Overview

overview

8

Static

static

3

bd561052e5...74.exe

windows7-x64

8

bd561052e5...74.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    24s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230831-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-09-2023 14:37

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bd561052e5d6355fc47e14b18294a06943615673eb06471da207c3f3a9ad2f74.exe

  • Size

    3.2MB

  • MD5

    b56df5e8ec61f70816d5bf0100210e35

  • SHA1

    467ede03871edb83ca9cad24797d771bd5cd9db3

  • SHA256

    bd561052e5d6355fc47e14b18294a06943615673eb06471da207c3f3a9ad2f74

  • SHA512

    3c35152fadb089585045e50024fadeb5eb05238915f46cba23281d0464b5c2ce247cae5c28eb2f7887023ab54a9ba1c5fe705948457a7ca2d6a05337c73ec96d

  • SSDEEP

    49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlrzueKM82SFAOdfRlfg06:c+8X9G3vP3AMBT49fg06

Score
8/10
persistence

Malware Config

Signatures

  • Modifies Installed Components in the registry 2 TTPs 4 IoCs
    persistence
  • Enumerates connected drives 3 TTPs 8 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Program crash 38 IoCs
  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 2 IoCs
    adwarespyware
  • Modifies registry class 62 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 55 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bd561052e5d6355fc47e14b18294a06943615673eb06471da207c3f3a9ad2f74.exe
    "C:\Users\Admin\AppData\Local\Temp\bd561052e5d6355fc47e14b18294a06943615673eb06471da207c3f3a9ad2f74.exe"
    1⤵
      PID:2028
    • C:\Windows\explorer.exe
      explorer.exe
      1⤵
      • Modifies Installed Components in the registry
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      PID:3460
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 3460 -s 5804
        2⤵
        • Program crash
        PID:3852
    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
      1⤵
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:1460
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -pss -s 452 -p 3460 -ip 3460
      1⤵
        PID:4148
      • C:\Windows\explorer.exe
        explorer.exe
        1⤵
        • Modifies Installed Components in the registry
        • Enumerates connected drives
        • Checks SCSI registry key(s)
        • Modifies registry class
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        PID:3052
        • C:\Windows\system32\WerFault.exe
          C:\Windows\system32\WerFault.exe -u -p 3052 -s 5952
          2⤵
          • Program crash
          PID:3816
      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
        1⤵
        • Modifies registry class
        • Suspicious use of SetWindowsHookEx
        PID:5048
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -pss -s 412 -p 3052 -ip 3052
        1⤵
          PID:4208
        • C:\Windows\explorer.exe
          explorer.exe
          1⤵
          • Modifies Installed Components in the registry
          • Enumerates connected drives
          • Checks SCSI registry key(s)
          • Modifies registry class
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          PID:5044
          • C:\Windows\system32\WerFault.exe
            C:\Windows\system32\WerFault.exe -u -p 5044 -s 5940
            2⤵
            • Program crash
            PID:60
        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
          1⤵
          • Modifies registry class
          • Suspicious use of SetWindowsHookEx
          PID:1100
        • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
          "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
          1⤵
          • Modifies Internet Explorer settings
          • Modifies registry class
          • Suspicious use of SetWindowsHookEx
          PID:3488
          • C:\Windows\system32\WerFault.exe
            C:\Windows\system32\WerFault.exe -u -p 3488 -s 3824
            2⤵
            • Program crash
            PID:868
        • C:\Windows\system32\WerFault.exe
          C:\Windows\system32\WerFault.exe -pss -s 544 -p 3488 -ip 3488
          1⤵
            PID:348
          • C:\Windows\system32\WerFault.exe
            C:\Windows\system32\WerFault.exe -pss -s 576 -p 5044 -ip 5044
            1⤵
              PID:1828
            • C:\Windows\explorer.exe
              explorer.exe
              1⤵
              • Modifies Installed Components in the registry
              • Enumerates connected drives
              • Checks SCSI registry key(s)
              • Modifies registry class
              • Suspicious use of SendNotifyMessage
              PID:3712
              • C:\Windows\system32\WerFault.exe
                C:\Windows\system32\WerFault.exe -u -p 3712 -s 5836
                2⤵
                • Program crash
                PID:3784
            • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
              "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
              1⤵
                PID:2032
              • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                1⤵
                  PID:1440
                  • C:\Windows\system32\WerFault.exe
                    C:\Windows\system32\WerFault.exe -u -p 1440 -s 3564
                    2⤵
                    • Program crash
                    PID:1580
                • C:\Windows\system32\WerFault.exe
                  C:\Windows\system32\WerFault.exe -pss -s 576 -p 1440 -ip 1440
                  1⤵
                    PID:2224
                  • C:\Windows\system32\WerFault.exe
                    C:\Windows\system32\WerFault.exe -pss -s 528 -p 3712 -ip 3712
                    1⤵
                      PID:3152
                    • C:\Windows\explorer.exe
                      explorer.exe
                      1⤵
                        PID:4424
                        • C:\Windows\system32\WerFault.exe
                          C:\Windows\system32\WerFault.exe -u -p 4424 -s 7308
                          2⤵
                          • Program crash
                          PID:2824
                      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                        1⤵
                          PID:3240
                        • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                          "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                          1⤵
                            PID:1376
                            • C:\Windows\system32\WerFault.exe
                              C:\Windows\system32\WerFault.exe -u -p 1376 -s 3572
                              2⤵
                              • Program crash
                              PID:4252
                          • C:\Windows\system32\WerFault.exe
                            C:\Windows\system32\WerFault.exe -pss -s 556 -p 1376 -ip 1376
                            1⤵
                              PID:3284
                            • C:\Windows\system32\WerFault.exe
                              C:\Windows\system32\WerFault.exe -pss -s 576 -p 4424 -ip 4424
                              1⤵
                                PID:3480
                              • C:\Windows\explorer.exe
                                explorer.exe
                                1⤵
                                  PID:4432
                                  • C:\Windows\system32\WerFault.exe
                                    C:\Windows\system32\WerFault.exe -u -p 4432 -s 6340
                                    2⤵
                                    • Program crash
                                    PID:4616
                                • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                  "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                  1⤵
                                    PID:3728
                                  • C:\Windows\system32\WerFault.exe
                                    C:\Windows\system32\WerFault.exe -pss -s 604 -p 4432 -ip 4432
                                    1⤵
                                      PID:3652
                                    • C:\Windows\explorer.exe
                                      explorer.exe
                                      1⤵
                                        PID:2996
                                        • C:\Windows\system32\WerFault.exe
                                          C:\Windows\system32\WerFault.exe -u -p 2996 -s 5760
                                          2⤵
                                          • Program crash
                                          PID:3176
                                      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                        1⤵
                                          PID:4776
                                        • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                          "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                          1⤵
                                            PID:3280
                                            • C:\Windows\system32\WerFault.exe
                                              C:\Windows\system32\WerFault.exe -u -p 3280 -s 3552
                                              2⤵
                                              • Program crash
                                              PID:4376
                                          • C:\Windows\system32\WerFault.exe
                                            C:\Windows\system32\WerFault.exe -pss -s 412 -p 3280 -ip 3280
                                            1⤵
                                              PID:4352
                                            • C:\Windows\system32\WerFault.exe
                                              C:\Windows\system32\WerFault.exe -pss -s 588 -p 2996 -ip 2996
                                              1⤵
                                                PID:1396
                                              • C:\Windows\explorer.exe
                                                explorer.exe
                                                1⤵
                                                  PID:2292
                                                  • C:\Windows\system32\WerFault.exe
                                                    C:\Windows\system32\WerFault.exe -u -p 2292 -s 7756
                                                    2⤵
                                                    • Program crash
                                                    PID:3304
                                                • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                  "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                  1⤵
                                                    PID:4588
                                                  • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                    "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                    1⤵
                                                      PID:4224
                                                      • C:\Windows\system32\WerFault.exe
                                                        C:\Windows\system32\WerFault.exe -u -p 4224 -s 3632
                                                        2⤵
                                                        • Program crash
                                                        PID:1656
                                                    • C:\Windows\system32\WerFault.exe
                                                      C:\Windows\system32\WerFault.exe -pss -s 600 -p 4224 -ip 4224
                                                      1⤵
                                                        PID:3728
                                                      • C:\Windows\system32\WerFault.exe
                                                        C:\Windows\system32\WerFault.exe -pss -s 616 -p 2292 -ip 2292
                                                        1⤵
                                                          PID:3612
                                                        • C:\Windows\explorer.exe
                                                          explorer.exe
                                                          1⤵
                                                            PID:3844
                                                            • C:\Windows\system32\WerFault.exe
                                                              C:\Windows\system32\WerFault.exe -u -p 3844 -s 4832
                                                              2⤵
                                                              • Program crash
                                                              PID:1888
                                                          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                            1⤵
                                                              PID:3484
                                                            • C:\Windows\system32\WerFault.exe
                                                              C:\Windows\system32\WerFault.exe -pss -s 548 -p 3844 -ip 3844
                                                              1⤵
                                                                PID:3700
                                                              • C:\Windows\explorer.exe
                                                                explorer.exe
                                                                1⤵
                                                                  PID:2520
                                                                  • C:\Windows\system32\WerFault.exe
                                                                    C:\Windows\system32\WerFault.exe -u -p 2520 -s 5660
                                                                    2⤵
                                                                    • Program crash
                                                                    PID:5052
                                                                • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                  "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                  1⤵
                                                                    PID:4216
                                                                  • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                    "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                    1⤵
                                                                      PID:1528
                                                                      • C:\Windows\system32\WerFault.exe
                                                                        C:\Windows\system32\WerFault.exe -u -p 1528 -s 3552
                                                                        2⤵
                                                                        • Program crash
                                                                        PID:4248
                                                                    • C:\Windows\system32\WerFault.exe
                                                                      C:\Windows\system32\WerFault.exe -pss -s 528 -p 1528 -ip 1528
                                                                      1⤵
                                                                        PID:3096
                                                                      • C:\Windows\system32\WerFault.exe
                                                                        C:\Windows\system32\WerFault.exe -pss -s 528 -p 2520 -ip 2520
                                                                        1⤵
                                                                          PID:1604
                                                                        • C:\Windows\explorer.exe
