24:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/136wug8odqdqr.js"],"SampleDetailWrapper"] 91:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T4ae,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious QD:Trojan.GenericQ Sample e232fe82c3ba… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample e232fe82c3ba…. Malware family: QD:Trojan.GenericQ. Threat score 100/100. 3/27 AV engines flagged this file. 2 malicious and 18 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/e232fe82c3ba27c99ec52118060aad7651da66a447fd8c1a26c3acb60ec48f49","keywords":["Malicious","QD:Trojan.GenericQ","malware analysis","sandbox report","threat intelligence","e232fe82c3ba27c99ec52118060aad7651da66a447fd8c1a26c3acb60ec48f49"],"about":{"@type":"SoftwareApplication","name":"code_fix_patch_generator.exe","applicationCategory":["peexe","64bits","executable"],"identifier":"e232fe82c3ba27c99ec52118060aad7651da66a447fd8c1a26c3acb60ec48f49","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"QD:Trojan.GenericQ","antivirusDetections":{"malicious":3,"total":27},"behavioralIndicators":{"malicious":2,"suspicious":18},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:Tc22,file/memory contains long string(File: "_lzma.pyd") file/memory contains long string(File: "_bz2.pyd") Found string "unhandled compression mode; this should never happen" (Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp") Found string "cannot call compress() after compression finished" (Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp") Found string "cannot call finish() after compression finished" (Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp") Found string "cannot call flush() after compression finished" (Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp") Found string "finish compression operation" (Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp") Found string "could not create decompression dict" (Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp") Found string "compression_params" (Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp") Found string "must only specify one of level or compression_params" (Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp") Found string "must specify one of level or compression_params" (Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp") Found string "unable to set compression context parameter: %s" (Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp") Found string "compression_level" (Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.C7220000.00000004.mdmp") Found string "estimated_compression_context_size" (Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.C7220000.00000004.mdmp") Found string "error ending compression stream: %s" (Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp") Found string "Enter a compression context" (Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp") Found string "Exit a compression context" (Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp") Found string "Enter a compression context." (Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp") Found string "Exit a compression context." (Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp") Found string "could not set compression parameters: %s" (Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp") Found string "could not load compression dictionary: %s" (Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp") Found string "compression_params must be zstd.ZstdCompressionParameters" (Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp") Found string "cannot define compression_params and write_checksum" (Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp") Found string "cannot define compression_params and write_content_size" (Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp") Found string "cannot define compression_params and write_dict_id" (Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp")26:T1ab3,Found reference to API "WaitForSingleObject" (Indicator: "WaitForSingleObject"; File: "code_fix_patch_generator.exe") Found reference to API "GetSystemTimeAsFileTime" (Indicator: "GetSystemTimeAsFileTime"; File: "code_fix_patch_generator.exe") Found reference to API "QueryPerformanceCounter" (Indicator: "QueryPerformanceCounter"; File: "code_fix_patch_generator.exe") Found reference to API "QueryPerformanceFrequency" (Indicator: "QueryPerformanceFrequency"; File: "code_fix_patch_generator.exe") Found reference to API "WaitForSingleObjectEx" (Indicator: "WaitForSingleObject"; File: "code_fix_patch_generator.exe") Found reference to API "WaitForSingleObjectEx" (Indicator: "WaitForSingleObjectEx"; File: "code_fix_patch_generator.exe") Found reference to API "QueryPerformanceCounter" (Indicator: "QueryPerformanceCounter"; Source: "00000000-00002552.00000000.217466.26275000.00000002.mdmp, 00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.34636000.00000002.mdmp, 00000000-00002552.00000000.217466.38117000.00000002.mdmp, 00000000-00002552.00000000.217466.3850D000.00000002.mdmp, 00000000-00002552.00000000.217466.3AAD3000.00000002.mdmp, 00000000-00002552.00000000.217466.3B05D000.00000002.mdmp, 00000000-00002552.00000000.217466.3B132000.00000002.mdmp, 00000000-00002552.00000000.217466.3BAC7000.00000002.mdmp, 00000000-00002552.00000000.217466.3DA53000.00000002.mdmp, 00000000-00002552.00000000.217466.3E875000.00000002.mdmp, 00000000-00002552.00000000.217466.3E884000.00000002.mdmp, 00000000-00002552.00000000.217466.3E899000.00000002.mdmp, 00000000-00002552.00000000.217466.3E8C4000.00000002.mdmp, 00000000-00002552.00000000.217466.3F513000.00000002.mdmp, 00000000-00002552.00000000.217466.41984000.00000002.mdmp, 00000000-00002552.00000000.217466.4AA64000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.52CD8000.00000002.mdmp, 00000000-00002552.00000000.217466.52F6F000.00000002.mdmp, 00000000-00002552.00000000.217466.5369E000.00000002.mdmp, 00000000-00002552.00000000.217466.536BA000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.53725000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.54D7E000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API "GetSystemTimeAsFileTime" (Indicator: "GetSystemTimeAsFileTime"; Source: "00000000-00002552.00000000.217466.26275000.00000002.mdmp, 00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.34636000.00000002.mdmp, 00000000-00002552.00000000.217466.38117000.00000002.mdmp, 00000000-00002552.00000000.217466.3850D000.00000002.mdmp, 00000000-00002552.00000000.217466.3AAD3000.00000002.mdmp, 00000000-00002552.00000000.217466.3B05D000.00000002.mdmp, 00000000-00002552.00000000.217466.3B132000.00000002.mdmp, 00000000-00002552.00000000.217466.3BAC7000.00000002.mdmp, 00000000-00002552.00000000.217466.3DA53000.00000002.mdmp, 00000000-00002552.00000000.217466.3E875000.00000002.mdmp, 00000000-00002552.00000000.217466.3E884000.00000002.mdmp, 00000000-00002552.00000000.217466.3E899000.00000002.mdmp, 00000000-00002552.00000000.217466.3E8C4000.00000002.mdmp, 00000000-00002552.00000000.217466.3F513000.00000002.mdmp, 00000000-00002552.00000000.217466.41984000.00000002.mdmp, 00000000-00002552.00000000.217466.4AA64000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.52CD8000.00000002.mdmp, 00000000-00002552.00000000.217466.52F6F000.00000002.mdmp, 00000000-00002552.00000000.217466.5369E000.00000002.mdmp, 00000000-00002552.00000000.217466.536BA000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.53725000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.54D7E000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API "WaitForSingleObject" (Indicator: "WaitForSingleObject"; Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.3E884000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.52F6F000.00000002.mdmp, 00000000-00002552.00000000.217466.5369E000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56B24000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp, 00000000-00002552.00000000.217466.C6720000.00000004.mdmp")27:Tc4d,file/memory contains long string with (Indicator: "SHA384"; File: "libffi-8.dll") file/memory contains long string with (Indicator: "HMAC"; File: "_hashlib.pyd") file/memory contains long string with (Indicator: "SHA384"; File: "_hashlib.pyd") file/memory contains long string with (Indicator: "SHA512"; File: "_hashlib.pyd") Found reference to "HMAC_CTX_new" (Indicator: "HMAC"; File: "code_fix_patch_generator.exe") Found reference to "HMAC_Final" (Indicator: "HMAC"; File: "code_fix_patch_generator.exe") Found reference to "HMAC_CTX_free" (Indicator: "HMAC"; File: "code_fix_patch_generator.exe") Found reference to "SHA512_Transform" (Indicator: "SHA512"; File: "code_fix_patch_generator.exe") Found reference to "SHA384_Init" (Indicator: "SHA384"; File: "code_fix_patch_generator.exe") Found reference to "HMAC_Init_ex" (Indicator: "HMAC"; File: "code_fix_patch_generator.exe") Found reference to "HMAC_size" (Indicator: "HMAC"; File: "code_fix_patch_generator.exe") Found reference to "HMAC_Update" (Indicator: "HMAC"; File: "code_fix_patch_generator.exe") Found reference to "SHA512_Init" (Indicator: "SHA512"; File: "code_fix_patch_generator.exe") Found reference to "TLS_AES_256_GCM_SHA384" (Indicator: "SHA384"; Source: "00000000-00002552.00000000.217466.264A5000.00000002.mdmp") Found reference to "AES256-GCM-SHA384" (Indicator: "SHA384"; Source: "00000000-00002552.00000000.217466.264A5000.00000002.mdmp") Found reference to "TLS_RSA_WITH_AES_256_GCM_SHA384" (Indicator: "SHA384"; Source: "00000000-00002552.00000000.217466.264A5000.00000002.mdmp") Found reference to "DHE-RSA-AES256-GCM-SHA384" (Indicator: "SHA384"; Source: "00000000-00002552.00000000.217466.264A5000.00000002.mdmp") Found reference to "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" (Indicator: "SHA384"; Source: "00000000-00002552.00000000.217466.264A5000.00000002.mdmp") Found reference to "DHE-DSS-AES256-GCM-SHA384" (Indicator: "SHA384"; Source: "00000000-00002552.00000000.217466.264A5000.00000002.mdmp") Found reference to "TLS_DHE_DSS_WITH_AES_256_GCM_SHA384" (Indicator: "SHA384"; Source: "00000000-00002552.00000000.217466.264A5000.00000002.mdmp") Found reference to "ADH-AES256-GCM-SHA384" (Indicator: "SHA384"; Source: "00000000-00002552.00000000.217466.264A5000.00000002.mdmp") Found reference to "TLS_DH_anon_WITH_AES_256_GCM_SHA384" (Indicator: "SHA384"; Source: "00000000-00002552.00000000.217466.264A5000.00000002.mdmp") Found reference to "ECDHE-ECDSA-AES256-SHA384" (Indicator: "SHA384"; Source: "00000000-00002552.00000000.217466.264A5000.00000002.mdmp") Found reference to "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384" (Indicator: "SHA384"; Source: "00000000-00002552.00000000.217466.264A5000.00000002.mdmp") Found reference to "ECDHE-RSA-AES256-SHA384" (Indicator: "SHA384"; Source: "00000000-00002552.00000000.217466.264A5000.00000002.mdmp") Found reference to "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" (Indicator: "SHA384"; Source: "00000000-00002552.00000000.217466.264A5000.00000002.mdmp") Found reference to "ECDHE-ECDSA-AES256-GCM-SHA384" (Indicator: "SHA384"; Source: "00000000-00002552.00000000.217466.264A5000.00000002.mdmp")28:T5d2,Found reference to API "CryptDecrypt" (Indicator: "CryptDecrypt"; File: "code_fix_patch_generator.exe") Found reference to API "CryptAcquireContextA" (Indicator: "CryptAcquireContext"; File: "code_fix_patch_generator.exe") Found reference to API "CryptReleaseContext" (Indicator: "CryptReleaseContext"; File: "code_fix_patch_generator.exe") Found reference to API "CryptEncrypt" (Indicator: "CryptEncrypt"; File: "code_fix_patch_generator.exe") Found reference to API "CryptHashData" (Indicator: "CryptHashData"; File: "code_fix_patch_generator.exe") Found reference to API "CryptDestroyKey" (Indicator: "CryptDestroyKey"; File: "code_fix_patch_generator.exe") Found reference to API "CryptDestroyHash" (Indicator: "CryptDestroyHash"; File: "code_fix_patch_generator.exe") Found reference to API "CryptDeriveKey" (Indicator: "CryptDeriveKey"; File: "code_fix_patch_generator.exe") Found reference to API "CryptGetHashParam" (Indicator: "CryptGetHashParam"; File: "code_fix_patch_generator.exe") Found reference to API "CryptCreateHash" (Indicator: "CryptCreateHash"; File: "code_fix_patch_generator.exe") Found reference to API "CertFreeCertificateContext" (Indicator: "CertFreeCertificateContext"; File: "code_fix_patch_generator.exe") Found reference to API "CertEnumCertificatesInStore" (Indicator: "CertEnumCertificatesInStore"; File: "code_fix_patch_generator.exe") Found reference to API "CertCloseStore" (Indicator: "CertCloseStore"; File: "code_fix_patch_generator.exe")29:Td43,Found string "dane tlsa bad public key" (Indicator: "public key"; Source: "00000000-00002552.00000000.217466.264A5000.00000002.mdmp") Found string "no private key assigned" (Indicator: "private key"; Source: "00000000-00002552.00000000.217466.264A5000.00000002.mdmp") Found string "private key mismatch" (Indicator: "private key"; Source: "00000000-00002552.00000000.217466.264A5000.00000002.mdmp") Found string "unable to find public key parameters" (Indicator: "public key"; Source: "00000000-00002552.00000000.217466.264A5000.00000002.mdmp") Found string "unknown public key type" (Indicator: "public key"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found string "unsupported public key type" (Indicator: "public key"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found string "wrong public key type" (Indicator: "public key"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found string "Public Key Algorithm: %s" (Indicator: "public key"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found string "Unable to load public key" (Indicator: "public key"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found string "private key too large" (Indicator: "private key"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found string "public key in new certificate does not match our enrollment key" (Indicator: "public key"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found string "missing private key" (Indicator: "private key"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found string "missing private key for popo" (Indicator: "private key"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found string "missing public key" (Indicator: "public key"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found string "encryptedKey" (Indicator: "encryptedkey"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found string "CMS_RecipientEncryptedKey" (Indicator: "encryptedkey"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found string "recipientEncryptedKeys" (Indicator: "encryptedkey"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found string "error getting public key" (Indicator: "public key"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found string "no private key" (Indicator: "private key"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found string "no public key" (Indicator: "public key"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found string "private key does not match certificate" (Indicator: "private key"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found string "value.encryptedKey" (Indicator: "encryptedkey"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found string "popo inconsistent public key" (Indicator: "public key"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found string "popo missing public key" (Indicator: "public key"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found string "invalid public key" (Indicator: "public key"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp")2a:T4ad,The analysis contains indicators for cyrpto or data obfuscation(base64/decrypt) which can hide information. Matched sigs: Contains ability to use Cryptographic classes Matched sigs: Contains ability to use Microsoft's Enhanced Cryptographic Provider Matched sigs: Contains ability to perform decryption (API string) Matched sigs: Contains reference to cryptographic keys Matched sigs: References bcrypt module and functions (used for encryption/decryption) Matched sigs: Contains ability to perform Base64 encoding/decoding Matched sigs: YARA signature match - AES encryption Matched sigs: Dropped file has high entropy (likely encrypted/compressed content) Matched sigs: YARA signature match - RC4 Encryption Matched sigs: YARA signature match - Cyclic XOR decryption routine for 64 bit samples Matched sigs: YARA signature match – cryptographic algorithms Matched sigs: Contains ability to perform AES/RC4 encryption (API string) Matched sigs: Contains key cryptographic functions (API string) Matched sigs: Contains CRYPTO related strings Matched sigs: Contains ability to attach base64 encoded attachment to an email Matched sigs: Uses Windows cryptography API for obfuscation2b:T504,Found system information discovery API: "GetEnvironmentStringsW" in file "code_fix_patch_generator.exe" Found system information discovery API: "GetSystemInfo" in file "code_fix_patch_generator.exe" Found system information discovery API: "GetUserObjectInformationW" in file "code_fix_patch_generator.exe" Found system information discovery API: "RtlNtStatusToDosError" in file "code_fix_patch_generator.exe" Found system information discovery API: "GetSystemInfo" in "00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.3E884000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.53209000.00000002.mdmp, 00000000-00002552.00000000.217466.53725000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53B19000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp"2c:T20e6,"code_fix_patch_generator.