting (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter CheckTokenMembership (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetUserDefaultUILanguage (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter ShutdownBlockReasonDestroy (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter ShutdownBlockReasonCreate (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetThemeBackgroundExtent (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter ChangeWindowMessageFilterEx (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter MonitorFromRect (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetMonitorInfoA (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter DwmIsCompositionEnabled (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter DwmExtendFrameIntoClientArea (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter ImmAssociateContextEx (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetSystemWow64DirectoryW (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter SHGetFolderPathW (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter RmStartSession (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter RmRegisterResources (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter RmGetList (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter RmShutdown (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter RmRestart (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter RmEndSession (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetProcessDpiAwareness (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter EnableNonClientDpiScaling (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetDpiForMonitor (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetWindowDpiAwarenessContext (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter AreDpiAwarenessContextsEqual (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter SHAutoComplete (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter ProcessIdToSessionId (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter MonitorFromWindow (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter GetDiskFreeSpaceExW (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter SfcIsFileProtected (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter WTSUnRegisterSessionNotification (UID: 00000000-00008068) "Ultimate_Defender_Pro_Shield-Installer.tmp" called "GetProcAddress" with a parameter BufferedPaintUnInit (UID: 00000000-00008068)32:T16c42,Found reference to API (Indicator: "GetTokenInformation"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "ConvertStringSecurityDescriptorToSecurityDescriptorW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "OpenProcessToken"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "FreeSid"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "ConvertSidToStringSidW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "AllocateAndInitializeSid"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "OpenThreadToken"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "AdjustTokenPrivileges"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "EqualSid"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "RegOpenKeyExW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "LookupPrivilegeValueW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "RegCloseKey"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "RegQueryValueExW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetThreadLocale"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetStdHandle"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetDriveTypeW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WaitForSingleObject"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "HeapDestroy"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetFileAttributesW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetExitCodeProcess"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "DeleteCriticalSection"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetCurrentProcess"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "LocalAlloc"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "UnhandledExceptionFilter"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetErrorMode"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "VerifyVersionInfoW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetLocaleInfoW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetCPInfo"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetDiskFreeSpaceW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WriteFile"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetThreadPriority"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "FreeLibrary"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "LocalFree"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "FormatMessageW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "ResumeThread"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "InitializeCriticalSection"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "LoadResource"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "FindClose"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "TlsGetValue"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetFullPathNameW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetEnvironmentVariableW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetLastError"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetUserDefaultUILanguage"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetUserDefaultLangID"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetModuleFileNameW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "HeapAlloc"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "RaiseException"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetThreadPriority"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetVolumeInformationW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "LoadLibraryExW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "MultiByteToWideChar"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "EnumCalendarInfoW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CreateThread"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetSystemDefaultUILanguage"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetSystemDirectoryW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetExitCodeThread"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "ExitThread"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "VirtualQuery"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "VirtualQueryEx"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetEndOfFile"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetVersion"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "HeapFree"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "EnterCriticalSection"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "LoadLibraryW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetVersionExW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetEvent"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "QueryPerformanceCounter"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetTickCount"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "VirtualProtect"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "LoadLibraryA"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "RtlUnwind"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetWindowsDirectoryW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetFileSize"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetDateFormatW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetStartupInfoW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CreateDirectoryW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "DeleteFileW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetProcAddress"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetProcessHeap"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CompareStringW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "RemoveDirectoryW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetCurrentThreadId"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "ResetEvent"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "FindFirstFileW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "IsValidLocale"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CreateEventW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CreateFileW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "TlsSetValue"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "ExitProcess"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "LeaveCriticalSection"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetLastError"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "LCMapStringW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetSystemInfo"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetSystemWindowsDirectoryW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetThreadLocale"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "lstrlenW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "VirtualFree"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetCPInfoExW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SizeofResource"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "LockResource"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetCommandLineW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WideCharToMultiByte"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "VerSetConditionMask"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetCurrentThread"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SuspendThread"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "QueryPerformanceFrequency"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetFilePointer"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "ReadFile"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CloseHandle"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetACP"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetModuleHandleW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SwitchToThread"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetLocalTime"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "HeapCreate"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "FindResourceW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CreateProcessW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "Sleep"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "VirtualAlloc"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "VariantChangeType"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SafeArrayGetLBound"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SafeArrayPtrOfIndex"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SysAllocStringLen"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "VariantClear"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SafeArrayCreate"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SysReAllocStringLen"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SafeArrayGetUBound"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "VariantCopy"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SysFreeString"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "VariantInit"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CharLowerBuffW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetSystemMetrics"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "PeekMessageW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CharUpperW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "LoadStringW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CreateWindowExW