                                                                          explorer.exe
                                                                          1⤵
                                                                            PID:3668
                                                                            • C:\Windows\system32\WerFault.exe
                                                                              C:\Windows\system32\WerFault.exe -u -p 3668 -s 5916
                                                                              2⤵
                                                                              • Program crash
                                                                              PID:4924
                                                                          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                            1⤵
                                                                              PID:3108
                                                                            • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                              "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                              1⤵
                                                                                PID:2316
                                                                                • C:\Windows\system32\WerFault.exe
                                                                                  C:\Windows\system32\WerFault.exe -u -p 2316 -s 3564
                                                                                  2⤵
                                                                                  • Program crash
                                                                                  PID:4916
                                                                              • C:\Windows\system32\WerFault.exe
                                                                                C:\Windows\system32\WerFault.exe -pss -s 548 -p 2316 -ip 2316
                                                                                1⤵
                                                                                  PID:348
                                                                                • C:\Windows\system32\WerFault.exe
                                                                                  C:\Windows\system32\WerFault.exe -pss -s 536 -p 3668 -ip 3668
                                                                                  1⤵
                                                                                    PID:4836
                                                                                  • C:\Windows\explorer.exe
                                                                                    explorer.exe
                                                                                    1⤵
                                                                                      PID:3816
                                                                                      • C:\Windows\system32\WerFault.exe
                                                                                        C:\Windows\system32\WerFault.exe -u -p 3816 -s 7344
                                                                                        2⤵
                                                                                        • Program crash
                                                                                        PID:3560
                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                      1⤵
                                                                                        PID:4172
                                                                                      • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                        "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                        1⤵
                                                                                          PID:1528
                                                                                          • C:\Windows\system32\WerFault.exe
                                                                                            C:\Windows\system32\WerFault.exe -u -p 1528 -s 3580
                                                                                            2⤵
                                                                                            • Program crash
                                                                                            PID:4952
                                                                                        • C:\Windows\system32\WerFault.exe
                                                                                          C:\Windows\system32\WerFault.exe -pss -s 628 -p 1528 -ip 1528
                                                                                          1⤵
                                                                                            PID:2364
                                                                                          • C:\Windows\system32\WerFault.exe
                                                                                            C:\Windows\system32\WerFault.exe -pss -s 624 -p 3816 -ip 3816
                                                                                            1⤵
                                                                                              PID:460
                                                                                            • C:\Windows\explorer.exe
                                                                                              explorer.exe
                                                                                              1⤵
                                                                                                PID:1216
                                                                                                • C:\Windows\system32\WerFault.exe
                                                                                                  C:\Windows\system32\WerFault.exe -u -p 1216 -s 7368
                                                                                                  2⤵
                                                                                                  • Program crash
                                                                                                  PID:4632
                                                                                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                1⤵
                                                                                                  PID:1280
                                                                                                • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                  "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                  1⤵
                                                                                                    PID:1060
                                                                                                    • C:\Windows\system32\WerFault.exe
                                                                                                      C:\Windows\system32\WerFault.exe -u -p 1060 -s 3600
                                                                                                      2⤵
                                                                                                      • Program crash
                                                                                                      PID:4720
                                                                                                  • C:\Windows\system32\WerFault.exe
                                                                                                    C:\Windows\system32\WerFault.exe -pss -s 612 -p 1060 -ip 1060
                                                                                                    1⤵
                                                                                                      PID:3956
                                                                                                    • C:\Windows\system32\WerFault.exe
                                                                                                      C:\Windows\system32\WerFault.exe -pss -s 540 -p 1216 -ip 1216
                                                                                                      1⤵
                                                                                                        PID:5076
                                                                                                      • C:\Windows\explorer.exe
                                                                                                        explorer.exe
                                                                                                        1⤵
                                                                                                          PID:3104
                                                                                                          • C:\Windows\system32\WerFault.exe
                                                                                                            C:\Windows\system32\WerFault.exe -u -p 3104 -s 7448
                                                                                                            2⤵
                                                                                                            • Program crash
                                                                                                            PID:4900
                                                                                                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                          1⤵
                                                                                                            PID:744
                                                                                                          • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                            "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                            1⤵
                                                                                                              PID:4036
                                                                                                              • C:\Windows\system32\WerFault.exe
                                                                                                                C:\Windows\system32\WerFault.exe -u -p 4036 -s 3568
                                                                                                                2⤵
                                                                                                                • Program crash
                                                                                                                PID:4648
                                                                                                            • C:\Windows\system32\WerFault.exe
                                                                                                              C:\Windows\system32\WerFault.exe -pss -s 612 -p 4036 -ip 4036
                                                                                                              1⤵
                                                                                                                PID:924
                                                                                                              • C:\Windows\system32\WerFault.exe
                                                                                                                C:\Windows\system32\WerFault.exe -pss -s 632 -p 3104 -ip 3104
                                                                                                                1⤵
                                                                                                                  PID:3040
                                                                                                                • C:\Windows\explorer.exe
                                                                                                                  explorer.exe
                                                                                                                  1⤵
                                                                                                                    PID:444
                                                                                                                    • C:\Windows\system32\WerFault.exe
                                                                                                                      C:\Windows\system32\WerFault.exe -u -p 444 -s 6112
                                                                                                                      2⤵
                                                                                                                      • Program crash
                                                                                                                      PID:3804
                                                                                                                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                    1⤵
                                                                                                                      PID:3064
                                                                                                                    • C:\Windows\system32\WerFault.exe
                                                                                                                      C:\Windows\system32\WerFault.exe -pss -s 576 -p 444 -ip 444
                                                                                                                      1⤵
                                                                                                                        PID:2852
                                                                                                                      • C:\Windows\explorer.exe
                                                                                                                        explorer.exe
                                                                                                                        1⤵
                                                                                                                          PID:2704
                                                                                                                          • C:\Windows\system32\WerFault.exe
                                                                                                                            C:\Windows\system32\WerFault.exe -u -p 2704 -s 5936
                                                                                                                            2⤵
                                                                                                                            • Program crash
                                                                                                                            PID:2044
                                                                                                                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                          1⤵