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "RtlGetVersion" with parameter 000000000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "RtlGetVersion" with parameter 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 (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "RtlGetVersion" with parameter 1c0100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "RtlGetVersion" with parameter 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 (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "RtlGetVersion" with parameter 1c0100000a00000000000000ab3f00000200000000000000360d000000000000c0b39472d60000000400000000000000e0b208289101000006000000000000000300000000000000a7407853fb7f00000000000000000000000000000000000000000000000000000101000000000000806b9d9a670200000a000000000000000000000000000000000000000000000043003a005c00550073006500720073000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004983657fb7f00000000000000000000000000000000000000000000 (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "RtlGetVersion" with parameter 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 (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "RtlGetVersion" with parameter 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 (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "RtlGetVersion" with parameter 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 (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "RtlGetVersion" with parameter 1c0100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000 (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "RtlGetVersion" with parameter 1c0100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000010fd989a6702000060c69472d600000094de999a6702000050d29e9a670200000000000000000000000000000000000000000000000000000000000000000000000000000000000000da999a6702000014da999a6702000000da999a67020000feffffffffffffff0000000000000000625c9a9a67020000000000000000000000000000000000000000000000000000b2130000000000000000959a67020000b21300000000000000000000000000009f09089e (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "RtlGetVersion" with parameter 1c0100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00002552)2d:Tc66,Found reference to API "GetSystemTimeAsFileTime" (Indicator: "GetSystemTime"; File: "code_fix_patch_generator.exe") Found reference to API "GetSystemTime" (Indicator: "GetSystemTime"; File: "code_fix_patch_generator.exe") Found reference to API "GetSystemTimeAsFileTime" (Indicator: "GetSystemTime"; Source: "00000000-00002552.00000000.217466.26275000.00000002.mdmp, 00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.34636000.00000002.mdmp, 00000000-00002552.00000000.217466.38117000.00000002.mdmp, 00000000-00002552.00000000.217466.3850D000.00000002.mdmp, 00000000-00002552.00000000.217466.3AAD3000.00000002.mdmp, 00000000-00002552.00000000.217466.3B05D000.00000002.mdmp, 00000000-00002552.00000000.217466.3B132000.00000002.mdmp, 00000000-00002552.00000000.217466.3BAC7000.00000002.mdmp, 00000000-00002552.00000000.217466.3DA53000.00000002.mdmp, 00000000-00002552.00000000.217466.3E875000.00000002.mdmp, 00000000-00002552.00000000.217466.3E884000.00000002.mdmp, 00000000-00002552.00000000.217466.3E899000.00000002.mdmp, 00000000-00002552.00000000.217466.3E8C4000.00000002.mdmp, 00000000-00002552.00000000.217466.3F513000.00000002.mdmp, 00000000-00002552.00000000.217466.41984000.00000002.mdmp, 00000000-00002552.00000000.217466.4AA64000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.52CD8000.00000002.mdmp, 00000000-00002552.00000000.217466.52F6F000.00000002.mdmp, 00000000-00002552.00000000.217466.5369E000.00000002.mdmp, 00000000-00002552.00000000.217466.536BA000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.53725000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.54D7E000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API "GetSystemTime" (Indicator: "GetSystemTime"; Source: "00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp")2e:Tc96,Found reference to API "GetSystemTimeAsFileTime" (Indicator: "GetSystemTimeAsFileTime"; File: "code_fix_patch_generator.exe") Found reference to API "SystemTimeToFileTime" (Indicator: "SystemTimeToFileTime"; File: "code_fix_patch_generator.exe") Found reference to API "GetSystemTimeAsFileTime" (Indicator: "GetSystemTimeAsFileTime"; Source: "00000000-00002552.00000000.217466.26275000.00000002.mdmp, 00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.34636000.00000002.mdmp, 00000000-00002552.00000000.217466.38117000.00000002.mdmp, 00000000-00002552.00000000.217466.3850D000.00000002.mdmp, 00000000-00002552.00000000.217466.3AAD3000.00000002.mdmp, 00000000-00002552.00000000.217466.3B05D000.00000002.mdmp, 00000000-00002552.00000000.217466.3B132000.00000002.mdmp, 00000000-00002552.00000000.217466.3BAC7000.00000002.mdmp, 00000000-00002552.00000000.217466.3DA53000.00000002.mdmp, 00000000-00002552.00000000.217466.3E875000.00000002.mdmp, 00000000-00002552.00000000.217466.3E884000.00000002.mdmp, 00000000-00002552.00000000.217466.3E899000.00000002.mdmp, 00000000-00002552.00000000.217466.3E8C4000.00000002.mdmp, 00000000-00002552.00000000.217466.3F513000.00000002.mdmp, 00000000-00002552.00000000.217466.41984000.00000002.mdmp, 00000000-00002552.00000000.217466.4AA64000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.52CD8000.00000002.mdmp, 00000000-00002552.00000000.217466.52F6F000.00000002.mdmp, 00000000-00002552.00000000.217466.5369E000.00000002.mdmp, 00000000-00002552.00000000.217466.536BA000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.53725000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.54D7E000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API "SystemTimeToFileTime" (Indicator: "SystemTimeToFileTime"; Source: "00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp")2f:Tc66,Found reference to API "GetSystemTimeAsFileTime" (Indicator: "GetSystemTime"; File: "code_fix_patch_generator.exe") Found reference to API "GetSystemTime" (Indicator: "GetSystemTime"; File: "code_fix_patch_generator.exe") Found reference to API "GetSystemTimeAsFileTime" (Indicator: "GetSystemTime"; Source: "00000000-00002552.00000000.217466.26275000.00000002.mdmp, 00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.34636000.00000002.mdmp, 00000000-00002552.00000000.217466.38117000.00000002.mdmp, 00000000-00002552.00000000.217466.3850D000.00000002.mdmp, 00000000-00002552.00000000.217466.3AAD3000.00000002.mdmp, 00000000-00002552.00000000.217466.3B05D000.00000002.mdmp, 00000000-00002552.00000000.217466.3B132000.00000002.mdmp, 00000000-00002552.00000000.217466.3BAC7000.00000002.mdmp, 00000000-00002552.00000000.217466.3DA53000.00000002.mdmp, 00000000-00002552.00000000.217466.3E875000.00000002.mdmp, 00000000-00002552.00000000.217466.3E884000.00000002.mdmp, 00000000-00002552.00000000.217466.3E899000.00000002.mdmp, 00000000-00002552.00000000.217466.3E8C4000.00000002.mdmp, 00000000-00002552.00000000.217466.3F513000.00000002.mdmp, 00000000-00002552.00000000.217466.41984000.00000002.mdmp, 00000000-00002552.00000000.217466.4AA64000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.52CD8000.00000002.mdmp, 00000000-00002552.00000000.217466.52F6F000.00000002.mdmp, 00000000-00002552.00000000.217466.5369E000.00000002.mdmp, 00000000-00002552.00000000.217466.536BA000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.53725000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.54D7E000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API "GetSystemTime" (Indicator: "GetSystemTime"; Source: "00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp")30:T5b3,Found string "extraCerts" (Indicator: "tracert"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found string "could not build approximate chain for newly enrolled cert, resorting to received extraCerts" (Indicator: "tracert"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found string "OSSL_CMP_CTX_get1_extraCertsIn" (Indicator: "tracert"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found string "OSSL_CMP_CTX_set1_extraCertsOut" (Indicator: "tracert"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found string "ossl_cmp_msg_add_extraCerts" (Indicator: "tracert"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found string "no acceptable cert in extraCerts" (Indicator: "tracert"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found string "normal mode failed; trying now 3GPP mode trusting extraCerts" (Indicator: "tracert"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found string "no self-issued extraCerts" (Indicator: "tracert"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found string "self-issued extraCerts" (Indicator: "tracert"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found string "received CMP message contains more than 10 extraCerts" (Indicator: "tracert"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp")31:Tb6f,"code_fix_patch_generator.exe" queries volume information of "C:\Users\%OSUSER%\AppData\Local\Temp\ONEFIL~1\_ssl.pyd" at 00000000-00002552-00000C17-2398421079 "code_fix_patch_generator.exe" queries volume information of "C:\Users\%OSUSER%\AppData\Local\Temp\ONEFIL~1\_ssl.pyd" at 00000000-00002552-00000C17-2398422989 "code_fix_patch_generator.exe" queries volume information of "C:\Users\%OSUSER%\AppData\Local\Temp\ONEFIL~1\_ssl.pyd" at 00000000-00002552-00000C17-2398423979 "code_fix_patch_generator.exe" queries volume information of "C:\Users\%OSUSER%\AppData\Local\Temp\ONEFIL~1\_ssl.pyd" at 00000000-00002552-00000C17-2398425101 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398439809 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398440658 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398441048 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398445581 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398445889 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398446221 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398450456 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398450822 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398451230 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398451554 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398729134 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398729499 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398731242 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398731576 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398732912 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398733354 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398842668 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398843020 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398871275 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398871625 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-239903497832:T95c,"code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398439809 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398440658 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398441048 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398445581 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398445889 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398446221 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398450456 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398450822 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398451230 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398451554 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398729134 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398729499 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398731242 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398731576 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398732912 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398733354 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398842668 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398843020 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398871275 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2398871625 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-2399034978 "code_fix_patch_generator.exe" queries volume information of "C:\" at 00000000-00002552-00000C17-239903534233:T65e,"code_fix_patch_generator.exe" called "CreateDirectoryW" with parameter %TEMP%\onefile_5316_134010018119479299 (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "CreateDirectoryW" with parameter %TEMP%\onefile_5316_134010018119479299\certifi (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "CreateDirectoryW" with parameter %TEMP%\onefile_5316_134010018119479299\charset_normalizer (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "CreateDirectoryW" with parameter %TEMP%\onefile_5316_134010018119479299\cryptography\hazmat\bindings (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "CreateDirectoryW" with parameter %TEMP%\onefile_5316_134010018119479299\cryptography\hazmat (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "CreateDirectoryW" with parameter %TEMP%\onefile_5316_134010018119479299\cryptography (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "CreateDirectoryW" with parameter %TEMP%\onefile_5316_134010018119479299\lxml (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "CreateDirectoryW" with parameter %TEMP%\onefile_5316_134010018119479299\primp (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "CreateDirectoryW" with parameter %TEMP%\onefile_5316_134010018119479299\regex (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "CreateDirectoryW" with parameter %TEMP%\onefile_5316_134010018119479299\tiktoken (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "CreateDirectoryW" with parameter %TEMP%\onefile_5316_134010018119479299\zstandard (UID: 00000000-00005316)34:Tcc4,"code_fix_patch_generator.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-2 (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "LoadLibrary" with a parameter api-ms-win-appmodel-runtime-l1-1-2 (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "LoadLibrary" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "LoadLibrary" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "LoadLibrary" with a parameter kernel32 (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "LoadLibrary" with a parameter api-ms-win-core-fibers-l1-1-2 (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "LoadLibrary" with a parameter %TEMP%\onefile_5316_134010018119479299\code_fix_patch_generator.dll (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "LoadLibrary" with a parameter %TEMP%\ONEFIL~1\_socket.pyd (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "LoadLibrary" with a parameter %TEMP%\ONEFIL~1\select.pyd (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "LoadLibrary" with a parameter %TEMP%\ONEFIL~1\_ssl.pyd (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "LoadLibrary" with a parameter api-ms-win-core-file-l2-1-4 (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "LoadLibrary" with a parameter %TEMP%\ONEFIL~1\_wmi.pyd (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "LoadLibrary" with a parameter %TEMP%\ONEFIL~1\zstandard\backend_c.pyd (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "LoadLibrary" with a parameter %TEMP%\ONEFIL~1\_hashlib.pyd (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "LoadLibrary" with a parameter %TEMP%\ONEFIL~1\_queue.pyd (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "LoadLibrary" with a parameter %TEMP%\ONEFIL~1\_bz2.pyd (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "LoadLibrary" with a parameter %TEMP%\ONEFIL~1\_lzma.pyd (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "LoadLibrary" with a parameter %TEMP%\ONEFIL~1\charset_normalizer\md.pyd (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "LoadLibrary" with a parameter %TEMP%\ONEFIL~1\charset_normalizer\md__mypyc.pyd (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "LoadLibrary" with a parameter %TEMP%\ONEFIL~1\unicodedata.pyd (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "LoadLibrary" with a parameter %TEMP%\ONEFIL~1\_uuid.pyd (UID: 00000000-00002552)35:T3411,"code_fix_patch_generator.exe" called "GetProcAddress" with a parameter InitializeCriticalSectionEx (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter FlsAlloc (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter FlsSetValue (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter FlsGetValue (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter LCMapStringEx (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter FlsFree (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter InitOnceExecuteOnce (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CreateEventExW (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CreateSemaphoreW (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CreateSemaphoreExW (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CreateThreadpoolTimer (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter SetThreadpoolTimer (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter WaitForThreadpoolTimerCallbacks (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CloseThreadpoolTimer (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CreateThreadpoolWait (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter SetThreadpoolWait (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CloseThreadpoolWait (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter FlushProcessWriteBuffers (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter FreeLibraryWhenCallbackReturns (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter GetCurrentProcessorNumber (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CreateSymbolicLinkW (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter GetCurrentPackageId (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter GetTickCount64 (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter GetFileInformationByHandleEx (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter SetFileInformationByHandle (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter GetSystemTimePreciseAsFileTime (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter InitializeConditionVariable (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter WakeConditionVariable (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter WakeAllConditionVariable (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter SleepConditionVariableCS (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter InitializeSRWLock (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter AcquireSRWLockExclusive (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter TryAcquireSRWLockExclusive (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter ReleaseSRWLockExclusive (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter SleepConditionVariableSRW (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CreateThreadpoolWork (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter SubmitThreadpoolWork (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CloseThreadpoolWork (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CompareStringEx (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter GetLocaleInfoEx (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter AreFileApisANSI (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter RtlGetVersion (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CoCreateInstance (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CoCreateInstanceEx (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CoGetClassObject (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CoGetInstanceFromFile (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CoGetInstanceFromIStorage (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter FlsGetValue2 (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter AppPolicyGetProcessTerminationMethod (UID: 00000000-00005316) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter InitializeCriticalSectionEx (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter FlsAlloc (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter FlsSetValue (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter FlsGetValue (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter LCMapStringEx (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter FlsFree (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter InitOnceExecuteOnce (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CreateEventExW (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CreateSemaphoreW (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CreateSemaphoreExW (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CreateThreadpoolTimer (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter SetThreadpoolTimer (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter WaitForThreadpoolTimerCallbacks (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CloseThreadpoolTimer (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CreateThreadpoolWait (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter SetThreadpoolWait (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CloseThreadpoolWait (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter FlushProcessWriteBuffers (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter FreeLibraryWhenCallbackReturns (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter GetCurrentProcessorNumber (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CreateSymbolicLinkW (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter GetCurrentPackageId (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter GetTickCount64 (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter GetFileInformationByHandleEx (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter SetFileInformationByHandle (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter GetSystemTimePreciseAsFileTime (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter InitializeConditionVariable (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter WakeConditionVariable (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter WakeAllConditionVariable (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter SleepConditionVariableCS (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter InitializeSRWLock (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter AcquireSRWLockExclusive (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter TryAcquireSRWLockExclusive (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter ReleaseSRWLockExclusive (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter SleepConditionVariableSRW (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CreateThreadpoolWork (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter SubmitThreadpoolWork (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CloseThreadpoolWork (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CompareStringEx (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter GetLocaleInfoEx (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter AreFileApisANSI (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter RtlGetVersion (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CoCreateInstance (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CoCreateInstanceEx (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CoGetClassObject (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CoGetInstanceFromFile (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter CoGetInstanceFromIStorage (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter FlsGetValue2 (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter GetFinalPathNameByHandleW (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter run_code (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter PyInit__socket (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter PyInit_select (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter PyInit__ssl (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter GetFileInformationByName (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter PyInit__wmi (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter PyInit_backend_c (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter PyInit__hashlib (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter PyInit__queue (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter PyInit__bz2 (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter PyInit__lzma (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter PyInit_md (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter PyInit_md__mypyc (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter PyInit_unicodedata (UID: 00000000-00002552) "code_fix_patch_generator.exe" called "GetProcAddress" with a parameter PyInit__uuid (UID: 00000000-00002552)36:T115c3,Found reference to API (Indicator: "RtlPcToFileHeader"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "RaiseException"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "RtlVirtualUnwind"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "FlsFree"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetFileSizeEx"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetConsoleMode"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "AddDllDirectory"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "FindResourceA"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "RtlLookupFunctionEntry"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "TlsGetValue"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "OpenProcess"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "IsValidCodePage"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "TlsAlloc"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetModuleFileNameW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetEnvironmentVariableW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetCPInfo"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "InitializeCriticalSectionAndSpinCount"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetCommandLineA"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "FindClose"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "FreeEnvironmentStringsW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "SizeofResource"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetStartupInfoW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "InitializeSListHead"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "SetConsoleCtrlHandler"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetExitCodeProcess"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "VirtualProtect"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "IsDebuggerPresent"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "FormatMessageA"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "FlsGetValue"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "LoadLibraryExW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetLastError"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "HeapSize"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "DeleteCriticalSection"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "FlushFileBuffers"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "FlsSetValue"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "HeapFree"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "TlsSetValue"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetStdHandle"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetProcAddress"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetStringTypeW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "CreateFileW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetModuleHandleExW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetOEMCP"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "WriteConsoleW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "TerminateProcess"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "EnterCriticalSection"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetModuleHandleA"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "WaitForSingleObject"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "FlsAlloc"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "InitializeCriticalSectionEx"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetCurrentProcess"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "LockResource"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "FindFirstFileExW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "SetStdHandle"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "K32GetModuleFileNameExW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetShortPathNameW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "SetEnvironmentVariableW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "CreateProcessW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetConsoleOutputCP"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "HeapReAlloc"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetProcessHeap"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "EncodePointer"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "WideCharToMultiByte"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "HeapAlloc"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetSystemTimeAsFileTime"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetFileType"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "CloseHandle"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "LoadResource"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "UnhandledExceptionFilter"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "CreateDirectoryW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "LCMapStringW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetFileAttributesW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetModuleHandleW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "SetFilePointerEx"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "TlsFree"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "SetLastError"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetCurrentProcessId"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetTempPathW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "ExitProcess"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "QueryPerformanceCounter"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "IsProcessorFeaturePresent"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "FindNextFileW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "LeaveCriticalSection"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "Sleep"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "WriteFile"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "SetUnhandledExceptionFilter"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "CompareStringW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetEnvironmentStringsW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetCurrentThreadId"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetCommandLineW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetACP"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "RtlCaptureContext"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "FreeLibrary"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "MultiByteToWideChar"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "CommandLineToArgvW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "SHFileOperationW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "SHGetFolderPathW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "CompareStringEx"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "LCMapStringEx"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "LocaleNameToLCID"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetFinalPathNameByHandleW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "ReportEventW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "RegisterEventSourceW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "DeregisterEventSource"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetSystemDirectoryA"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "DeleteFiber"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "CreateFiberEx"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "ConvertThreadToFiberEx"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "ReadConsoleA"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "SetConsoleMode"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "LoadLibraryW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetSystemTime"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "AcquireSRWLockShared"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "ConvertFiberToThread"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "VirtualLock"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "SwitchToFiber"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "ReadConsoleW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "ReleaseSRWLockShared"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "SystemTimeToFileTime"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "VirtualAlloc"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetSystemInfo"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "LoadLibraryA"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "FindFirstFileW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "VirtualFree"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetProcessWindowStation"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetUserObjectInformationW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "MessageBoxW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "ioctlsocket"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "getservbyname"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "inet_addr"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "htonl"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "gethostbyname"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "gethostbyaddr"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "getsockopt"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "inet_ntoa"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "getsockname"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "htons"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "WSAStartup"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "WSAGetLastError"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "WSASetLastError"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "WSACleanup"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "recvfrom"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "getservbyport"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "closesocket"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "ntohs"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "BCryptGenRandom"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "DisableThreadLibraryCalls"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "InterlockedFlushSList"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "InterlockedPushEntrySList"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "RtlUnwind"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "CryptDecrypt"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "CryptAcquireContextA"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "CryptReleaseContext"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "CryptEncrypt"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "CryptHashData"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "CryptDestroyKey"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "CryptDestroyHash"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "CryptDeriveKey"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "CryptGetHashParam"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "CryptCreateHash"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetFileAttributesA"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetCurrentThread"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetLocaleInfoA"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "LocalFree"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "InitializeCriticalSection"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "QueryPerformanceFrequency"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "DuplicateHandle"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "EnumSystemLocalesA"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetModuleFileNameA"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "__WSAFDIsSet"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "FormatMessageW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "ReleaseMutex"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "WaitForSingleObjectEx"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "lstrlenW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetCurrentDirectoryW"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "CreateMutexA"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "NtWriteFile"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "RtlNtStatusToDosError"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "CertGetEnhancedKeyUsage"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "CertFreeCRLContext"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "CertOpenStore"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "CertFreeCertificateContext"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "CertAddStoreToCollection"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "CertEnumCRLsInStore"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "CertEnumCertificatesInStore"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "CertCloseStore"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "LoadLibraryExA"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "CreateThread"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "SysStringLen"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "GetErrorInfo"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "SysFreeString"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "SysAllocStringLen"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "ProgIDFromCLSID"; File: "code_fix_patch_generator.exe") Found reference to API (Indicator: "RtlCaptureContext"; Source: "00000000-00002552.00000000.217466.26275000.00000002.mdmp, 00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.34636000.00000002.mdmp, 00000000-00002552.00000000.217466.38117000.00000002.mdmp, 00000000-00002552.00000000.217466.3850D000.00000002.mdmp, 00000000-00002552.00000000.217466.3AAD3000.00000002.mdmp, 00000000-00002552.00000000.217466.3B05D000.00000002.mdmp, 00000000-00002552.00000000.217466.3B132000.00000002.mdmp, 00000000-00002552.00000000.217466.3BAC7000.00000002.mdmp, 00000000-00002552.00000000.217466.3DA53000.00000002.mdmp, 00000000-00002552.00000000.217466.3E875000.00000002.mdmp, 00000000-00002552.00000000.217466.3E884000.00000002.mdmp, 00000000-00002552.00000000.217466.3E899000.00000002.mdmp, 00000000-00002552.00000000.217466.3E8C4000.00000002.mdmp, 00000000-00002552.00000000.217466.3F513000.00000002.mdmp, 00000000-00002552.00000000.217466.41984000.00000002.mdmp, 00000000-00002552.00000000.217466.4AA64000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.52CD8000.00000002.mdmp, 00000000-00002552.00000000.217466.52F6F000.00000002.mdmp, 00000000-00002552.00000000.217466.530EC000.00000002.mdmp, 00000000-00002552.00000000.217466.53209000.00000002.mdmp, 00000000-00002552.00000000.217466.5369E000.00000002.mdmp, 00000000-00002552.00000000.217466.536BA000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.53725000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.53B19000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.54D7E000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56B24000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp, 00000000-00002552.00000000.217466.57453000.00000002.mdmp") Found reference to API (Indicator: "RtlLookupFunctionEntry"; Source: "00000000-00002552.00000000.217466.26275000.00000002.mdmp, 00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.34636000.00000002.mdmp, 00000000-00002552.00000000.217466.38117000.00000002.mdmp, 00000000-00002552.00000000.217466.3850D000.00000002.mdmp, 00000000-00002552.00000000.217466.3AAD3000.00000002.mdmp, 00000000-00002552.00000000.217466.3B05D000.00000002.mdmp, 00000000-00002552.00000000.217466.3B132000.00000002.mdmp, 00000000-00002552.00000000.217466.3BAC7000.00000002.mdmp, 00000000-00002552.00000000.217466.3DA53000.00000002.mdmp, 00000000-00002552.00000000.217466.3E875000.00000002.mdmp, 00000000-00002552.00000000.217466.3E884000.00000002.mdmp, 00000000-00002552.00000000.217466.3E899000.00000002.mdmp, 00000000-00002552.00000000.217466.3E8C4000.00000002.mdmp, 00000000-00002552.00000000.217466.3F513000.00000002.mdmp, 00000000-00002552.00000000.217466.41984000.00000002.mdmp, 00000000-00002552.00000000.217466.4AA64000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.52CD8000.00000002.mdmp, 00000000-00002552.00000000.217466.52F6F000.00000002.mdmp, 00000000-00002552.00000000.217466.530EC000.00000002.mdmp, 00000000-00002552.00000000.217466.53209000.00000002.mdmp, 00000000-00002552.00000000.217466.5369E000.00000002.mdmp, 00000000-00002552.00000000.217466.536BA000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.53725000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.53B19000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.54D7E000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56B24000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp, 00000000-00002552.00000000.217466.57453000.00000002.mdmp") Found reference to API (Indicator: "RtlVirtualUnwind"; Source: "00000000-00002552.00000000.217466.26275000.00000002.mdmp, 00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.34636000.00000002.mdmp, 00000000-00002552.00000000.217466.38117000.00000002.mdmp, 00000000-00002552.00000000.217466.3850D000.00000002.mdmp, 00000000-00002552.00000000.217466.3AAD3000.00000002.mdmp, 00000000-00002552.00000000.217466.3B05D000.00000002.mdmp, 00000000-00002552.00000000.217466.3B132000.00000002.mdmp, 00000000-00002552.00000000.217466.3BAC7000.00000002.mdmp, 00000000-00002552.00000000.217466.3DA53000.00000002.mdmp, 00000000-00002552.00000000.217466.3E875000.00000002.mdmp, 00000000-00002552.00000000.217466.3E884000.00000002.mdmp, 00000000-00002552.00000000.217466.3E899000.00000002.mdmp, 00000000-00002552.00000000.217466.3E8C4000.00000002.mdmp, 00000000-00002552.00000000.217466.3F513000.00000002.mdmp, 00000000-00002552.00000000.217466.41984000.00000002.mdmp, 00000000-00002552.00000000.217466.4AA64000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.52CD8000.00000002.mdmp, 00000000-00002552.00000000.217466.52F6F000.00000002.mdmp, 00000000-00002552.00000000.217466.530EC000.00000002.mdmp, 00000000-00002552.00000000.217466.53209000.00000002.mdmp, 00000000-00002552.00000000.217466.5369E000.00000002.mdmp, 