Free Automated Malware Analysis Service - powered by Falcon Sandbox (2022)

!This program cannot be run in DOS mode.$

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

0123456789ABCDEF

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

5.1.2600.5512

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

5.1.2600.5512 (xpsp.080413-2105)

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

<?xml version="1.0" encoding="UTF-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity name="ctfmon" processorArchitecture="x86" version="5.1.0.0" type="win32"/><description>Ctfmon</description><dependency> <dependentAssembly> <assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df" language="*" /> </dependentAssembly></dependency></assembly>

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

\ctfmon.exe

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

\IME\sptip.dll

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

\LanguageProfile

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

\Sessions\1\Windows\ApiPort

Unicode based on Runtime Data (executable.1104.exe )

__getmainargs

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

__p__commode

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

__p__fmode

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

__set_app_type

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

__setusermatherr

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

_adjust_fdiv

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

_controlfp

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

_except_handler3

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

_initterm

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

_XcptFilter

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

advapi32.dll

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

ADVAPI32.dll

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

CicLoaderWndClass

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

CloseHandle

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

ClosePopupTipbar

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

CoCreateInstance

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

CompanyName

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

Control Panel\Appearance

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

Control Panel\Colors

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

Control Panel\Desktop\WindowMetrics

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

CreateEventA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

CreateProcessA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

CreateWindowExA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

CTF Loader

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

ctfmon.exe

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

CTFMON.EXE

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

ctfmon.pdb

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

CWDIllegalInDLLSearch

Unicode based on Runtime Data (executable.1104.exe )

DefWindowProcA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

DeleteCriticalSection

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

DispatchMessageA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

EnumWindows

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

FileDescription

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

FileVersion

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

FindWindowA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

FreeLibrary

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetClassNameA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetCurrentProcess

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetCurrentProcessId

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetCurrentThreadId

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetMessageA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetModuleHandleA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetPopupTipbar

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetProcAddress

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetStartupInfoA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetSystemDirectoryA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetSystemInfo

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetSystemMetrics

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetSystemTimeAsFileTime

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetSystemWindowsDirectoryA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetSystemWow64DirectoryA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetTickCount

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetVersionExA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

Indicator

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

InitializeCriticalSectionAndSpinCount

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

InternalName

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

internat.exe

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

KERNEL32.dll

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

kernel32.dll

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

keyboard layout

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

keyboard layout\Preload

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

Keyboard Layout\Toggle

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

KillTimer

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

LegalCopyright

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

LoadCursorA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

LoadLibraryA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

LocalAlloc

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

LocalFree

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

lstrcmpiA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

lstrcpynA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

Microsoft

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

Microsoft Corporation

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

Microsoft Corporation. All rights reserved.

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

MSCTF.dll

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

MsgWaitForMultipleObjects

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

MSUTB.dll

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

msvcrt.dll

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

NTDLL.DLL

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

ntdll.dll

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

NtQueryInformationProcess

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

ole32.dll

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

OleSelfRegister

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

OpenEventA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

Operating System

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

OriginalFilename

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

PeekMessageA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

PostMessageA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

PostQuitMessage

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

ProductName

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

ProductVersion

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

ProfileInitialized

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

QueryPerformanceCounter

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

RegCloseKey

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

RegCreateKeyA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

RegCreateKeyExA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

RegDeleteValueA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

RegisterClassExA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

RegNotifyChangeKeyValue

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

RegOpenKeyExA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

RegSetValueExA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

ResetEvent

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

SapiTipWorkerClass

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

SetProcessShutdownParameters

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

SetUnhandledExceptionFilter

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

SetWindowPos

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

SOFTWARE\Microsoft\CTF\Assemblies\

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

SOFTWARE\Microsoft\CTF\Sapilayr\

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

SOFTWARE\Microsoft\CTF\TIP\

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

Software\Microsoft\Speech

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

Software\Microsoft\Windows\CurrentVersion\Run

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

StringFileInfo

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

TerminateProcess

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

TF_CreateCicLoadMutex

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

TF_CreateLangProfileUtil

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

TF_GetGlobalCompartment

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

TF_InitSystem

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

TF_InvalidAssemblyListCache

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

TF_InvalidAssemblyListCacheIfExist

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

TF_PostAllThreadMsg

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

TF_UninitSystem

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

TranslateMessage

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

Translation

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

TransparentEnabled

Unicode based on Runtime Data (executable.1104.exe )