                                                                                                                            PID:2208
                                                                                                                          • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                            "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                            1⤵
                                                                                                                              PID:4460
                                                                                                                              • C:\Windows\system32\WerFault.exe
                                                                                                                                C:\Windows\system32\WerFault.exe -u -p 4460 -s 3576
                                                                                                                                2⤵
                                                                                                                                • Program crash
                                                                                                                                PID:5060
                                                                                                                            • C:\Windows\system32\WerFault.exe
                                                                                                                              C:\Windows\system32\WerFault.exe -pss -s 592 -p 4460 -ip 4460
                                                                                                                              1⤵
                                                                                                                                PID:4036
                                                                                                                              • C:\Windows\system32\WerFault.exe
                                                                                                                                C:\Windows\system32\WerFault.exe -pss -s 592 -p 2704 -ip 2704
                                                                                                                                1⤵
                                                                                                                                  PID:3512
                                                                                                                                • C:\Windows\explorer.exe
                                                                                                                                  explorer.exe
                                                                                                                                  1⤵
                                                                                                                                    PID:2868
                                                                                                                                    • C:\Windows\system32\WerFault.exe
                                                                                                                                      C:\Windows\system32\WerFault.exe -u -p 2868 -s 4612
                                                                                                                                      2⤵
                                                                                                                                      • Program crash
                                                                                                                                      PID:4648
                                                                                                                                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                    1⤵
                                                                                                                                      PID:1260
                                                                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                                      1⤵
                                                                                                                                        PID:2676
                                                                                                                                        • C:\Windows\system32\WerFault.exe
                                                                                                                                          C:\Windows\system32\WerFault.exe -u -p 2676 -s 3560
                                                                                                                                          2⤵
                                                                                                                                          • Program crash
                                                                                                                                          PID:2864
                                                                                                                                      • C:\Windows\system32\WerFault.exe
                                                                                                                                        C:\Windows\system32\WerFault.exe -pss -s 604 -p 2676 -ip 2676
                                                                                                                                        1⤵
                                                                                                                                          PID:3768
                                                                                                                                        • C:\Windows\system32\WerFault.exe
                                                                                                                                          C:\Windows\system32\WerFault.exe -pss -s 420 -p 2868 -ip 2868
                                                                                                                                          1⤵
                                                                                                                                            PID:4700
                                                                                                                                          • C:\Windows\explorer.exe
                                                                                                                                            explorer.exe
                                                                                                                                            1⤵
                                                                                                                                              PID:2376
                                                                                                                                              • C:\Windows\system32\WerFault.exe
                                                                                                                                                C:\Windows\system32\WerFault.exe -u -p 2376 -s 6032
                                                                                                                                                2⤵
                                                                                                                                                • Program crash
                                                                                                                                                PID:3680
                                                                                                                                            • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                              "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                              1⤵
                                                                                                                                                PID:3720
                                                                                                                                              • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                                                "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                                                1⤵
                                                                                                                                                  PID:3316
                                                                                                                                                  • C:\Windows\system32\WerFault.exe
                                                                                                                                                    C:\Windows\system32\WerFault.exe -u -p 3316 -s 3588
                                                                                                                                                    2⤵
                                                                                                                                                    • Program crash
                                                                                                                                                    PID:2248
                                                                                                                                                • C:\Windows\system32\WerFault.exe
                                                                                                                                                  C:\Windows\system32\WerFault.exe -pss -s 624 -p 3316 -ip 3316
                                                                                                                                                  1⤵
                                                                                                                                                    PID:3876
                                                                                                                                                  • C:\Windows\system32\WerFault.exe
                                                                                                                                                    C:\Windows\system32\WerFault.exe -pss -s 632 -p 2376 -ip 2376
                                                                                                                                                    1⤵
                                                                                                                                                      PID:1464
                                                                                                                                                    • C:\Windows\explorer.exe
                                                                                                                                                      explorer.exe
                                                                                                                                                      1⤵
                                                                                                                                                        PID:3768
                                                                                                                                                        • C:\Windows\system32\WerFault.exe
                                                                                                                                                          C:\Windows\system32\WerFault.exe -u -p 3768 -s 6236
                                                                                                                                                          2⤵
                                                                                                                                                          • Program crash
                                                                                                                                                          PID:1908
                                                                                                                                                      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                                        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                                        1⤵
                                                                                                                                                          PID:1708
                                                                                                                                                        • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                                                          "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                                                          1⤵
                                                                                                                                                            PID:1528
                                                                                                                                                            • C:\Windows\system32\WerFault.exe
                                                                                                                                                              C:\Windows\system32\WerFault.exe -u -p 1528 -s 3564
                                                                                                                                                              2⤵
                                                                                                                                                              • Program crash
                                                                                                                                                              PID:1336
                                                                                                                                                          • C:\Windows\system32\WerFault.exe
                                                                                                                                                            C:\Windows\system32\WerFault.exe -pss -s 604 -p 1528 -ip 1528
                                                                                                                                                            1⤵
                                                                                                                                                              PID:1936
                                                                                                                                                            • C:\Windows\system32\WerFault.exe
                                                                                                                                                              C:\Windows\system32\WerFault.exe -pss -s 412 -p 3768 -ip 3768
                                                                                                                                                              1⤵