00000000-00002552.00000000.217466.536BA000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.53725000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.53B19000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.54D7E000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56B24000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp, 00000000-00002552.00000000.217466.57453000.00000002.mdmp") Found reference to API (Indicator: "UnhandledExceptionFilter"; Source: "00000000-00002552.00000000.217466.26275000.00000002.mdmp, 00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.34636000.00000002.mdmp, 00000000-00002552.00000000.217466.38117000.00000002.mdmp, 00000000-00002552.00000000.217466.3850D000.00000002.mdmp, 00000000-00002552.00000000.217466.3AAD3000.00000002.mdmp, 00000000-00002552.00000000.217466.3B05D000.00000002.mdmp, 00000000-00002552.00000000.217466.3B132000.00000002.mdmp, 00000000-00002552.00000000.217466.3BAC7000.00000002.mdmp, 00000000-00002552.00000000.217466.3DA53000.00000002.mdmp, 00000000-00002552.00000000.217466.3E875000.00000002.mdmp, 00000000-00002552.00000000.217466.3E884000.00000002.mdmp, 00000000-00002552.00000000.217466.3E899000.00000002.mdmp, 00000000-00002552.00000000.217466.3E8C4000.00000002.mdmp, 00000000-00002552.00000000.217466.3F513000.00000002.mdmp, 00000000-00002552.00000000.217466.41984000.00000002.mdmp, 00000000-00002552.00000000.217466.4AA64000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.52CD8000.00000002.mdmp, 00000000-00002552.00000000.217466.52F6F000.00000002.mdmp, 00000000-00002552.00000000.217466.5369E000.00000002.mdmp, 00000000-00002552.00000000.217466.536BA000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.53725000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.54D7E000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API (Indicator: "SetUnhandledExceptionFilter"; Source: "00000000-00002552.00000000.217466.26275000.00000002.mdmp, 00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.34636000.00000002.mdmp, 00000000-00002552.00000000.217466.38117000.00000002.mdmp, 00000000-00002552.00000000.217466.3850D000.00000002.mdmp, 00000000-00002552.00000000.217466.3AAD3000.00000002.mdmp, 00000000-00002552.00000000.217466.3B05D000.00000002.mdmp, 00000000-00002552.00000000.217466.3B132000.00000002.mdmp, 00000000-00002552.00000000.217466.3BAC7000.00000002.mdmp, 00000000-00002552.00000000.217466.3DA53000.00000002.mdmp, 00000000-00002552.00000000.217466.3E875000.00000002.mdmp, 00000000-00002552.00000000.217466.3E884000.00000002.mdmp, 00000000-00002552.00000000.217466.3E899000.00000002.mdmp, 00000000-00002552.00000000.217466.3E8C4000.00000002.mdmp, 00000000-00002552.00000000.217466.3F513000.00000002.mdmp, 00000000-00002552.00000000.217466.41984000.00000002.mdmp, 00000000-00002552.00000000.217466.4AA64000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.52CD8000.00000002.mdmp, 00000000-00002552.00000000.217466.52F6F000.00000002.mdmp, 00000000-00002552.00000000.217466.5369E000.00000002.mdmp, 00000000-00002552.00000000.217466.536BA000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.53725000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.54D7E000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API (Indicator: "GetCurrentProcess"; Source: "00000000-00002552.00000000.217466.26275000.00000002.mdmp, 00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.34636000.00000002.mdmp, 00000000-00002552.00000000.217466.38117000.00000002.mdmp, 00000000-00002552.00000000.217466.3850D000.00000002.mdmp, 00000000-00002552.00000000.217466.3AAD3000.00000002.mdmp, 00000000-00002552.00000000.217466.3B05D000.00000002.mdmp, 00000000-00002552.00000000.217466.3B132000.00000002.mdmp, 00000000-00002552.00000000.217466.3BAC7000.00000002.mdmp, 00000000-00002552.00000000.217466.3DA53000.00000002.mdmp, 00000000-00002552.00000000.217466.3E875000.00000002.mdmp, 00000000-00002552.00000000.217466.3E884000.00000002.mdmp, 00000000-00002552.00000000.217466.3E899000.00000002.mdmp, 00000000-00002552.00000000.217466.3E8C4000.00000002.mdmp, 00000000-00002552.00000000.217466.3F513000.00000002.mdmp, 00000000-00002552.00000000.217466.41984000.00000002.mdmp, 00000000-00002552.00000000.217466.4AA64000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.52CD8000.00000002.mdmp, 00000000-00002552.00000000.217466.52F6F000.00000002.mdmp, 00000000-00002552.00000000.217466.53209000.00000002.mdmp, 00000000-00002552.00000000.217466.5369E000.00000002.mdmp, 00000000-00002552.00000000.217466.536BA000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.53725000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.53B19000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.54D7E000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56B24000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp, 00000000-00002552.00000000.217466.C6720000.00000004.mdmp") Found reference to API (Indicator: "TerminateProcess"; Source: "00000000-00002552.00000000.217466.26275000.00000002.mdmp, 00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.34636000.00000002.mdmp, 00000000-00002552.00000000.217466.38117000.00000002.mdmp, 00000000-00002552.00000000.217466.3850D000.00000002.mdmp, 00000000-00002552.00000000.217466.3AAD3000.00000002.mdmp, 00000000-00002552.00000000.217466.3B05D000.00000002.mdmp, 00000000-00002552.00000000.217466.3B132000.00000002.mdmp, 00000000-00002552.00000000.217466.3BAC7000.00000002.mdmp, 00000000-00002552.00000000.217466.3DA53000.00000002.mdmp, 00000000-00002552.00000000.217466.3E875000.00000002.mdmp, 00000000-00002552.00000000.217466.3E884000.00000002.mdmp, 00000000-00002552.00000000.217466.3E899000.00000002.mdmp, 00000000-00002552.00000000.217466.3E8C4000.00000002.mdmp, 00000000-00002552.00000000.217466.3F513000.00000002.mdmp, 00000000-00002552.00000000.217466.41984000.00000002.mdmp, 00000000-00002552.00000000.217466.4AA64000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.52CD8000.00000002.mdmp, 00000000-00002552.00000000.217466.52F6F000.00000002.mdmp, 00000000-00002552.00000000.217466.5369E000.00000002.mdmp, 00000000-00002552.00000000.217466.536BA000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.53725000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.53B19000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.54D7E000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp, 00000000-00002552.00000000.217466.C6720000.00000004.mdmp") Found reference to API (Indicator: "IsProcessorFeaturePresent"; Source: "00000000-00002552.00000000.217466.26275000.00000002.mdmp, 00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.34636000.00000002.mdmp, 00000000-00002552.00000000.217466.38117000.00000002.mdmp, 00000000-00002552.00000000.217466.3850D000.00000002.mdmp, 00000000-00002552.00000000.217466.3AAD3000.00000002.mdmp, 00000000-00002552.00000000.217466.3B05D000.00000002.mdmp, 00000000-00002552.00000000.217466.3B132000.00000002.mdmp, 00000000-00002552.00000000.217466.3BAC7000.00000002.mdmp, 00000000-00002552.00000000.217466.3DA53000.00000002.mdmp, 00000000-00002552.00000000.217466.3E875000.00000002.mdmp, 00000000-00002552.00000000.217466.3E884000.00000002.mdmp, 00000000-00002552.00000000.217466.3E899000.00000002.mdmp, 00000000-00002552.00000000.217466.3E8C4000.00000002.mdmp, 00000000-00002552.00000000.217466.3F513000.00000002.mdmp, 00000000-00002552.00000000.217466.41984000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API (Indicator: "QueryPerformanceCounter"; Source: "00000000-00002552.00000000.217466.26275000.00000002.mdmp, 00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.34636000.00000002.mdmp, 00000000-00002552.00000000.217466.38117000.00000002.mdmp, 00000000-00002552.00000000.217466.3850D000.00000002.mdmp, 00000000-00002552.00000000.217466.3AAD3000.00000002.mdmp, 00000000-00002552.00000000.217466.3B05D000.00000002.mdmp, 00000000-00002552.00000000.217466.3B132000.00000002.mdmp, 00000000-00002552.00000000.217466.3BAC7000.00000002.mdmp, 00000000-00002552.00000000.217466.3DA53000.00000002.mdmp, 00000000-00002552.00000000.217466.3E875000.00000002.mdmp, 00000000-00002552.00000000.217466.3E884000.00000002.mdmp, 00000000-00002552.00000000.217466.3E899000.00000002.mdmp, 00000000-00002552.00000000.217466.3E8C4000.00000002.mdmp, 00000000-00002552.00000000.217466.3F513000.00000002.mdmp, 00000000-00002552.00000000.217466.41984000.00000002.mdmp, 00000000-00002552.00000000.217466.4AA64000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.52CD8000.00000002.mdmp, 00000000-00002552.00000000.217466.52F6F000.00000002.mdmp, 00000000-00002552.00000000.217466.5369E000.00000002.mdmp, 00000000-00002552.00000000.217466.536BA000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.53725000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.54D7E000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API (Indicator: "GetCurrentProcessId"; Source: "00000000-00002552.00000000.217466.26275000.00000002.mdmp, 00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.34636000.00000002.mdmp, 00000000-00002552.00000000.217466.38117000.00000002.mdmp, 00000000-00002552.00000000.217466.3850D000.00000002.mdmp, 00000000-00002552.00000000.217466.3AAD3000.00000002.mdmp, 00000000-00002552.00000000.217466.3B05D000.00000002.mdmp, 00000000-00002552.00000000.217466.3B132000.00000002.mdmp, 00000000-00002552.00000000.217466.3BAC7000.00000002.mdmp, 00000000-00002552.00000000.217466.3DA53000.00000002.mdmp, 00000000-00002552.00000000.217466.3E875000.00000002.mdmp, 00000000-00002552.00000000.217466.3E884000.00000002.mdmp, 00000000-00002552.00000000.217466.3E899000.00000002.mdmp, 00000000-00002552.00000000.217466.3E8C4000.00000002.mdmp, 00000000-00002552.00000000.217466.3F513000.00000002.mdmp, 00000000-00002552.00000000.217466.41984000.00000002.mdmp, 00000000-00002552.00000000.217466.4AA64000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.52CD8000.00000002.mdmp, 00000000-00002552.00000000.217466.52F6F000.00000002.mdmp, 00000000-00002552.00000000.217466.5369E000.00000002.mdmp, 00000000-00002552.00000000.217466.536BA000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.53725000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.54D7E000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56B24000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API (Indicator: "GetCurrentThreadId"; Source: "00000000-00002552.00000000.217466.26275000.00000002.mdmp, 00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.34636000.00000002.mdmp, 00000000-00002552.00000000.217466.38117000.00000002.mdmp, 00000000-00002552.00000000.217466.3850D000.00000002.mdmp, 00000000-00002552.00000000.217466.3AAD3000.00000002.mdmp, 00000000-00002552.00000000.217466.3B05D000.00000002.mdmp, 00000000-00002552.00000000.217466.3B132000.00000002.mdmp, 00000000-00002552.00000000.217466.3BAC7000.00000002.mdmp, 00000000-00002552.00000000.217466.3DA53000.00000002.mdmp, 00000000-00002552.00000000.217466.3E875000.00000002.mdmp, 00000000-00002552.00000000.217466.3E884000.00000002.mdmp, 00000000-00002552.00000000.217466.3E899000.00000002.mdmp, 00000000-00002552.00000000.217466.3E8C4000.00000002.mdmp, 00000000-00002552.00000000.217466.3F513000.00000002.mdmp, 00000000-00002552.00000000.217466.41984000.00000002.mdmp, 00000000-00002552.00000000.217466.4AA64000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.52CD8000.00000002.mdmp, 00000000-00002552.00000000.217466.52F6F000.00000002.mdmp, 00000000-00002552.00000000.217466.5369E000.00000002.mdmp, 00000000-00002552.00000000.217466.536BA000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.53725000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.54D7E000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56B24000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API (Indicator: "GetSystemTimeAsFileTime"; Source: "00000000-00002552.00000000.217466.26275000.00000002.mdmp, 00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.34636000.00000002.mdmp, 00000000-00002552.00000000.217466.38117000.00000002.mdmp, 00000000-00002552.00000000.217466.3850D000.00000002.mdmp, 00000000-00002552.00000000.217466.3AAD3000.00000002.mdmp, 00000000-00002552.00000000.217466.3B05D000.00000002.mdmp, 00000000-00002552.00000000.217466.3B132000.00000002.mdmp, 00000000-00002552.00000000.217466.3BAC7000.00000002.mdmp, 00000000-00002552.00000000.217466.3DA53000.00000002.mdmp, 00000000-00002552.00000000.217466.3E875000.00000002.mdmp, 00000000-00002552.00000000.217466.3E884000.00000002.mdmp, 00000000-00002552.00000000.217466.3E899000.00000002.mdmp, 00000000-00002552.00000000.217466.3E8C4000.00000002.mdmp, 00000000-00002552.00000000.217466.3F513000.00000002.mdmp, 00000000-00002552.00000000.217466.41984000.00000002.mdmp, 00000000-00002552.00000000.217466.4AA64000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.52CD8000.00000002.mdmp, 00000000-00002552.00000000.217466.52F6F000.00000002.mdmp, 00000000-00002552.00000000.217466.5369E000.00000002.mdmp, 00000000-00002552.00000000.217466.536BA000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.53725000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.54D7E000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API (Indicator: "DisableThreadLibraryCalls"; Source: "00000000-00002552.00000000.217466.26275000.00000002.mdmp, 00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.34636000.00000002.mdmp, 00000000-00002552.00000000.217466.38117000.00000002.mdmp, 00000000-00002552.00000000.217466.3850D000.00000002.mdmp, 00000000-00002552.00000000.217466.3AAD3000.00000002.mdmp, 00000000-00002552.00000000.217466.3B05D000.00000002.mdmp, 00000000-00002552.00000000.217466.3B132000.00000002.mdmp, 00000000-00002552.00000000.217466.3BAC7000.00000002.mdmp, 00000000-00002552.00000000.217466.3DA53000.00000002.mdmp, 00000000-00002552.00000000.217466.3E884000.00000002.mdmp, 00000000-00002552.00000000.217466.3E899000.00000002.mdmp, 00000000-00002552.00000000.217466.3F513000.00000002.mdmp, 00000000-00002552.00000000.217466.41984000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.52CD8000.00000002.mdmp, 00000000-00002552.00000000.217466.530EC000.00000002.mdmp, 00000000-00002552.00000000.217466.5369E000.00000002.mdmp, 00000000-00002552.00000000.217466.536BA000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.53B19000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.54D7E000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56B24000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API (Indicator: "InitializeSListHead"; Source: "00000000-00002552.00000000.217466.26275000.00000002.mdmp, 00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.34636000.00000002.mdmp, 00000000-00002552.00000000.217466.38117000.00000002.mdmp, 00000000-00002552.00000000.217466.3850D000.00000002.mdmp, 00000000-00002552.00000000.217466.3AAD3000.00000002.mdmp, 00000000-00002552.00000000.217466.3B05D000.00000002.mdmp, 00000000-00002552.00000000.217466.3B132000.00000002.mdmp, 00000000-00002552.00000000.217466.3BAC7000.00000002.mdmp, 00000000-00002552.00000000.217466.3DA53000.00000002.mdmp, 00000000-00002552.00000000.217466.3E884000.00000002.mdmp, 00000000-00002552.00000000.217466.3E899000.00000002.mdmp, 00000000-00002552.00000000.217466.3F513000.00000002.mdmp, 00000000-00002552.00000000.217466.41984000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API (Indicator: "IsDebuggerPresent"; Source: "00000000-00002552.00000000.217466.26275000.00000002.mdmp, 00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.34636000.00000002.mdmp, 00000000-00002552.00000000.217466.38117000.00000002.mdmp, 00000000-00002552.00000000.217466.3850D000.00000002.mdmp, 00000000-00002552.00000000.217466.3AAD3000.00000002.mdmp, 00000000-00002552.00000000.217466.3B05D000.00000002.mdmp, 00000000-00002552.00000000.217466.3B132000.00000002.mdmp, 00000000-00002552.00000000.217466.3BAC7000.00000002.mdmp, 00000000-00002552.00000000.217466.3DA53000.00000002.mdmp, 00000000-00002552.00000000.217466.3E884000.00000002.mdmp, 00000000-00002552.00000000.217466.3E899000.00000002.mdmp, 00000000-00002552.00000000.217466.3F513000.00000002.mdmp, 00000000-00002552.00000000.217466.41984000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.5369E000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56B24000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API (Indicator: "SleepConditionVariableCS"; Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API (Indicator: "EnterCriticalSection"; Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.3E8C4000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.52CD8000.00000002.mdmp, 00000000-00002552.00000000.217466.52F6F000.00000002.mdmp, 00000000-00002552.00000000.217466.53209000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.53B19000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56B24000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API (Indicator: "WakeAllConditionVariable"; Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API (Indicator: "WakeConditionVariable"; Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API (Indicator: "LeaveCriticalSection"; Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.3E8C4000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.52CD8000.00000002.mdmp, 00000000-00002552.00000000.217466.52F6F000.00000002.mdmp, 00000000-00002552.00000000.217466.53209000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.53B19000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56B24000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API (Indicator: "InitializeCriticalSection"; Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.52CD8000.00000002.mdmp, 00000000-00002552.00000000.217466.52F6F000.00000002.mdmp, 00000000-00002552.00000000.217466.53209000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.53B19000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API (Indicator: "InitializeConditionVariable"; Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API (Indicator: "WaitForSingleObject"; Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.3E884000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.52F6F000.00000002.mdmp, 00000000-00002552.00000000.217466.5369E000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56B24000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp, 00000000-00002552.00000000.217466.C6720000.00000004.mdmp") Found reference to API (Indicator: "GetLastError"; Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.3850D000.00000002.mdmp, 00000000-00002552.00000000.217466.3E875000.00000002.mdmp, 00000000-00002552.00000000.217466.3E884000.00000002.mdmp, 00000000-00002552.00000000.217466.3E899000.00000002.mdmp, 00000000-00002552.00000000.217466.3E8C4000.00000002.mdmp, 00000000-00002552.00000000.217466.41984000.00000002.mdmp, 00000000-00002552.00000000.217466.4AA64000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.52CD8000.00000002.mdmp, 00000000-00002552.00000000.217466.52F6F000.00000002.mdmp, 00000000-00002552.00000000.217466.530EC000.00000002.mdmp, 00000000-00002552.00000000.217466.53209000.00000002.mdmp, 00000000-00002552.00000000.217466.5369E000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.53725000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.53B19000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56B24000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp, 00000000-00002552.00000000.217466.C6720000.00000004.mdmp") Found reference to API (Indicator: "CloseHandle"; Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.3E884000.00000002.mdmp, 00000000-00002552.00000000.217466.41984000.00000002.mdmp, 00000000-00002552.00000000.217466.4AA64000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.52CD8000.00000002.mdmp, 00000000-00002552.00000000.217466.52F6F000.00000002.mdmp, 00000000-00002552.00000000.217466.530EC000.00000002.mdmp, 00000000-00002552.00000000.217466.53209000.00000002.mdmp, 00000000-00002552.00000000.217466.5369E000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.53B19000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56B24000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp, 00000000-00002552.00000000.217466.C6720000.00000004.mdmp") Found reference to API (Indicator: "GetSystemInfo"; Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.3E884000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.53209000.00000002.mdmp, 00000000-00002552.00000000.217466.53725000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53B19000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API (Indicator: "DeleteCriticalSection"; Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.3E875000.00000002.mdmp, 