UnhandledExceptionFilter

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

USER32.dll

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

VarFileInfo

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

VS_VERSION_INFO

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

WinSta0_DesktopSwitch

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

5.1.2600.5512 (xpsp.080413-2105)

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

<?xml version="1.0" encoding="UTF-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity name="ctfmon" processorArchitecture="x86" version="5.1.0.0" type="win32"/><description>Ctfmon</description><dependency> <dependentAssembly> <assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df" language="*" /> </dependentAssembly></dependency></assembly>

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

\ctfmon.exe

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

\Sessions\1\Windows\ApiPort

Unicode based on Runtime Data (executable.1104.exe )

__getmainargs

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

__p__commode

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

CoCreateInstance

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

CompanyName

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

CreateProcessA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

ctfmon.exe

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

CTFMON.EXE

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

ctfmon.pdb

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

FileDescription

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

FileVersion

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetClassNameA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetCurrentProcess

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetCurrentProcessId

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetCurrentThreadId

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetMessageA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetModuleHandleA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetPopupTipbar

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetProcAddress

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetStartupInfoA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetSystemDirectoryA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetSystemInfo

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetSystemMetrics

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetSystemTimeAsFileTime

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetSystemWindowsDirectoryA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetSystemWow64DirectoryA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetTickCount

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetVersionExA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

internat.exe

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

keyboard layout

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

keyboard layout\Preload

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

Keyboard Layout\Toggle

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

LocalAlloc

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

LocalFree

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

MSCTF.dll

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

NtQueryInformationProcess

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

OleSelfRegister

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

PostMessageA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

PostQuitMessage

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

ProductVersion

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

RegCloseKey

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

RegCreateKeyA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

RegCreateKeyExA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

RegDeleteValueA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

RegisterClassExA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

RegNotifyChangeKeyValue

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

RegOpenKeyExA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

RegSetValueExA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

SetProcessShutdownParameters

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

SOFTWARE\Microsoft\CTF\Assemblies\

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

SOFTWARE\Microsoft\CTF\Sapilayr\

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

SOFTWARE\Microsoft\CTF\TIP\

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

Software\Microsoft\Windows\CurrentVersion\Run

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

StringFileInfo

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

TerminateProcess

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

TF_CreateCicLoadMutex

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

TF_GetGlobalCompartment

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

TF_PostAllThreadMsg

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

VarFileInfo

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

VS_VERSION_INFO

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

WinSta0_DesktopSwitch

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

!This program cannot be run in DOS mode.$

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

0123456789ABCDEF

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

5.1.2600.5512

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

5.1.2600.5512 (xpsp.080413-2105)

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

<?xml version="1.0" encoding="UTF-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity name="ctfmon" processorArchitecture="x86" version="5.1.0.0" type="win32"/><description>Ctfmon</description><dependency> <dependentAssembly> <assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df" language="*" /> </dependentAssembly></dependency></assembly>

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

\ctfmon.exe

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

\IME\sptip.dll

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

\LanguageProfile

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

__getmainargs

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

__p__commode

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

__p__fmode

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

__set_app_type

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

__setusermatherr

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

_adjust_fdiv

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

_controlfp

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

_except_handler3

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

_initterm

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

_XcptFilter

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

advapi32.dll

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

ADVAPI32.dll

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

CicLoaderWndClass

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

CloseHandle

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

ClosePopupTipbar

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

CoCreateInstance

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

CompanyName

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

Control Panel\Appearance

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

Control Panel\Colors

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

Control Panel\Desktop\WindowMetrics

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

CreateEventA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

CreateProcessA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

CreateWindowExA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

CTF Loader

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

ctfmon.exe

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

CTFMON.EXE

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

ctfmon.pdb

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

DefWindowProcA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

DeleteCriticalSection

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

DispatchMessageA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

EnumWindows

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

FileDescription

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

FileVersion

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

FindWindowA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

FreeLibrary

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetClassNameA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetCurrentProcess

