26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 46:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T461,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Malware Sample fcb96d7f049c… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample fcb96d7f049c…. Malware family: Malware. Threat score 100/100. 9/27 AV engines flagged this file. 7 malicious and 15 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/fcb96d7f049cde3e1e82c7e9d4baa21e1cac81a1143de79e3dea03eef4af1f31","keywords":["Malicious","Malware","malware analysis","sandbox report","threat intelligence","fcb96d7f049cde3e1e82c7e9d4baa21e1cac81a1143de79e3dea03eef4af1f31"],"about":{"@type":"SoftwareApplication","name":"file","applicationCategory":["peexe","executable"],"identifier":"fcb96d7f049cde3e1e82c7e9d4baa21e1cac81a1143de79e3dea03eef4af1f31","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Malware","antivirusDetections":{"malicious":9,"total":27},"behavioralIndicators":{"malicious":7,"suspicious":15},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T5af,Found reference to API "IOpenServiceManager" (Indicator: "OpenService"; Source: "00000000-00003908.00000001.67542.69721000.00000020.mdmp") Found reference to API "IOpenServiceActivity" (Indicator: "OpenService"; Source: "00000000-00003908.00000001.67542.69721000.00000020.mdmp") Found reference to API "IOpenServiceActivityManager" (Indicator: "OpenService"; Source: "00000000-00003908.00000001.67542.69721000.00000020.mdmp") Found reference to API "IOpenServiceActivityOutputContext" (Indicator: "OpenService"; Source: "00000000-00003908.00000001.67542.69721000.00000020.mdmp") Found reference to API "IOpenServiceActivityInput" (Indicator: "OpenService"; Source: "00000000-00003908.00000001.67542.69721000.00000020.mdmp") Found reference to API "IOpenService" (Indicator: "OpenService"; Source: "00000000-00003908.00000001.67542.69721000.00000020.mdmp") Found reference to API "IEnumOpenServiceActivity" (Indicator: "OpenService"; Source: "00000000-00003908.00000001.67542.69721000.00000020.mdmp") Found reference to API "IOpenServiceActivityCategory" (Indicator: "OpenService"; Source: "00000000-00003908.00000001.67542.69721000.00000020.mdmp") Found reference to API "IEnumOpenServiceActivityCategory" (Indicator: "OpenService"; Source: "00000000-00003908.00000001.67542.69721000.00000020.mdmp") Found reference to API "IOpenServiceManagerInternal" (Indicator: "OpenService"; Source: "00000000-00003908.00000001.67542.69721000.00000020.mdmp")28:T56e,Found reference to "MSCF2Wqh disallowedcert.stl|f~3"{-UAV>F :n;lpd`() hvnf|T#&6%&WSHS9*}9yZ@F+/vU|Usr #k#NK-c0ROmX6VG55:x"3`CM:k^nLuSvMxfx4qM?{i%CVl\tP-`}v?@s)?hRQ>jB@H4-" (Indicator: "Oid"; File: "57C8EDB95DF3F0AD4EE2DC2B8CFD4157") Found reference to "AesGcm256" (Indicator: "Aes"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to "AesGcm256" (Indicator: "AesGcm"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to "AesFastEngine" (Indicator: "Aes"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to "HashAlgorithm" (Indicator: "HashAlgorithm"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to "MD5CryptoServiceProvider" (Indicator: "MD5CryptoServiceProvider"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") file/memory contains long string with (Indicator: "Oid"; Source: "00000000-00003908.00000001.67542.03250000.00000002.mdmp")29:T1e11,Contains base64 string in header "Keep" in header "GET /DigiCertGlobalRootG3.crt HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: cacerts.digicert.com" Contains base64 string in header "User" in header "GET /DigiCertGlobalRootG3.crt HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: cacerts.digicert.com" Contains base64 string in header "digicert" in header "GET /DigiCertGlobalRootG3.crt HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: cacerts.digicert.com" Contains base64 string in header "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt" in header "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAzlnDD9eoNTLi0BRrMy%2BWU%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com" Contains base64 string in header "2BWU" in header "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAzlnDD9eoNTLi0BRrMy%2BWU%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com" Contains base64 string in header "Keep" in header "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAzlnDD9eoNTLi0BRrMy%2BWU%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com" Contains base64 string in header "User" in header "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAzlnDD9eoNTLi0BRrMy%2BWU%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com" Contains base64 string in header "ocsp" in header "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAzlnDD9eoNTLi0BRrMy%2BWU%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com" Contains base64 string in header "digicert" in header "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAzlnDD9eoNTLi0BRrMy%2BWU%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com" Contains base64 string in header "Keep" in header "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com" Contains base64 string in header "User" in header "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com" Contains base64 string in header "ocsp" in header "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com" Contains base64 string in header "digicert" in header "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com" Contains base64 string in header "2BrkS7QYXjzkCEAqvpsXKY8RRQeo74ffHUxc" in header "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAqvpsXKY8RRQeo74ffHUxc%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com" Contains base64 string in header "Keep" in header "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAqvpsXKY8RRQeo74ffHUxc%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com" Contains base64 string in header "User" in header "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAqvpsXKY8RRQeo74ffHUxc%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com" Contains base64 string in header "ocsp" in header "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAqvpsXKY8RRQeo74ffHUxc%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com" Contains base64 string in header "digicert" in header "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAqvpsXKY8RRQeo74ffHUxc%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com" Contains base64 string in header "2BrkS7QYXjzkCEAn5bsKVVV8kdJ6vHl3O1J0" in header "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAn5bsKVVV8kdJ6vHl3O1J0%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com" Contains base64 string in header "Keep" in header "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAn5bsKVVV8kdJ6vHl3O1J0%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com" Contains base64 string in header "User" in header "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAn5bsKVVV8kdJ6vHl3O1J0%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com" Contains base64 string in