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "MsgWaitForMultipleObjects"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "TranslateMessage"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CharUpperBuffW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "MessageBoxW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CharNextW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "ExitWindowsEx"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "DispatchMessageW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "DestroyWindow"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetLogicalProcessorInformation"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetThreadPreferredUILanguages"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetThreadPreferredUILanguages"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetThreadUILanguage"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetLongPathNameW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CompareStringOrdinal"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "RtlCompareUnicodeString"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetDiskFreeSpaceExW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetTickCount64"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CheckTokenMembership"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SeShutdownPrivilege"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "Wow64DisableWow64FsRedirection"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "Wow64RevertWow64FsRedirection"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "RegCreateKeyExW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "RegDeleteKeyW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetSecurityDescriptorDacl"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "RegFlushKey"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetUserNameW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "RegQueryInfoKeyW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "RegEnumKeyExW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "RegDeleteValueW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "RegSetValueExW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "RegEnumValueW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "InitializeSecurityDescriptor"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetSaveFileNameW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetOpenFileNameW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetDIBits"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CreateFontIndirectW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetStretchBltMode"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "RoundRect"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "DeleteDC"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CreateSolidBrush"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetObjectW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetDeviceCaps"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "BitBlt"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetDIBits"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CreateCompatibleDC"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "StretchBlt"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CreateCompatibleBitmap"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetStockObject"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SelectObject"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "DeleteObject"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "ReleaseMutex"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "FileTimeToSystemTime"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetOverlappedResult"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CreatePipe"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetLogicalDrives"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetSystemTimeAsFileTime"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "MoveFileW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WritePrivateProfileStringW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "PeekNamedPipe"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "DeviceIoControl"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CopyFileW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "IsDebuggerPresent"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WriteProfileStringW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetPrivateProfileStringW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetFileAttributesW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GlobalAddAtomW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "MoveFileExW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetNamedPipeHandleState"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CreateMutexW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "MulDiv"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetHandleInformation"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WaitForMultipleObjectsEx"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "TerminateProcess"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetCurrentDirectoryW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "LocalFileTimeToFileTime"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "TerminateThread"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "FlushFileBuffers"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GlobalFindAtomW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "OpenProcess"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetComputerNameW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "EnumResourceNamesW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "FindNextFileW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "lstrcmpW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetTimeZoneInformation"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GlobalFree"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GlobalDeleteAtom"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetShortPathNameW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CreateNamedPipeW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetProfileStringW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "IsDBCSLeadByte"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "FileTimeToLocalFileTime"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CompareFileTime"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetCurrentProcessId"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetFileTime"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "TransactNamedPipe"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "OpenMutexW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "FreeResource"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetCurrentDirectoryW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WNetGetConnectionW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WNetEnumResourceW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WNetGetUniversalNameW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WNetCloseEnum"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WNetOpenEnumW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "OleUninitialize"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CoInitialize"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CoTaskMemAlloc"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CoUninitialize"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "StringFromCLSID"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CoDisconnectObject"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "IsEqualGUID"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CoTaskMemFree"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CLSIDFromString"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "OleInitialize"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SafeArrayGetElement"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "VariantCopyInd"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetActiveObject"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetErrorInfo"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SafeArrayPutElement"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SHBrowseForFolderW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "Shell_NotifyIconW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "ShellExecuteW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SHGetPathFromIDListW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "ShellExecuteExW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SHGetFileInfoW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SHGetMalloc"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "RedrawWindow"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetWindowRgn"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "EnableScrollBar"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "DestroyMenu"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "PostQuitMessage"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetForegroundWindow"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetWindowPos"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "IsWindow"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetTimer"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "DispatchMessageA"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WindowFromPoint"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "PeekMessageA"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetMenuItemInfoW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetActiveWindow"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetDC"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetCursorPos"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetKeyState"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SendMessageA"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "UnregisterClassW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetMenuItemInfoW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "DefWindowProcW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "LoadImageW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetScrollPos"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CallNextHookEx"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "MsgWaitForMultipleObjectsEx"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetClientRect"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "TrackPopupMenu"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetActiveWindow"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetWindowTextW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetTopWindow"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetMenuItemID"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "DrawEdge"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetParent"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "UpdateWindow"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "EnumWindows"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "UnhookWindowsHookEx"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "ShowWindow"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "DrawFrameControl"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CharToOemBuffA"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "EnableWindow"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetWindowPlacement"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "LoadIconW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "IsWindowEnabled"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetWindow"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "ActivateKeyboardLayout"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetIconInfo"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetParent"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "RegisterClassW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "ScrollWindow"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "IsZoomed"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetWindowPlacement"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetKeyboardLayoutList"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "DrawMenuBar"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "OemToCharBuffA"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "EnableMenuItem"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "DrawFocusRect"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetDCEx"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetKeyboardLayout"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "FillRect"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "EnumThreadWindows"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetSysColorBrush"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "IsChild"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "IsDialogMessageA"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "MapWindowPoints"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "ReleaseCapture"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "BeginPaint"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "OffsetRect"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetScrollPos"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "KillTimer"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "IsIconic"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetScrollRange"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetWindowRect"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "InflateRect"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetCapture"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "DrawIcon"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "EnumChildWindows"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetScrollRange"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CharLowerW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "ShowOwnedPopups"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "InvalidateRect"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WaitMessage"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CreatePopupMenu"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CheckMenuItem"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetSubMenu"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetLastActivePopup"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "DrawIconEx"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetWindowTextW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CreateMenu"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "BringWindowToTop"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "ClientToScreen"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetKeyboardState"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetMenuItemCount"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetMenuState"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "LoadCursorW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetSystemMenu"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "InsertMenuW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetForegroundWindow"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "ShowCaret"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetFocus"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetMenuStringW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "ReleaseDC"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetScrollInfo"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "HideCaret"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CreateIconIndirect"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetCapture"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "ScreenToClient"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "MessageBeep"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "RemoveMenu"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetWindowThreadProcessId"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "ShowScrollBar"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetMenu"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetMenu"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "MoveWindow"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "AppendMenuW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetWindowDC"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "DestroyCursor"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "AdjustWindowRectEx"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetSysColor"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetScrollInfo"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CopyImage"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "DestroyIcon"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "IsWindowVisible"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetDesktopWindow"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetCursorPos"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SystemParametersInfoW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "FrameRect"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetRect"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "DeleteMenu"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetKeyNameTextW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "TranslateMDISysAccel"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CreateIcon"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetCursor"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetFocus"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "InsertMenuItemW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetCursor"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "VerQueryValueW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetFileVersionInfoW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetFileVersionInfoSizeW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WinHttpSetOption"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WinHttpConnect"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WinHttpQueryAuthSchemes"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WinHttpCloseHandle"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WinHttpGetIEProxyConfigForCurrentUser"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WinHttpSetTimeouts"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WinHttpQueryDataAvailable"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WinHttpWriteData"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WinHttpSetCredentials"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WinHttpGetProxyForUrl"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WinHttpAddRequestHeaders"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WinHttpSetStatusCallback"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WinHttpQueryHeaders"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WinHttpReceiveResponse"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WinHttpQueryOption"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WinHttpOpen"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WinHttpOpenRequest"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WinHttpSendRequest"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "WinHttpReadData"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetEntriesInAclW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetNamedSecurityInfoW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetNamedSecurityInfoW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetConsoleCtrlHandler"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "SetProcessShutdownParameters"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "CommandLineToArgvW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "StrToInt64ExW"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API (Indicator: "GetACP"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetExitCodeProcess"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "CloseHandle"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "LocalFree"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "SizeofResource"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "VirtualProtect"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "QueryPerformanceFrequency"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "VirtualFree"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetFullPathNameW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetProcessHeap"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "ExitProcess"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "HeapAlloc"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetCPInfoExW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "RtlUnwind"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetCPInfo"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetStdHandle"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetModuleHandleW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "FreeLibrary"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "HeapDestroy"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "ReadFile"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "CreateProcessW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetLastError"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetModuleFileNameW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "SetLastError"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "FindResourceW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "CreateThread"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "CompareStringW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "LoadLibraryA"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "ResetEvent"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp, 00000000-00002788.00000001.108982.00401000.00000020.mdmp") Found reference to API (Indicator: "GetVolumeInformationW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetVersion"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetDriveTypeW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "RaiseException"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "FormatMessageW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "SwitchToThread"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetExitCodeThread"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetCurrentThread"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "LoadLibraryExW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "LockResource"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetCurrentThreadId"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "UnhandledExceptionFilter"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "VirtualQuery"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "VirtualQueryEx"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "Sleep"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp, 00000000-00002788.00000001.108982.00401000.00000020.mdmp") Found reference to API (Indicator: "EnterCriticalSection"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "SetFilePointer"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "LoadResource"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "SuspendThread"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetTickCount"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp, 00000000-00002788.00000001.108982.00401000.00000020.mdmp") Found reference to API (Indicator: "GetFileSize"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetStartupInfoW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetFileAttributesW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "InitializeCriticalSection"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetSystemWindowsDirectoryW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetThreadPriority"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "SetThreadPriority"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetCurrentProcess"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "VirtualAlloc"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetCommandLineW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetSystemInfo"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "LeaveCriticalSection"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetProcAddress"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "ResumeThread"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetVersionExW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "VerifyVersionInfoW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "HeapCreate"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetWindowsDirectoryW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "LCMapStringW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "VerSetConditionMask"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetDiskFreeSpaceW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "FindFirstFileW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetUserDefaultUILanguage"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp, 00000000-00002788.00000001.108982.00401000.00000020.mdmp") Found reference to API (Indicator: "lstrlenW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "QueryPerformanceCounter"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "SetEndOfFile"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "HeapFree"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "WideCharToMultiByte"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "FindClose"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "MultiByteToWideChar"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "LoadLibraryW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "SetEvent"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp, 00000000-00002788.00000001.108982.00401000.00000020.mdmp") Found reference to API (Indicator: "CreateFileW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetLocaleInfoW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetSystemDirectoryW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "DeleteFileW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetLocalTime"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetEnvironmentVariableW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "WaitForSingleObject"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "WriteFile"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "ExitThread"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "DeleteCriticalSection"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "TlsGetValue"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetDateFormatW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "SetErrorMode"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "IsValidLocale"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "TlsSetValue"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "CreateDirectoryW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetSystemDefaultUILanguage"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "EnumCalendarInfoW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "LocalAlloc"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetUserDefaultLangID"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "RemoveDirectoryW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "CreateEventW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "SetThreadLocale"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetThreadLocale"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "CreateWindowExW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "TranslateMessage"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "CharLowerBuffW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "CharUpperW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "PeekMessageW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetSystemMetrics"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "MessageBoxW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "DestroyWindow"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "CharUpperBuffW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "CharNextW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "MsgWaitForMultipleObjects"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "LoadStringW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "ExitWindowsEx"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "DispatchMessageW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "SysAllocStringLen"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "SafeArrayPtrOfIndex"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "VariantCopy"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "SafeArrayGetLBound"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "SafeArrayGetUBound"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "VariantInit"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "VariantClear"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "SysFreeString"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "SysReAllocStringLen"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "VariantChangeType"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "SafeArrayCreate"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "ConvertStringSecurityDescriptorToSecurityDescriptorW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "OpenThreadToken"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "AdjustTokenPrivileges"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "LookupPrivilegeValueW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "RegOpenKeyExW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "OpenProcessToken"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "FreeSid"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "AllocateAndInitializeSid"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "EqualSid"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "RegQueryValueExW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetTokenInformation"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "ConvertSidToStringSidW"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "RegCloseKey"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetLogicalProcessorInformation"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp, 00000000-00002788.00000001.108982.00401000.00000020.mdmp") Found reference to API (Indicator: "MessageBoxA"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "GetNativeSystemInfo"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API (Indicator: "RtlCompareUnicodeString"; Source: "00000000-00002788.00000001.108982.00401000.00000020.mdmp") Found reference to API (Indicator: "GetDiskFreeSpaceExW"; Source: "00000000-00002788.00000001.108982.00401000.00000020.mdmp") Found reference to API (Indicator: "GetTickCount64"; Source: "00000000-00002788.00000001.108982.00401000.00000020.mdmp") Found reference to API (Indicator: "SeShutdownPrivilege"; Source: "00000000-00002788.00000001.108982.00401000.00000020.mdmp") Found reference to API (Indicator: "Wow64DisableWow64FsRedirection"; Source: "00000000-00002788.00000001.108982.00401000.00000020.mdmp") Found reference to API (Indicator: "Wow64RevertWow64FsRedirection"; Source: "00000000-00002788.00000001.108982.00401000.00000020.mdmp") Found reference to API (Indicator: "GetThreadPreferredUILanguages"; Source: "00000000-00002788.00000001.108982.00401000.00000020.mdmp") Found reference to API (Indicator: "SetThreadPreferredUILanguages"; Source: "00000000-00002788.00000001.108982.00401000.00000020.mdmp") Found reference to API (Indicator: "GetThreadUILanguage"; Source: "00000000-00002788.00000001.108982.00401000.00000020.mdmp") Found reference to API (Indicator: "GetLongPathNameW"; Source: "00000000-00002788.00000001.108982.00401000.00000020.mdmp") Found reference to API (Indicator: "GetSystemTimes"; Source: "00000000-00002788.00000001.108982.00401000.00000020.mdmp") Found reference to API (Indicator: "RegisterClass"; Source: "00000000-00002788.00000001.108982.00401000.00000020.mdmp") Found reference to API (Indicator: "UnregisterClass"; Source: "00000000-00002788.00000001.108982.00401000.00000020.mdmp") Found reference to API (Indicator: "SetDefaultDllDirectories"; Source: "00000000-00002788.00000001.108982.00401000.00000020.mdmp") Found reference to API (Indicator: "SetDllDirectoryW"; Source: "00000000-00002788.00000001.108982.00401000.00000020.mdmp") Found reference to API (Indicator: "SetSearchPathMode"; Source: "00000000-00002788.00000001.108982.00401000.00000020.mdmp") Found reference to API (Indicator: "SetProcessDEPPolicy"; Source: "00000000-00002788.00000001.108982.00401000.00000020.mdmp") Found reference to API (Indicator: "WNetEnumResourceW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "WNetGetUniversalNameW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "WNetGetConnectionW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "WNetCloseEnum"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "WNetOpenEnumW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "GetSaveFileNameW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "GetOpenFileNameW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "SHBrowseForFolderW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "SHGetMalloc"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "SHGetFileInfoW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "Shell_NotifyIconW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "ShellExecuteW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "SHGetPathFromIDListW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "ShellExecuteExW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "MoveWindow"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "CopyImage"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "SetMenuItemInfoW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "GetMenuItemInfoW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "FrameRect"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "GetMenuStringW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "FillRect"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "SendMessageA"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "EnumWindows"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "ShowOwnedPopups"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "GetScrollRange"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "SetActiveWindow"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "GetActiveWindow"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "DrawEdge"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "GetKeyboardLayoutList"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "OemToCharBuffA"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "EnumChildWindows"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "UnhookWindowsHookEx"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.72F97000.00000002.mdmp") Found reference to API (Indicator: "SetCapture"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "GetCapture"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "ShowCaret"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "CreatePopupMenu"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "GetMenuItemID"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "CharLowerBuffW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "IsZoomed"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "SetParent"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "DrawMenuBar"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "GetClientRect"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "IsChild"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.72F97000.00000002.mdmp") Found reference to API (Indicator: "IsIconic"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.72F97000.00000002.mdmp") Found reference to API (Indicator: "CallNextHookEx"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.72F97000.00000002.mdmp") Found reference to API (Indicator: "ShowWindow"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "GetWindowTextW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "SetForegroundWindow"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "DestroyWindow"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.72F97000.00000002.mdmp") Found reference to API (Indicator: "RegisterClassW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.72F97000.00000002.mdmp") Found reference to API (Indicator: "CharNextW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.72F97000.00000002.mdmp") Found reference to API (Indicator: "GetFocus"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.72F97000.00000002.mdmp") Found reference to API (Indicator: "GetDC"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.72F97000.00000002.mdmp") Found reference to API (Indicator: "SetFocus"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "ReleaseDC"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.72F97000.00000002.mdmp") Found reference to API (Indicator: "ExitWindowsEx"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "SetScrollRange"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "CharToOemBuffA"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "PeekMessageA"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "MessageBeep"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "GetSubMenu"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "DestroyIcon"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "IsWindowVisible"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.72F97000.00000002.mdmp") Found reference to API (Indicator: "DispatchMessageA"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "UnregisterClassW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.72F97000.00000002.mdmp") Found reference to API (Indicator: "GetTopWindow"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "LoadStringW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "CreateMenu"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "CharLowerW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "SetWindowRgn"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "SetWindowPos"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "GetMenuItemCount"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "GetSysColorBrush"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "GetWindowDC"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "GetScrollInfo"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "SetWindowTextW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "GetSysColor"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "EnableScrollBar"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "TrackPopupMenu"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "DrawIconEx"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "GetIconInfo"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "SetScrollInfo"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "GetKeyNameTextW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "GetDesktopWindow"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.72F97000.00000002.mdmp") Found reference to API (Indicator: "SetCursorPos"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "GetCursorPos"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "SetMenu"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "GetMenuState"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "GetMenu"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "SetRect"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "GetKeyState"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "GetCursor"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "KillTimer"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.72F97000.00000002.mdmp") Found reference to API (Indicator: "WaitMessage"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "TranslateMDISysAccel"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "GetWindowPlacement"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "CreateIconIndirect"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "CreateWindowExW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.72F97000.00000002.mdmp") Found reference to API (Indicator: "GetDCEx"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "PeekMessageW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "SetTimer"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.72F97000.00000002.mdmp") Found reference to API (Indicator: "WindowFromPoint"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "BeginPaint"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "OffsetRect"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.72F97000.00000002.mdmp") Found reference to API (Indicator: "DispatchMessageW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.72F97000.00000002.mdmp") Found reference to API (Indicator: "GetSystemMenu"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "SetScrollPos"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "GetScrollPos"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "InflateRect"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.72F97000.00000002.mdmp") Found reference to API (Indicator: "DrawFocusRect"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "ReleaseCapture"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "LoadCursorW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.72F97000.00000002.mdmp") Found reference to API (Indicator: "ScrollWindow"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "GetLastActivePopup"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "GetSystemMetrics"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.72F97000.00000002.mdmp") Found reference to API (Indicator: "CharUpperBuffW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "ClientToScreen"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "SetWindowPlacement"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "CheckMenuItem"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "CharUpperW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp") Found reference to API (Indicator: "DefWindowProcW"; Source: "00000000-00008068.00000000.107182.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.006BD000.00000004.mdmp, 00000000-00008068.00000001.109102.72F97000.00000002.mdmp") Found reference to API (Indicator: "GetLogicalProcessorInformation"; Source: "00000000-00008068.00000000.107182.006C4000.00000004.mdmp, 00000000-00008068.00000001.109102.006C4000.00000004.mdmp") Found reference to API (Indicator: "MessageBoxA"; Source: "00000000-00008068.00000000.107182.006C4000.00000004.mdmp, 00000000-00008068.00000001.109102.006C4000.00000004.mdmp") Found reference to API (Indicator: "WTSUnRegisterSessionNotification"; Source: "00000000-00008068.00000000.107182.006C4000.00000004.mdmp, 00000000-00008068.00000001.109102.006C4000.00000004.mdmp") Found reference to API (Indicator: "WTSRegisterSessionNotification"; Source: "00000000-00008068.00000000.107182.006C4000.00000004.mdmp, 00000000-00008068.00000001.109102.006C4000.00000004.mdmp") Found reference to API (Indicator: "IsWow64Process"; Source: "00000000-00008068.00000000.107182.006C4000.00000004.mdmp, 00000000-00008068.00000001.109102.006C4000.00000004.mdmp") Found reference to API (Indicator: "ProcessIdToSessionId"; Source: "00000000-00008068.00000000.107182.006C4000.00000004.mdmp, 00000000-00008068.00000001.109102.006C4000.00000004.mdmp, 00000000-00008068.00000001.109102.72F97000.00000002.mdmp") Found reference to API (Indicator: "GetTimeZoneInformationForYear"; Source: "00000000-00008068.00000000.107182.006C4000.00000004.mdmp, 00000000-00008068.00000001.109102.006C4000.00000004.mdmp") Found reference to API (Indicator: "GetNativeSystemInfo"; Source: "00000000-00008068.00000000.107182.006C4000.00000004.mdmp, 00000000-00008068.00000001.109102.006C4000.00000004.mdmp") Found reference to API (Indicator: "GetSystemTimes"; Source: "00000000-00008068.00000000.107182.006C4000.00000004.mdmp, 00000000-00008068.00000001.109102.006C4000.00000004.mdmp") Found reference to API (Indicator: "CryptDecodeObject"; Source: "00000000-00008068.00000000.107182.006C4000.00000004.mdmp, 00000000-00008068.00000001.109102.006C4000.00000004.mdmp") Found reference to API (Indicator: "PFXImportCertStore"; Source: "00000000-00008068.00000000.107182.006C4000.00000004.mdmp, 00000000-00008068.00000001.109102.006C4000.00000004.mdmp") Found reference to API (Indicator: "CertGetNameStringW"; Source: "00000000-00008068.00000000.107182.006C4000.00000004.mdmp, 00000000-00008068.00000001.109102.006C4000.00000004.mdmp") Found reference to API (Indicator: "CertNameToStrW"; Source: "00000000-00008068.00000000.107182.006C4000.00000004.mdmp, 00000000-00008068.00000001.109102.006C4000.00000004.mdmp") Found reference to API (Indicator: "CertFreeCertificateContext"; Source: "00000000-00008068.00000000.107182.006C4000.00000004.mdmp, 00000000-00008068.00000001.109102.006C4000.00000004.mdmp") Found reference to API (Indicator: "CertDuplicateCertificateContext"; Source: "00000000-00008068.00000000.107182.006C4000.00000004.mdmp, 00000000-00008068.00000001.109102.006C4000.00000004.mdmp") Found reference to API (Indicator: "CertCloseStore"; Source: "00000000-00008068.00000000.107182.006C4000.00000004.mdmp, 00000000-00008068.00000001.109102.006C4000.00000004.mdmp") Found reference to API (Indicator: "CertOpenSystemStoreW"; Source: "00000000-00008068.00000000.107182.006C4000.00000004.mdmp, 00000000-00008068.00000001.109102.006C4000.00000004.mdmp") Found reference to API (Indicator: "CertOpenStore"; Source: "00000000-00008068.00000000.107182.006C4000.00000004.mdmp, 00000000-00008068.00000001.109102.006C4000.00000004.mdmp") Found reference to API (Indicator: "CertFindChainInStore"; Source: "00000000-00008068.00000000.107182.006C4000.00000004.mdmp, 00000000-00008068.00000001.109102.006C4000.00000004.mdmp") Found reference to API (Indicator: "CertFindCertificateInStore"; Source: "00000000-00008068.00000000.107182.006C4000.00000004.mdmp, 00000000-00008068.00000001.109102.006C4000.00000004.mdmp") Found reference to API (Indicator: "StrToInt64ExW"; Source: "00000000-00008068.00000001.109102.006C7000.00000002.mdmp") Found reference to API (Indicator: "GetLastError"; Source: "00000000-00008068.00000001.109102.006C7000.00000002.mdmp, 00000000-00008068.00000001.109102.72F97000.00000002.mdmp") Found reference to API (Indicator: "LocalFree"; Source: "00000000-00008068.00000001.109102.006C7000.00000002.mdmp") Found reference to API (Indicator: "CloseHandle"; Source: "00000000-00008068.00000001.109102.006C7000.00000002.mdmp, 00000000-00008068.00000001.109102.72F97000.00000002.mdmp") Found reference to API (Indicator: "ReadFile"; Source: "00000000-00008068.00000001.109102.006C7000.00000002.mdmp") Found reference to API (Indicator: "WriteFile"; Source: "00000000-00008068.00000001.109102.006C7000.00000002.mdmp") Found reference to API (Indicator: "GetCommandLineW"; Source: "00000000-00008068.00000001.109102.006C7000.00000002.mdmp") Found