                                                                                                                                                                PID:2848
                                                                                                                                                              • C:\Windows\explorer.exe
                                                                                                                                                                explorer.exe
                                                                                                                                                                1⤵
                                                                                                                                                                  PID:3096
                                                                                                                                                                  • C:\Windows\system32\WerFault.exe
                                                                                                                                                                    C:\Windows\system32\WerFault.exe -u -p 3096 -s 7648
                                                                                                                                                                    2⤵
                                                                                                                                                                    • Program crash
                                                                                                                                                                    PID:2344
                                                                                                                                                                • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                                                  "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                                                  1⤵
                                                                                                                                                                    PID:3920
                                                                                                                                                                  • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                                                                    "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                                                                    1⤵
                                                                                                                                                                      PID:3704
                                                                                                                                                                      • C:\Windows\system32\WerFault.exe
                                                                                                                                                                        C:\Windows\system32\WerFault.exe -u -p 3704 -s 3584
                                                                                                                                                                        2⤵
                                                                                                                                                                        • Program crash
                                                                                                                                                                        PID:2364
                                                                                                                                                                    • C:\Windows\system32\WerFault.exe
                                                                                                                                                                      C:\Windows\system32\WerFault.exe -pss -s 600 -p 3704 -ip 3704
                                                                                                                                                                      1⤵
                                                                                                                                                                        PID:4172
                                                                                                                                                                      • C:\Windows\system32\WerFault.exe
                                                                                                                                                                        C:\Windows\system32\WerFault.exe -pss -s 568 -p 3096 -ip 3096
                                                                                                                                                                        1⤵
                                                                                                                                                                          PID:2564
                                                                                                                                                                        • C:\Windows\explorer.exe
                                                                                                                                                                          explorer.exe
                                                                                                                                                                          1⤵
                                                                                                                                                                            PID:4028
                                                                                                                                                                            • C:\Windows\system32\WerFault.exe
                                                                                                                                                                              C:\Windows\system32\WerFault.exe -u -p 4028 -s 7508
                                                                                                                                                                              2⤵
                                                                                                                                                                              • Program crash
                                                                                                                                                                              PID:3460
                                                                                                                                                                          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                                                            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                                                            1⤵
                                                                                                                                                                              PID:1780
                                                                                                                                                                            • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                                                                              "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                                                                              1⤵
                                                                                                                                                                                PID:4152
                                                                                                                                                                                • C:\Windows\system32\WerFault.exe
                                                                                                                                                                                  C:\Windows\system32\WerFault.exe -u -p 4152 -s 3608
                                                                                                                                                                                  2⤵
                                                                                                                                                                                  • Program crash
                                                                                                                                                                                  PID:60
                                                                                                                                                                              • C:\Windows\system32\WerFault.exe
                                                                                                                                                                                C:\Windows\system32\WerFault.exe -pss -s 568 -p 4152 -ip 4152
                                                                                                                                                                                1⤵
                                                                                                                                                                                  PID:3544
                                                                                                                                                                                • C:\Windows\system32\WerFault.exe
                                                                                                                                                                                  C:\Windows\system32\WerFault.exe -pss -s 548 -p 4028 -ip 4028
                                                                                                                                                                                  1⤵
                                                                                                                                                                                    PID:3584
                                                                                                                                                                                  • C:\Windows\explorer.exe
                                                                                                                                                                                    explorer.exe
                                                                                                                                                                                    1⤵
                                                                                                                                                                                      PID:1052
                                                                                                                                                                                      • C:\Windows\system32\WerFault.exe
                                                                                                                                                                                        C:\Windows\system32\WerFault.exe -u -p 1052 -s 6244
                                                                                                                                                                                        2⤵
                                                                                                                                                                                        • Program crash
                                                                                                                                                                                        PID:3668
                                                                                                                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                                                                      1⤵
                                                                                                                                                                                        PID:552
                                                                                                                                                                                      • C:\Windows\system32\WerFault.exe
                                                                                                                                                                                        C:\Windows\system32\WerFault.exe -pss -s 620 -p 1052 -ip 1052
                                                                                                                                                                                        1⤵
                                                                                                                                                                                          PID:4648
                                                                                                                                                                                        • C:\Windows\explorer.exe
                                                                                                                                                                                          explorer.exe
                                                                                                                                                                                          1⤵
                                                                                                                                                                                            PID:2996
                                                                                                                                                                                          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                                                                            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                                                                            1⤵
                                                                                                                                                                                              PID:2520
                                                                                                                                                                                            • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                                                                                              "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                                                                                              1⤵
                                                                                                                                                                                                PID:1740