00000000-00002552.00000000.217466.3E8C4000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.52CD8000.00000002.mdmp, 00000000-00002552.00000000.217466.52F6F000.00000002.mdmp, 00000000-00002552.00000000.217466.53209000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.53B19000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API (Indicator: "SetLastError"; Source: "00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.3E875000.00000002.mdmp, 00000000-00002552.00000000.217466.3E8C4000.00000002.mdmp, 00000000-00002552.00000000.217466.4AA64000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.52CD8000.00000002.mdmp, 00000000-00002552.00000000.217466.52F6F000.00000002.mdmp, 00000000-00002552.00000000.217466.530EC000.00000002.mdmp, 00000000-00002552.00000000.217466.5369E000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.53B19000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56B24000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API (Indicator: "GetSystemTime"; Source: "00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API (Indicator: "SystemTimeToFileTime"; Source: "00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API (Indicator: "GetStartupInfoW"; Source: "00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API (Indicator: "GetModuleHandleW"; Source: "00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.3E884000.00000002.mdmp, 00000000-00002552.00000000.217466.3E8C4000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.52CD8000.00000002.mdmp, 00000000-00002552.00000000.217466.5369E000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API (Indicator: "WSAStartup"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp") Found reference to API (Indicator: "getsockopt"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp, 00000000-00002552.00000000.217466.3E899000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.C6C20000.00000004.mdmp") Found reference to API (Indicator: "CreateToolhelp32Snapshot"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API (Indicator: "Module32First"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp") Found reference to API (Indicator: "Module32Next"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp")37:Tfda,Found reference to API "GetLastError" (Indicator: "GetLastError"; File: "code_fix_patch_generator.exe") Found reference to API "SetLastError" (Indicator: "SetLastError"; File: "code_fix_patch_generator.exe") Found reference to API "WSAGetLastError" (Indicator: "GetLastError"; File: "code_fix_patch_generator.exe") Found reference to API "WSASetLastError" (Indicator: "SetLastError"; File: "code_fix_patch_generator.exe") Found reference to API "GetLastError" (Indicator: "GetLastError"; Source: "00000000-00002552.00000000.217466.26400000.00000002.mdmp, 00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.3850D000.00000002.mdmp, 00000000-00002552.00000000.217466.3E875000.00000002.mdmp, 00000000-00002552.00000000.217466.3E884000.00000002.mdmp, 00000000-00002552.00000000.217466.3E899000.00000002.mdmp, 00000000-00002552.00000000.217466.3E8C4000.00000002.mdmp, 00000000-00002552.00000000.217466.41984000.00000002.mdmp, 00000000-00002552.00000000.217466.4AA64000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.52CD8000.00000002.mdmp, 00000000-00002552.00000000.217466.52F6F000.00000002.mdmp, 00000000-00002552.00000000.217466.530EC000.00000002.mdmp, 00000000-00002552.00000000.217466.53209000.00000002.mdmp, 00000000-00002552.00000000.217466.5369E000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.53725000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.53B19000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56B24000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp, 00000000-00002552.00000000.217466.C6720000.00000004.mdmp") Found reference to API "SetLastError" (Indicator: "SetLastError"; Source: "00000000-00002552.00000000.217466.264D2000.00000002.mdmp, 00000000-00002552.00000000.217466.269B2000.00000002.mdmp, 00000000-00002552.00000000.217466.27FA0000.00000002.mdmp, 00000000-00002552.00000000.217466.289AC000.00000002.mdmp, 00000000-00002552.00000000.217466.2A825000.00000002.mdmp, 00000000-00002552.00000000.217466.3E875000.00000002.mdmp, 00000000-00002552.00000000.217466.3E8C4000.00000002.mdmp, 00000000-00002552.00000000.217466.4AA64000.00000002.mdmp, 00000000-00002552.00000000.217466.4FD6C000.00000002.mdmp, 00000000-00002552.00000000.217466.52CD8000.00000002.mdmp, 00000000-00002552.00000000.217466.52F6F000.00000002.mdmp, 00000000-00002552.00000000.217466.530EC000.00000002.mdmp, 00000000-00002552.00000000.217466.5369E000.00000002.mdmp, 00000000-00002552.00000000.217466.536E3000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.53AA4000.00000002.mdmp, 00000000-00002552.00000000.217466.53B19000.00000002.mdmp, 00000000-00002552.00000000.217466.540B9000.00000002.mdmp, 00000000-00002552.00000000.217466.5449A000.00000002.mdmp, 00000000-00002552.00000000.217466.5463B000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp, 00000000-00002552.00000000.217466.54E10000.00000002.mdmp, 00000000-00002552.00000000.217466.56965000.00000002.mdmp, 00000000-00002552.00000000.217466.56B24000.00000002.mdmp, 00000000-00002552.00000000.217466.56B7A000.00000002.mdmp, 00000000-00002552.00000000.217466.56E83000.00000002.mdmp")38:T903,"libcrypto-3.dll" contains export function called "ACCESS_DESCRIPTION_free" at ordinal 1 "libcrypto-3.dll" contains export function called "ACCESS_DESCRIPTION_it" at ordinal 2 "libcrypto-3.dll" contains export function called "ACCESS_DESCRIPTION_new" at ordinal 3 "libcrypto-3.dll" contains export function called "ADMISSIONS_free" at ordinal 4 "libcrypto-3.dll" contains export function called "ADMISSIONS_get0_admissionAuthority" at ordinal 5 "libcrypto-3.dll" contains export function called "ADMISSIONS_get0_namingAuthority" at ordinal 6 "libcrypto-3.dll" contains export function called "ADMISSIONS_get0_professionInfos" at ordinal 7 "libcrypto-3.dll" contains export function called "ADMISSIONS_it" at ordinal 8 "libcrypto-3.dll" contains export function called "ADMISSIONS_new" at ordinal 9 "libcrypto-3.dll" contains export function called "ADMISSIONS_set0_admissionAuthority" at ordinal 10 "libcrypto-3.dll" contains export function called "ADMISSIONS_set0_namingAuthority" at ordinal 11 "libcrypto-3.dll" contains export function called "ADMISSIONS_set0_professionInfos" at ordinal 12 "libcrypto-3.dll" contains export function called "ADMISSION_SYNTAX_free" at ordinal 13 "libcrypto-3.dll" contains export function called "ADMISSION_SYNTAX_get0_admissionAuthority" at ordinal 14 "libcrypto-3.dll" contains export function called "ADMISSION_SYNTAX_get0_contentsOfAdmissions" at ordinal 15 "libcrypto-3.dll" contains export function called "ADMISSION_SYNTAX_it" at ordinal 16 "libcrypto-3.dll" contains export function called "ADMISSION_SYNTAX_new" at ordinal 17 "libcrypto-3.dll" contains export function called "ADMISSION_SYNTAX_set0_admissionAuthority" at ordinal 18 "libcrypto-3.dll" contains export function called "ADMISSION_SYNTAX_set0_contentsOfAdmissions" at ordinal 19 "libcrypto-3.dll" contains export function called "AES_bi_ige_encrypt" at ordinal 20 "libcrypto-3.dll" contains export function called "AES_cbc_encrypt" at ordinal 21 "libcrypto-3.dll" contains export function called "AES_cfb128_encrypt" at ordinal 22 "libcrypto-3.dll" contains export function called "AES_cfb1_encrypt" at ordinal 23 "libcrypto-3.dll" contains export function called "AES_cfb8_encrypt" at ordinal 24 "libcrypto-3.dll" contains export function called "AES_decrypt" at ordinal 2539:T540,"code_fix_patch_generator.exe" with parameter %TEMP%\onefile_5316_134010018119479299 (UID: 00000000-00005316) "code_fix_patch_generator.exe" with parameter %TEMP%\onefile_5316_134010018119479299\certifi (UID: 00000000-00005316) "code_fix_patch_generator.exe" with parameter %TEMP%\onefile_5316_134010018119479299\charset_normalizer (UID: 00000000-00005316) "code_fix_patch_generator.exe" with parameter %TEMP%\onefile_5316_134010018119479299\cryptography\hazmat\bindings (UID: 00000000-00005316) "code_fix_patch_generator.exe" with parameter %TEMP%\onefile_5316_134010018119479299\cryptography\hazmat (UID: 00000000-00005316) "code_fix_patch_generator.exe" with parameter %TEMP%\onefile_5316_134010018119479299\cryptography (UID: 00000000-00005316) "code_fix_patch_generator.exe" with parameter %TEMP%\onefile_5316_134010018119479299\lxml (UID: 00000000-00005316) "code_fix_patch_generator.exe" with parameter %TEMP%\onefile_5316_134010018119479299\primp (UID: 00000000-00005316) "code_fix_patch_generator.exe" with parameter %TEMP%\onefile_5316_134010018119479299\regex (UID: 00000000-00005316) "code_fix_patch_generator.exe" with parameter %TEMP%\onefile_5316_134010018119479299\tiktoken (UID: 00000000-00005316) "code_fix_patch_generator.exe" with parameter %TEMP%\onefile_5316_134010018119479299\zstandard (UID: 00000000-00005316)3a:Td42,"code_fix_patch_generator.exe" has flags like IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE "libcrypto-3.dll" has flags like IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT "libssl-3.dll" has flags like IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT "vcruntime140.dll" has flags like IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF "python3.dll" has flags like IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT "vcruntime140_1.dll" has flags like IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF "etree.pyd" has flags like IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT "_tiktoken.pyd" has flags like IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT "objectify.pyd" has flags like IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT "unicodedata.pyd" has flags like IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT "_regex.pyd" has flags like IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT "_cffi.pyd" has flags like IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT "backend_c.pyd" has flags like IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT "_decimal.pyd" has flags like IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT "pyexpat.pyd" has flags like IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT "_ssl.pyd" has flags like IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT "_cffi_backend.pyd" has flags like IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT "_lzma.pyd" has flags like IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT "_elementpath.pyd" has flags like IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT "md__mypyc.pyd" has flags like IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT "_ctypes.pyd" has flags like IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT "sax.pyd" has flags like IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT3b:Td61,"code_fix_patch_generator.exe" loaded module "API-MS-WIN-CORE-SYNCH-L1-2-0" at base 7ffb53740000 "code_fix_patch_generator.exe" loaded module "API-MS-WIN-CORE-FIBERS-L1-1-1" at base 7ffb53740000 "code_fix_patch_generator.exe" loaded module "API-MS-WIN-CORE-LOCALIZATION-L1-2-1" at base 7ffb53740000 "code_fix_patch_generator.exe" loaded module "KERNEL32" at base 7ffb56e10000 "code_fix_patch_generator.exe" loaded module "API-MS-WIN-CORE-FIBERS-L1-1-2" at base 7ffb53740000 "code_fix_patch_generator.exe" loaded module "NTDLL.DLL" at base 7ffb57340000 "code_fix_patch_generator.exe" loaded module "%WINDIR%\SYSTEM32\UXTHEME.DLL" at base 7ffb51cd0000 "code_fix_patch_generator.exe" loaded module "KERNEL32.DLL" at base 7ffb56e10000 "code_fix_patch_generator.exe" loaded module "%WINDIR%\SYSTEM32\PROPSYS.DLL" at base 7ffb4fcd0000 "code_fix_patch_generator.exe" loaded module "RPCRT4.DLL" at base 7ffb56cc0000 "code_fix_patch_generator.exe" loaded module "%WINDIR%\SYSTEM32\SHELL32.DLL" at base 7ffb54e50000 "code_fix_patch_generator.exe" loaded module "SHELL32.DLL" at base 7ffb54e50000 "code_fix_patch_generator.exe" loaded module "%WINDIR%\SYSTEM32\WINDOWS.STORAGE.DLL" at base 7ffb53ba0000 "code_fix_patch_generator.exe" loaded module "%WINDIR%\SYSTEM32\\WINDOWS.STATEREPOSITORYPS.DLL" at base 7ffb45870000 "code_fix_patch_generator.exe" loaded module "%WINDIR%\SYSTEM32\NTSHRUI.DLL" at base 7ffb3bd90000 "code_fix_patch_generator.exe" loaded module "CSCAPI.DLL" at base 7ffb45b60000 "code_fix_patch_generator.exe" loaded module "COMCTL32.DLL" at base 7ffb41ec0000 "code_fix_patch_generator.exe" loaded module "API-MS-WIN-APPMODEL-RUNTIME-L1-1-2" at base 7ffb53720000 "code_fix_patch_generator.exe" loaded module "%TEMP%\ONEFILE_5316_134010018119479299\CODE_FIX_PATCH_GENERATOR.DLL" at base 7ffb270b0000 "code_fix_patch_generator.exe" loaded module "%WINDIR%\SYSTEM32\BCRYPTPRIMITIVES.DLL" at base 7ffb53ac0000 "code_fix_patch_generator.exe" loaded module "%TEMP%\ONEFIL~1\_SOCKET.PYD" at base 7ffb3e890000 "code_fix_patch_generator.exe" loaded module "%TEMP%\ONEFIL~1\SELECT.PYD" at base 7ffb3f510000 "code_fix_patch_generator.exe" loaded module "%TEMP%\ONEFIL~1\_SSL.PYD" at base 7ffb38500000 "code_fix_patch_generator.exe" loaded module "API-MS-WIN-CORE-FILE-L2-1-4" at base 7ffb53740000 "code_fix_patch_generator.exe" loaded module "%WINDIR%\SYSTEM32\MSWSOCK.DLL" at base 7ffb52f20000 "code_fix_patch_generator.exe" loaded module "%TEMP%\ONEFIL~1\_WMI.PYD" at base 7ffb3e880000 "code_fix_patch_generator.exe" loaded module "%TEMP%\ONEFIL~1\ZSTANDARD\BACKEND_C.PYD" at base 7ffb26390000 "code_fix_patch_generator.exe" loaded module "%TEMP%\ONEFIL~1\_HASHLIB.PYD" at base 7ffb3bac0000 "code_fix_patch_generator.exe" loaded module "%TEMP%\ONEFIL~1\_QUEUE.PYD" at base 7ffb3da50000 "code_fix_patch_generator.exe" loaded module "%TEMP%\ONEFIL~1\_BZ2.PYD" at base 7ffb3b050000 "code_fix_patch_generator.exe" loaded module "%TEMP%\ONEFIL~1\_LZMA.PYD" at base 7ffb38100000 "code_fix_patch_generator.exe" loaded module "%TEMP%\ONEFIL~1\CHARSET_NORMALIZER\MD.PYD" at base 7ffb3b130000 "code_fix_patch_generator.exe" loaded module "%TEMP%\ONEFIL~1\CHARSET_NORMALIZER\MD__MYPYC.PYD" at base 7ffb34620000 "code_fix_patch_generator.exe" loaded module "%TEMP%\ONEFIL~1\UNICODEDATA.PYD" at base 7ffb26270000 "code_fix_patch_generator.exe" loaded module "%TEMP%\ONEFIL~1\_UUID.PYD" at base 7ffb3aad00003c:Td0e,"code_fix_patch_generator.exe" was detected as "Microsoft Visual C/C++" and name: "Compiler" "code_fix_patch_generator.exe" was detected as "Microsoft Linker" and name: "Linker" "libcrypto-3.dll" was detected as "Microsoft Visual C/C++" and name: "Compiler" "libcrypto-3.dll" was detected as "Microsoft Linker" and name: "Linker" "libssl-3.dll" was detected as "Microsoft Visual C/C++" and name: "Compiler" "libssl-3.dll" was detected as "Microsoft Linker" and name: "Linker" "vcruntime140.dll" was detected as "Microsoft Visual C/C++" and name: "Compiler" "vcruntime140.dll" was detected as "Microsoft Linker" and name: "Linker" "python3.dll" was detected as "Microsoft Visual C/C++" and name: "Compiler" "python3.dll" was detected as "Microsoft Linker" and name: "Linker" "vcruntime140_1.dll" was detected as "Microsoft Visual C/C++" and name: "Compiler" "vcruntime140_1.dll" was detected as "Microsoft Linker" and name: "Linker" "etree.pyd" was detected as "Microsoft Visual C/C++" and name: "Compiler" "etree.pyd" was detected as "Microsoft Linker" and name: "Linker" "_tiktoken.pyd" was detected as "Microsoft Visual C/C++" and name: "Compiler" "_tiktoken.pyd" was detected as "Microsoft Linker" and name: "Linker" "objectify.pyd" was detected as "Microsoft Visual C/C++" and name: "Compiler" "objectify.pyd" was detected as "Microsoft Linker" and name: "Linker" "unicodedata.pyd" was detected as "Microsoft Visual C/C++" and name: "Compiler" "unicodedata.pyd" was detected as "Microsoft Linker" and name: "Linker" "_regex.pyd" was detected as "Microsoft Visual C/C++" and name: "Compiler" "_regex.pyd" was detected as "Microsoft Linker" and name: "Linker" "_cffi.pyd" was detected as "Microsoft Visual C/C++" and name: "Compiler" "_cffi.pyd" was detected as "Microsoft Linker" and name: "Linker" "backend_c.pyd" was detected as "Microsoft Visual C/C++" and name: "Compiler" "backend_c.pyd" was detected as "Microsoft Linker" and name: "Linker" "_decimal.pyd" was detected as "Microsoft Visual C/C++" and name: "Compiler" "_decimal.pyd" was detected as "Microsoft Linker" and name: "Linker" "pyexpat.pyd" was detected as "Microsoft Visual C/C++" and name: "Compiler" "pyexpat.pyd" was detected as "Microsoft Linker" and name: "Linker" "_ssl.pyd" was detected as "Microsoft Visual C/C++" and name: "Compiler" "_ssl.pyd" was detected as "Microsoft Linker" and name: "Linker" "_cffi_backend.pyd" was detected as "Microsoft Visual C/C++" and name: "Compiler" "_cffi_backend.pyd" was detected as "Microsoft Linker" and name: "Linker" "_lzma.pyd" was detected as "Microsoft Visual C/C++" and name: "Compiler" "_lzma.pyd" was detected as "Microsoft Linker" and name: "Linker" "_elementpath.pyd" was detected as "Microsoft Visual C/C++" and name: "Compiler" "_elementpath.pyd" was detected as "Microsoft Linker" and name: "Linker" "md__mypyc.pyd" was detected as "Microsoft Visual C/C++" and name: "Compiler" "md__mypyc.pyd" was detected as "Microsoft Linker" and name: "Linker" "_ctypes.pyd" was detected as "Microsoft Visual C/C++" and name: "Compiler" "_ctypes.pyd" was detected as "Microsoft Linker" and name: "Linker" "sax.pyd" was detected as "Microsoft Visual C/C++" and name: "Compiler" "sax.pyd" was detected as "Microsoft Linker" and name: "Linker"3d:T652,"code_fix_patch_generator.exe" touched "Search Gatherer Notification" (Path: "HKCU\CLSID\{9E175B6D-F52A-11D8-B9A5-505054503030}") "code_fix_patch_generator.exe" touched "Computer" (Path: "HKCU\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\SHELLFOLDER") "code_fix_patch_generator.exe" touched "Memory Mapped Cache Mgr" (Path: "HKCU\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}\TREATAS") "code_fix_patch_generator.exe" touched "Property System Both Class Factory" (Path: "HKCU\CLSID\{76765B11-3F95-4AF2-AC9D-EA55D8994F1A}\TREATAS") "code_fix_patch_generator.exe" touched "Sync root manager" (Path: "HKCU\CLSID\{F324E4F9-8496-40B2-A1FF-9617C1C9AFFE}\TREATAS") "code_fix_patch_generator.exe" touched "Recycle Bin Manager" (Path: "HKCU\CLSID\{4A04656D-52AA-49DE-8A09-CB178760E748}\INSTANCE") "code_fix_patch_generator.exe" touched "ShellItem Shell Namespace helper" (Path: "HKCU\CLSID\{9AC9FBE1-E0A2-4AD6-B4EE-E212013EA917}\TREATAS") "code_fix_patch_generator.exe" touched "Shell Copy Hook" (Path: "HKLM\SOFTWARE\CLASSES\CLSID\{217FC9C0-3AEA-1069-A2DB-08002B30309D}\INPROCSERVER32") "code_fix_patch_generator.exe" touched "Shell extensions for sharing" (Path: "HKCU\CLSID\{40DD6E20-7C17-11CE-A804-00AA003CA9F6}\INSTANCE") "code_fix_patch_generator.exe" touched "Share Manager" (Path: "HKCU\CLSID\{EDB5F444-CB8D-445A-A523-EC5AB6EA33C7}\TREATAS") "code_fix_patch_generator.exe" touched "Inplace Share Engine" (Path: "HKCU\CLSID\{6311429E-2F1A-4777-880F-C7289FD10169}\TREATAS") "code_fix_patch_generator.exe" touched "Sharing Configuration Manager" (Path: "HKCU\CLSID\{49F371E1-8C5C-4D9C-9A3B-54A6827F513C}\TREATAS")3e:T62e,"code_fix_patch_generator.exe" has Debug data directory "IMAGE_DIRECTORY_ENTRY_DEBUG" "libcrypto-3.dll" has Debug data directory "IMAGE_DIRECTORY_ENTRY_DEBUG" "libssl-3.dll" has Debug data directory "IMAGE_DIRECTORY_ENTRY_DEBUG" "vcruntime140.dll" has Debug data directory "IMAGE_DIRECTORY_ENTRY_DEBUG" "python3.dll" has Debug data directory "IMAGE_DIRECTORY_ENTRY_DEBUG" "vcruntime140_1.dll" has Debug data directory "IMAGE_DIRECTORY_ENTRY_DEBUG" "etree.pyd" has Debug data directory "IMAGE_DIRECTORY_ENTRY_DEBUG" "_tiktoken.pyd" has Debug data directory "IMAGE_DIRECTORY_ENTRY_DEBUG" "objectify.pyd" has Debug data directory "IMAGE_DIRECTORY_ENTRY_DEBUG" "unicodedata.pyd" has Debug data directory "IMAGE_DIRECTORY_ENTRY_DEBUG" "_regex.pyd" has Debug data directory "IMAGE_DIRECTORY_ENTRY_DEBUG" "_cffi.pyd" has Debug data directory "IMAGE_DIRECTORY_ENTRY_DEBUG" "backend_c.pyd" has Debug data directory "IMAGE_DIRECTORY_ENTRY_DEBUG" "_decimal.pyd" has Debug data directory "IMAGE_DIRECTORY_ENTRY_DEBUG" "pyexpat.pyd" has Debug data directory "IMAGE_DIRECTORY_ENTRY_DEBUG" "_ssl.pyd" has Debug data directory "IMAGE_DIRECTORY_ENTRY_DEBUG" "_cffi_backend.pyd" has