header "ocsp" in header "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAn5bsKVVV8kdJ6vHl3O1J0%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com" Contains base64 string in header "digicert" in header "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAn5bsKVVV8kdJ6vHl3O1J0%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com" Contains base64 string in header "2BrkS7QYXjzkCEA177el9ggmWelJjG4vdGL0" in header "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEA177el9ggmWelJjG4vdGL0%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com" Contains base64 string in header "Keep" in header "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEA177el9ggmWelJjG4vdGL0%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com" Contains base64 string in header "User" in header "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEA177el9ggmWelJjG4vdGL0%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com" Contains base64 string in header "ocsp" in header "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEA177el9ggmWelJjG4vdGL0%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com" Contains base64 string in header "digicert" in header "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEA177el9ggmWelJjG4vdGL0%3D HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/6.1Host: ocsp.digicert.com"2a:T112a,"file.exe" called "RtlGetVersion" with parameter 140100000600000001000000b11d000002000000530065007200760069006300650020005000610063006b0020003100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00003908) "file.exe" called "RtlGetVersion" with parameter 1c0100000600000001000000b11d000002000000530065007200760069006300650020005000610063006b0020003100000099049966cc04cc66cc04ff6699040099cc043399cc046699cc049999cc04cc99cc04ff99cc0400cccc0433cccc0466cccc0499cccc04cccccc04ffcccc0400ffcc0433ffcc0466ff990499ffcc04ccffcc04ffffcc043300cc046600ff049900ff040033cc043333ff046633ff049933ff04cc33ff04ff33ff040066ff043366ff046666cc049966ff04cc66ff04ff66cc040099ff043399ff046699ff049999ff04cc99ff04ff99ff0400ccff0433ccff0466ccff0499ccff04ccccff0400001c6d40e5720266ffcc0499ffff04ccffff0430e5720200001c6d0000000001000000 (UID: 00000000-00003908) "file.exe" called "RtlGetVersion" with parameter 1c0100000600000001000000b11d000002000000530065007200760069006300650020005000610063006b0020003100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00003908) "file.exe" called "RtlGetVersion" with parameter 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 (UID: 00000000-00003908) "file.exe" called "RtlGetVersion" with parameter 000000000600000001000000b11d000002000000530065007200760069006300650020005000610063006b0020003100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00003908) "file.exe" called "RtlGetVersion" with parameter 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 (UID: 00000000-00003908) "file.exe" called "RtlGetVersion" with parameter 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 (UID: 00000000-00003908)2b:T45a,"file.exe" called "GetVersionExA" with parameter 9c0000000600000001000000b11d00000200000053657276696365205061636b2031000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00003908) "file.exe" called "GetVersionExA" with parameter 940000000600000001000000b11d00000200000053657276696365205061636b20310000e86a66003cfc2400145c8977435c897708fd2400010000009401640001000000bcfb2400935c8a7740839177d4a089774691ba7708fd24000100000001000000807a6600000000008cfb2400bcfb240028fc240095e18577026e1700feffffffd4a089771bbe7b750000fc7500000000 (UID: 00000000-00003908) "file.exe" called "GetVersionExA" with parameter 940000000600000001000000b11d00000200000053657276696365205061636b20310000f5f68977beb7eb76f42e9e6cc8c56600a0359e6ceeb7eb766cdd7501b8bd6600b2f48977deb7eb767cdd75010000976c0000976c00000000d8dc7501f0000000f000976c00000000e8dc7501530000007cde750100000000010000004cdd750140f58977000000000000000038dd7501 (UID: 00000000-00003908)2c:Td8d,"file.exe" called "LoadLibrary" with a parameter mscoree.dll (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter ADVAPI32.dll (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter ole32.dll (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter kernel32.dll (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter comctl32.dll (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter api-ms-win-downlevel-ole32-l1-1-0.dll (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter api-ms-win-downlevel-advapi32-l1-1-0.dll (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter urlmon.dll (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter api-ms-win-downlevel-shlwapi-l2-1-0.dll (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter PROPSYS.dll (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter OLEAUT32.dll (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter USER32.dll (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter API-MS-Win-Core-LocalRegistry-L1-1-0.dll (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter gdi32.dll (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter %WINDIR%\system32\IMM32.DLL (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter %WINDIR%\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter SHLWAPI.dll (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter api-ms-win-appmodel-runtime-l1-1-2.dll (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter api-ms-win-appmodel-runtime-l1-1-0.dll (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter %WINDIR%\Microsoft.NET\Framework\v4.0.30319\MUI\0409\\mscoreeis.dll (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter %WINDIR%\Microsoft.NET\Framework\v4.0.30319\mscoreeis.dll (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter imm32.dll (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter user32 (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter %WINDIR%\system32\uxtheme.dll (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter dwmapi.dll (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter %WINDIR%\system32\ole32.dll (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter %WINDIR%\system32\MSCTF.dll (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter shell32.dll (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter SHELL32.dll (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter propsys.dll (UID: 00000000-00003908) "file.exe" called "LoadLibrary" with a parameter iertutil.dll (UID: 00000000-00003908)2d:T449d,"file.exe" called "GetProcAddress" with a parameter FlsGetValue (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmWINNLSEnableIME (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmWINNLSGetEnableStatus (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmSendIMEMessageExW (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter VirtualProtect (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter FlsAlloc (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter FlsSetValue (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter FlsFree (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter EncodePointer (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter DecodePointer (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter _CorExeMain (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter OleInitialize (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter CoTaskMemAlloc (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter LpkEditControl (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ReleaseSRWLockExclusive (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter InitializeSRWLock (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter AcquireSRWLockExclusive (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter AcquireSRWLockShared (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ReleaseSRWLockShared (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter EventSetInformation (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter InitCommonControlsEx (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter RegisterTraceGuidsA (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter PSCreateMemoryPropertyStore (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter PropVariantToBSTR (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter PropVariantClear (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter CoTaskMemFree (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter IUnknown_Set (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ResolveDelayLoadedAPI (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter PSPropertyBag_ReadDWORD (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter CoCreateInstance (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter FindWindowExW (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter GetCharABCWidthsI (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmSendIMEMessageExA (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmIMPGetIMEW (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmIMPGetIMEA (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmIMPQueryIMEW (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmIMPQueryIMEA (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmIMPSetIMEW (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmIMPSetIMEA (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmAssociateContext (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmEscapeA (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmEscapeW (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmGetCompositionStringA (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmGetCompositionStringW (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmGetCompositionWindow (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmGetContext (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmGetDefaultIMEWnd (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmIsIME (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmReleaseContext (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmRegisterClient (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmGetCompositionFontW (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmGetCompositionFontA (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmSetCompositionFontW (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmSetCompositionFontA (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmSetCompositionWindow (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmNotifyIME (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmLockIMC (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmUnlockIMC (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmLoadIME (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmSetOpenStatus (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmFreeLayout (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmActivateLayout (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmGetCandidateWindow (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmSetCandidateWindow (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmConfigureIMEW (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmGetConversionStatus (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmSetConversionStatus (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmSetStatusWindowPos (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmGetImeInfoEx (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmLockImeDpi (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmUnlockImeDpi (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmGetOpenStatus (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmSetActiveContext (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmTranslateMessage (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmLoadLayout (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmProcessKey (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmPutImeMenuItemsIntoMappedFile (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmGetProperty (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmSetCompositionStringA (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmSetCompositionStringW (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmEnumInputContext (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmSystemHandler (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter CtfImmTIMActivate (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter CtfImmRestoreToolbarWnd (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter CtfImmHideToolbarWnd (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter CtfImmDispatchDefImeMessage (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter CtfImmNotify (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter CtfImmSetDefaultRemoteKeyboardLayout (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter CtfImmGetCompatibleKeyboardLayout (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter LpkTabbedTextOut (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter LpkPSMTextOut (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter LpkDrawTextEx (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter InitializeCriticalSectionEx (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter LCMapStringEx (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter InitOnceExecuteOnce (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter CreateEventExW (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter CreateSemaphoreW (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter CreateSemaphoreExW (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter CreateThreadpoolTimer (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter SetThreadpoolTimer (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter WaitForThreadpoolTimerCallbacks (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter CloseThreadpoolTimer (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter CreateThreadpoolWait (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter SetThreadpoolWait (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter CloseThreadpoolWait (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter FlushProcessWriteBuffers (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter FreeLibraryWhenCallbackReturns (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter GetCurrentProcessorNumber (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter CreateSymbolicLinkW (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter GetCurrentPackageId (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter GetTickCount64 (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter GetFileInformationByHandleEx (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter SetFileInformationByHandle (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter GetSystemTimePreciseAsFileTime (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter InitializeConditionVariable (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter WakeConditionVariable (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter WakeAllConditionVariable (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter SleepConditionVariableCS (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter TryAcquireSRWLockExclusive (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter SleepConditionVariableSRW (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter CreateThreadpoolWork (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter SubmitThreadpoolWork (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter CloseThreadpoolWork (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter CompareStringEx (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter GetLocaleInfoEx (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter AreFileApisANSI (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter RegOpenKeyExW (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter RegQueryInfoKeyW (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter RegEnumKeyExW (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter RegEnumValueW (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter RegCloseKey (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter RegQueryValueExW (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter AddDllDirectory (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter EventRegister (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter RegisterShimImplCallback (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter RegisterShimImplCleanupCallback (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter SetShellShimInstance (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter OnShimDllMainCalled (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter _CorExeMain_RetAddr (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter UrlIsW (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter GetUserDefaultUILanguage (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter LoadStringW (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter InitializeCriticalSectionAndSpinCount (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ProcessIdToSessionId (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmCreateContext (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ImmDestroyContext (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter GetProcessWindowStation (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter GetUserObjectInformationW (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter MessageBoxW (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter GetLayout (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter GdiRealizationInfo (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter FontIsLinked (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter GetTextFaceAliasW (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter GetFontAssocStatus (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter RegQueryValueExA (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ThemeInitApiHook (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter IsProcessDPIAware (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter DwmIsCompositionEnabled (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter GdiIsMetaPrintDC (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter CoInitializeEx (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter CoUninitialize (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter CoRegisterInitializeSpy (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter CoRevokeInitializeSpy (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter GetNativeSystemInfo (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter ShellExecuteW (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter SHGetInstanceExplorer (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter RegisterTraceGuidsW (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter EventUnregister (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter EventEnabled (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter EventWrite (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter OpenThreadToken (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter OpenProcessToken (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter AllocateAndInitializeSid (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter CheckTokenMembership (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter FreeSid (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter IsValidURL (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter SHStrDupW (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter PSCreateAdapterFromPropertyStore (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter PSPropertyBag_ReadStrAlloc (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter OleUninitialize (UID: 00000000-00003908) "file.exe" called "GetProcAddress" with a parameter UnregisterTraceGuids (UID: 00000000-00003908)2e:Td47,"Select Your Wireless NetworkySelect the network name (SSID) of your wireless network from the list. Network names may take up to 60 seconds to appear." (Source: 00000000-00003908.00000001.67542.03250000.00000002.mdmp, Indicator: "select your wireless networkyselect the network name (ssid) of your wireless network from the list. network names may take up to 60 seconds to appear."), "Select Your Connection}Select your connection from the list. The connection must have a saved user name and password and be available to all users." (Source: 00000000-00003908.00000001.67542.03250000.00000002.mdmp, Indicator: "select your connection}select your connection from the list. the connection must have a saved user name and password and be available to all users."), "Select Your Set-top Box Brand}Select the brand of your set-top box from the list. If your brand is not listed select Not Listed at the bottom of the list." (Source: 00000000-00003908.00000001.67542.03250000.00000002.mdmp, Indicator: "select your set-top box brand}select the brand