                                                                                                                                                                                              Network

                                                                                                                                                                                              MITRE ATT&CK Enterprise v15

                                                                                                                                                                                              Replay Monitor

                                                                                                                                                                                              Loading Replay Monitor...

                                                                                                                                                                                              Downloads

                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\MBV9C40A\microsoft.windows[1].xml
                                                                                                                                                                                                Filesize

                                                                                                                                                                                                97B

                                                                                                                                                                                                MD5

                                                                                                                                                                                                859e2124b22e05d3e68a989282c2fb56

                                                                                                                                                                                                SHA1

                                                                                                                                                                                                e78eeb524f14146b0a533e9a5932c3783957f2c9

                                                                                                                                                                                                SHA256

                                                                                                                                                                                                bce98c19634453255e69b8f9acf09fc94337104cb0c49d218e1769d5eb903aa6

                                                                                                                                                                                                SHA512

                                                                                                                                                                                                53e677e0b8e15c89300194ea7d887c2a97dfa200329e8ab478a5dea151e4820ccec40df0ce878c1833edd08e6e3db04a48c7b7072fdf3a8a8e340541c16103fa

                                                                                                                                                                                                Download Submit

                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\MBV9C40A\microsoft.windows[1].xml
                                                                                                                                                                                                Filesize

                                                                                                                                                                                                97B

                                                                                                                                                                                                MD5

                                                                                                                                                                                                859e2124b22e05d3e68a989282c2fb56

                                                                                                                                                                                                SHA1

                                                                                                                                                                                                e78eeb524f14146b0a533e9a5932c3783957f2c9

                                                                                                                                                                                                SHA256

                                                                                                                                                                                                bce98c19634453255e69b8f9acf09fc94337104cb0c49d218e1769d5eb903aa6

                                                                                                                                                                                                SHA512

                                                                                                                                                                                                53e677e0b8e15c89300194ea7d887c2a97dfa200329e8ab478a5dea151e4820ccec40df0ce878c1833edd08e6e3db04a48c7b7072fdf3a8a8e340541c16103fa