reference to API (Indicator: "SetConsoleCtrlHandler"; Source: "00000000-00008068.00000001.109102.006C7000.00000002.mdmp") Found reference to API (Indicator: "SetProcessShutdownParameters"; Source: "00000000-00008068.00000001.109102.006C7000.00000002.mdmp") Found reference to API (Indicator: "SetCurrentDirectoryW"; Source: "00000000-00008068.00000001.109102.006C7000.00000002.mdmp") Found reference to API (Indicator: "GetSystemDirectoryW"; Source: "00000000-00008068.00000001.109102.006C7000.00000002.mdmp") Found reference to API (Indicator: "SetErrorMode"; Source: "00000000-00008068.00000001.109102.006C7000.00000002.mdmp") Found reference to API (Indicator: "ExitProcess"; Source: "00000000-00008068.00000001.109102.006C7000.00000002.mdmp") Found reference to API (Indicator: "FreeSid"; Source: "00000000-00008068.00000001.109102.006C7000.00000002.mdmp") Found reference to API (Indicator: "SetNamedSecurityInfoW"; Source: "00000000-00008068.00000001.109102.006C7000.00000002.mdmp") Found reference to API (Indicator: "SetEntriesInAclW"; Source: "00000000-00008068.00000001.109102.006C7000.00000002.mdmp") Found reference to API (Indicator: "AllocateAndInitializeSid"; Source: "00000000-00008068.00000001.109102.006C7000.00000002.mdmp") Found reference to API (Indicator: "GetNamedSecurityInfoW"; Source: "00000000-00008068.00000001.109102.006C7000.00000002.mdmp") Found reference to API (Indicator: "CommandLineToArgvW"; Source: "00000000-00008068.00000001.109102.006C7000.00000002.mdmp")33:T463,Found reference to API "LoadResource" (Indicator: "LoadResource"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "SizeofResource" (Indicator: "SizeofResource"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "LockResource" (Indicator: "LockResource"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "FindResourceW" (Indicator: "FindResource"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "FreeResource" (Indicator: "FreeResource"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "SizeofResource" (Indicator: "SizeofResource"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API "FindResourceW" (Indicator: "FindResource"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API "LockResource" (Indicator: "LockResource"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp") Found reference to API "LoadResource" (Indicator: "LoadResource"; Source: "00000000-00002788.00000000.107059.004A9000.00000004.mdmp")34:Ta83,"Software\Embarcadero\Locales" in Source: Ultimate_Defender_Pro_Shield-Installer "Software\CodeGear\Locales" in Source: Ultimate_Defender_Pro_Shield-Installer "Software\Borland\Locales" in Source: Ultimate_Defender_Pro_Shield-Installer "Software\Borland\Delphi\Locales" in Source: Ultimate_Defender_Pro_Shield-Installer "SOFTWARE\Microsoft\Windows NT\CurrentVersion" in Source: Ultimate_Defender_Pro_Shield-Installer "/C:\PROGRA~2miUIUDPSSO~1X=n.ULTIMA~1.EXEX=n.C:\Program Files (x86)\UDPS SOFTWARE\Ultimate Defender Pro Shield.exedesktop-fvvf82a1SPS1SPS" in Source: Ultimate Defender Pro Shield.lnk "/C:\PROGRA~2X=n.UDPSSO~1X=n.X(n unins000.exeX=n.C:\Program Files (x86)\UDPS SOFTWARE\unins000.exedesktop-fvvf82a1SPS1SPS" in Source: Uninstall Ultimate Defender Pro Shield.lnk "%PROGRAMFILES%\(x86)\UDPS SOFTWARE\Ultimate Defender Pro Shield.exe" in Source: 00000000-00008068-00000BC1-713566382 "%PROGRAMFILES%\(x86)\UDPS SOFTWARE\" in Source: 00000000-00008068-00000BC1-714587461 ""%PROGRAMFILES%\(x86)\UDPS SOFTWARE\unins000.exe"" in Source: 00000000-00008068-00000BC1-714589660 ""%PROGRAMFILES%\(x86)\UDPS SOFTWARE\unins000.exe" /SILENT" in Source: 00000000-00008068-00000BC1-714589989 "%PROGRAMFILES%\(x86)\UDPS SOFTWARE\unins???.*" in Source: 00000000-00008068-00000C28-100515369362 "%PROGRAMFILES%\(x86)\UDPS SOFTWARE\unins000.exe" in Source: 00000000-00008068-00000455-100589054440 "Software\Embarcadero\Locales" in Source: 00000000-00002788.00000001.108982.00401000.00000020.mdmp "Software\CodeGear\Locales" in Source: 00000000-00002788.00000001.108982.00401000.00000020.mdmp "Software\Borland\Locales" in Source: 00000000-00002788.00000001.108982.00401000.00000020.mdmp "Software\Borland\Delphi\Locales" in Source: 00000000-00002788.00000001.108982.00401000.00000020.mdmp "SOFTWARE\Microsoft\Windows NT\CurrentVersion" in Source: 00000000-00002788.00000001.108982.00401000.00000020.mdmp "\REGISTRY\MACHINE\Software\Classes\PackagedCom" in Source: 00000000-00008068.00000000.107182.02BD0000.00000004.mdmp "Software\Microsoft\Windows\CurrentVersion\Uninstall\{2989555F-902E-463F-B0AC-DAEFD86D2F5B}_is1" in Source: 00000000-00008068.00000000.107182.04BE0000.00000004.mdmp 00000000-00008068.00000001.109102.04BE0000.00000004.mdmp "??\C:\Program Files (x86)\UDPS SOFTWARE\" in Source: 00000000-00008068.00000001.109102.02BD0000.00000004.mdmp "Software\Microsoft\RestartManager\Session0000" in Source: 00000000-00008068.00000001.109102.02BD0000.00000004.mdmp "Registry\Machine\Software\Classes\CLSID\{FA445657-9379-11D6-B41A-00065B83EE53}" in Source: 00000000-00008068.00000001.109102.02BD0000.00000004.mdmp 00000000-00008068.00000001.109102.07630000.00000004.mdmp35:T1519,"Ultimate_Defender_Pro_Shield-Installer.exe" loaded module "API-MS-WIN-CORE-SYNCH-L1-2-0" at base 76f70000 "Ultimate_Defender_Pro_Shield-Installer.exe" loaded module "API-MS-WIN-CORE-FIBERS-L1-1-1" at base 76f70000 "Ultimate_Defender_Pro_Shield-Installer.exe" loaded module "API-MS-WIN-CORE-LOCALIZATION-L1-2-1" at base 76f70000 "Ultimate_Defender_Pro_Shield-Installer.exe" loaded module "KERNEL32" at base 77150000 "Ultimate_Defender_Pro_Shield-Installer.exe" loaded module "%WINDIR%\TEMP\VXOLE32.DLL" at base 73930000 "Ultimate_Defender_Pro_Shield-Installer.exe" loaded module "KERNEL32.DLL" at base 77150000 "Ultimate_Defender_Pro_Shield-Installer.exe" loaded module "%WINDIR%\SYSTEM32\SHELL32.DLL" at base 74c70000 "Ultimate_Defender_Pro_Shield-Installer.exe" loaded module "RPCRT4.DLL" at base 766b0000 "Ultimate_Defender_Pro_Shield-Installer.exe" loaded module "%WINDIR%\SYSTEM32\UXTHEME.DLL" at base 74200000 "Ultimate_Defender_Pro_Shield-Installer.exe" loaded module "NTDLL.DLL" at base 77d30000 "Ultimate_Defender_Pro_Shield-Installer.exe" loaded module "%WINDIR%\SYSTEM32\APPHELP.DLL" at base 746a0000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "API-MS-WIN-CORE-SYNCH-L1-2-0" at base 76f70000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "API-MS-WIN-CORE-FIBERS-L1-1-1" at base 76f70000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "API-MS-WIN-CORE-LOCALIZATION-L1-2-1" at base 76f70000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "KERNEL32" at base 77150000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "%WINDIR%\TEMP\VXOLE32.DLL" at base 73930000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "KERNEL32.DLL" at base 77150000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "MSCTF.DLL" at base 76930000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "IMM32.DLL" at base 760d0000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "%WINDIR%\SYSTEM32\UXTHEME.DLL" at base 74200000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "WTSAPI32.DLL" at base 743c0000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "NTDLL.DLL" at base 77d30000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "RPCRT4.DLL" at base 766b0000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "UXTHEME.DLL" at base 74200000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "%WINDIR%\SYSTEM32\SHELL32.DLL" at base 74c70000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "OLEAUT32.DLL" at base 76000000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "EXT-MS-WIN-RTCORE-NTUSER-WINDOW-EXT-L1-1-0.DLL" at base 74af0000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "EXT-MS-WIN-RTCORE-NTUSER-INTEGRATION-L1-1-0.DLL" at base 74af0000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "API-MS-WIN-CORE-COM-L1-1-0.DLL" at base 747d0000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "%WINDIR%\SYSTEM32\MSCTF.DLL" at base 76930000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "COMCTL32" at base 73520000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "COMCTL32.DLL" at base 73520000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "%WINDIR%\SYSTEM32\OLE32.DLL" at base 76100000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "DWMAPI.DLL" at base 73760000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "%WINDIR%\SYSTEM32\DWMAPI.DLL" at base 73760000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "%WINDIR%\SYSTEM32\SHFOLDER.DLL" at base 73040000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "%WINDIR%\SYSTEM32\RSTRTMGR.DLL" at base 73010000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "%WINDIR%\SYSTEM32\BCRYPTPRIMITIVES.DLL" at base 76200000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "SHCORE.DLL" at base 764a0000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "USER32.DLL" at base 74af0000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "%WINDIR%\SYSTEM32\SHLWAPI.DLL" at base 74a30000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "%PROGRAMFILES%\(X86)\COMMON FILES\MICROSOFT SHARED\INK\TIPTSF.DLL" at base 72f30000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "%WINDIR%\SYSTEM32\MSFTEDIT.DLL" at base 72c80000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "%WINDIR%\SYSTEM32\WINDOWS.GLOBALIZATION.DLL" at base 72b40000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "%WINDIR%\SYSTEM32\PROPSYS.DLL" at base 73ca0000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "%WINDIR%\SYSWOW64\THUMBCACHE.DLL" at base 729f0000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "%WINDIR%\SYSTEM32\WINDOWSCODECS.DLL" at base 737c0000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "SSPICLI.DLL" at base 74750000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "%WINDIR%\SYSTEM32\EXPLORERFRAME.DLL" at base 72230000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "%WINDIR%\SYSTEM32\SFC.DLL" at base 63e0000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "%WINDIR%\SYSWOW64\WINDOWS.STORAGE.DLL" at base 77540000 "Ultimate_Defender_Pro_Shield-Installer.tmp" loaded module "CSCAPI.DLL" at base 73ac000036:T4e3,"Ultimate_Defender_Pro_Shield-Installer" was detected as "Inno Setup Module" and name: "Installer" "Ultimate_Defender_Pro_Shield-Installer" was detected as "Embarcadero Delphi" and name: "Compiler" "Ultimate_Defender_Pro_Shield-Installer" was detected as "Turbo Linker" and name: "Linker" "is-AAHMQ.tmp" was detected as "Inno Setup Module" and name: "Installer" "is-AAHMQ.tmp" was detected as "Embarcadero Delphi" and name: "Compiler" "is-AAHMQ.tmp" was detected as "Turbo Linker" and name: "Linker" "Ultimate_Defender_Pro_Shield-Installer.tmp" was detected as "Inno Setup Module" and name: "Installer" "Ultimate_Defender_Pro_Shield-Installer.tmp" was detected as "Embarcadero Delphi" and name: "Compiler" "Ultimate_Defender_Pro_Shield-Installer.tmp" was detected as "Turbo Linker" and name: "Linker" "is-EPJBF.tmp" was detected as "Inno Setup Module" and name: "Installer" "is-EPJBF.tmp" was detected as "Embarcadero Delphi" and name: "Compiler" "is-EPJBF.tmp" was detected as "Turbo Linker" and name: "Linker" "_setup64.tmp" was detected as "Inno Setup Module" and name: "Installer" "_setup64.tmp" was detected as "Embarcadero Delphi" and name: "Compiler" "_setup64.tmp" was detected as "Turbo Linker" and name: "Linker"37:T65e,"Ultimate_Defender_Pro_Shield-Installer.tmp" touched "Microsoft Multiple AutoComplete List Container" (Path: "HKCU\WOW6432NODE\CLSID\{00BB2765-6A77-11D0-A535-00C04FD7D062}\TREATAS") "Ultimate_Defender_Pro_Shield-Installer.tmp" touched "Microsoft Shell Folder AutoComplete List" (Path: "HKCU\WOW6432NODE\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\TREATAS") "Ultimate_Defender_Pro_Shield-Installer.tmp" touched "Microsoft AutoComplete" (Path: "HKCU\WOW6432NODE\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\TREATAS") "Ultimate_Defender_Pro_Shield-Installer.tmp" touched "Microsoft TipAutoCompleteClient Control" (Path: "HKCU\WOW6432NODE\CLSID\{807C1E6C-1D00-453F-B920-B61BB7CDD997}\TREATAS") "Ultimate_Defender_Pro_Shield-Installer.tmp" touched "Computer" (Path: "HKCU\WOW6432NODE\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\SHELLFOLDER") "Ultimate_Defender_Pro_Shield-Installer.tmp" touched "Memory Mapped Cache Mgr" (Path: "HKCU\WOW6432NODE\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}\TREATAS") "Ultimate_Defender_Pro_Shield-Installer.tmp" touched "Property System Both Class Factory" (Path: "HKCU\WOW6432NODE\CLSID\{76765B11-3F95-4AF2-AC9D-EA55D8994F1A}\TREATAS") "Ultimate_Defender_Pro_Shield-Installer.tmp" touched "Local Icon Cache" (Path: "HKCU\WOW6432NODE\CLSID\{2155FEE3-2419-4373-B102-6843707EB41F}\TREATAS") "Ultimate_Defender_Pro_Shield-Installer.tmp" touched "Task Bar Communication" (Path: "HKCU\WOW6432NODE\CLSID\{56FDF344-FD6D-11D0-958A-006097C9A090}\TREATAS") "Ultimate_Defender_Pro_Shield-Installer.tmp" touched "Shortcut" (Path: "HKCU\WOW6432NODE\CLSID\{00021401-0000-0000-C000-000000000046}\TREATAS")38:T479,"Ultimate_Defender_Pro_Shield-Installer" has an writable section named ".data" "Ultimate_Defender_Pro_Shield-Installer" has an writable section named ".bss" "Ultimate_Defender_Pro_Shield-Installer" has an writable section named ".idata" "Ultimate_Defender_Pro_Shield-Installer" has an writable section named ".didata" "Ultimate_Defender_Pro_Shield-Installer" has an writable section named ".tls" "is-AAHMQ.tmp" has an writable section named ".data" "is-AAHMQ.tmp" has an writable section named ".bss" "is-AAHMQ.tmp" has an writable section named ".idata" "is-AAHMQ.tmp" has an writable section named ".didata" "is-AAHMQ.tmp" has an writable section named ".tls" "Ultimate_Defender_Pro_Shield-Installer.tmp" has an writable section named ".data" "Ultimate_Defender_Pro_Shield-Installer.tmp" has an writable section named ".bss" "Ultimate_Defender_Pro_Shield-Installer.tmp" has an writable section named ".idata" "Ultimate_Defender_Pro_Shield-Installer.tmp" has an writable section named ".didata" "Ultimate_Defender_Pro_Shield-Installer.tmp" has an writable section named ".tls" "_setup64.tmp" has an writable section named ".data"39:T1063,"Ultimate_Defender_Pro_Shield-Installer" file has an entrypoint instructions - "push ebp,mov ebp, esp,add esp, -0x5c,push ebx,push esi,push edi,xor eax, eax,mov dword ptr [ebp - 0x3c], eax,mov dword ptr [ebp - 0x40], eax,mov dword ptr [ebp - 0x5c], eax,mov dword ptr [ebp - 0x30], eax,mov dword ptr [ebp - 0x38], eax,mov dword ptr [ebp - 0x34], eax,mov dword ptr [ebp - 0x2c], eax,mov dword ptr [ebp - 0x28], eax,mov dword ptr [ebp - 0x14], eax,mov eax, 0x4a2ebc,call 0x40fd3c,xor eax, eax,push ebp,push 0x4a8ac1,push dword ptr fs:[eax],mov dword ptr fs:[eax], esp,xor edx, edx,push ebp,push 0x4a8a7b,push dword ptr fs:[edx],mov dword ptr fs:[edx], esp,mov eax, dword ptr [0x4b0634],call 0x4a16e8,call 0x4a1240,lea edx, [ebp - 0x14],xor eax, eax," "is-AAHMQ.tmp" file has an entrypoint instructions - "push ebp,mov ebp, esp,add esp, -0x10,push ebx,push esi,push edi,mov eax, 0x6a1748,call 0x411d44,mov eax, dword ptr [0x6b7adc],mov eax, dword ptr [eax],mov eax, dword ptr [eax + 0x190],push -0x14,push eax,call 0x41638c,mov edx, dword ptr [0x6b7adc],mov edx, dword ptr [edx],mov edx, dword ptr [edx + 0x190],and eax, 0xffffff7f,push eax,push -0x14,push edx,call 0x416394,xor eax, eax,push ebp,push 0x6adc85,push dword ptr fs:[eax],mov dword ptr fs:[eax], esp,push 1,call 0x41569c,call 0x6a14ac,mov eax, dword ptr [0x6a136c],push eax," "Ultimate_Defender_Pro_Shield-Installer.tmp" file has an entrypoint instructions - "push ebp,mov ebp, esp,add esp, -0x10,push ebx,push esi,push edi,mov eax, 0x6a1748,call 0x411d44,mov eax, dword ptr [0x6b7adc],mov eax, dword ptr [eax],mov eax, dword ptr [eax + 0x190],push -0x14,push eax,call 0x41638c,mov edx, dword ptr [0x6b7adc],mov edx, dword ptr [edx],mov edx, dword ptr [edx + 0x190],and eax, 0xffffff7f,push eax,push -0x14,push edx,call 0x416394,xor eax, eax,push ebp,push 0x6adc85,push dword ptr fs:[eax],mov dword ptr fs:[eax], esp,push 1,call 0x41569c,call 0x6a14ac,mov eax, dword ptr [0x6a136c],push eax," "is-EPJBF.tmp" file has an entrypoint instructions - "jmp dword ptr [0x402000],add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al,add byte ptr [eax], al," "_setup64.tmp" file has an entrypoint instructions - "sub rsp, 0x28,call 0x1400012a4,mov ecx, eax,call qword ptr [rip + 0xb8f],int3 ,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,add byte ptr [rax], al,"3a:T8c6,"Ultimate Defender Pro Shield.lnk" has type "MS Windows shortcut Item id list present Points to a file or directory Has Relative path Has Working directory Archive ctime=Tue Jul 30 13:49:57 2024 mtime=Tue Jul 30 13:49:57 2024 atime=Sun Jul 14 19:49:04 2024 length=1191936 window=hide"- Location: [%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Ultimate Defender Pro Shield\Ultimate Defender Pro Shield.lnk]- [targetUID: 00000000-00008068] "Uninstall Ultimate Defender Pro Shield.lnk" has type "MS Windows shortcut Item id list present Points to a file or directory Has Relative path Has Working directory Archive ctime=Tue Jul 30 13:49:56 2024 mtime=Tue Jul 30 13:49:56 2024 atime=Tue Jul 30 13:49:14 2024 length=3221565 window=hide"- Location: [%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Ultimate Defender Pro Shield\Uninstall Ultimate Defender Pro Shield.lnk]- [targetUID: 00000000-00008068] "is-AAHMQ.tmp" has type "PE32 executable (GUI) Intel 80386 for MS Windows"- Location: [%PROGRAMFILES%\(x86)\UDPS SOFTWARE\is-AAHMQ.tmp]- [targetUID: 00000000-00008068] "Ultimate_Defender_Pro_Shield-Installer.tmp" has type "PE32 executable (GUI) Intel 80386 for MS Windows"- Location: [%TEMP%\is-S5DRQ.tmp\Ultimate_Defender_Pro_Shield-Installer.tmp]- [targetUID: 00000000-00002788] "is-EPJBF.tmp" has type "PE32 executable (GUI) Intel 80386 Mono/.Net assembly for MS Windows"- Location: [%PROGRAMFILES%\(x86)\UDPS SOFTWARE\is-EPJBF.tmp]- [targetUID: 00000000-00008068] "_setup64.tmp" has type "PE32+ executable (console) x86-64 for MS Windows"- Location: [%TEMP%\is-Q0AKH.tmp\_isetup\_setup64.tmp]- [targetUID: 00000000-00008068] "unins000.dat" has type "InnoSetup Log Ultimate Defender Pro Shield {2989555F-902E-463F-B0AC-DAEFD86D2F5B} version 0x418 3287 bytes DESKTOP-F\HAPUBWS\3 C:\Program Files (x86)\UDPS SOFTWARE\376\3"- Location: [%PROGRAMFILES%\(x86)\UDPS SOFTWARE\unins000.dat]- [targetUID: 00000000-00008068] "Ultimate Defender Pro Shield on the Web.url" has type "MS Windows 95 Internet shortcut text ASCII text with CRLF line terminators"- Location: [%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Ultimate Defender Pro Shield\Ultimate Defender Pro Shield on the Web.url]- [targetUID: 00000000-00008068]3b:T65d,"Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\SESSION MANAGER\SEGMENT HEAP"; Key: ""; Value: "") "Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\SESSION MANAGER"; Key: ""; Value: "") "Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\MICROSOFT\WOW64\X86"; Key: ""; Value: "") "Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\SAFEBOOT\OPTION"; Key: ""; Value: "") "Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\SRP\GP\DLL"; Key: ""; Value: "") "Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\WINDOWS\SAFER\CODEIDENTIFIERS"; Key: ""; Value: "") "Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "OPEN"; Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\WINDOWS\SAFER\CODEIDENTIFIERS"; Key: ""; Value: "") "Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\FILESYSTEM"; Key: ""; Value: "") "Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\SORTING\VERSIONS"; Key: ""; Value: "") "Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\LSA\FIPSALGORITHMPOLICY"; Key: ""; Value: "") "Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\LSA"; Key: ""; Value: "")3c:Td87,"Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\SESSION MANAGER"; Key: "RESOURCEPOLICIES"; Value: "") "Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WOW64\X86"; Key: "ULTIMATE_DEFENDER_PRO_SHIELD-INSTALLER.EXE"; Value: "") "Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WOW64\X86"; Key: ""; Value: "") "Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\WINDOWS\SAFER\CODEIDENTIFIERS"; Key: "TRANSPARENTENABLED"; Value: "") "Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\FILESYSTEM"; Key: "LONGPATHSENABLED"; Value: "") "Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\SORTING\VERSIONS"; Key: ""; Value: "") "Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\LSA\FIPSALGORITHMPOLICY"; Key: "ENABLED"; Value: "") "Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\LSA"; Key: "FIPSALGORITHMPOLICY"; Value: "") "Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\LSA\FIPSALGORITHMPOLICY"; Key: "MDMENABLED"; Value: "") "Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\OLE"; Key: "PAGEALLOCATORUSESYSTEMHEAP"; Value: "") "Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\OLE"; Key: "PAGEALLOCATORSYSTEMHEAPISPRIVATE"; Value: "") "Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\OLE"; Key: "AGGRESSIVEMTATESTING"; Value: "") "Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\GRE_INITIALIZE"; Key: "DISABLEMETAFILES"; Value: "") "Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "QUERYVAL"; Path: "HKCU\CONTROL PANEL\DESKTOP"; Key: "ENABLEPERPROCESSSYSTEMDPI"; Value: "") "Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\COMPATIBILITY32"; Key: "ULTIMATE_DEFENDER_PRO_SHIELD-INSTALLER"; Value: "") "Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\CUSTOMLOCALE"; Key: "EMPTY"; Value: "") "Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LANGUAGE"; Key: "INSTALLLANGUAGEFALLBACK"; Value: "") "Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\MUI\UILANGUAGES\EN-US"; Key: "TYPE"; Value: "") "Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\MUI\UILANGUAGES\EN-US"; Key: "ALTERNATECODEPAGE"; Value: "") "Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "QUERYVAL"; Path: "HKCU\CONTROL PANEL\DESKTOP"; Key: "PREFERREDUILANGUAGES"; Value: "") "Ultimate_Defender_Pro_Shield-Installer.exe" (Access type: "QUERYVAL"; Path: "HKCU\CONTROL PANEL\DESKTOP\MUICACHED"; Key: "MACHINEPREFERREDUILANGUAGES"; Value: "")3d:T60b,"Ultimate_Defender_Pro_Shield-Installer.tmp" touched file "C:\Users\%OSUSER%\AppData\Local\Microsoft\Windows\Caches" "Ultimate_Defender_Pro_Shield-Installer.tmp" touched file "C:\Users\%OSUSER%\AppData\Local\Microsoft\Windows\Explorer" "Ultimate_Defender_Pro_Shield-Installer.tmp" touched file "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ultimate Defender Pro Shield\Ultimate Defender Pro Shield.lnk" "Ultimate_Defender_Pro_Shield-Installer.tmp" touched file "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ultimate Defender Pro Shield\Ultimate Defender Pro Shield on the Web.url" "Ultimate_Defender_Pro_Shield-Installer.tmp" touched file "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ultimate Defender Pro Shield\Uninstall Ultimate Defender Pro Shield.lnk" "Ultimate_Defender_Pro_Shield-Installer.tmp" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches" "Ultimate_Defender_Pro_Shield-Installer.tmp" touched file "%LOCALAPPDATA%\Microsoft\Windows\Explorer" "Ultimate_Defender_Pro_Shield-Installer.tmp" touched file "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Ultimate Defender Pro Shield\Ultimate Defender Pro Shield.lnk" "Ultimate_Defender_Pro_Shield-Installer.tmp" touched