Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

5ec0805878...1c.exe

windows7-x64

8

5ec0805878...1c.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    39s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/09/2023, 11:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5ec0805878a8d1cc01edd09b61eee48238b7483c34842c62352bbaff59ca121c.exe

  • Size

    2.8MB

  • MD5

    c695cac6d0ac9ef2f7baf1e6a04af7a6

  • SHA1

    f96ae4e7d0766ebe42df1260a51bb26df2bde195

  • SHA256

    5ec0805878a8d1cc01edd09b61eee48238b7483c34842c62352bbaff59ca121c

  • SHA512

    1f31ef012fcbe00e8ea36a4075a11fc01e238024e06f5a1f8264fab1c83927d039ad588adee23fa2d1e39e9040a73bea9004825965aceb73ff7a0c929218f404

  • SSDEEP

    49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlVhotQ4eid/oZ:c+8X9G3vP3AMRotQ4eE/oZ

Score
8/10
persistence

Malware Config

Signatures

  • Modifies Installed Components in the registry 2 TTPs 6 IoCs
    persistence
  • Enumerates connected drives 3 TTPs 12 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 4 IoCs
    adwarespyware
  • Modifies registry class 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 7 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\5ec0805878a8d1cc01edd09b61eee48238b7483c34842c62352bbaff59ca121c.exe
    "C:\Users\Admin\AppData\Local\Temp\5ec0805878a8d1cc01edd09b61eee48238b7483c34842c62352bbaff59ca121c.exe"
    1⤵
      PID:4912
    • C:\Windows\explorer.exe
      explorer.exe
      1⤵
      • Modifies Installed Components in the registry
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      PID:3576
    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
      1⤵
      • Modifies registry class
      PID:3700
    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
      1⤵
      • Suspicious use of SetWindowsHookEx
      PID:4472
    • C:\Windows\explorer.exe
      explorer.exe
      1⤵
      • Modifies Installed Components in the registry
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      PID:972
    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
      1⤵
      • Suspicious use of SetWindowsHookEx
      PID:5032
    • C:\Windows\explorer.exe
      explorer.exe
      1⤵
      • Modifies Installed Components in the registry
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies registry class
      • Suspicious use of SendNotifyMessage
      PID:1696
    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
      1⤵
        PID:1012
      • C:\Windows\explorer.exe
        explorer.exe
        1⤵
        • Modifies Installed Components in the registry
        • Enumerates connected drives
        • Checks SCSI registry key(s)
        • Modifies registry class
        • Suspicious use of SendNotifyMessage
        PID:3796
      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
        1⤵
          PID:4888
        • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
          "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
          1⤵
            PID:4860
          • C:\Windows\explorer.exe
            explorer.exe
            1⤵
              PID:3328
            • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
              "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
              1⤵
              • Modifies registry class
              • Suspicious use of SetWindowsHookEx
              PID:4060
            • C:\Windows\explorer.exe
              explorer.exe
              1⤵
                PID:3424
              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                1⤵
                  PID:3452
                • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                  "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                  1⤵
                    PID:1340
                  • C:\Windows\explorer.exe
                    explorer.exe
                    1⤵
                      PID:4356
                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                      1⤵
                        PID:3716
                      • C:\Windows\explorer.exe
                        explorer.exe
                        1⤵
                        • Modifies Internet Explorer settings
                        • Modifies registry class
                        • Suspicious use of SetWindowsHookEx
                        PID:4860
                      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                        1⤵
                          PID:5020
                        • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                          "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                          1⤵
                            PID:1824
                          • C:\Windows\explorer.exe
                            explorer.exe
                            1⤵
                              PID:3244
                            • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                              "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                              1⤵
                                PID:3888
                              • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                1⤵
                                  PID:4168
                                • C:\Windows\explorer.exe
                                  explorer.exe
                                  1⤵
                                    PID:3636
                                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                    1⤵
                                      PID:4544
                                    • C:\Windows\explorer.exe
                                      explorer.exe
                                      1⤵
                                        PID:752
                                      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                        1⤵
                                          PID:3700
                                        • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                          "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                          1⤵
                                            PID:4324
                                          • C:\Windows\explorer.exe
                                            explorer.exe
                                            1⤵
                                              PID:2264
                                            • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                              "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                              1⤵
                                                PID:3160
                                              • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                1⤵
                                                  PID:3244
                                                • C:\Windows\explorer.exe
                                                  explorer.exe
                                                  1⤵
                                                    PID:3904
                                                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                    1⤵
                                                      PID:4472
                                                    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                      1⤵
                                                        PID:376
                                                      • C:\Windows\explorer.exe
                                                        explorer.exe
                                                        1⤵
                                                          PID:3608
                                                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                          1⤵
                                                            PID:3240
                                                          • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                            "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                            1⤵
                                                              PID:3384
                                                            • C:\Windows\explorer.exe
                                                              explorer.exe
                                                              1⤵
                                                                PID:3364
                                                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                1⤵
                                                                  PID:1912
                                                                • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                  "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                  1⤵
                                                                    PID:4064
                                                                  • C:\Windows\explorer.exe
                                                                    explorer.exe
                                                                    1⤵
                                                                      PID:3244
                                                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                      1⤵
                                                                        PID:3368
                                                                      • C:\Windows\explorer.exe
                                                                        explorer.exe
                                                                        1⤵
                                                                          PID:4648
                                                                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                          1⤵
                                                                            PID:3436
                                                                          • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                            "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                            1⤵
                                                                              PID:3708
                                                                            • C:\Windows\explorer.exe
                                                                              explorer.exe
                                                                              1⤵
                                                                                PID:916
                                                                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                1⤵