                                                                                                                                                                                                Download Submit

                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\MBV9C40A\microsoft.windows[1].xml
                                                                                                                                                                                                Filesize

                                                                                                                                                                                                97B

                                                                                                                                                                                                MD5

                                                                                                                                                                                                859e2124b22e05d3e68a989282c2fb56

                                                                                                                                                                                                SHA1

                                                                                                                                                                                                e78eeb524f14146b0a533e9a5932c3783957f2c9

                                                                                                                                                                                                SHA256

                                                                                                                                                                                                bce98c19634453255e69b8f9acf09fc94337104cb0c49d218e1769d5eb903aa6

                                                                                                                                                                                                SHA512

                                                                                                                                                                                                53e677e0b8e15c89300194ea7d887c2a97dfa200329e8ab478a5dea151e4820ccec40df0ce878c1833edd08e6e3db04a48c7b7072fdf3a8a8e340541c16103fa

                                                                                                                                                                                                Download Submit

                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\MBV9C40A\microsoft.windows[1].xml
                                                                                                                                                                                                Filesize

                                                                                                                                                                                                97B

                                                                                                                                                                                                MD5

                                                                                                                                                                                                859e2124b22e05d3e68a989282c2fb56

                                                                                                                                                                                                SHA1

                                                                                                                                                                                                e78eeb524f14146b0a533e9a5932c3783957f2c9

                                                                                                                                                                                                SHA256

                                                                                                                                                                                                bce98c19634453255e69b8f9acf09fc94337104cb0c49d218e1769d5eb903aa6

                                                                                                                                                                                                SHA512

                                                                                                                                                                                                53e677e0b8e15c89300194ea7d887c2a97dfa200329e8ab478a5dea151e4820ccec40df0ce878c1833edd08e6e3db04a48c7b7072fdf3a8a8e340541c16103fa

                                                                                                                                                                                                Download Submit

                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\MBV9C40A\microsoft.windows[1].xml
                                                                                                                                                                                                Filesize

                                                                                                                                                                                                97B

                                                                                                                                                                                                MD5

                                                                                                                                                                                                859e2124b22e05d3e68a989282c2fb56

                                                                                                                                                                                                SHA1

                                                                                                                                                                                                e78eeb524f14146b0a533e9a5932c3783957f2c9

                                                                                                                                                                                                SHA256

                                                                                                                                                                                                bce98c19634453255e69b8f9acf09fc94337104cb0c49d218e1769d5eb903aa6

                                                                                                                                                                                                SHA512

                                                                                                                                                                                                53e677e0b8e15c89300194ea7d887c2a97dfa200329e8ab478a5dea151e4820ccec40df0ce878c1833edd08e6e3db04a48c7b7072fdf3a8a8e340541c16103fa

                                                                                                                                                                                                Download Submit

                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\MBV9C40A\microsoft.windows[1].xml
                                                                                                                                                                                                Filesize

                                                                                                                                                                                                97B

                                                                                                                                                                                                MD5

                                                                                                                                                                                                859e2124b22e05d3e68a989282c2fb56

                                                                                                                                                                                                SHA1

                                                                                                                                                                                                e78eeb524f14146b0a533e9a5932c3783957f2c9

                                                                                                                                                                                                SHA256

                                                                                                                                                                                                bce98c19634453255e69b8f9acf09fc94337104cb0c49d218e1769d5eb903aa6

                                                                                                                                                                                                SHA512

                                                                                                                                                                                                53e677e0b8e15c89300194ea7d887c2a97dfa200329e8ab478a5dea151e4820ccec40df0ce878c1833edd08e6e3db04a48c7b7072fdf3a8a8e340541c16103fa

                                                                                                                                                                                                Download Submit

                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\MBV9C40A\microsoft.windows[1].xml
                                                                                                                                                                                                Filesize

                                                                                                                                                                                                97B

                                                                                                                                                                                                MD5

                                                                                                                                                                                                859e2124b22e05d3e68a989282c2fb56

                                                                                                                                                                                                SHA1

                                                                                                                                                                                                e78eeb524f14146b0a533e9a5932c3783957f2c9

                                                                                                                                                                                                SHA256

                                                                                                                                                                                                bce98c19634453255e69b8f9acf09fc94337104cb0c49d218e1769d5eb903aa6

                                                                                                                                                                                                SHA512

                                                                                                                                                                                                53e677e0b8e15c89300194ea7d887c2a97dfa200329e8ab478a5dea151e4820ccec40df0ce878c1833edd08e6e3db04a48c7b7072fdf3a8a8e340541c16103fa

                                                                                                                                                                                                Download Submit

                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\MBV9C40A\microsoft.windows[1].xml
                                                                                                                                                                                                Filesize

                                                                                                                                                                                                97B

                                                                                                                                                                                                MD5

                                                                                                                                                                                                859e2124b22e05d3e68a989282c2fb56

                                                                                                                                                                                                SHA1

                                                                                                                                                                                                e78eeb524f14146b0a533e9a5932c3783957f2c9

                                                                                                                                                                                                SHA256

                                                                                                                                                                                                bce98c19634453255e69b8f9acf09fc94337104cb0c49d218e1769d5eb903aa6

                                                                                                                                                                                                SHA512

                                                                                                                                                                                                53e677e0b8e15c89300194ea7d887c2a97dfa200329e8ab478a5dea151e4820ccec40df0ce878c1833edd08e6e3db04a48c7b7072fdf3a8a8e340541c16103fa