Debug data directory "IMAGE_DIRECTORY_ENTRY_DEBUG" "_lzma.pyd" has Debug data directory "IMAGE_DIRECTORY_ENTRY_DEBUG" "_elementpath.pyd" has Debug data directory "IMAGE_DIRECTORY_ENTRY_DEBUG" "md__mypyc.pyd" has Debug data directory "IMAGE_DIRECTORY_ENTRY_DEBUG" "_ctypes.pyd" has Debug data directory "IMAGE_DIRECTORY_ENTRY_DEBUG" "sax.pyd" has Debug data directory "IMAGE_DIRECTORY_ENTRY_DEBUG"3f:T4e9,"code_fix_patch_generator.exe" has an executable section named ".text" "libcrypto-3.dll" has an executable section named ".text" "libssl-3.dll" has an executable section named ".text" "vcruntime140.dll" has an executable section named ".text" "vcruntime140.dll" has an executable section named "fothk" "vcruntime140_1.dll" has an executable section named ".text" "etree.pyd" has an executable section named ".text" "_tiktoken.pyd" has an executable section named ".text" "objectify.pyd" has an executable section named ".text" "unicodedata.pyd" has an executable section named ".text" "_regex.pyd" has an executable section named ".text" "_cffi.pyd" has an executable section named ".text" "backend_c.pyd" has an executable section named ".text" "_decimal.pyd" has an executable section named ".text" "pyexpat.pyd" has an executable section named ".text" "_ssl.pyd" has an executable section named ".text" "_cffi_backend.pyd" has an executable section named ".text" "_lzma.pyd" has an executable section named ".text" "_elementpath.pyd" has an executable section named ".text" "md__mypyc.pyd" has an executable section named ".text" "_ctypes.pyd" has an executable section named ".text" "sax.pyd" has an executable section named ".text"40:T4cc,"code_fix_patch_generator.exe" has an writable section named ".data" "code_fix_patch_generator.exe" has an writable section named ".fptable" "libcrypto-3.dll" has an writable section named ".data" "libssl-3.dll" has an writable section named ".data" "vcruntime140.dll" has an writable section named ".data" "vcruntime140_1.dll" has an writable section named ".data" "etree.pyd" has an writable section named ".data" "_tiktoken.pyd" has an writable section named ".data" "objectify.pyd" has an writable section named ".data" "unicodedata.pyd" has an writable section named ".data" "_regex.pyd" has an writable section named ".data" "_cffi.pyd" has an writable section named ".data" "backend_c.pyd" has an writable section named ".data" "_decimal.pyd" has an writable section named ".data" "pyexpat.pyd" has an writable section named ".data" "_ssl.pyd" has an writable section named ".data" "_cffi_backend.pyd" has an writable section named ".data" "_lzma.pyd" has an writable section named ".data" "_elementpath.pyd" has an writable section named ".data" "md__mypyc.pyd" has an writable section named ".data" "_ctypes.pyd" has an writable section named ".data" "sax.pyd" has an writable section named ".data"41:T2bcd,"code_fix_patch_generator.exe" file has an entrypoint instructions - "sub rsp, 0x28,call 0x14000d850,add rsp, 0x28,jmp 0x14000d480,int3 ,int3 ,sub rsp, 0x28,call 0x14000dec4,test eax, eax,je 0x14000d63e,mov rax, qword ptr gs:[0x30],mov rcx, qword ptr [rax + 8],jmp 0x14000d631,cmp rcx, rax,je 0x14000d645,xor eax, eax,lock cmpxchg qword ptr [rip + 0x25a3c], rcx,jne 0x14000d62c,xor al, al,add rsp, 0x28,ret ,mov al, 1,jmp 0x14000d640,int3 ,int3 ,int3 ,sub rsp, 0x28,test ecx, ecx,jne 0x14000d65b,mov byte ptr [rip + 0x25a25], 1,call 0x14000dbf8," "libcrypto-3.dll" file has an entrypoint instructions - "jmp 0x18036f010,jmp 0x1801ed4e0,jmp 0x1801901d0,jmp 0x18021df10,jmp 0x1802ea8a0,jmp 0x1802bbb10,jmp 0x18029e0b0,jmp 0x1802855d0,jmp 0x1800b3a30,jmp 0x1802eeda0,jmp 0x180272e50,jmp 0x180246e30,jmp 0x18022cce0,jmp 0x18022e220,jmp 0x18035fad0,jmp 0x1800f0350,jmp 0x1802967b0,jmp 0x18019b780,jmp 0x1801ec850,jmp 0x180210310," "libssl-3.dll" file has an entrypoint instructions - "jmp 0x18007ec0c,jmp 0x18001e4b0,jmp 0x180024060,jmp 0x1800096a0,jmp 0x180065980,jmp 0x18002fa60,jmp 0x18007f5f0,jmp 0x180074dc0,jmp 0x1800123b0,jmp 0x180029150,jmp 0x180037ea0,jmp 0x18002d4e0,jmp 0x18001b800,jmp 0x180051e10,jmp 0x180024f20,jmp 0x1800662d0,jmp 0x18006e620,jmp 0x180013e00,jmp 0x18007f700,jmp 0x180054090," "vcruntime140.dll" file has an entrypoint instructions - "mov qword ptr [rsp + 8], rbx,mov qword ptr [rsp + 0x10], rsi,push rdi,sub rsp, 0x20,mov rdi, r8,mov ebx, edx,mov rsi, rcx,cmp edx, 1,jne 0x18000f6b1,call 0x180010d5c,mov r8, rdi,mov edx, ebx,mov rcx, rsi,mov rbx, qword ptr [rsp + 0x30],mov rsi, qword ptr [rsp + 0x38],add rsp, 0x20,pop rdi,jmp 0x18000f618,int3 ,int3 ,int3 ,int3 ,int3 ,int3 ,int3 ,int3 ,int3 ,nop word ptr [rax + rax],int3 ,int3 ,int3 ,int3 ,int3 ,int3 ,nop word ptr [rax + rax],int3 ,int3 ,int3 ,int3 ," "python3.dll" file has an entrypoint instructions - "pop r10,nop ,add byte ptr [rbx], al,add byte ptr [rax], al,add byte ptr [rax + rax], al,add byte ptr [rax], al," "vcruntime140_1.dll" file has an entrypoint instructions - "mov qword ptr [rsp + 8], rbx,mov qword ptr [rsp + 0x10], rsi,push rdi,sub rsp, 0x20,mov rdi, r8,mov ebx, edx,mov rsi, rcx,cmp edx, 1,jne 0x1800040c1,call 0x18000467c,mov r8, rdi,mov edx, ebx,mov rcx, rsi,mov rbx, qword ptr [rsp + 0x30],mov rsi, qword ptr [rsp + 0x38],add rsp, 0x20,pop rdi,jmp 0x180004030,int3 ,int3 ,int3 ,int3 ,int3 ,int3 ,int3 ,int3 ,int3 ,nop word ptr [rax + rax],sub rsp, 0x28,mov qword ptr [rsp + 0x30], rcx,mov qword ptr [rsp + 0x38], rdx,mov dword ptr [rsp + 0x40], r8d," "etree.pyd" file has an entrypoint instructions - "mov qword ptr [rsp + 8], rbx,mov qword ptr [rsp + 0x10], rsi,push rdi,sub rsp, 0x20,mov rdi, r8,mov ebx, edx,mov rsi, rcx,cmp edx, 1,jne 0x180243cb5,call 0x180244060,mov r8, rdi,mov edx, ebx,mov rcx, rsi,mov rbx, qword ptr [rsp + 0x30],mov rsi, qword ptr [rsp + 0x38],add rsp, 0x20,pop rdi,jmp 0x180243b6c,int3 ,int3 ,int3 ,sub rsp, 0x28,mov r8, qword ptr [r9 + 0x38],mov rcx, rdx,mov rdx, r9,call 0x180243cf4,mov eax, 1,add rsp, 0x28,ret ,int3 ,int3 ,int3 ,push rbx," "_tiktoken.pyd" file has an entrypoint instructions - "mov qword ptr [rsp + 8], rbx,mov qword ptr [rsp + 0x10], rsi,push rdi,sub rsp, 0x20,mov rdi, r8,mov ebx, edx,mov rsi, rcx,cmp edx, 1,jne 0x18012e191,call 0x18012e1b8,mov r8, rdi,mov edx, ebx,mov rcx, rsi,mov rbx, qword ptr [rsp + 0x30],mov rsi, qword ptr [rsp + 0x38],add rsp, 0x20,pop rdi,jmp 0x18012e048,int3 ,int3 ,int3 ,jmp 0x18012e7c0,int3 ,int3 ,int3 ,mov qword ptr [rsp + 0x18], rbx,push rbp,mov rbp, rsp,sub rsp, 0x30,mov rax, qword ptr [rip + 0xcb074]," "objectify.pyd" file has an entrypoint instructions - "mov qword ptr [rsp + 8], rbx,mov qword ptr [rsp + 0x10], rsi,push rdi,sub rsp, 0x20,mov rdi, r8,mov ebx, edx,mov rsi, rcx,cmp edx, 1,jne 0x18008bb45,call 0x18008bef0,mov r8, rdi,mov edx, ebx,mov rcx, rsi,mov rbx, qword ptr [rsp + 0x30],mov rsi, qword ptr [rsp + 0x38],add rsp, 0x20,pop rdi,jmp 0x18008b9fc,int3 ,int3 ,int3 ,push rbx,sub rsp, 0x20,mov rbx, rcx,xor ecx, ecx,call qword ptr [rip + 0x16553],mov rcx, rbx,call qword ptr [rip + 0x16542],call qword ptr [rip + 0x164b4],mov rcx, rax," "unicodedata.pyd" file has an entrypoint instructions - "mov qword ptr [rsp + 8], rbx,mov qword ptr [rsp + 0x10], rsi,push rdi,sub rsp, 0x20,mov rdi, r8,mov ebx, edx,mov rsi, rcx,cmp edx, 1,jne 0x180002a51,call 0x180002bec,mov r8, rdi,mov edx, ebx,mov rcx, rsi,mov rbx, qword ptr [rsp + 0x30],mov rsi, qword ptr [rsp + 0x38],add rsp, 0x20,pop rdi,jmp 0x180002908,int3 ,int3 ,int3 ,push rbx,sub rsp, 0x20,mov rbx, rcx,xor ecx, ecx,call qword ptr [rip + 0x25d7],mov rcx, rbx,call qword ptr [rip + 0x25d6],call qword ptr [rip + 0x25c0],mov rcx, rax," "_regex.pyd" file has an entrypoint instructions - "mov qword ptr [rsp + 8], rbx,mov qword ptr [rsp + 0x10], rsi,push rdi,sub rsp, 0x20,mov rdi, r8,mov ebx, edx,mov rsi, rcx,cmp edx, 1,jne 0x180028565,call 0x180028700,mov r8, rdi,mov edx, ebx,mov rcx, rsi,mov rbx, qword ptr [rsp + 0x30],mov rsi, qword ptr [rsp + 0x38],add rsp, 0x20,pop rdi,jmp 0x18002841c,int3 ,int3 ,int3 ,push rbx,sub rsp, 0x20,mov rbx, rcx,xor ecx, ecx,call qword ptr [rip + 0x1a93],mov rcx, rbx,call qword ptr [rip + 0x1a82],call qword ptr [rip + 0x1a8c],mov rcx, rax," "_cffi.pyd" file has an entrypoint instructions - "mov qword ptr [rsp + 8], rbx,mov qword ptr [rsp + 0x10], rsi,push rdi,sub rsp, 0x20,mov rdi, r8,mov ebx, edx,mov rsi, rcx,cmp edx, 1,jne 0x18008c605,call 0x18008c624,mov r8, rdi,mov edx, ebx,mov rcx, rsi,mov rbx, qword ptr [rsp + 0x30],mov rsi, qword ptr [rsp + 0x38],add rsp, 0x20,pop rdi,jmp 0x18008c4bc,int3 ,int3 ,int3 ,mov qword ptr [rsp + 0x18], rbx,push rbp,mov rbp, rsp,sub rsp, 0x30,mov rax, qword ptr [rip + 0x139c8],movabs rbx, 0x2b992ddfa232,cmp rax, rbx,jne 0x18008c6be," "backend_c.pyd" file has an entrypoint instructions - "mov qword ptr [rsp + 8], rbx,mov qword ptr [rsp + 0x10], rsi,push rdi,sub rsp, 0x20,mov rdi, r8,mov ebx, edx,mov rsi, rcx,cmp edx, 1,jne 0x18006e7c5,call 0x18006e7e4,mov r8, rdi,mov edx, ebx,mov rcx, rsi,mov rbx, qword ptr [rsp + 0x30],mov rsi, qword ptr [rsp + 0x38],add rsp, 0x20,pop rdi,jmp 0x18006e67c,int3 ,int3 ,int3 ,mov qword ptr [rsp + 0x18], rbx,push rbp,mov rbp, rsp,sub rsp, 0x30,mov rax, qword ptr [rip + 0xd808],movabs rbx, 0x2b992ddfa232,cmp rax, rbx,jne 0x18006e87e," "_decimal.pyd" file has an entrypoint instructions - "mov qword ptr [rsp + 8], rbx,mov qword ptr [rsp + 0x10], rsi,push rdi,sub rsp, 0x20,mov rdi, r8,mov ebx, edx,mov rsi, rcx,cmp edx, 1,jne 0x18002063d,call 0x18002065c,mov r8, rdi,mov edx, ebx,mov rcx, rsi,mov rbx, qword ptr [rsp + 0x30],mov rsi, qword ptr [rsp + 0x38],add rsp, 0x20,pop rdi,jmp 0x1800204f4,int3 ,int3 ,int3 ,mov qword ptr [rsp + 0x18], rbx,push rbp,mov rbp, rsp,sub rsp, 0x30,mov rax, qword ptr [rip + 0x16990],movabs rbx, 0x2b992ddfa232,cmp rax, rbx,jne 0x1800206f3," "pyexpat.pyd" file has an entrypoint instructions - "mov qword ptr [rsp + 8], rbx,mov qword ptr [rsp + 0x10], rsi,push rdi,sub rsp, 0x20,mov rdi, r8,mov ebx, edx,mov rsi, rcx,cmp edx, 1,jne 0x18000fd71,call 0x18000ff0c,mov r8, rdi,mov edx, ebx,mov rcx, rsi,mov rbx, qword ptr [rsp + 0x30],mov rsi, qword ptr [rsp + 0x38],add rsp, 0x20,pop rdi,jmp 0x18000fc28,int3 ,int3 ,int3 ,push rbx,sub rsp, 0x20,mov rbx, rcx,xor ecx, ecx,call qword ptr [rip + 0x122c7],mov rcx, rbx,call qword ptr [rip + 0x12276],call qword ptr [rip + 0x122b0],mov rcx, rax," "_ssl.pyd" file has an entrypoint instructions - "mov qword ptr [rsp + 8], rbx,mov qword ptr [rsp + 0x10], rsi,push rdi,sub rsp, 0x20,mov rdi, r8,mov ebx, edx,mov rsi, rcx,cmp edx, 1,jne 0x180002d01,call 0x180002d20,mov r8, rdi,mov edx, ebx,mov rcx, rsi,mov rbx, qword ptr [rsp + 0x30],mov rsi, qword ptr [rsp + 0x38],add rsp, 0x20,pop rdi,jmp 0x180002bb8,int3 ,int3 ,int3 ,mov qword ptr [rsp + 0x18], rbx,push rbp,mov rbp, rsp,sub rsp, 0x30,mov rax, qword ptr [rip + 0x1d2cc],movabs rbx, 0x2b992ddfa232,cmp rax, rbx,jne 0x180002db7," "_cffi_backend.pyd" file has an entrypoint instructions - "mov qword ptr [rsp + 8], rbx,mov qword ptr [rsp + 0x10], rsi,push rdi,sub rsp, 0x20,mov rdi, r8,mov ebx, edx,mov rsi, rcx,cmp edx, 1,jne 0x18001a981,call 0x18001a9a0,mov r8, rdi,mov edx, ebx,mov rcx, rsi,mov rbx, qword ptr [rsp + 0x30],mov rsi, qword ptr [rsp + 0x38],add rsp, 0x20,pop rdi,jmp 0x18001a838,int3 ,int3 ,int3 ,mov qword ptr [rsp + 0x18], rbx,push rbp,mov rbp, rsp,sub rsp, 0x30,mov rax, qword ptr [rip + 0xe64c],movabs rbx, 0x2b992ddfa232,cmp rax, rbx,jne 0x18001aa37," "_lzma.pyd" file has an entrypoint instructions - "mov qword ptr [rsp + 8], rbx,mov qword ptr [rsp + 0x10], rsi,push rdi,sub rsp, 0x20,mov rdi, r8,mov ebx, edx,mov rsi, rcx,cmp edx, 1,jne 0x180013281,call 0x18001341c,mov r8, rdi,mov edx, ebx,mov rcx, rsi,mov rbx, qword ptr [rsp + 0x30],mov rsi, qword ptr [rsp + 0x38],add rsp, 0x20,pop rdi,jmp 0x180013138,int3 ,int3 ,int3 ,push rbx,sub rsp, 0x20,mov rbx, rcx,xor ecx, ecx,call qword ptr [rip + 0x3daf],mov rcx, rbx,call qword ptr [rip + 0x3dae],call qword ptr [rip + 0x3d98],mov rcx, rax," "_elementpath.pyd" file has an entrypoint instructions - "mov qword ptr [rsp + 8], rbx,mov qword ptr [rsp + 0x10], rsi,push rdi,sub rsp, 0x20,mov rdi, r8,mov ebx, edx,mov rsi, rcx,cmp edx, 1,jne 0x18001a525,call 0x18001a6c0,mov r8, rdi,mov edx, ebx,mov rcx, rsi,mov rbx, qword ptr [rsp + 0x30],mov rsi, qword ptr [rsp + 0x38],add rsp, 0x20,pop rdi,jmp 0x18001a3dc,int3 ,int3 ,int3 ,push rbx,sub rsp, 0x20,mov rbx, rcx,xor ecx, ecx,call qword ptr [rip + 0x1ad3],mov rcx, rbx,call qword ptr [rip + 0x1ac2],call qword ptr [rip + 0x1acc],mov rcx, rax," "md__mypyc.pyd" file has an entrypoint instructions - "mov qword ptr [rsp + 8], rbx,mov qword ptr [rsp + 0x10], rsi,push rdi,sub rsp, 0x20,mov rdi, r8,mov ebx, edx,mov rsi, rcx,cmp edx, 1,jne 0x180014585,call 0x180014720,mov r8, rdi,mov edx, ebx,mov rcx, rsi,mov rbx, qword ptr [rsp + 0x30],mov rsi, qword ptr [rsp + 0x38],add rsp, 0x20,pop rdi,jmp 0x18001443c,int3 ,int3 ,int3 ,push rbx,sub rsp, 0x20,mov rbx, rcx,xor ecx, ecx,call qword ptr [rip + 0x1a73],mov rcx, rbx,call qword ptr [rip + 0x1a62],call qword ptr [rip + 0x1a6c],mov rcx, rax," "_ctypes.pyd" file has an entrypoint instructions - "mov qword ptr [rsp + 8], rbx,mov qword ptr [rsp + 0x10], rsi,push rdi,sub rsp, 0x20,mov rdi, r8,mov ebx, edx,mov rsi, rcx,cmp edx, 1,jne 0x180005f71,call 0x18000610c,mov r8, rdi,mov edx, ebx,mov rcx, rsi,mov rbx, qword ptr [rsp + 0x30],mov rsi, qword ptr [rsp + 0x38],add rsp, 0x20,pop rdi,jmp 0x180005e28,int3 ,int3 ,int3 ,push rbx,sub rsp, 0x20,mov rbx, rcx,xor ecx, ecx,call qword ptr [rip + 0xb0b7],mov rcx, rbx,call qword ptr [rip + 0xb0a6],call qword ptr [rip + 0xb0b0],mov rcx, rax," "sax.pyd" file has an entrypoint instructions - "mov qword ptr [rsp + 8], rbx,mov qword ptr [rsp + 0x10], rsi,push rdi,sub rsp, 0x20,mov rdi, r8,mov ebx, edx,mov rsi, rcx,cmp edx, 1,jne 0x180015c15,call 0x180015db0,mov r8, rdi,mov edx, ebx,mov rcx, rsi,mov rbx, qword ptr [rsp + 0x30],mov rsi, qword ptr [rsp + 0x38],add rsp, 0x20,pop rdi,jmp 0x180015acc,int3 ,int3 ,int3 ,push rbx,sub rsp, 0x20,mov rbx, rcx,xor ecx, ecx,call qword ptr [rip + 0x13e3],mov rcx, rbx,call qword ptr [rip + 0x13d2],call qword ptr [rip + 0x13dc],mov rcx, rax,"42:T460,"code_fix_patch_generator.exe" has high imagebase "0x140000000" "libcrypto-3.dll" has high imagebase "0x180000000" "libssl-3.dll" has high imagebase "0x180000000" "vcruntime140.dll" has high imagebase "0x180000000" "python3.dll" has high imagebase "0x180000000" "vcruntime140_1.dll" has high imagebase "0x180000000" "etree.pyd" has high imagebase "0x180000000" "_tiktoken.pyd" has high imagebase "0x180000000" "objectify.pyd" has high imagebase "0x180000000" "unicodedata.pyd" has high imagebase "0x180000000" "_regex.pyd" has high imagebase "0x180000000" "_cffi.pyd" has high imagebase "0x180000000" "backend_c.pyd" has high imagebase "0x180000000" "_decimal.pyd" has high imagebase "0x180000000" "pyexpat.pyd" has high imagebase "0x180000000" "_ssl.pyd" has high imagebase "0x180000000" "_cffi_backend.pyd" has high imagebase "0x180000000" "_lzma.pyd" has high imagebase "0x180000000" "_elementpath.pyd" has high imagebase "0x180000000" "md__mypyc.pyd" has high imagebase "0x180000000" "_ctypes.pyd" has high imagebase "0x180000000" "sax.pyd" has high imagebase "0x180000000"43:T1c06,"python312.dll" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 7 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\python312.dll]- [targetUID: 00000000-00005316] "code_fix_patch_generator.dll" has type "PE32+ executable (DLL) (console) x86-64 for MS Windows 7 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\code_fix_patch_generator.dll]- [targetUID: 00000000-00005316] "libcrypto-3.dll" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 8 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\libcrypto-3.dll]- [targetUID: 00000000-00005316] "libssl-3.dll" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 8 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\libssl-3.dll]- [targetUID: 00000000-00005316] "cacert.pem" has type "ASCII text"- Location: [%TEMP%\onefile_5316_134010018119479299\certifi\cacert.pem]- [targetUID: 00000000-00005316] "vcruntime140.dll" has type "PE32+ executable (DLL) (console) x86-64 for MS Windows 8 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\vcruntime140.dll]- [targetUID: 00000000-00005316] "python3.dll" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 2 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\python3.dll]- [targetUID: 00000000-00005316] "vcruntime140_1.dll" has type "PE32+ executable (DLL) (console) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\vcruntime140_1.dll]- [targetUID: 00000000-00005316] "_rust.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 5 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\cryptography\hazmat\bindings\_rust.pyd]- [targetUID: 00000000-00005316] "primp.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 5 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\primp\primp.pyd]- [targetUID: 00000000-00005316] "etree.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\lxml\etree.pyd]- [targetUID: 00000000-00005316] "_tiktoken.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 5 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\tiktoken\_tiktoken.pyd]- [targetUID: 00000000-00005316] "objectify.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\lxml\objectify.pyd]- [targetUID: 00000000-00005316] "unicodedata.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\unicodedata.pyd]- [targetUID: 00000000-00005316] "_regex.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\regex\_regex.pyd]- [targetUID: 00000000-00005316] "_cffi.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\zstandard\_cffi.pyd]- [targetUID: 00000000-00005316] "backend_c.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\zstandard\backend_c.pyd]- [targetUID: 00000000-00005316] "_decimal.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\_decimal.pyd]- [targetUID: 00000000-00005316] "pyexpat.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\pyexpat.pyd]- [targetUID: 00000000-00005316] "_ssl.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\_ssl.pyd]- [targetUID: 00000000-00005316] "_cffi_backend.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\_cffi_backend.pyd]- [targetUID: 00000000-00005316] "_lzma.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\_lzma.pyd]- [targetUID: 00000000-00005316] "_elementpath.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\lxml\_elementpath.pyd]- [targetUID: 00000000-00005316] "md__mypyc.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\charset_normalizer\md__mypyc.pyd]- [targetUID: 00000000-00005316] "_ctypes.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\_ctypes.pyd]- [targetUID: 00000000-00005316] "sax.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\lxml\sax.pyd]- [targetUID: 00000000-00005316] "builder.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\lxml\builder.pyd]- [targetUID: 00000000-00005316] "_bz2.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\_bz2.pyd]- [targetUID: 00000000-00005316] "_socket.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\_socket.pyd]- [targetUID: 00000000-00005316] "_asyncio.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\_asyncio.pyd]- [targetUID: 00000000-00005316] "_hashlib.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\_hashlib.pyd]- [targetUID: 00000000-00005316] "_overlapped.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\_overlapped.pyd]- [targetUID: 00000000-00005316] "_wmi.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\_wmi.pyd]- [targetUID: 00000000-00005316] "_multiprocessing.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\_multiprocessing.pyd]- [targetUID: 00000000-00005316] "_queue.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\_queue.pyd]- [targetUID: 00000000-00005316] "select.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\select.pyd]- [targetUID: 00000000-00005316] "_uuid.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\_uuid.pyd]- [targetUID: 00000000-00005316] "md.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\charset_normalizer\md.pyd]- [targetUID: 00000000-00005316]44:Ta36,"code_fix_patch_generator.exe" (Access type: "OPEN"; Path: "HKCU\CLSID\{9E175B6D-F52A-11D8-B9A5-505054503030}"; Key: ""; Value: "") "code_fix_patch_generator.