                                                                                  PID:4204
                                                                                • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                  "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                  1⤵
                                                                                    PID:2284
                                                                                  • C:\Windows\explorer.exe
                                                                                    explorer.exe
                                                                                    1⤵
                                                                                      PID:676
                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                      1⤵
                                                                                        PID:4700
                                                                                      • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                        "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                        1⤵
                                                                                          PID:3648
                                                                                        • C:\Windows\explorer.exe
                                                                                          explorer.exe
                                                                                          1⤵
                                                                                            PID:1520
                                                                                          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                            1⤵
                                                                                              PID:4656
                                                                                            • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                              "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                              1⤵
                                                                                                PID:2896
                                                                                              • C:\Windows\explorer.exe
                                                                                                explorer.exe
                                                                                                1⤵
                                                                                                  PID:3436
                                                                                                • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                  "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                  1⤵
                                                                                                    PID:3236
                                                                                                  • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                    "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                    1⤵
                                                                                                      PID:1276
                                                                                                    • C:\Windows\explorer.exe
                                                                                                      explorer.exe
                                                                                                      1⤵
                                                                                                        PID:1824
                                                                                                      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                        1⤵
                                                                                                          PID:3780
                                                                                                        • C:\Windows\explorer.exe
                                                                                                          explorer.exe
                                                                                                          1⤵
                                                                                                            PID:620
                                                                                                          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                            1⤵
                                                                                                              PID:3348
                                                                                                            • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                              "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                              1⤵
                                                                                                                PID:1864
                                                                                                              • C:\Windows\explorer.exe
                                                                                                                explorer.exe
                                                                                                                1⤵
                                                                                                                  PID:1440
                                                                                                                • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                  "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                  1⤵
                                                                                                                    PID:4080
                                                                                                                  • C:\Windows\explorer.exe
                                                                                                                    explorer.exe
                                                                                                                    1⤵
                                                                                                                      PID:4100
                                                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                      1⤵
                                                                                                                        PID:184
                                                                                                                      • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                        "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                        1⤵
                                                                                                                          PID:1536
                                                                                                                        • C:\Windows\explorer.exe
                                                                                                                          explorer.exe
                                                                                                                          1⤵
                                                                                                                            PID:4356
                                                                                                                          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                            1⤵
                                                                                                                              PID:4036
                                                                                                                            • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                              "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                              1⤵
                                                                                                                                PID:1396
                                                                                                                              • C:\Windows\explorer.exe
                                                                                                                                explorer.exe
                                                                                                                                1⤵
                                                                                                                                  PID:5024
                                                                                                                                • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                  "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                  1⤵
                                                                                                                                    PID:2548
                                                                                                                                  • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                                    "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                                    1⤵
                                                                                                                                      PID:872

                                                                                                                                    Network

                                                                                                                                    MITRE ATT&CK Enterprise v15

                                                                                                                                    Replay Monitor

                                                                                                                                    Loading Replay Monitor...