                                                                                                                                                                                                Download Submit

                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\MBV9C40A\microsoft.windows[1].xml
                                                                                                                                                                                                Filesize

                                                                                                                                                                                                97B

                                                                                                                                                                                                MD5

                                                                                                                                                                                                859e2124b22e05d3e68a989282c2fb56

                                                                                                                                                                                                SHA1

                                                                                                                                                                                                e78eeb524f14146b0a533e9a5932c3783957f2c9

                                                                                                                                                                                                SHA256

                                                                                                                                                                                                bce98c19634453255e69b8f9acf09fc94337104cb0c49d218e1769d5eb903aa6

                                                                                                                                                                                                SHA512

                                                                                                                                                                                                53e677e0b8e15c89300194ea7d887c2a97dfa200329e8ab478a5dea151e4820ccec40df0ce878c1833edd08e6e3db04a48c7b7072fdf3a8a8e340541c16103fa

                                                                                                                                                                                                Download Submit

                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\MBV9C40A\microsoft.windows[1].xml
                                                                                                                                                                                                Filesize

                                                                                                                                                                                                97B

                                                                                                                                                                                                MD5

                                                                                                                                                                                                859e2124b22e05d3e68a989282c2fb56

                                                                                                                                                                                                SHA1

                                                                                                                                                                                                e78eeb524f14146b0a533e9a5932c3783957f2c9

                                                                                                                                                                                                SHA256

                                                                                                                                                                                                bce98c19634453255e69b8f9acf09fc94337104cb0c49d218e1769d5eb903aa6

                                                                                                                                                                                                SHA512

                                                                                                                                                                                                53e677e0b8e15c89300194ea7d887c2a97dfa200329e8ab478a5dea151e4820ccec40df0ce878c1833edd08e6e3db04a48c7b7072fdf3a8a8e340541c16103fa

                                                                                                                                                                                                Download Submit

                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\MBV9C40A\microsoft.windows[1].xml
                                                                                                                                                                                                Filesize

                                                                                                                                                                                                97B

                                                                                                                                                                                                MD5

                                                                                                                                                                                                859e2124b22e05d3e68a989282c2fb56

                                                                                                                                                                                                SHA1

                                                                                                                                                                                                e78eeb524f14146b0a533e9a5932c3783957f2c9

                                                                                                                                                                                                SHA256

                                                                                                                                                                                                bce98c19634453255e69b8f9acf09fc94337104cb0c49d218e1769d5eb903aa6

                                                                                                                                                                                                SHA512

                                                                                                                                                                                                53e677e0b8e15c89300194ea7d887c2a97dfa200329e8ab478a5dea151e4820ccec40df0ce878c1833edd08e6e3db04a48c7b7072fdf3a8a8e340541c16103fa

                                                                                                                                                                                                Download Submit

                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\MBV9C40A\microsoft.windows[1].xml
                                                                                                                                                                                                Filesize

                                                                                                                                                                                                97B

                                                                                                                                                                                                MD5

                                                                                                                                                                                                859e2124b22e05d3e68a989282c2fb56

                                                                                                                                                                                                SHA1

                                                                                                                                                                                                e78eeb524f14146b0a533e9a5932c3783957f2c9

                                                                                                                                                                                                SHA256

                                                                                                                                                                                                bce98c19634453255e69b8f9acf09fc94337104cb0c49d218e1769d5eb903aa6

                                                                                                                                                                                                SHA512

                                                                                                                                                                                                53e677e0b8e15c89300194ea7d887c2a97dfa200329e8ab478a5dea151e4820ccec40df0ce878c1833edd08e6e3db04a48c7b7072fdf3a8a8e340541c16103fa

                                                                                                                                                                                                Download Submit

                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\MBV9C40A\microsoft.windows[1].xml
                                                                                                                                                                                                Filesize

                                                                                                                                                                                                97B

                                                                                                                                                                                                MD5

                                                                                                                                                                                                859e2124b22e05d3e68a989282c2fb56

                                                                                                                                                                                                SHA1

                                                                                                                                                                                                e78eeb524f14146b0a533e9a5932c3783957f2c9

                                                                                                                                                                                                SHA256

                                                                                                                                                                                                bce98c19634453255e69b8f9acf09fc94337104cb0c49d218e1769d5eb903aa6

                                                                                                                                                                                                SHA512

                                                                                                                                                                                                53e677e0b8e15c89300194ea7d887c2a97dfa200329e8ab478a5dea151e4820ccec40df0ce878c1833edd08e6e3db04a48c7b7072fdf3a8a8e340541c16103fa

                                                                                                                                                                                                Download Submit

                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\MBV9C40A\microsoft.windows[1].xml
                                                                                                                                                                                                Filesize

                                                                                                                                                                                                97B

                                                                                                                                                                                                MD5

                                                                                                                                                                                                859e2124b22e05d3e68a989282c2fb56

                                                                                                                                                                                                SHA1

                                                                                                                                                                                                e78eeb524f14146b0a533e9a5932c3783957f2c9

                                                                                                                                                                                                SHA256

                                                                                                                                                                                                bce98c19634453255e69b8f9acf09fc94337104cb0c49d218e1769d5eb903aa6

                                                                                                                                                                                                SHA512

                                                                                                                                                                                                53e677e0b8e15c89300194ea7d887c2a97dfa200329e8ab478a5dea151e4820ccec40df0ce878c1833edd08e6e3db04a48c7b7072fdf3a8a8e340541c16103fa

                                                                                                                                                                                                Download Submit

                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\MBV9C40A\microsoft.windows[1].xml
                                                                                                                                                                                                Filesize