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetCurrentProcessId

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetCurrentThreadId

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetMessageA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetModuleHandleA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetPopupTipbar

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetProcAddress

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetStartupInfoA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetSystemDirectoryA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetSystemInfo

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetSystemMetrics

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetSystemTimeAsFileTime

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetSystemWindowsDirectoryA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetSystemWow64DirectoryA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetTickCount

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

GetVersionExA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

Indicator

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

InitializeCriticalSectionAndSpinCount

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

InternalName

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

internat.exe

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

KERNEL32.dll

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

kernel32.dll

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

keyboard layout

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

keyboard layout\Preload

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

Keyboard Layout\Toggle

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

KillTimer

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

LegalCopyright

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

LoadCursorA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

LoadLibraryA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

LocalAlloc

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

LocalFree

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

lstrcmpiA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

lstrcpynA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

Microsoft

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

Microsoft Corporation

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

Microsoft Corporation. All rights reserved.

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

MSCTF.dll

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

MsgWaitForMultipleObjects

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

MSUTB.dll

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

msvcrt.dll

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

NTDLL.DLL

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

ntdll.dll

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

NtQueryInformationProcess

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

ole32.dll

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

OleSelfRegister

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

OpenEventA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

Operating System

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

OriginalFilename

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

PeekMessageA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

PostMessageA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

PostQuitMessage

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

ProductName

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

ProductVersion

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

ProfileInitialized

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

QueryPerformanceCounter

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

RegCloseKey

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

RegCreateKeyA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

RegCreateKeyExA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

RegDeleteValueA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

RegisterClassExA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

RegNotifyChangeKeyValue

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

RegOpenKeyExA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

RegSetValueExA

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

ResetEvent

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

SapiTipWorkerClass

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

SetProcessShutdownParameters

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

SetUnhandledExceptionFilter

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

SetWindowPos

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

SOFTWARE\Microsoft\CTF\Assemblies\

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

SOFTWARE\Microsoft\CTF\Sapilayr\

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

SOFTWARE\Microsoft\CTF\TIP\

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

Software\Microsoft\Speech

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

Software\Microsoft\Windows\CurrentVersion\Run

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

StringFileInfo

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

TerminateProcess

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

TF_CreateCicLoadMutex

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

TF_CreateLangProfileUtil

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

TF_GetGlobalCompartment

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

TF_InitSystem

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

TF_InvalidAssemblyListCache

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

TF_InvalidAssemblyListCacheIfExist

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

TF_PostAllThreadMsg

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

TF_UninitSystem

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

TranslateMessage

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

Translation

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

UnhandledExceptionFilter

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

USER32.dll

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

VarFileInfo

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

VS_VERSION_INFO

Unicode based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

WinSta0_DesktopSwitch

Ansi based on Memory/File Scan (50c0fe498bf320f4015e3aaeebb4fd600cbe72bcc7e2f5004b06af3581a6f912.bin)

Top Articles

You might also like

Latest Posts

Article information

Author: Sen. Emmett Berge

Last Updated: 01/01/2023

Views: 6034

Rating: 5 / 5 (60 voted)

Reviews: 91% of readers found this page helpful

Author information

Name: Sen. Emmett Berge

Birthday: 1993-06-17

Address: 787 Elvis Divide, Port Brice, OH 24507-6802

Phone: +9779049645255

Job: Senior Healthcare Specialist

Hobby: Cycling, Model building, Kitesurfing, Origami, Lapidary, Dance, Basketball

Introduction: My name is Sen. Emmett Berge, I am a funny, vast, charming, courageous, enthusiastic, jolly, famous person who loves writing and wants to share my knowledge and understanding with you.