                                                                                                                                    Downloads

                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\QVHQQQV3\microsoft.windows[1].xml
                                                                                                                                      Filesize

                                                                                                                                      97B

                                                                                                                                      MD5

                                                                                                                                      e403893cb1eff096a3a681a4e18bfc57

                                                                                                                                      SHA1

                                                                                                                                      2b77a9b05a98def1630f2d224077297c5aa719bc

                                                                                                                                      SHA256

                                                                                                                                      5a67e1471e50d3e01653afe33268399829528a3d7c0e41dcd2d1e0c66670d066

                                                                                                                                      SHA512

                                                                                                                                      c8da1987035c0ee26cf94ecac9436d2e4abe7a512471231666e7e1e25b48b9aa033ad4a68075e7f4a83c9a5229718906a15dec6a15c57d39a7e6d3bd99ecd564

                                                                                                                                      Download Submit

                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133392354643223749.txt
                                                                                                                                      Filesize

                                                                                                                                      75KB

                                                                                                                                      MD5

                                                                                                                                      62d81c2e1e8b21733f95af2a596e4b18

                                                                                                                                      SHA1

                                                                                                                                      91c005ecc5ae4171f450c43c02d1ba532b4474c6

                                                                                                                                      SHA256

                                                                                                                                      a5596f83717bf64653b95ffe6ec38f20e40fd928456d5e254a53a440804d80b6

                                                                                                                                      SHA512

                                                                                                                                      c7f349acf55694ff696750c30a25c265ff07ced95e4d2a88fa2829d047ca3b3007dc824613a8c403c7613085aca4212155afe03f8f237c0d7781fd87e1fb8a7c

                                                                                                                                      Download Submit

                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133392354643223749.txt
                                                                                                                                      Filesize

                                                                                                                                      75KB

                                                                                                                                      MD5

                                                                                                                                      62d81c2e1e8b21733f95af2a596e4b18

                                                                                                                                      SHA1

                                                                                                                                      91c005ecc5ae4171f450c43c02d1ba532b4474c6

                                                                                                                                      SHA256

                                                                                                                                      a5596f83717bf64653b95ffe6ec38f20e40fd928456d5e254a53a440804d80b6

                                                                                                                                      SHA512

                                                                                                                                      c7f349acf55694ff696750c30a25c265ff07ced95e4d2a88fa2829d047ca3b3007dc824613a8c403c7613085aca4212155afe03f8f237c0d7781fd87e1fb8a7c

                                                                                                                                      Download Submit

                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\QVHQQQV3\microsoft.windows[1].xml
                                                                                                                                      Filesize

                                                                                                                                      97B

                                                                                                                                      MD5

                                                                                                                                      e403893cb1eff096a3a681a4e18bfc57

                                                                                                                                      SHA1

                                                                                                                                      2b77a9b05a98def1630f2d224077297c5aa719bc

                                                                                                                                      SHA256

                                                                                                                                      5a67e1471e50d3e01653afe33268399829528a3d7c0e41dcd2d1e0c66670d066

                                                                                                                                      SHA512

                                                                                                                                      c8da1987035c0ee26cf94ecac9436d2e4abe7a512471231666e7e1e25b48b9aa033ad4a68075e7f4a83c9a5229718906a15dec6a15c57d39a7e6d3bd99ecd564

                                                                                                                                      Download Submit

                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\QVHQQQV3\microsoft.windows[1].xml
                                                                                                                                      Filesize

                                                                                                                                      97B

                                                                                                                                      MD5

                                                                                                                                      e403893cb1eff096a3a681a4e18bfc57

                                                                                                                                      SHA1

                                                                                                                                      2b77a9b05a98def1630f2d224077297c5aa719bc

                                                                                                                                      SHA256

                                                                                                                                      5a67e1471e50d3e01653afe33268399829528a3d7c0e41dcd2d1e0c66670d066

                                                                                                                                      SHA512

                                                                                                                                      c8da1987035c0ee26cf94ecac9436d2e4abe7a512471231666e7e1e25b48b9aa033ad4a68075e7f4a83c9a5229718906a15dec6a15c57d39a7e6d3bd99ecd564

                                                                                                                                      Download Submit

                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\QVHQQQV3\microsoft.windows[1].xml
                                                                                                                                      Filesize