of your set-top box from the list. if your brand is not listed select not listed at the bottom of the list."), "Select the appropriate display resolution from the list below. For best results use the resolution recommended by the manufacturer in the display hardware documentation." (Source: 00000000-00003908.00000001.67542.03250000.00000002.mdmp, Indicator: "select the appropriate display resolution from the list below. for best results use the resolution recommended by the manufacturer in the display hardware documentation."), "insert it into the digital tuner and select Scan Again." (Source: 00000000-00003908.00000001.67542.03250000.00000002.mdmp, Indicator: "insert it into the digital tuner and select scan again."), "Select Add Channel to enter the name and channel number for a standard TV channel that is missing from the Guide. To add a digital TV channel select Add DTV Channel." (Source: 00000000-00003908.00000001.67542.03250000.00000002.mdmp, Indicator: "select add channel to enter the name and channel number for a standard tv channel that is missing from the guide. to add a digital tv channel select add dtv channel."), "Select OK for more information.ZYour Guide listings include one or more channels that share programming from two networks." (Source: 00000000-00003908.00000001.67542.03250000.00000002.mdmp, Indicator: "select ok for more information.zyour guide listings include one or more channels that share programming from two networks."), "Select a folder for backing up or restoring your media usage rights.ORequesting approval to restore media usage rights. This may take a few minutes.&Transferring media usage rights to %s.(Transferring media usage rights from %s." (Source: 00000000-00003908.00000001.67542.03250000.00000002.mdmp, Indicator: "select a folder for backing up or restoring your media usage rights.orequesting approval to restore media usage rights. this may take a few minutes.&transferring media usage rights to %s.(transferring media usage rights from %s.") "Delete from &library only$Delete from library and my &computer=Are you sure you want to delete these items from your device?" (Source: 00000000-00003908.00000001.67542.03250000.00000002.mdmp, Indicator: "delete from &library only$delete from library and my &computer=are you sure you want to delete these items from your device?")2f:T67e2,Found reference to API (Indicator: "EncodePointer"; File: "file") Found reference to API (Indicator: "DecodePointer"; File: "file") Found reference to API (Indicator: "FlsFree"; File: "file") Found reference to API (Indicator: "FlsSetValue"; File: "file") Found reference to API (Indicator: "FlsGetValue"; File: "file") Found reference to API (Indicator: "FlsAlloc"; File: "file") Found reference to API (Indicator: "GetProcessWindowStation"; File: "file") Found reference to API (Indicator: "GetUserObjectInformationA"; File: "file") Found reference to API (Indicator: "GetLastActivePopup"; File: "file") Found reference to API (Indicator: "GetActiveWindow"; File: "file") Found reference to API (Indicator: "MessageBoxA"; File: "file") Found reference to API (Indicator: "AddAtomW"; File: "file") Found reference to API (Indicator: "WaitForSingleObject"; File: "file") Found reference to API (Indicator: "Sleep"; File: "file") Found reference to API (Indicator: "CreateThread"; File: "file") Found reference to API (Indicator: "lstrlenW"; File: "file") Found reference to API (Indicator: "VirtualProtect"; File: "file") Found reference to API (Indicator: "GetProcAddress"; File: "file") Found reference to API (Indicator: "LoadLibraryA"; File: "file") Found reference to API (Indicator: "VirtualAlloc"; File: "file") Found reference to API (Indicator: "GetModuleHandleA"; File: "file") Found reference to API (Indicator: "FreeConsole"; File: "file") Found reference to API (Indicator: "RtlUnwind"; File: "file") Found reference to API (Indicator: "GetCommandLineA"; File: "file") Found reference to API (Indicator: "GetModuleHandleW"; File: "file") Found reference to API (Indicator: "TlsGetValue"; File: "file") Found reference to API (Indicator: "TlsAlloc"; File: "file") Found reference to API (Indicator: "TlsSetValue"; File: "file") Found reference to API (Indicator: "TlsFree"; File: "file") Found reference to API (Indicator: "InterlockedIncrement"; File: "file") Found reference to API (Indicator: "SetLastError"; File: "file") Found reference to API (Indicator: "GetCurrentThreadId"; File: "file") Found reference to API (Indicator: "GetLastError"; File: "file") Found reference to API (Indicator: "InterlockedDecrement"; File: "file") Found reference to API (Indicator: "SetUnhandledExceptionFilter"; File: "file") Found reference to API (Indicator: "ExitProcess"; File: "file") Found reference to API (Indicator: "WriteFile"; File: "file") Found reference to API (Indicator: "GetStdHandle"; File: "file") Found reference to API (Indicator: "GetModuleFileNameA"; File: "file") Found reference to API (Indicator: "FreeEnvironmentStringsA"; File: "file") Found reference to API (Indicator: "GetEnvironmentStrings"; File: "file") Found reference to API (Indicator: "FreeEnvironmentStringsW"; File: "file") Found reference to API (Indicator: "WideCharToMultiByte"; File: "file") Found reference to API (Indicator: "GetEnvironmentStringsW"; File: "file") Found reference to API (Indicator: "SetHandleCount"; File: "file") Found reference to API (Indicator: "GetFileType"; File: "file") Found reference to API (Indicator: "GetStartupInfoA"; File: "file") Found reference to API (Indicator: "DeleteCriticalSection"; File: "file") Found reference to API (Indicator: "HeapCreate"; File: "file") Found reference to API (Indicator: "VirtualFree"; File: "file") Found reference to API (Indicator: "HeapFree"; File: "file") Found reference to API (Indicator: "QueryPerformanceCounter"; File: "file") Found reference to API (Indicator: "GetTickCount"; File: "file") Found reference to API (Indicator: "GetCurrentProcessId"; File: "file") Found reference to API (Indicator: "GetSystemTimeAsFileTime"; File: "file") Found reference to API (Indicator: "RaiseException"; File: "file") Found reference to API (Indicator: "TerminateProcess"; File: "file") Found reference to API (Indicator: "GetCurrentProcess"; File: "file") Found reference to API (Indicator: "UnhandledExceptionFilter"; File: "file") Found reference to API (Indicator: "IsDebuggerPresent"; File: "file") Found reference to API (Indicator: "LeaveCriticalSection"; File: "file") Found reference to API (Indicator: "EnterCriticalSection"; File: "file") Found reference to API (Indicator: "GetCPInfo"; File: "file") Found reference to API (Indicator: "GetACP"; File: "file") Found reference to API (Indicator: "GetOEMCP"; File: "file") Found reference to API (Indicator: "IsValidCodePage"; File: "file") Found reference to API (Indicator: "InitializeCriticalSectionAndSpinCount"; File: "file") Found reference to API (Indicator: "HeapAlloc"; File: "file") Found reference to API (Indicator: "HeapReAlloc"; File: "file") Found reference