                                                                                                                                                                                                97B

                                                                                                                                                                                                MD5

                                                                                                                                                                                                859e2124b22e05d3e68a989282c2fb56

                                                                                                                                                                                                SHA1

                                                                                                                                                                                                e78eeb524f14146b0a533e9a5932c3783957f2c9

                                                                                                                                                                                                SHA256

                                                                                                                                                                                                bce98c19634453255e69b8f9acf09fc94337104cb0c49d218e1769d5eb903aa6

                                                                                                                                                                                                SHA512

                                                                                                                                                                                                53e677e0b8e15c89300194ea7d887c2a97dfa200329e8ab478a5dea151e4820ccec40df0ce878c1833edd08e6e3db04a48c7b7072fdf3a8a8e340541c16103fa

                                                                                                                                                                                                Download Submit

                                                                                                                                                                                              • memory/1060-197-0x0000029E0EC20000-0x0000029E0EC40000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/1060-202-0x0000029E0F090000-0x0000029E0F0B0000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/1060-200-0x0000029E0E9D0000-0x0000029E0E9F0000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/1216-190-0x00000000041D0000-0x00000000041D1000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                4KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/1376-62-0x000001B5A79F0000-0x000001B5A7A10000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/1376-56-0x000001B5A75F0000-0x000001B5A7610000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/1376-59-0x000001B5A75B0000-0x000001B5A75D0000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/1440-38-0x0000022600600000-0x0000022600620000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/1440-36-0x0000022E7FF50000-0x0000022E7FF70000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/1440-33-0x0000022E7FF90000-0x0000022E7FFB0000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/1528-311-0x00000228FD480000-0x00000228FD4A0000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/1528-128-0x000002D730470000-0x000002D730490000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/1528-131-0x000002D730430000-0x000002D730450000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/1528-135-0x000002D7308F0000-0x000002D730910000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/1528-313-0x00000228FD440000-0x00000228FD460000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/1528-316-0x00000228FD850000-0x00000228FD870000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/1528-179-0x0000022E9D9E0000-0x0000022E9DA00000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/1528-176-0x0000022E9D3D0000-0x0000022E9D3F0000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/1528-174-0x0000022E9D620000-0x0000022E9D640000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/2292-97-0x0000000004EF0000-0x0000000004EF1000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                4KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/2316-158-0x000001F185C80000-0x000001F185CA0000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/2316-155-0x000001F1855C0000-0x000001F1855E0000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/2316-151-0x000001F185630000-0x000001F185650000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/2376-281-0x0000000004690000-0x0000000004691000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                4KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/2520-120-0x0000000003340000-0x0000000003341000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                4KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/2676-268-0x000002580B880000-0x000002580B8A0000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/2676-270-0x000002580B840000-0x000002580B860000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/2676-274-0x000002580BC50000-0x000002580BC70000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/2704-237-0x00000000049E0000-0x00000000049E1000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                4KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/2868-260-0x00000000047F0000-0x00000000047F1000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                4KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/2996-73-0x0000000004B50000-0x0000000004B51000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                4KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/3096-322-0x0000000004A30000-0x0000000004A31000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                4KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/3104-212-0x0000000004610000-0x0000000004611000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                4KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/3280-87-0x000001FDD5B90000-0x000001FDD5BB0000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/3280-81-0x000001FDD5500000-0x000001FDD5520000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/3280-84-0x000001FDD54C0000-0x000001FDD54E0000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/3316-288-0x0000021E14F20000-0x0000021E14F40000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/3316-290-0x0000021E14BD0000-0x0000021E14BF0000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/3316-292-0x0000021E15370000-0x0000021E15390000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/3488-15-0x00000191ED940000-0x00000191ED960000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/3488-13-0x00000191ED1A0000-0x00000191ED1C0000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/3488-10-0x00000191ED1E0000-0x00000191ED200000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/3668-144-0x00000000047B0000-0x00000000047B1000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                4KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/3704-332-0x0000025E9AD00000-0x0000025E9AD20000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/3704-334-0x0000025E9B170000-0x0000025E9B190000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/3704-329-0x0000025E9AD40000-0x0000025E9AD60000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/3712-26-0x0000000004C60000-0x0000000004C61000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                4KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/3768-304-0x0000000004760000-0x0000000004761000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                4KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/3816-167-0x0000000004D00000-0x0000000004D01000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                4KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/4028-341-0x0000000004B00000-0x0000000004B01000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                4KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/4036-220-0x00000256115D0000-0x00000256115F0000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/4036-222-0x0000025611590000-0x00000256115B0000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/4036-225-0x0000025611A30000-0x0000025611A50000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/4152-354-0x000002C55AF40000-0x000002C55AF60000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/4152-352-0x000002C55AB30000-0x000002C55AB50000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/4152-349-0x000002C55AB70000-0x000002C55AB90000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/4224-108-0x000001E598DE0000-0x000001E598E00000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/4224-104-0x000001E598960000-0x000001E598980000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/4224-106-0x000001E598920000-0x000001E598940000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/4424-48-0x0000000002E10000-0x0000000002E11000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                4KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/4460-246-0x000001D938240000-0x000001D938260000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/4460-244-0x000001D938280000-0x000001D9382A0000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/4460-248-0x000001D9386E0000-0x000001D938700000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                128KB

                                                                                                                                                                                                Download

                                                                                                                                                                                              • memory/5044-3-0x0000000004E10000-0x0000000004E11000-memory.dmp

                                                                                                                                                                                                Filesize

                                                                                                                                                                                                4KB

                                                                                                                                                                                                Download