                                                                                                                                      97B

                                                                                                                                      MD5

                                                                                                                                      e403893cb1eff096a3a681a4e18bfc57

                                                                                                                                      SHA1

                                                                                                                                      2b77a9b05a98def1630f2d224077297c5aa719bc

                                                                                                                                      SHA256

                                                                                                                                      5a67e1471e50d3e01653afe33268399829528a3d7c0e41dcd2d1e0c66670d066

                                                                                                                                      SHA512

                                                                                                                                      c8da1987035c0ee26cf94ecac9436d2e4abe7a512471231666e7e1e25b48b9aa033ad4a68075e7f4a83c9a5229718906a15dec6a15c57d39a7e6d3bd99ecd564

                                                                                                                                      Download Submit

                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\QVHQQQV3\microsoft.windows[1].xml
                                                                                                                                      Filesize

                                                                                                                                      97B

                                                                                                                                      MD5

                                                                                                                                      e403893cb1eff096a3a681a4e18bfc57

                                                                                                                                      SHA1

                                                                                                                                      2b77a9b05a98def1630f2d224077297c5aa719bc

                                                                                                                                      SHA256

                                                                                                                                      5a67e1471e50d3e01653afe33268399829528a3d7c0e41dcd2d1e0c66670d066

                                                                                                                                      SHA512

                                                                                                                                      c8da1987035c0ee26cf94ecac9436d2e4abe7a512471231666e7e1e25b48b9aa033ad4a68075e7f4a83c9a5229718906a15dec6a15c57d39a7e6d3bd99ecd564

                                                                                                                                      Download Submit

                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\QVHQQQV3\microsoft.windows[1].xml
                                                                                                                                      Filesize

                                                                                                                                      97B

                                                                                                                                      MD5

                                                                                                                                      e403893cb1eff096a3a681a4e18bfc57

                                                                                                                                      SHA1

                                                                                                                                      2b77a9b05a98def1630f2d224077297c5aa719bc

                                                                                                                                      SHA256

                                                                                                                                      5a67e1471e50d3e01653afe33268399829528a3d7c0e41dcd2d1e0c66670d066

                                                                                                                                      SHA512

                                                                                                                                      c8da1987035c0ee26cf94ecac9436d2e4abe7a512471231666e7e1e25b48b9aa033ad4a68075e7f4a83c9a5229718906a15dec6a15c57d39a7e6d3bd99ecd564

                                                                                                                                      Download Submit

                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\QVHQQQV3\microsoft.windows[1].xml
                                                                                                                                      Filesize

                                                                                                                                      97B

                                                                                                                                      MD5

                                                                                                                                      e403893cb1eff096a3a681a4e18bfc57

                                                                                                                                      SHA1

                                                                                                                                      2b77a9b05a98def1630f2d224077297c5aa719bc

                                                                                                                                      SHA256

                                                                                                                                      5a67e1471e50d3e01653afe33268399829528a3d7c0e41dcd2d1e0c66670d066

                                                                                                                                      SHA512

                                                                                                                                      c8da1987035c0ee26cf94ecac9436d2e4abe7a512471231666e7e1e25b48b9aa033ad4a68075e7f4a83c9a5229718906a15dec6a15c57d39a7e6d3bd99ecd564

                                                                                                                                      Download Submit

                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\QVHQQQV3\microsoft.windows[1].xml
                                                                                                                                      Filesize

                                                                                                                                      97B

                                                                                                                                      MD5

                                                                                                                                      e403893cb1eff096a3a681a4e18bfc57

                                                                                                                                      SHA1

                                                                                                                                      2b77a9b05a98def1630f2d224077297c5aa719bc

                                                                                                                                      SHA256

                                                                                                                                      5a67e1471e50d3e01653afe33268399829528a3d7c0e41dcd2d1e0c66670d066

                                                                                                                                      SHA512

                                                                                                                                      c8da1987035c0ee26cf94ecac9436d2e4abe7a512471231666e7e1e25b48b9aa033ad4a68075e7f4a83c9a5229718906a15dec6a15c57d39a7e6d3bd99ecd564

                                                                                                                                      Download Submit

                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\QVHQQQV3\microsoft.windows[1].xml
                                                                                                                                      Filesize