to API (Indicator: "GetLocaleInfoA"; File: "file") Found reference to API (Indicator: "GetStringTypeA"; File: "file") Found reference to API (Indicator: "MultiByteToWideChar"; File: "file") Found reference to API (Indicator: "GetStringTypeW"; File: "file") Found reference to API (Indicator: "LCMapStringA"; File: "file") Found reference to API (Indicator: "LCMapStringW"; File: "file") Found reference to API (Indicator: "HeapSize"; File: "file") Found reference to API (Indicator: "IsProcessorFeaturePresent"; File: "file") Found reference to API (Indicator: "EncodePointer"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "DecodePointer"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "FlsFree"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "FlsSetValue"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "FlsGetValue"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "FlsAlloc"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "GetProcessWindowStation"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "GetUserObjectInformationA"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "GetLastActivePopup"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "GetActiveWindow"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "MessageBoxA"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "AddAtomW"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "WaitForSingleObject"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "Sleep"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp, 00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp, 00000000-00003908.00000001.67542.03250000.00000002.mdmp, 00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "CreateThread"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "lstrlenW"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "VirtualProtect"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "GetProcAddress"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp, 00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "LoadLibraryA"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "VirtualAlloc"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "GetModuleHandleA"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "FreeConsole"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "RtlUnwind"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "GetCommandLineA"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "GetModuleHandleW"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp, 00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "TlsGetValue"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "TlsAlloc"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "TlsSetValue"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "TlsFree"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "InterlockedIncrement"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "SetLastError"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "GetCurrentThreadId"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp, 00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "GetLastError"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp, 00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "InterlockedDecrement"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "SetUnhandledExceptionFilter"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp, 00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "ExitProcess"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "WriteFile"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "GetStdHandle"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "GetModuleFileNameA"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "FreeEnvironmentStringsA"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "GetEnvironmentStrings"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "FreeEnvironmentStringsW"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "WideCharToMultiByte"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "GetEnvironmentStringsW"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "SetHandleCount"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "GetFileType"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "GetStartupInfoA"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "DeleteCriticalSection"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "HeapCreate"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "VirtualFree"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "HeapFree"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "QueryPerformanceCounter"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp, 00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "GetTickCount"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp, 00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "GetCurrentProcessId"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp, 00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "GetSystemTimeAsFileTime"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp, 00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "RaiseException"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "TerminateProcess"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp, 00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "GetCurrentProcess"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp, 00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp, 00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "UnhandledExceptionFilter"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp, 00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "IsDebuggerPresent"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "LeaveCriticalSection"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "EnterCriticalSection"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "GetCPInfo"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "GetACP"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "GetOEMCP"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "IsValidCodePage"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "InitializeCriticalSectionAndSpinCount"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "HeapAlloc"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "HeapReAlloc"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "GetLocaleInfoA"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "GetStringTypeA"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "MultiByteToWideChar"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "GetStringTypeW"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "LCMapStringA"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "LCMapStringW"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "HeapSize"; Source: "00000000-00003908.00000000.67085.00410000.00000002.mdmp") Found reference to API (Indicator: "GetWindowDC"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "SendMessage"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "ReadFile"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "GetClassName"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "ReleaseCapture"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "GetWindowLong"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "SetWindowLong"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "InsertMenuItem"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "ClientToScreen"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "CreateRoundRectRgn"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "GetScrollInfo"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "DrawMenuBar"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "LoadCursor"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "SetCursor"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "GetLogicalDrives"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "GetCursorPos"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "SetWindowPos"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "GetClientRect"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "GetWindowRect"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "BitBlt"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "WindowFromPoint"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "GetWindowText"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "GetSystemMenu"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "InsertMenu"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "FindWindow"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "DestroyWindow"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "GetDCEx"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "TrackPopupMenuEx"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "CreateWindowEx"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "MessageBox"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "RegisterHotKey"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "UnregisterHotKey"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "CreateDirectory"; Source: "00000000-00003908.00000000.67085.00413000.00000004.mdmp, 00000000-00003908.00000001.67542.00152000.00000020.mdmp") Found reference to API (Indicator: "IsProcessorFeaturePresent"; Source: "00000000-00003908.00000000.67085.00640000.00000004.mdmp, 00000000-00003908.00000001.67542.00640000.00000004.mdmp") Found reference to API (Indicator: "CoCreateInstance"; Source: "00000000-00003908.00000001.67542.69721000.00000020.mdmp") Found reference to API (Indicator: "CoMarshalInterface"; Source: "00000000-00003908.00000001.67542.69721000.00000020.mdmp") Found reference to API (Indicator: "CoTaskMemFree"; Source: "00000000-00003908.00000001.67542.69721000.00000020.mdmp") Found reference to API (Indicator: "CoTaskMemRealloc"; Source: "00000000-00003908.00000001.67542.69721000.00000020.mdmp") Found reference to API (Indicator: "GetWindowThreadProcessId"; Source: "00000000-00003908.00000001.67542.69721000.00000020.mdmp") Found reference to API (Indicator: "GetObjectA"; Source: "00000000-00003908.00000001.67542.69721000.00000020.mdmp") Found reference to API (Indicator: "CompareStringOrdinal"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "DelayLoadFailureHook"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "LoadLibraryExA"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "GetCurrentDirectoryW"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "DisableThreadLibraryCalls"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "FreeLibrary"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "LoadLibraryExW"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "GetLocaleInfoEx"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "CompareStringW"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "RegCloseKey"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "RegOpenKeyExW"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "RegGetValueW"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "RegQueryValueExW"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "GetFinalPathNameByHandleW"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "LocalFree"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "LocalAlloc"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "CreateFileW"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "CloseHandle"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "GetVersionExA"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "GlobalSize"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "GlobalLock"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "GlobalAlloc"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "GlobalUnlock"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "RpcRaiseException"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "NdrStubCall2"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "NdrClientCall2"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "NdrOleFree"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "NdrGetUserMarshalInfo"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "NdrOleAllocate"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "GetSidSubAuthorityCount"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "GetSecurityDescriptorDacl"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "GetAce"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "GetSidIdentifierAuthority"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "GetSidSubAuthority"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp") Found reference to API (Indicator: "GetKernelObjectSecurity"; Source: "00000000-00003908.00000001.67542.69760000.00000002.mdmp")30:T53b,"\Sessions\1\BaseNamedObjects\Local\!BrowserEmulation!SharedMemory!Mutex" "\Sessions\1\BaseNamedObjects\Local\VERMGMTBlockListFileMutex" "\Sessions\1\BaseNamedObjects\Local\URLBLOCK_FILEMAPSWITCH_MUTEX_852" "\Sessions\1\BaseNamedObjects\Local\URLBLOCK_HASHFILESWITCH_MUTEX" "\Sessions\1\BaseNamedObjects\Local\URLBLOCK_DOWNLOAD_MUTEX" "\Sessions\1\BaseNamedObjects\Local\ZonesCacheCounterMutex" "\Sessions\1\BaseNamedObjects\Local\ZonesLockedCacheCounterMutex" "\Sessions\1\BaseNamedObjects\IsoScope_354_IE_EarlyTabStart_0x340_Mutex" "\Sessions\1\BaseNamedObjects\IsoScope_354_ConnHashTable<852>_HashTable_Mutex" "\Sessions\1\BaseNamedObjects\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}" "\Sessions\1\BaseNamedObjects\{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}" "\Sessions\1\BaseNamedObjects\IsoScope_354_IESQMMUTEX_0_303" "\Sessions\1\BaseNamedObjects\IsoScope_354_IESQMMUTEX_0_331" "{5312EE61-79E3-4A24-BFE1-132B85B23C3A}" "Local\VERMGMTBlockListFileMutex" "IsoScope_354_IESQMMUTEX_0_519" "IsoScope_354_IE_EarlyTabStart_0x340_Mutex" "Local\!BrowserEmulation!SharedMemory!Mutex" "Local\ZonesCacheCounterMutex" "IsoScope_354_ConnHashTable<852>_HashTable_Mutex" "Local\URLBLOCK_HASHFILESWITCH_MUTEX" "IsoScope_354_IESQMMUTEX_0_303" "Local\ZonesLockedCacheCounterMutex" "UpdatingNewTabPageData" "Local\URLBLOCK_DOWNLOAD_MUTEX"31:T502,Found string "" (Indicator: "twitter"; File: "urlref_httpgo.microsoft.comfwlinkprd_11324_pver_4.5_sbp_AppLaunch2_plcid_0x409_o1_SHIM_NOVERSION_FOUND_version_null_processName_file.ex") Found