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\CLASSES\CLSID\{9E175B6D-F52A-11D8-B9A5-505054503030}"; Key: ""; Value: "") "code_fix_patch_generator.exe" (Access type: "OPEN"; Path: "HKCU\CLSID\{9E175B6D-F52A-11D8-B9A5-505054503030}\TREATAS"; Key: ""; Value: "") "code_fix_patch_generator.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\CLASSES\CLSID\{9E175B6D-F52A-11D8-B9A5-505054503030}\TREATAS"; Key: ""; Value: "") "code_fix_patch_generator.exe" (Access type: "OPEN"; Path: "HKCU\CLSID\{9E175B6D-F52A-11D8-B9A5-505054503030}\INPROCSERVER32"; Key: ""; Value: "") "code_fix_patch_generator.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\CLASSES\CLSID\{9E175B6D-F52A-11D8-B9A5-505054503030}\INPROCSERVER32"; Key: ""; Value: "") "code_fix_patch_generator.exe" (Access type: "OPEN"; Path: "HKCU\CLSID\{9E175B6D-F52A-11D8-B9A5-505054503030}\INPROCHANDLER32"; Key: ""; Value: "") "code_fix_patch_generator.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\CLASSES\CLSID\{9E175B6D-F52A-11D8-B9A5-505054503030}\INPROCHANDLER32"; Key: ""; Value: "") "code_fix_patch_generator.exe" (Access type: "OPEN"; Path: "HKCU\CLSID\{9E175B6D-F52A-11D8-B9A5-505054503030}\INPROCHANDLER"; Key: ""; Value: "") "code_fix_patch_generator.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\CLASSES\CLSID\{9E175B6D-F52A-11D8-B9A5-505054503030}\INPROCHANDLER"; Key: ""; Value: "") "code_fix_patch_generator.exe" (Access type: "OPEN"; Path: "HKCU\CLSID\{9E175B6D-F52A-11D8-B9A5-505054503030}\PROGID"; Key: ""; Value: "") "code_fix_patch_generator.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\CLASSES\CLSID\{9E175B6D-F52A-11D8-B9A5-505054503030}\PROGID"; Key: ""; Value: "") "code_fix_patch_generator.exe" (Access type: "OPEN"; Path: "HKCU\WOW6432NODE\CLSID\{9E175B6D-F52A-11D8-B9A5-505054503030}"; Key: ""; Value: "") "code_fix_patch_generator.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{9E175B6D-F52A-11D8-B9A5-505054503030}"; Key: ""; Value: "") "code_fix_patch_generator.exe" (Access type: "OPEN"; Path: "HKCU\WOW6432NODE\CLSID\{9E175B6D-F52A-11D8-B9A5-505054503030}\PROGID"; Key: ""; Value: "") "code_fix_patch_generator.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{9E175B6D-F52A-11D8-B9A5-505054503030}\PROGID"; Key: ""; Value: "") "code_fix_patch_generator.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\DEVICECLASSES\{53F5630D-B6BF-11D0-94F2-00A0C91EFB8B}"; Key: ""; Value: "")45:T12c3,"python312.dll" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 7 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\python312.dll]- [targetUID: 00000000-00005316] "code_fix_patch_generator.dll" has type "PE32+ executable (DLL) (console) x86-64 for MS Windows 7 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\code_fix_patch_generator.dll]- [targetUID: 00000000-00005316] "libcrypto-3.dll" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 8 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\libcrypto-3.dll]- [targetUID: 00000000-00005316] "libssl-3.dll" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 8 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\libssl-3.dll]- [targetUID: 00000000-00005316] "vcruntime140.dll" has type "PE32+ executable (DLL) (console) x86-64 for MS Windows 8 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\vcruntime140.dll]- [targetUID: 00000000-00005316] "python3.dll" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 2 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\python3.dll]- [targetUID: 00000000-00005316] "vcruntime140_1.dll" has type "PE32+ executable (DLL) (console) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\vcruntime140_1.dll]- [targetUID: 00000000-00005316] "_rust.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 5 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\cryptography\hazmat\bindings\_rust.pyd]- [targetUID: 00000000-00005316] "primp.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 5 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\primp\primp.pyd]- [targetUID: 00000000-00005316] "etree.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\lxml\etree.pyd]- [targetUID: 00000000-00005316] "_tiktoken.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 5 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\tiktoken\_tiktoken.pyd]- [targetUID: 00000000-00005316] "objectify.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\lxml\objectify.pyd]- [targetUID: 00000000-00005316] "unicodedata.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\unicodedata.pyd]- [targetUID: 00000000-00005316] "_regex.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\regex\_regex.pyd]- [targetUID: 00000000-00005316] "_cffi.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\zstandard\_cffi.pyd]- [targetUID: 00000000-00005316] "backend_c.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\zstandard\backend_c.pyd]- [targetUID: 00000000-00005316] "_decimal.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\_decimal.pyd]- [targetUID: 00000000-00005316] "pyexpat.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\pyexpat.pyd]- [targetUID: 00000000-00005316] "_ssl.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\_ssl.pyd]- [targetUID: 00000000-00005316] "_cffi_backend.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\_cffi_backend.pyd]- [targetUID: 00000000-00005316] "_lzma.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\_lzma.pyd]- [targetUID: 00000000-00005316] "_elementpath.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\lxml\_elementpath.pyd]- [targetUID: 00000000-00005316] "md__mypyc.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\charset_normalizer\md__mypyc.pyd]- [targetUID: 00000000-00005316] "_ctypes.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\_ctypes.pyd]- [targetUID: 00000000-00005316] "sax.pyd" has type "PE32+ executable (DLL) (GUI) x86-64 for MS Windows 6 sections"- Location: [%TEMP%\onefile_5316_134010018119479299\lxml\sax.pyd]- [targetUID: 00000000-00005316]46:Td2b,"code_fix_patch_generator.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\CLASSES\CLSID\{9E175B6D-F52A-11D8-B9A5-505054503030}"; Key: ""; Value: "") "code_fix_patch_generator.exe" (Access type: "QUERYVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\MOUNTPOINTS2\CPC\VOLUME\{815EAD30-0000-0000-0000-100000000000}"; Key: "DATA"; Value: "") "code_fix_patch_generator.exe" (Access type: "QUERYVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\MOUNTPOINTS2\CPC\VOLUME\{815EAD30-0000-0000-0000-100000000000}"; Key: "GENERATION"; Value: "") "code_fix_patch_generator.exe" (Access type: "QUERYVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\MOUNTPOINTS2\CPC\VOLUME\{815EAD30-0000-0000-0000-501F00000000}"; Key: "DATA"; Value: "") "code_fix_patch_generator.exe" (Access type: "QUERYVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\MOUNTPOINTS2\CPC\VOLUME\{815EAD30-0000-0000-0000-501F00000000}"; Key: "GENERATION"; Value: "") "code_fix_patch_generator.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\SESSION MANAGER"; Key: "RESOURCEPOLICIES"; Value: "") "code_fix_patch_generator.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\SERVICES\BAM\USERSETTINGS\S-1-5-21-735145574-3570218355-1207367261-1001"; Key: "\DEVICE\HARDDISKVOLUME2\WINDOWS\SYSTEM32\CONHOST.EXE"; Value: "") "code_fix_patch_generator.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\WINDOWS\SAFER\CODEIDENTIFIERS"; Key: "TRANSPARENTENABLED"; Value: "") "code_fix_patch_generator.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\FILESYSTEM"; Key: "LONGPATHSENABLED"; Value: "") "code_fix_patch_generator.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\SORTING\VERSIONS"; Key: ""; Value: "") "code_fix_patch_generator.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\LSA\FIPSALGORITHMPOLICY"; Key: "ENABLED"; Value: "") "code_fix_patch_generator.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\LSA"; Key: "FIPSALGORITHMPOLICY"; Value: "") "code_fix_patch_generator.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\LSA\FIPSALGORITHMPOLICY"; Key: "MDMENABLED"; Value: "") "code_fix_patch_generator.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\OLE"; Key: "PAGEALLOCATORUSESYSTEMHEAP"; Value: "") "code_fix_patch_generator.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\OLE"; Key: "PAGEALLOCATORSYSTEMHEAPISPRIVATE"; Value: "") "code_fix_patch_generator.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\OLE"; Key: "AGGRESSIVEMTATESTING"; Value: "") "code_fix_patch_generator.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\GRE_INITIALIZE"; Key: "DISABLEMETAFILES"; Value: "") "code_fix_patch_generator.exe" (Access type: "QUERYVAL"; Path: "HKCU\CONTROL PANEL\DESKTOP"; Key: "ENABLEPERPROCESSSYSTEMDPI"; Value: "") "code_fix_patch_generator.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\COMPATIBILITY32"; Key: "CODE_FIX_PATCH_GENERATOR"; Value: "") "code_fix_patch_generator.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS"; Key: "LOADAPPINIT_DLLS"; Value: "")47:T8b8,"code_fix_patch_generator.exe" trying to access non-existent file "C:\FLTLIB.DLL" "code_fix_patch_generator.exe" trying to access non-existent file "C:\CRYPTSP.DLL" "code_fix_patch_generator.exe" trying to access non-existent file "C:\CLDAPI.DLL" "code_fix_patch_generator.exe" trying to access non-existent file "C:\CLDAPI.dll" "code_fix_patch_generator.exe" trying to access non-existent file "C:\AEPIC.DLL" "code_fix_patch_generator.exe" trying to access non-existent file "C:\AEPIC.dll" "code_fix_patch_generator.exe" trying to access non-existent file "C:\BCRYPT.DLL" "code_fix_patch_generator.exe" trying to access non-existent file "C:\bcrypt.dll" "code_fix_patch_generator.exe" trying to access non-existent file "C:\APPHELP.DLL" "code_fix_patch_generator.exe" trying to access non-existent file "C:\apphelp.dll" "code_fix_patch_generator.exe" trying to access non-existent file "C:\CSCAPI.DLL" "code_fix_patch_generator.exe" trying to access non-existent file "C:\cscapi.dll" "code_fix_patch_generator.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\Temp\onefile_5316_134010018119479299\VERSION.DLL" "code_fix_patch_generator.exe" trying to access non-existent file "C:\Users\dni4h3m\AppData\Local\Temp\onefile_5316_134010018119479299\VERSION.dll" "code_fix_patch_generator.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\Temp\onefile_5316_134010018119479299\BCRYPT.DLL" "code_fix_patch_generator.exe" trying to access non-existent file "C:\Users\dni4h3m\AppData\Local\Temp\onefile_5316_134010018119479299\bcrypt.dll" "code_fix_patch_generator.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\Temp\ONEFIL~1\IPHLPAPI.DLL" "code_fix_patch_generator.exe" trying to access non-existent file "C:\Users\dni4h3m\AppData\Local\Temp\ONEFIL~1\IPHLPAPI.DLL" "code_fix_patch_generator.exe" trying to access non-existent file "C:\IPHLPAPI.DLL" "code_fix_patch_generator.exe" trying to access non-existent file "C:\Users\%OSUSER%\AppData\Local\Temp\onefile_5316_134010018119479299\IPHLPAPI.DLL" "code_fix_patch_generator.exe" trying to access non-existent file "C:\Users\dni4h3m\AppData\Local\Temp\onefile_5316_134010018119479299\IPHLPAPI.DLL"48:Tf09,file/memory contains long string with (Indicator: " socket "; File: "_socket.pyd") file/memory contains long string with (Indicator: " connect "; File: "_socket.pyd") file/memory contains long string with (Indicator: " bind "; File: "_socket.pyd") file/memory contains long string with (Indicator: " accept "; File: "_socket.pyd") file/memory contains long string with (Indicator: "inet_ntoa"; File: "_socket.pyd") file/memory contains long string with (Indicator: "gethostbyname"; File: "_socket.pyd") file/memory contains long string with (Indicator: "gethostname"; File: "_socket.pyd") file/memory contains long string with (Indicator: "wsastartup"; File: "_socket.pyd") file/memory contains long string with (Indicator: " send "; File: "_socket.pyd") file/memory contains long string with (Indicator: " socket "; File: "_overlapped.pyd") file/memory contains long string with (Indicator: " socket "; File: "select.pyd") Found reference to API "inet_addr" (Indicator: "inet_addr"; File: "code_fix_patch_generator.exe") Found reference to API "gethostbyname" (Indicator: "gethostbyname"; File: "code_fix_patch_generator.exe") Found reference to API "inet_ntoa" (Indicator: "inet_ntoa"; File: "code_fix_patch_generator.exe") Found reference to API "WSAStartup" (Indicator: "wsastartup"; File: "code_fix_patch_generator.exe") Found reference to API "WSAGetLastError" (Indicator: "wsagetlasterror"; File: "code_fix_patch_generator.exe") Found reference to API "WSACleanup" (Indicator: "wsacleanup"; File: "code_fix_patch_generator.exe") Found reference to API "__WSAFDIsSet" (Indicator: "__wsafdisset"; File: "code_fix_patch_generator.exe") Found reference to API "gethostbyname addr is not af inet" (Indicator: "gethostbyname"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found reference to API "nbio connect error" (Indicator: " connect "; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found reference to API "no accept addr or service specified" (Indicator: " accept "; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found reference to API "unable to bind socket" (Indicator: " bind "; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found reference to API "unable to listen socket" (Indicator: " listen "; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found reference to API "WSAStartup" (Indicator: "wsastartup"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp, 00000000-00002552.00000000.217466.5382E000.00000002.mdmp, 00000000-00002552.00000000.217466.548CE000.00000002.mdmp") Found reference to API "calling wsastartup()" (Indicator: "wsastartup"; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found reference to API "CMP client did not accept it" (Indicator: " accept "; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found reference to API "cannot send proper CMP response" (Indicator: " send "; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found reference to API "could not bind to the requested symbol name" (Indicator: " bind "; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found reference to API "%s: HTTP CONNECT %s" (Indicator: " connect "; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found reference to API "%s: HTTP CONNECT failed, non-HTTP response" (Indicator: " connect "; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found reference to API "%s: HTTP CONNECT failed, bad HTTP version %.*s" (Indicator: " connect "; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found reference to API "%s: HTTP CONNECT failed, reason=%s" (Indicator: " connect "; Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp")49:T8efc,Found URL "ftp://ftp.unicode.org/.the" - Source: "00000000-00002552.00000000.217466.26275000.00000002.mdmp") Found URL "https://www.openssl.org/filedescriptionopenssl" - Source: "00000000-00002552.00000000.217466.264D2000.00000002.mdmp") Found URL "http://%shttp://%s" - Source: "00000000-00002552.00000000.217466.2686B000.00000002.mdmp") Found URL "https://www.openssl.org/filedescriptionopenssl" - Source: "00000000-00002552.00000000.217466.269B2000.00000002.mdmp") Found URL "https://www.python.org/psf/license/_abc_cache:" - Source: "00000000-00002552.00000000.217466.26F83000.00000004.mdmp") Found URL "https://nuitka.net/info/segfault.htmlfor" - Source: "00000000-00002552.00000000.217466.27FA0000.00000002.mdmp") Found URL "http://software\microsoft\windows\currentversion\url\defaultprefix%hs(%d)\%hs!%p:" - Source: "00000000-00002552.00000000.217466.5382E000.00000002.mdmp") Found URL "http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/enrootdirurlsoftware\policies\microsoft\systemcertificateshttps://%s/%s/%spinrulescheckedcommercialidsoftware\microsoft\windows\currentversion\policies\datacollectionhttps://%s.pinrules.crt/%stracelogmicrosoft-windows-capi2diagmatchanymaskdiaglevelsystem\currentcontrolset\services\crypt32uthroots-%lu-authenticodeflagssoftware\policies\microsoft\systemcertificates\trustedpublisher\safersoftware\microsoft\systemcertificates\trustedpublisher\saferxn--software\microsoft\cryptography\wintrust\configtrustflagstrustsmartcardrootctrlo:syg:syd:(a;oici;0x1;;;ac)(a;oici;0x1;;;s-1-15-3-1024-3203351429-2120443784-2872670797-1918958302-2829055647-4275794519-765664414-2751773334)(xa;;0x1;;;wd;(exists" - Source: "00000000-00002552.00000000.217466.5449A000.00000002.mdmp") Found URL "http://www.pki.gva.es/cpsautoridad" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.accv.esagencia" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.oaticerts.com/repository." - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.e-szigno.hu/szsz/sis" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://users.ocsp.d-trust.net03info@d-trust.nethttp://www.d-trust.net0vldap://directory.d-trust.net/cn=d-trust%20root%20class%203%20ca%202007,o=d-trust%20gmbh,c=de?certificaterevocationlist;http://www.d-trust.net/crl/d-trust_root_class_3_ca_2007.crl0?hddd6ag&s-certsign1certsign" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.certeurope.fr/reference/pc-root2.pdf0,http://www.certeurope.fr/reference/root2.crl0" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.correo.com.uy/correocert/cps.pdf0ux!!2yfr+zpz-hv%" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://fedir.comsign.co.il/crl/comsignsecuredca.crl0x&ford" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.certplus.com/crl/class3ts.crl0;@wb&r4%milan1" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://pki.digidentity.eu/validatie0x" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.chambersign.org1public" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://crl.chambersign.org/publicnotaryroot.crl03tid]" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://cps.chambersign.org/cps/publicnotaryroot.html0,dsrhfzbtrustis" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://crl.pki.wellsfargo.com/wsprca.crl0us1" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://fedir.comsign.co.il/crl/comsignca.crl0tvbqk't" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://acedicom.edicomgroup.com/doc0rqb&" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "https://ocsp.quovadisoffshore.com0reliance" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.quovadis.bm0quovadis" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.suscerte.gob.ve/lcr0" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://ocsp.suscerte.gob.ve0@907050,0*http://www.suscerte.gob.ve/dpc0gey" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.datev.de/zertifikat-policy-bt0,8go" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://repository.swisssign.com/02z" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.ca.posta.rs/dokumentacija0hzovo" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://sertifikati.ca.posta.rs/crl/postacaroot.crl0+20081020122208z20281020125208z0v7.1:4.0b)3fi<3kn" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.certplus.com/crl/class3.crl0cz1:081i.ca" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://crl.comodoca.com/aaacertificateservices.crl060http://crl.comodo.net/aaacertificateservices.crl0l7u" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "https://www.anf.es/address/)1(0&anf" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "https://www.anf.es/ac/actas/789230801-340008,0*0(http://www.anf.es/ac/rc/ocsp0c\0z0+%https://www.anf.es/ac/anfserverca.crl0+%https://crl.anf.es/ac/anfserverca.crl0info@anf.es0info@anf.es0yllmx58hc;l\5:com1" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.certicamara.com/dpc/0zllimitaciones" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.echoworx.com/ca/root2/cps.pdf0'n2!q7*6qv0eimku.s." - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.eme.lv/repository0kvd(" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.pki.admin.ch/cps/cps_2_16_756_1_17_3_21_1.pdf0:,this" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.post.trust.ie/reposit/cps.html0sx@rankara1m0krktrust" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://pki-root.ecertpki.cl/certenroll/e-cert%20root%20ca.crl0[0y0w0k0i=http://www.e-certchile.cl/html/productos/download/cpsv1.7.pdf01w.i(tobo1kw>z" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.ancert.com/cps0ancert0agencia" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.ancert.com/cps0lmb0zg!y" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.trustcor.ca/crl/e0c1pa1$0" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.cert.fnmt.es/dpcs/08l6_t?zt0affirmtrust1" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://crl.xrampsecurity.com/xgca.crl0bratislava1disig" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.dnie.es/dpc0x&" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.usertrust.com1604-utn-userfirst-client" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://crl.usertrust.com/utn-userfirst-clientauthenticationandemail.crl0so%$oh$q'" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.firmaprofesional.com/cps0\uk+w=jn" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.trustcenter.de/crl/v2/tc_class_2_ca_ii.crlldap://www.trustcenter.de/cn=tc%20trustcenter%20class%202%20ca%20ii,o=tc%20trustcenter%20gmbh,ou=rootcerts,dc=trustcenter,dc=de?certificaterevocationlist?base?0uzhs.kaqyf9nk^t" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://fedir.comsign.co.il/crl/comsignglobalrootca.crl0;5http://crl1.comsign.co.il/crl/comsignglobalrootca.crl0=imsj)x" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "https://www.netlock.net/docs" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.datev.de/zertifikat-policy-std0dt6tcz1)0'" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://acraiz.icpbrasil.gov.br/dpcacraiz.pdf0?80604.http://acraiz.icpbrasil.gov.br/lcracraizv2.crl0m" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.certificadodigital.com.br/repositorio/serasaca/crl/serasacai.crl03_:_" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.e-trust.be/cps/qncerts" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.pki.admin.ch/cps/cps_2_16_756_1_17_3_1_0.pdf09+this" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.postsignum.cz/crl/psrootqca2.crl02,http://www2.postsignum.cz/crl/psrootqca2.crl01+http://postsignum.ttc.cz/crl/psrootqca2.crl0tento" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://ocsp.pki.gva.es0http://www.pki.gva.es/cps0j0h1generalitat" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.certificadodigital.com.br/repositorio/serasaca/crl/serasacaiii.crl0l;!xu%w8i" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.rootcert.ca/crl/d0b1pa1$0" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://trustcenter-crl.certificat2.com/keynectis/keynectis_root_ca.crl0i>$-" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://repository.swisssign.com/0p,__bapv" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.entrust.net/crl/net1.crl0+19990525160940z20190525160940z0v4.0r>m-etm1402+tm" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.rcsc.lt/repository0+er2)<-z,biu$%5._f" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.d-trust.net/crl/d-trust_root_class_3_ca_2_ev_2009.crl0" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.datev.de/zertifikat-policy-int0zw+tox'uz2>8" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.accv.es/fileadmin/archivos/certificados/raizaccv1.crt0http://ocsp.accv.es0$http://www.accv.es/legislacion_c.htm0un0l0jdhttp://www.accv.es/fileadmin/archivos/certificados/raizaccv1_der.crl0accv@accv.es0cghdlm" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.datev.de/zertifikat-policy-int0rx%m's5x_7mdw)\ulthawte," - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://http.fpki.gov/fcpca/cacertsissuedbyfcpca.p7c0ldap://ldap.fpki.gov/cn=federal%20common%20policy%20ca,ou=fpki,o=u.s.%20government,c=us?cacertificate;binary,crosscertificatepair;binary0washington1redmond1microsoft" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://crl.securetrust.com/stca.crl0x:rr[" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.certifikat.dk/repository0tdc0certifikater" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://crl.oces.certifikat.dk/oces.crl0+20030211083930z20370211090930z0v6.0:4.0ca)b1p't>t]th" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.defence.gov.au/pki0d*yx:d^w" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://ocsp.ncdc.gov.sa0)http://web.ncdc.gov.sa/crl/nrcaparta1.crls0q1sa1200)national" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://web.ncdc.gov.sa/crl/nrcacomb1.crl0yzm>" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://fedir.comsign.co.il/crl/comsignadvancedsecurityca.crl0;09070*0(http://www.comsign.co.il/cps0[o0m0k?http://fedir.comsign.co.il/cacert/comsignadvancedsecurityca.crt0&sa>q,xasgc2u_pni(1?0=rktrust" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://policy.camerfirma.com0+,t" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://crl.globalsign.net/root-r2.crl0,0<0http://cps.chambersign.org/cps/chambersroot.html0?w" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://crl.d-trust.net/crl/d-trust_root_ca_3_2013.crl0th" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.pki.admin.ch/policy/cps_2_16_756_1_17_3_21_1.pdf0:aexe\)t" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://ca.mtin.es/mtin/ocsp0admin_ca@mtin.es0admin_ca@mtin.es0k0i02,http://ca.mtin.es/mtin/crl/mtinautoridadraiz03-http://ca2.mtin.es/mtin/crl/mtinautoridadraiz0$http://ca.mtin.es/mtin/dpcypoliticas0gycertificado" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://ca.mtin.es/mtin/dpcypoliticas0ac1" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.certplus.com/crl/class1.crl0o0eq)" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www2.public-trust.com/crl/ct/ctroot.crl0-pw0" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.usertrust.com1+0)" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://crl.usertrust.com/utn-userfirst-networkapplications.crl0t" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://certificates.starfieldtech.com/repository/1604-starfield" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://crl.oces.trust2408.com/oces.crl0\v0t1" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.anf.es/es/address-direccion.html" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.anf.esinfo@anf.es1402+gran" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.ssc.lt/cps03,0*0(" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://crl.ssc.lt/root-a/cacrl.crl0eiotvdul\;ihi" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.pkioverheid.nl/policies/root-policy-g20ajg*b4b5&-]" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.d-trust.net/crl/d-trust_root_class_3_ca_2_2009.crl0okk,%$rdtpmsymantec" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://cps.siths.se/sithsrootcav1.html0$r83;cs(fk49q\wqw!jm>e>emg+k69rhsypeooxsalt" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.usertrust.com1utn" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://crl.usertrust.com/utn-datacorpsgc.crl0*z0&ueg)k,v?" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://repository.swisssign.com/0aun" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.datev.de/zertifikat-policy-int0^afgo,wq*d" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://logo.verisign.com/vslogo.gif03130$j0_b>mn0<000." - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://ac.economia.gob.mx/cps.html0l*xsdz8c4ie)vienna1austria1:081arge" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.globaltrust.info0=info@globaltrust.infohttp://www.globaltrust.info0<(i8i" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://crl.chambersign.org/chambersignroot.crl0chambersignroot@chambersign.org0*chambersignroot@chambersign.org0[t0r0p0a0?3http://cps.chambersign.org/cps/chambersignroot.html0aeo2w" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.certificadodigital.com.br/repositorio/serasaca/crl/serasacaii.crl04/c" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.disig.sk/ca0f_0]0-'http://www.disig.sk/ca/crl/ca_disig.crl0,&http://ca.disig.sk/ca/crl/ca_disig.crl0]4tal" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "https://www.catcert.net/verarrel" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "https://www.catcert.net/verarrel05'vegeu" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.datev.de/zertifikat-policy-std0zbt&)2" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.informatik.admin.ch/pki/links/cps_2_16_756_1_17_3_1_0.pdf0x0v0tn0l1admin-root-ca1" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://crl.ssc.lt/root-c/cacrl.crl0o0+y^pdzjqw>xiug1\yscl:yetm--;p" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "https://rca.e-szigno.hu/ocsp0-!http://www.e-szigno.hu/rootca.crt0http://www.e-szigno.hu/szsz/0!http://www.e-szigno.hu/rootca.crlldap://ldap.e-szigno.hu/cn=microsec%20e-szigno%20root%20ca,ou=e-szigno%20ca,o=microsec%20ltd.,l=budapest,c=hu?certificaterevocationlist;binary0info@e-szigno.huw0u1" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://logo.verisign.com/vslogo.gif0&" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.certplus.com/crl/class3p.crl0zb58f2<" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://pki.registradores.org/normativa/index.htm0certificado" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.quovadisglobal.com/cps0g0e1quovadis" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.datev.de/zertifikat-policy-std0b.[" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.ancert.com/cps0ancert@ancert.com0q64i!v" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.e-me.lv/repository0v9:hvcwlm:h^c'$[i" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.usertrust.com1utn-userfirst-hardware0990709181042z190709181922z0salt" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.usertrust.com1utn-userfirst-hardware0i." - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://crl.usertrust.com/utn-userfirst-hardware.crl01" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "https://www.netlock.hu/docs/" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.microsoft.com/pki/crl/products/miccertrulispca_2009-04-02.crlhhttp://crl.microsoft.com/pki/crl/products/miccertrulispca_2009-04-02.crl0]q0o0mahttp://www.microsoft.com/pki/certs/miccertrulispca_2009-04-02.crt0:kg6!vvbu;mi>t" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0th0f0d8http://www.microsoft.com/pki/certs/microsoftrootcert.crt0!:ctxcg" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://micorsoft.com0*r'20" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/miccerlisca2011_2011-03-29.crl0]q0o0mahttp://www.microsoft.com/pki/certs/miccerlisca2011_2011-03-29.crt0lb@?\zkj0r" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://crl.microsoft.com/pki/crl/products/microoceraut_2010-06-23.crl0zn0l0j>http://www.microsoft.com/pki/certs/microoceraut_2010-06-23.crt07ya'4iy()>@6t+a6" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://micorsoft.com0<;2d" - Source: "00000000-00002552.00000000.217466.544DA000.00000002.mdmp") Found URL "http://www.w3.org/xml/1998/namespaceindexed\settings\xpathopenmetadatakeyinxmlattributeopenmetadatavalueoverridetextcontentadditionalcontentbinarycontenttargetnamespace=" - Source: "00000000-00002552.00000000.217466.56B7A000.00000002.mdmp") Found URL "https://docs.python.org/3/howto/mro.html." - Source: "00000000-00002552.00000000.217466.C6520000.00000004.mdmp") Found URL "https://staging.bito.ai/ai/v2/invokeclaude-sonnet-4-20250514check" - Source: "00000000-00002552.00000000.217466.C6520000.00000004.mdmp") Found URL "https://localhost:3128/" - Source: "00000000-00002552.00000000.217466.C668A000.00000004.mdmp") Found URL "https://google.com/" - Source: "00000000-00002552.00000000.217466.C668A000.00000004.mdmp") Found URL "https://httpbin.org/" - Source: "00000000-00002552.00000000.217466.C668A000.00000004.mdmp") Found URL "https://twitter.com/" - Source: "00000000-00002552.00000000.217466.C668A000.00000004.mdmp") Found URL "https://en.wikipedia.org/wiki/cache_replacement_policies" - Source: "00000000-00002552.00000000.217466.C66FA000.00000004.mdmp") Found URL "https://staging.bito.aibito_tracking_urlbwm_request_idbwm_track_metabwm_track_metabwm_modelapi_callsinput_tokensoutput_tokensllm_request_durationbilled_ai_requests_api_trackerscmp_token_input_limittiktokenget_encodingcl100k_basecheck_shutdown_check_token_limit_get_system_prompt_build_user_promptcode_context_call_llm_apisession_idagent_namee]>dtracking_metasystem_promptbito_infouser_promptllm" - Source: "00000000-00002552.00000000.217466.C6720000.00000004.mdmp") Found URL "https://tools.ietf.org/html/rfc7231" - Source: "00000000-00002552.00000000.217466.C6820000.00000004.mdmp") Found URL "https://json.org>" - Source: "00000000-00002552.00000000.217466.C68BA000.00000004.mdmp") Found URL "https://tools.ietf.org/html/rfc2388" - Source: "00000000-00002552.00000000.217466.C68BA000.00000004.mdmp") Found URL "https://github.com/python/cpython/issues/86361." - Source: "00000000-00002552.00000000.217466.C68BA000.00000004.mdmp") Found URL "https://www.python.org')" - Source: "00000000-00002552.00000000.217466.C68BA000.00000004.mdmp") Found URL "https://httpbin.org/post'," - Source: "00000000-00002552.00000000.217466.C68BA000.00000004.mdmp") Found URL "https://requests.readthedocs.io>.:copyright:" - Source: "00000000-00002552.00000000.217466.C68BA000.00000004.mdmp") Found URL "http://wwwsearch.sf.net/):" - Source: "00000000-00002552.00000000.217466.C68BA000.00000004.mdmp") Found URL "http://'," - Source: "00000000-00002552.00000000.217466.C6977000.00000004.mdmp") Found URL "https://httpbin.org/get')" - Source: "00000000-00002552.00000000.217466.C6977000.00000004.mdmp") Found URL "https://github.com/urllib3/urllib3/issues/2513" - Source: "00000000-00002552.00000000.217466.C698E000.00000004.mdmp") Found URL "https://www.rfc-editor.org/rfc/rfc8259" - Source: "00000000-00002552.00000000.217466.C698E000.00000004.mdmp") Found URL "http://google.com/')" - Source: "00000000-00002552.00000000.217466.C698E000.00000004.mdmp") Found URL "https://docs.python.org/3.11/library/binascii.html" - Source: "00000000-00002552.00000000.217466.C698E000.00000004.mdmp") Found URL "http://www.iana.org/assignments/tls-parameters/tls-parameters.xml" - Source: "00000000-00002552.00000000.217466.C6A00000.00000004.mdmp") Found URL "https://peps.python.org/pep-0205/gvr," - Source: "00000000-00002552.00000000.217466.C6A20000.00000004.mdmp") Found URL "http://en.wikipedia.org/wiki/triangular_distribution" - Source: "00000000-00002552.00000000.217466.C6B20000.00000004.mdmp") Found URL "https://github.com/urllib3/urllib3/issues/3020." - Source: "00000000-00002552.00000000.217466.C6B20000.00000004.mdmp") Found URL "https://github.com/urllib3/urllib3/issues/2168andrey" - Source: "00000000-00002552.00000000.217466.C6B20000.00000004.mdmp") Found URL "https://base" - Source: "00000000-00002552.00000000.217466.C6B20000.00000004.mdmp") Found URL "https://base" - Source: "00000000-00002552.00000000.217466.C6C20000.00000004.mdmp") Found URL "https://urllib3.readthedocs.io/en/latest/advanced-usage.html" - Source: "00000000-00002552.00000000.217466.C6D20000.00000004.mdmp") Found URL "http://www.w3.org/tr/xhtml1/dtd/xhtml1-strict.dtd" - Source: "00000000-00002552.00000000.217466.C6D20000.00000004.mdmp") Found URL "https://google.com/" - Source: "00000000-00002552.00000000.217466.C6E20000.00000004.mdmp") Found URL "https://google.com/mail" - Source: "00000000-00002552.00000000.217466.C6E20000.00000004.mdmp") Found URL "https://yahoo.com/" - Source: "00000000-00002552.00000000.217466.C6E20000.00000004.mdmp") Found URL "https://example.com/" - Source: "00000000-00002552.00000000.217466.C6E20000.00000004.mdmp") Found URL "http://hg.python.org/cpython/file/603b4d593758/lib/socket.py" - Source: "00000000-00002552.00000000.217466.C6E20000.00000004.mdmp") Found URL "https://google.com/mail/" - Source: "00000000-00002552.00000000.217466.C6E20000.00000004.mdmp") Found URL "https://username:password@host.com:80/path?query" - Source: "00000000-00002552.00000000.217466.C6E20000.00000004.mdmp") Found URL "http://google.com/mail/'))" - Source: "00000000-00002552.00000000.217466.C6E8C000.00000004.mdmp") Found URL "https://html.spec.whatwg.org/multipage/" - Source: "00000000-00002552.00000000.217466.C6E8C000.00000004.mdmp") Found URL "http://'," - Source: "00000000-00002552.00000000.217466.C6E8C000.00000004.mdmp") Found URL "https://httpbin.org/get')" - Source: "00000000-00002552.00000000.217466.C6F12000.00000004.mdmp") Found URL "https://google.com/" - Source: "00000000-00002552.00000000.217466.C6F12000.00000004.mdmp") Found URL "https://google.com/mail" - Source: "00000000-00002552.00000000.217466.C6F12000.00000004.mdmp") Found URL "https://yahoo.com/" - Source: "00000000-00002552.00000000.217466.C6F12000.00000004.mdmp") Found URL "http://code.activestate.com/recipes/577452-a-memoize-decorator-for-instance-methods/" - Source: "00000000-00002552.00000000.217466.C6F12000.00000004.mdmp") Found URL "https://localhost:3128/" - Source: "00000000-00002552.00000000.217466.C6F12000.00000004.mdmp") Found URL "https://httpbin.org/" - Source: "00000000-00002552.00000000.217466.C6F12000.00000004.mdmp") Found URL "https://twitter.com/" - Source: "00000000-00002552.00000000.217466.C6F12000.00000004.mdmp") Found URL "https://httpbin.org/get')" - Source: "00000000-00002552.00000000.217466.C71B8000.00000004.mdmp") Found URL "https://mahler:8092/site-updates.py'," - Source: "00000000-00002552.00000000.217466.C71B8000.00000004.mdmp") Found URL "http://ahad-haam:3128" - Source: "00000000-00002552.00000000.217466.C71B8000.00000004.mdmp") Found URL "https://www.python.org/')open" - Source: "00000000-00002552.00000000.217466.C71B8000.00000004.mdmp") Found URL "https://urllib3.readthedocs.io/en/latest/advanced-usage.html" - Source: "00000000-00002552.00000000.217466.C7220000.00000004.mdmp") Found URL "http://curl.haxx.se/rfc/cookie_spec.html" - Source: "00000000-00002552.00000000.217466.C7220000.00000004.mdmp") Found URL "https://en.wikipedia.org/wiki/utf-16" - Source: "00000000-00002552.00000000.217466.C7220000.00000004.mdmp") Found URL "https://github.com/urllib3/urllib3/issues/3290c:\users\dni4h3m\appdata\local\temp\onefil" - Source: "00000000-00002552.00000000.217466.C7220000.00000004.mdmp") Found URL "http://tools.ietf.org/html/rfc6125" - Source: "00000000-00002552.00000000.217466.C7220000.00000004.mdmp") Found URL "https://packaging.python.org/specifications/entry-points/>" - Source: "00000000-00002552.00000000.217466.C7220000.00000004.mdmp") Found URL "https://packaging.python.org/specifications/entry-points/>" - Source: "00000000-00002552.00000000.217466.C7320000.00000004.mdmp") Found URL "https://httpbin.org/get')" - Source: "00000000-00002552.00000000.217466.C7320000.00000004.mdmp") Found URL "https://github.com/python/importlib_metadata/wiki/development-methodologyfor" - Source: "00000000-00002552.00000000.217466.C7320000.00000004.mdmp") Found URL "https://importlib-resources.readthedocs.io/en/latest/using.html" - Source: "00000000-00002552.00000000.217466.C7320000.00000004.mdmp") Found URL "https://')" - Source: "00000000-00002552.00000000.217466.C7420000.00000004.mdmp") Found URL "https://'" - Source: "00000000-00002552.00000000.217466.C7420000.00000004.mdmp") Found URL "http://'." - Source: "00000000-00002552.00000000.217466.C7420000.00000004.mdmp") Found URL "https://github.com/urllib3/urllib3/issues/2920" - Source: "00000000-00002552.00000000.217466.C7420000.00000004.mdmp") Found URL "https://en.wikipedia.org/wiki/utf-32" - Source: "00000000-00002552.00000000.217466.C7520000.00000004.mdmp") Found URL "http://.../back.jpeg>;" - Source: "00000000-00002552.00000000.217466.C7520000.00000004.mdmp") Found URL "https://retry_https_basic_authprompt_user_passwdenter" - Source: "00000000-00002552.00000000.217466.C7520000.00000004.mdmp") Found URL "https://github.com/ousret/charset_normalizer>.:copyright:" - Source: "00000000-00002552.00000000.217466.C7735000.00000004.mdmp") Found URL "https://httpbin.org/get')" - Source: "00000000-00002552.00000000.217466.C7735000.00000004.mdmp") Found URL "ftp://ftp.unicode.org/.the" - Source: "00000000-00002552.00000000.217466.C7E20000.00000004.mdmp") Found URL "https://httpbin.org/get')" - Source: "00000000-00002552.00000000.217466.C7E20000.00000004.mdmp") Found URL "https://github.com/psf/requests/pull/6710" - Source: "00000000-00002552.00000000.217466.C7E20000.00000004.mdmp") Found URL "https://streamed" - Source: "00000000-00002552.00000000.217466.C7E20000.00000004.mdmp") Found URL "https://requests.readthedocs.io