                                                                                                                                      97B

                                                                                                                                      MD5

                                                                                                                                      e403893cb1eff096a3a681a4e18bfc57

                                                                                                                                      SHA1

                                                                                                                                      2b77a9b05a98def1630f2d224077297c5aa719bc

                                                                                                                                      SHA256

                                                                                                                                      5a67e1471e50d3e01653afe33268399829528a3d7c0e41dcd2d1e0c66670d066

                                                                                                                                      SHA512

                                                                                                                                      c8da1987035c0ee26cf94ecac9436d2e4abe7a512471231666e7e1e25b48b9aa033ad4a68075e7f4a83c9a5229718906a15dec6a15c57d39a7e6d3bd99ecd564

                                                                                                                                      Download Submit

                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\QVHQQQV3\microsoft.windows[1].xml
                                                                                                                                      Filesize

                                                                                                                                      97B

                                                                                                                                      MD5

                                                                                                                                      e403893cb1eff096a3a681a4e18bfc57

                                                                                                                                      SHA1

                                                                                                                                      2b77a9b05a98def1630f2d224077297c5aa719bc

                                                                                                                                      SHA256

                                                                                                                                      5a67e1471e50d3e01653afe33268399829528a3d7c0e41dcd2d1e0c66670d066

                                                                                                                                      SHA512

                                                                                                                                      c8da1987035c0ee26cf94ecac9436d2e4abe7a512471231666e7e1e25b48b9aa033ad4a68075e7f4a83c9a5229718906a15dec6a15c57d39a7e6d3bd99ecd564

                                                                                                                                      Download Submit

                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\QVHQQQV3\microsoft.windows[1].xml
                                                                                                                                      Filesize

                                                                                                                                      97B

                                                                                                                                      MD5

                                                                                                                                      e403893cb1eff096a3a681a4e18bfc57

                                                                                                                                      SHA1

                                                                                                                                      2b77a9b05a98def1630f2d224077297c5aa719bc

                                                                                                                                      SHA256

                                                                                                                                      5a67e1471e50d3e01653afe33268399829528a3d7c0e41dcd2d1e0c66670d066

                                                                                                                                      SHA512

                                                                                                                                      c8da1987035c0ee26cf94ecac9436d2e4abe7a512471231666e7e1e25b48b9aa033ad4a68075e7f4a83c9a5229718906a15dec6a15c57d39a7e6d3bd99ecd564

                                                                                                                                      Download Submit

                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\QVHQQQV3\microsoft.windows[1].xml
                                                                                                                                      Filesize

                                                                                                                                      97B

                                                                                                                                      MD5

                                                                                                                                      e403893cb1eff096a3a681a4e18bfc57

                                                                                                                                      SHA1

                                                                                                                                      2b77a9b05a98def1630f2d224077297c5aa719bc

                                                                                                                                      SHA256

                                                                                                                                      5a67e1471e50d3e01653afe33268399829528a3d7c0e41dcd2d1e0c66670d066

                                                                                                                                      SHA512

                                                                                                                                      c8da1987035c0ee26cf94ecac9436d2e4abe7a512471231666e7e1e25b48b9aa033ad4a68075e7f4a83c9a5229718906a15dec6a15c57d39a7e6d3bd99ecd564

                                                                                                                                      Download Submit

                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\QVHQQQV3\microsoft.windows[1].xml
                                                                                                                                      Filesize

                                                                                                                                      97B

                                                                                                                                      MD5

                                                                                                                                      e403893cb1eff096a3a681a4e18bfc57

                                                                                                                                      SHA1

                                                                                                                                      2b77a9b05a98def1630f2d224077297c5aa719bc

                                                                                                                                      SHA256

                                                                                                                                      5a67e1471e50d3e01653afe33268399829528a3d7c0e41dcd2d1e0c66670d066

                                                                                                                                      SHA512

                                                                                                                                      c8da1987035c0ee26cf94ecac9436d2e4abe7a512471231666e7e1e25b48b9aa033ad4a68075e7f4a83c9a5229718906a15dec6a15c57d39a7e6d3bd99ecd564

                                                                                                                                      Download Submit

                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\QVHQQQV3\microsoft.windows[1].xml
                                                                                                                                      Filesize