string "" (Indicator: "twitter"; File: "urlref_httpgo.microsoft.comfwlinkprd_11324_pver_4.5_sbp_AppLaunch2_plcid_0x409_o1_SHIM_NOVERSION_FOUND_version_null_processName_file.ex") Found string "" (Indicator: "github.com")33:Tf4f,"GET /DigiCertGlobalRootG3.crt HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: cacerts.digicert.com" Response ==> HTTP/1.1 200 OK Accept-Ranges: bytes Age: 412 cache-control: max-age=172800 public Content-Type: application/pkix-cert Date: Tue 05 Dec 2023 12:56:07 GMT Etag: "614b5ba7-243" expires: Thu 07 Dec 2023 12:56:07 GMT last-modified: Wed 22 Sep 2021 16:36:55 GMT Server: ECAcc (sac/253C) X-Cache: HIT Content-Length: 579 with response body ==>3082023F308201C5A0030201020210055556BCF25EA43535C3A40FD5AB4572300A06082A8648CE3D0403033061310B3009060355040613025553311530130603....... "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTrjrydRyt%2BApF3GSPypfHBxR5XtQQUs9tIpPmhxdiuNkHMEWNpYim8S8YCEAzlnDD9eoNTLi0BRrMy%2BWU%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.digicert.com" Response ==> HTTP/1.1 200 OK Accept-Ranges: bytes Age: 2738 Cache-Control: max-age=7200 Content-Type: application/ocsp-response Date: Tue 05 Dec 2023 12:56:08 GMT Last-Modified: Tue 05 Dec 2023 12:10:30 GMT Server: ECAcc (sac/2568) X-Cache: HIT Content-Length: 313 with response body ==>308201350A0100A082012E3082012A06092B06010505073001010482011B3082011730819EA2160414B3DB48A4F9A1C5D8AE3641CC1163696229BC4BC6180F32....... "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAJ0LqoXyo4hxxe7H%2Fz9DKA%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.digicert.com" Response ==> HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5603 Cache-Control: max-age=7200 Content-Type: application/ocsp-response Date: Tue 05 Dec 2023 12:56:24 GMT Last-Modified: Tue 05 Dec 2023 11:23:01 GMT Server: ECAcc (sac/2551) X-Cache: HIT Content-Length: 471 with response body ==>308201D30A0100A08201CC308201C806092B0601050507300101048201B9308201B530819EA216041403DE503556D14CBB66F0A3E21B1BC397B23DD155180F32....... "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAqvpsXKY8RRQeo74ffHUxc%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.digicert.com" Response ==> HTTP/1.1 200 OK Accept-Ranges: bytes Age: 631 Cache-Control: max-age=7200 Content-Type: application/ocsp-response Date: Tue 05 Dec 2023 12:56:59 GMT Last-Modified: Tue 05 Dec 2023 12:46:28 GMT Server: ECAcc (sac/252C) X-Cache: HIT Content-Length: 471 with response body ==>308201D30A0100A08201CC308201C806092B0601050507300101048201B9308201B530819EA21604144E2254201895E6E36EE60FFAFAB912ED06178F39180F32....... "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEAn5bsKVVV8kdJ6vHl3O1J0%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.digicert.com" Response ==> HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1559 Cache-Control: max-age=7200 Content-Type: application/ocsp-response Date: Tue 05 Dec 2023 12:57:00 GMT Last-Modified: Tue 05 Dec 2023 12:31:01 GMT Server: ECAcc (sac/2561) X-Cache: HIT Content-Length: 471 with response body ==>308201D30A0100A08201CC308201C806092B0601050507300101048201B9308201B530819EA21604144E2254201895E6E36EE60FFAFAB912ED06178F39180F32....... "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQ50otx%2Fh0Ztl%2Bz8SiPI7wEWVxDlQQUTiJUIBiV5uNu5g%2F6%2BrkS7QYXjzkCEA177el9ggmWelJjG4vdGL0%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.digicert.com" Response ==> HTTP/1.1 200 OK Accept-Ranges: bytes Age: 3012 Cache-Control: max-age=7200 Content-Type: application/ocsp-response Date: Tue 05 Dec 2023 12:57:00 GMT Last-Modified: Tue 05 Dec 2023 12:06:48 GMT Server: ECAcc (sac/254A) X-Cache: HIT Content-Length: 471 with response body ==>308201D30A0100A08201CC308201C806092B0601050507300101048201B9308201B530819EA21604144E2254201895E6E36EE60FFAFAB912ED06178F39180F32.......34:Tb5f,"file.exe" loaded module "MSCOREE.DLL" at base 6c870000 "file.exe" loaded module "ADVAPI32.DLL" at base 779c0000 "file.exe" loaded module "OLE32.DLL" at base 76210000 "file.exe" loaded module "OLEAUT32.DLL" at base 777a0000 "file.exe" loaded module "KERNEL32.DLL" at base 76130000 "file.exe" loaded module "COMCTL32.DLL" at base 745c0000 "file.exe" loaded module "%WINDIR%\SYSTEM32\IEFRAME.DLL" at base 6d1c0000 "file.exe" loaded module "API-MS-WIN-DOWNLEVEL-OLE32-L1-1-0.DLL" at base 75770000 "file.exe" loaded module "API-MS-WIN-DOWNLEVEL-ADVAPI32-L1-1-0.DLL" at base 75910000 "file.exe" loaded module "URLMON.DLL" at base 76fc0000 "file.exe" loaded module "API-MS-WIN-DOWNLEVEL-SHLWAPI-L2-1-0.DLL" at base 6ca90000 "file.exe" loaded module "PROPSYS.DLL" at base 74290000 "file.exe" loaded module "SHELL32.DLL" at base 76370000 "file.exe" loaded module "USER32.DLL" at base 77120000 "file.exe" loaded module "API-MS-WIN-CORE-LOCALREGISTRY-L1-1-0.DLL" at base 76130000 "file.exe" loaded module "%WINDIR%\SYSTEM32\APPHELP.DLL" at base 755f0000 "file.exe" loaded module "GDI32.DLL" at base 75b90000 "file.exe" loaded module "%WINDIR%\SYSTEM32\IMM32.DLL" at base 77a70000 "file.exe" loaded module "API-MS-WIN-CORE-SYNCH-L1-2-0" at base 72ff0000 "file.exe" loaded module "API-MS-WIN-CORE-FIBERS-L1-1-1" at base 0 "file.exe" loaded module "KERNEL32" at base 76130000 "file.exe" loaded module "API-MS-WIN-CORE-LOCALIZATION-L1-2-1" at base 0 "file.exe" loaded module "%WINDIR%\TEMP\VXOLE32.DLL" at base 6c8d0000 "file.exe" loaded module "%WINDIR%\MICROSOFT.NET\FRAMEWORK\V4.0.30319\MSCOREEI.DLL" at base 699e0000 "file.exe" loaded module "SHLWAPI.DLL" at base 75a80000 "file.exe" loaded module "API-MS-WIN-APPMODEL-RUNTIME-L1-1-2.DLL" at base 0 "file.exe" loaded module "API-MS-WIN-APPMODEL-RUNTIME-L1-1-0.DLL" at base 0 "file.exe" loaded module "%WINDIR%\MICROSOFT.NET\FRAMEWORK\V4.0.30319\MUI\0409\\MSCOREEIS.DLL" at base 0 "file.exe" loaded module "%WINDIR%\MICROSOFT.NET\FRAMEWORK\V4.0.30319\MSCOREEIS.DLL" at base 6c850000 "file.exe" loaded module "IMM32.DLL" at base 77a70000 "file.exe" loaded module "COMCTL32.DLL" at base 6c970000 "file.exe" loaded module "USER32" at base 77120000 "file.exe" loaded module "%WINDIR%\SYSTEM32\UXTHEME.DLL" at base 741c0000 "file.exe" loaded module "DWMAPI.DLL" at base 74210000 "file.exe" loaded module "%WINDIR%\SYSTEM32\OLE32.DLL" at base 76210000 "file.exe" loaded module "CRYPTBASE.DLL" at base 75640000 "file.exe" loaded module "CLBCATQ.DLL" at base 77460000 "file.exe" loaded module "%WINDIR%\SYSTEM32\MSCTF.DLL" at base 77390000 "file.exe" loaded module "APPHELP.DLL" at base 755f0000 "file.exe" loaded module "%WINDIR%\SYSTEM32\PROPSYS.DLL" at base 74290000 "file.exe" loaded module "IERTUTIL.DLL" at base 75d80000 "file.exe" loaded module "SETUPAPI.DLL" at base 75be0000 "file.exe" loaded module "RPCRT4.DLL" at base 7607000035:T64d,Found string "" (Indicator: "text/javascript"; File: "59DOX7KU.htm") Found string "" (Indicator: "text/javascript"; File: "59DOX7KU.htm") Found string "" (Indicator: "text/javascript"; File: "59DOX7KU.htm") Found string "" (Indicator: "text/javascript"; File: "59DOX7KU.htm") Found string "