file "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Ultimate Defender Pro Shield\Ultimate Defender Pro Shield on the Web.url" "Ultimate_Defender_Pro_Shield-Installer.tmp" touched file "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Ultimate Defender Pro Shield\Uninstall Ultimate Defender Pro Shield.lnk"3e:T7ad,"Ultimate_Defender_Pro_Shield-Installer.tmp" trying to access LNK file "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ultimate Defender Pro Shield\ULTIMATE DEFENDER PRO SHIELD.LNK" "Ultimate_Defender_Pro_Shield-Installer.tmp" trying to access LNK file "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ultimate Defender Pro Shield\Ultimate Defender Pro Shield.lnk" "Ultimate_Defender_Pro_Shield-Installer.tmp" trying to access LNK file "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ultimate Defender Pro Shield\ULTIMATE DEFENDER PRO SHIELD ON THE WEB.LNK" "Ultimate_Defender_Pro_Shield-Installer.tmp" trying to access LNK file "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ultimate Defender Pro Shield\UNINSTALL ULTIMATE DEFENDER PRO SHIELD.LNK" "Ultimate_Defender_Pro_Shield-Installer.tmp" trying to access LNK file "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ultimate Defender Pro Shield\Uninstall Ultimate Defender Pro Shield.lnk" "Ultimate_Defender_Pro_Shield-Installer.tmp" trying to access LNK file "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Ultimate Defender Pro Shield\ULTIMATE DEFENDER PRO SHIELD.LNK" "Ultimate_Defender_Pro_Shield-Installer.tmp" trying to access LNK file "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Ultimate Defender Pro Shield\Ultimate Defender Pro Shield.lnk" "Ultimate_Defender_Pro_Shield-Installer.tmp" trying to access LNK file "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Ultimate Defender Pro Shield\ULTIMATE DEFENDER PRO SHIELD ON THE WEB.LNK" "Ultimate_Defender_Pro_Shield-Installer.tmp" trying to access LNK file "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Ultimate Defender Pro Shield\UNINSTALL ULTIMATE DEFENDER PRO SHIELD.LNK" "Ultimate_Defender_Pro_Shield-Installer.tmp" trying to access LNK file "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Ultimate Defender Pro Shield\Uninstall Ultimate Defender Pro Shield.lnk"3f:T4f5,"Ultimate_Defender_Pro_Shield-Installer.exe" trying to access non-existent file "C:\Windows\System32\WOW64LOG.DLL" "Ultimate_Defender_Pro_Shield-Installer.exe" trying to access non-existent file "C:\FLTLIB.DLL" "Ultimate_Defender_Pro_Shield-Installer.tmp" trying to access non-existent file "C:\Windows\System32\WOW64LOG.DLL" "Ultimate_Defender_Pro_Shield-Installer.tmp" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\Temp\is-S5DRQ.tmp\FLTLIB.DLL" "Ultimate_Defender_Pro_Shield-Installer.tmp" trying to access non-existent file "C:\Windows\SysWOW64\RPCSS.DLL" "Ultimate_Defender_Pro_Shield-Installer.tmp" trying to access non-existent file "C:\WINDOWS\system32\rpcss.dll" "Ultimate_Defender_Pro_Shield-Installer.tmp" trying to access non-existent file "C:\Program Files (x86)\UDPS SOFTWARE\UNINS000.EXE" "Ultimate_Defender_Pro_Shield-Installer.tmp" trying to access non-existent file "C:\Program Files (x86)\UDPS SOFTWARE\unins000.exe" "Ultimate_Defender_Pro_Shield-Installer.tmp" trying to access non-existent file "C:\Program Files (x86)\UDPS SOFTWARE\ULTIMATE DEFENDER PRO SHIELD.EXE" "Ultimate_Defender_Pro_Shield-Installer.tmp" trying to access non-existent file "C:\Program Files (x86)\UDPS SOFTWARE\Ultimate Defender Pro Shield.exe"40:T673,"Ultimate_Defender_Pro_Shield-Installer.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\Temp\IS-S5DRQ.TMP" "Ultimate_Defender_Pro_Shield-Installer.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\Temp\is-S5DRQ.tmp" "Ultimate_Defender_Pro_Shield-Installer.tmp" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\Temp\is-S5DRQ.tmp\ULTIMATE_DEFENDER_PRO_SHIELD-INSTALLER.TMP.LOCAL" "Ultimate_Defender_Pro_Shield-Installer.tmp" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\Temp\is-S5DRQ.tmp\Ultimate_Defender_Pro_Shield-Installer.tmp.Local\" "Ultimate_Defender_Pro_Shield-Installer.tmp" trying to access non-existent file "C:\Windows\SysWOW64\UXTHEME.DLL.CONFIG" "Ultimate_Defender_Pro_Shield-Installer.tmp" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\Temp\IS-Q0AKH.TMP" "Ultimate_Defender_Pro_Shield-Installer.tmp" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\Temp\is-Q0AKH.tmp" "Ultimate_Defender_Pro_Shield-Installer.tmp" trying to access non-existent file "Z:\" "Ultimate_Defender_Pro_Shield-Installer.tmp" trying to access non-existent file "C:\MSOCache\DESKTOP.INI" "Ultimate_Defender_Pro_Shield-Installer.tmp" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\Microsoft\Windows\Explorer\ICONCACHETODELETE" "Ultimate_Defender_Pro_Shield-Installer.tmp" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\Microsoft\Windows\Explorer\IconCacheToDelete" "Ultimate_Defender_Pro_Shield-Installer.tmp" trying to access non-existent file "C:\Program Files (x86)\UDPS SOFTWARE"41:T44e,Found reference to API "WinHttpConnect" (Indicator: "WinHttpConnect"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "WinHttpQueryHeaders" (Indicator: "WinHttpQueryHeaders"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "WinHttpOpen" (Indicator: "WinHttpOpen"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "WinHttpOpenRequest" (Indicator: "HttpOpenRequest"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "WinHttpOpenRequest" (Indicator: "WinHttpOpen"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "WinHttpOpenRequest" (Indicator: "WinHttpOpenRequest"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "WinHttpSendRequest" (Indicator: "HttpSendRequest"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "WinHttpSendRequest" (Indicator: "WinHttpSendRequest"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "WinHttpReadData" (Indicator: "WinHttpReadData"; File: "Ultimate_Defender_Pro_Shield-Installer")42:Ta2b,Found reference to API "WinHttpSetOption" (Indicator: "WinHttpSetOption"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "WinHttpConnect" (Indicator: "WinHttpConnect"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "WinHttpQueryAuthSchemes" (Indicator: "WinHttpQueryAuthSchemes"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "WinHttpCloseHandle" (Indicator: "WinHttpCloseHandle"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "WinHttpGetIEProxyConfigForCurrentUser" (Indicator: "WinHttpGetIEProxyConfigForCurrentUser"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "WinHttpSetTimeouts" (Indicator: "WinHttpSetTimeouts"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "WinHttpQueryDataAvailable" (Indicator: "WinHttpQueryDataAvailable"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "WinHttpWriteData" (Indicator: "WinHttpWriteData"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "WinHttpSetCredentials" (Indicator: "WinHttpSetCredentials"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "WinHttpGetProxyForUrl" (Indicator: "WinHttpGetProxyForUrl"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "WinHttpAddRequestHeaders" (Indicator: "WinHttpAddRequestHeaders"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "WinHttpSetStatusCallback" (Indicator: "WinHttpSetStatusCallback"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "WinHttpQueryHeaders" (Indicator: "WinHttpQueryHeaders"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "WinHttpReceiveResponse" (Indicator: "WinHttpReceiveResponse"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "WinHttpQueryOption" (Indicator: "WinHttpQueryOption"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "WinHttpOpen" (Indicator: "WinHttpOpen"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "WinHttpOpenRequest" (Indicator: "WinHttpOpen"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "WinHttpOpenRequest" (Indicator: "WinHttpOpenRequest"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "WinHttpSendRequest" (Indicator: "WinHttpSendRequest"; File: "Ultimate_Defender_Pro_Shield-Installer") Found reference to API "WinHttpReadData" (Indicator: "WinHttpReadData"; File: "Ultimate_Defender_Pro_Shield-Installer")43:T150a,Found URL "https://jrsoftware.org/ishelp/index.php?topic=setupcmdlinesetupkernel32.dlluxtheme.dlluserenv.dllsetupapi.dllapphelp.dllpropsys.dlldwmapi.dllcryptbase.dlloleacc.dllversion.dllprofapi.dllcomres.dllclbcatq.dllntmarta.dllsoftware\microsoft\windows" - Source: "00000000-00002788.00000001.108982.00401000.00000020.mdmp") Found URL "http://www.dk-soft.org/" - Source: "00000000-00002788.00000001.108982.04A60000.00000004.mdmp") Found URL "http://www.haysoft.org%1-k" - Source: "00000000-00002788.00000001.108982.04A60000.00000004.mdmp") Found URL "https://www.udps.webnode.comhttps://www.udps.webnode.comhttps://www.udps.webnode.comultimate" - Source: "00000000-00002788.00000001.108982.04A60000.00000004.mdmp") Found URL "http://www.haysoft.org%1-k" - Source: "00000000-00008068.00000000.107182.04BE0000.00000004.mdmp") Found URL "https://www.udps.webnode.comhttps://www.udps.webnode.comhttps://www.udps.webnode.comultimate" - Source: "00000000-00008068.00000000.107182.04BE0000.00000004.mdmp") Found URL "https://www.udps.webnode.commethod" - Source: "00000000-00008068.00000000.107182.04BE0000.00000004.mdmp") Found URL "http://www.dk-soft.org/" - Source: "00000000-00008068.00000000.107182.05EC0000.00000004.mdmp") Found URL "https://www.msn.com/favicon.ico" - Source: "00000000-00008068.00000001.109102.02BD0000.00000004.mdmp") Found URL "http://www.haysoft.org%1-k" - Source: "00000000-00008068.00000001.109102.04BE0000.00000004.mdmp") Found URL "https://www.udps.webnode.comhttps://www.udps.webnode.comhttps://www.udps.webnode.comultimate" - Source: "00000000-00008068.00000001.109102.04BE0000.00000004.mdmp") Found URL "https://www.udps.webnode.comc:\program" - Source: "00000000-00008068.00000001.109102.04BE0000.00000004.mdmp") Found URL "http://www.dk-soft.org/" - Source: "00000000-00008068.00000001.109102.05EC0000.00000004.mdmp") Found URL "http://www.virtualbox.orgoracle" - Source: "00000000-00008068.00000001.109102.07630000.00000004.mdmp") Found URL "http://go.microsoft.com/fwlink/?linkid=215117microsoft" - Source: "00000000-00008068.00000001.109102.07630000.00000004.mdmp") Found URL "http://support.microsoft.com/kb/4023057c:\windows\softwaredistribution\download\eb561161694e9fba93423cc2a2678b78\img\update" - Source: "00000000-00008068.00000001.109102.07630000.00000004.mdmp") Found URL "http://www.cacetech.comwinpcap" - Source: "00000000-00008068.00000001.109102.07630000.00000004.mdmp") Found URL "http://www.autoitscript.com/autoit3autoit" - Source: "00000000-00008068.00000001.109102.07630000.00000004.mdmp") Found URL "https://www.wireshark.orgc:\program" - Source: "00000000-00008068.00000001.109102.07630000.00000004.mdmp") Found URL "https://ask.wireshark.org/wireshark" - Source: "00000000-00008068.00000001.109102.07630000.00000004.mdmp") Found URL "http://www.adobe.com/support/main.htmlc:\windows\installer\" - Source: "00000000-00008068.00000001.109102.07630000.00000004.mdmp") Found URL "http://support.microsoft.com/kb/4023057c:\windows\softwaredistribution\download\1eb060e9b9d3cbeb39c83f2a9722294e\img\update" - Source: "00000000-00008068.00000001.109102.07630000.00000004.mdmp") Found URL "http://java.com/helpc:\users\hapubws\appdata\locallow\oracle\java\jre1.8.0_161\http://java.comjava" - Source: "00000000-00008068.00000001.109102.07630000.00000004.mdmp") Found URL "https://support.mozilla.orgmozilla" - Source: "00000000-00008068.00000001.109102.07630000.00000004.mdmp") Found URL "https://npcap.com/" - Source: "00000000-00008068.00000001.109102.07630000.00000004.mdmp") Found URL "https://npcap.com/