                                                                                                                                      97B

                                                                                                                                      MD5

                                                                                                                                      e403893cb1eff096a3a681a4e18bfc57

                                                                                                                                      SHA1

                                                                                                                                      2b77a9b05a98def1630f2d224077297c5aa719bc

                                                                                                                                      SHA256

                                                                                                                                      5a67e1471e50d3e01653afe33268399829528a3d7c0e41dcd2d1e0c66670d066

                                                                                                                                      SHA512

                                                                                                                                      c8da1987035c0ee26cf94ecac9436d2e4abe7a512471231666e7e1e25b48b9aa033ad4a68075e7f4a83c9a5229718906a15dec6a15c57d39a7e6d3bd99ecd564

                                                                                                                                      Download Submit

                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\QVHQQQV3\microsoft.windows[1].xml
                                                                                                                                      Filesize

                                                                                                                                      97B

                                                                                                                                      MD5

                                                                                                                                      e403893cb1eff096a3a681a4e18bfc57

                                                                                                                                      SHA1

                                                                                                                                      2b77a9b05a98def1630f2d224077297c5aa719bc

                                                                                                                                      SHA256

                                                                                                                                      5a67e1471e50d3e01653afe33268399829528a3d7c0e41dcd2d1e0c66670d066

                                                                                                                                      SHA512

                                                                                                                                      c8da1987035c0ee26cf94ecac9436d2e4abe7a512471231666e7e1e25b48b9aa033ad4a68075e7f4a83c9a5229718906a15dec6a15c57d39a7e6d3bd99ecd564

                                                                                                                                      Download Submit

                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\QVHQQQV3\microsoft.windows[1].xml
                                                                                                                                      Filesize

                                                                                                                                      97B

                                                                                                                                      MD5

                                                                                                                                      e403893cb1eff096a3a681a4e18bfc57

                                                                                                                                      SHA1

                                                                                                                                      2b77a9b05a98def1630f2d224077297c5aa719bc

                                                                                                                                      SHA256

                                                                                                                                      5a67e1471e50d3e01653afe33268399829528a3d7c0e41dcd2d1e0c66670d066

                                                                                                                                      SHA512

                                                                                                                                      c8da1987035c0ee26cf94ecac9436d2e4abe7a512471231666e7e1e25b48b9aa033ad4a68075e7f4a83c9a5229718906a15dec6a15c57d39a7e6d3bd99ecd564

                                                                                                                                      Download Submit

                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\QVHQQQV3\microsoft.windows[1].xml
                                                                                                                                      Filesize

                                                                                                                                      97B

                                                                                                                                      MD5

                                                                                                                                      e403893cb1eff096a3a681a4e18bfc57

                                                                                                                                      SHA1

                                                                                                                                      2b77a9b05a98def1630f2d224077297c5aa719bc

                                                                                                                                      SHA256

                                                                                                                                      5a67e1471e50d3e01653afe33268399829528a3d7c0e41dcd2d1e0c66670d066

                                                                                                                                      SHA512

                                                                                                                                      c8da1987035c0ee26cf94ecac9436d2e4abe7a512471231666e7e1e25b48b9aa033ad4a68075e7f4a83c9a5229718906a15dec6a15c57d39a7e6d3bd99ecd564

                                                                                                                                      Download Submit

                                                                                                                                    • memory/376-191-0x000001FEEB020000-0x000001FEEB040000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/376-196-0x000001FEEB430000-0x000001FEEB450000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/376-189-0x000001FEEB060000-0x000001FEEB080000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/620-368-0x0000000004010000-0x0000000004011000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      4KB

                                                                                                                                      Download

                                                                                                                                    • memory/676-299-0x00000000041C0000-0x00000000041C1000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      4KB

                                                                                                                                      Download

                                                                                                                                    • memory/752-135-0x00000000045D0000-0x00000000045D1000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      4KB

                                                                                                                                      Download

                                                                                                                                    • memory/916-275-0x0000000003FE0000-0x0000000003FE1000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      4KB

                                                                                                                                      Download

                                                                                                                                    • memory/972-17-0x0000000004E10000-0x0000000004E11000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      4KB

                                                                                                                                      Download

                                                                                                                                    • memory/1276-354-0x0000027A16BF0000-0x0000027A16C10000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/1276-352-0x0000027A16C30000-0x0000027A16C50000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/1276-356-0x0000027A17000000-0x0000027A17020000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/1340-79-0x0000014443FF0000-0x0000014444010000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/1340-75-0x00000144439E0000-0x0000014443A00000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/1340-72-0x0000014443C20000-0x0000014443C40000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/1520-321-0x0000000004860000-0x0000000004861000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      4KB

                                                                                                                                      Download

                                                                                                                                    • memory/1824-99-0x00000275263B0000-0x00000275263D0000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/1824-96-0x00000275263F0000-0x0000027526410000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/1824-101-0x00000275267C0000-0x00000275267E0000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/1864-383-0x000002A83DF50000-0x000002A83DF70000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/1864-379-0x000002A83DB40000-0x000002A83DB60000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/1864-376-0x000002A83DB80000-0x000002A83DBA0000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/2264-158-0x00000000028A0000-0x00000000028A1000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      4KB

                                                                                                                                      Download

                                                                                                                                    • memory/2284-283-0x00000201BD9A0000-0x00000201BD9C0000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/2284-287-0x00000201BDF80000-0x00000201BDFA0000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/2284-285-0x00000201BD960000-0x00000201BD980000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/2896-334-0x000001CD31600000-0x000001CD31620000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/2896-331-0x000001CD31200000-0x000001CD31220000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/2896-329-0x000001CD31240000-0x000001CD31260000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/3244-170-0x0000020433710000-0x0000020433730000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/3244-168-0x0000020433300000-0x0000020433320000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/3244-166-0x0000020433340000-0x0000020433360000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/3244-111-0x0000000004540000-0x0000000004541000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      4KB

                                                                                                                                      Download

                                                                                                                                    • memory/3364-228-0x0000000004340000-0x0000000004341000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      4KB

                                                                                                                                      Download

                                                                                                                                    • memory/3384-212-0x000001AD6A270000-0x000001AD6A290000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/3384-217-0x000001AD6A640000-0x000001AD6A660000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/3384-214-0x000001AD6A230000-0x000001AD6A250000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/3424-64-0x00000000034B0000-0x00000000034B1000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      4KB

                                                                                                                                      Download

                                                                                                                                    • memory/3436-344-0x0000000004920000-0x0000000004921000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      4KB

                                                                                                                                      Download

                                                                                                                                    • memory/3608-204-0x0000000004290000-0x0000000004291000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      4KB

                                                                                                                                      Download

                                                                                                                                    • memory/3648-306-0x000001CC832E0000-0x000001CC83300000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/3648-313-0x000001CC838C0000-0x000001CC838E0000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/3648-309-0x000001CC832A0000-0x000001CC832C0000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/3700-30-0x0000018DFBE30000-0x0000018DFBE50000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/3700-27-0x0000018DFBA20000-0x0000018DFBA40000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/3700-23-0x0000018DFBA60000-0x0000018DFBA80000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/3708-260-0x0000021EBAF20000-0x0000021EBAF40000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/3708-262-0x0000021EBABE0000-0x0000021EBAC00000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/3708-264-0x0000021EBB2F0000-0x0000021EBB310000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/3796-40-0x0000000003FB0000-0x0000000003FB1000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      4KB

                                                                                                                                      Download

                                                                                                                                    • memory/3904-181-0x00000000047F0000-0x00000000047F1000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      4KB

                                                                                                                                      Download

                                                                                                                                    • memory/4064-235-0x00000214054D0000-0x00000214054F0000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/4064-242-0x00000214058A0000-0x00000214058C0000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/4064-237-0x0000021405490000-0x00000214054B0000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/4168-119-0x000001726FDF0000-0x000001726FE10000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/4168-121-0x000001726FDB0000-0x000001726FDD0000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/4168-123-0x00000172701C0000-0x00000172701E0000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/4324-143-0x0000021F101E0000-0x0000021F10200000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/4324-145-0x0000021F101A0000-0x0000021F101C0000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/4324-147-0x0000021F107B0000-0x0000021F107D0000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/4648-253-0x00000000040D0000-0x00000000040D1000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      4KB

                                                                                                                                      Download

                                                                                                                                    • memory/4860-48-0x0000022DE6680000-0x0000022DE66A0000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/4860-51-0x0000022DE6640000-0x0000022DE6660000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/4860-54-0x0000022DE6A50000-0x0000022DE6A70000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      128KB

                                                                                                                                      Download

                                                                                                                                    • memory/4860-88-0x0000000004ED0000-0x0000000004ED1000-memory.dmp

                                                                                                                                      Filesize

                                                                                                                                      4KB

                                                                                                                                      Download