Overview

overview

8

Static

static

3

247c462398...ec.exe

windows7-x64

8

247c462398...ec.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    20s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/10/2023, 15:02

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    247c4623988bdb5fb00b449d1299d24e28730f74c2e05162d8b4f6f48a0c70ec.exe

  • Size

    2.8MB

  • MD5

    062bb85d391b60a8937e932fbd1785bb

  • SHA1

    ab475e3c771468f93d5cc942e5730c76c622ee50

  • SHA256

    247c4623988bdb5fb00b449d1299d24e28730f74c2e05162d8b4f6f48a0c70ec

  • SHA512

    ac6887c48f20f60930a025148205c9b0f76a0756908fb626a811255fbe02bc4ebdb4f1db2c6df467d568922693880758bce0dc8b24fc8a2f04e91aad7b51430a

  • SSDEEP

    49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlVhsXf0itNN3cXl:Q+8X9G3vP3AMVsXf0i13K

Score
8/10
persistence

Malware Config

Signatures

  • Modifies Installed Components in the registry 2 TTPs 3 IoCs
    persistence
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies registry class 36 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 52 IoCs
  • Suspicious use of SendNotifyMessage 33 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\247c4623988bdb5fb00b449d1299d24e28730f74c2e05162d8b4f6f48a0c70ec.exe
    "C:\Users\Admin\AppData\Local\Temp\247c4623988bdb5fb00b449d1299d24e28730f74c2e05162d8b4f6f48a0c70ec.exe"
    1⤵
      PID:1360
    • C:\Windows\explorer.exe
      explorer.exe
      1⤵
      • Modifies Installed Components in the registry
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      PID:4536
    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
      1⤵
        PID:392
      • C:\Windows\explorer.exe
        explorer.exe
        1⤵
        • Modifies Installed Components in the registry
        • Enumerates connected drives
        • Checks SCSI registry key(s)
        • Modifies registry class
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        PID:4000
      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
        1⤵
        • Modifies registry class
        • Suspicious use of SetWindowsHookEx
        PID:4036
      • C:\Windows\explorer.exe
        explorer.exe
        1⤵
        • Modifies Installed Components in the registry
        • Enumerates connected drives
        • Checks SCSI registry key(s)
        • Modifies registry class
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        PID:2028
      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
        1⤵
        • Modifies registry class
        • Suspicious use of SetWindowsHookEx
        PID:3252
      • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
        "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
        1⤵
        • Modifies registry class
        • Suspicious use of SetWindowsHookEx
        PID:732
      • C:\Windows\explorer.exe
        explorer.exe
        1⤵
          PID:3196
        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
          1⤵
            PID:4136
          • C:\Windows\explorer.exe
            explorer.exe
            1⤵
              PID:3592
            • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
              "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
              1⤵
                PID:1468
              • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                1⤵
                • Suspicious use of AdjustPrivilegeToken
                • Suspicious use of FindShellTrayWindow
                PID:4536
              • C:\Windows\explorer.exe
                explorer.exe
                1⤵
                  PID:4928
                • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                  "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                  1⤵
                    PID:916
                  • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                    "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                    1⤵
                      PID:4340
                    • C:\Windows\explorer.exe
                      explorer.exe
                      1⤵
                        PID:5076
                      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                        1⤵
                          PID:1408
                        • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                          "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                          1⤵
                            PID:3148
                          • C:\Windows\explorer.exe
                            explorer.exe
                            1⤵
                              PID:2916
                            • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                              "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                              1⤵
                                PID:3436
                              • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                1⤵
                                  PID:2324
                                • C:\Windows\explorer.exe
                                  explorer.exe
                                  1⤵
                                    PID:5096
                                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                    1⤵
                                      PID:4988
                                    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                      1⤵
                                        PID:2176
                                      • C:\Windows\explorer.exe
                                        explorer.exe
                                        1⤵
                                          PID:1888
                                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                          1⤵
                                            PID:3992
                                          • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                            "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                            1⤵
                                              PID:4536
                                            • C:\Windows\explorer.exe
                                              explorer.exe
                                              1⤵
                                                PID:828
                                              • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                1⤵
                                                  PID:2932
                                                • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                  "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                  1⤵
                                                    PID:5104
                                                  • C:\Windows\explorer.exe
                                                    explorer.exe
                                                    1⤵
                                                      PID:5064
                                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                      1⤵
                                                        PID:2472
                                                      • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                        "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                        1⤵
                                                          PID:2356
                                                        • C:\Windows\explorer.exe
                                                          explorer.exe
                                                          1⤵
                                                            PID:2056
                                                          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                            1⤵
                                                              PID:4136
                                                            • C:\Windows\explorer.exe
                                                              explorer.exe
                                                              1⤵
                                                                PID:4028
                                                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                1⤵
                                                                  PID:4580
                                                                • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                  "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                  1⤵
                                                                    PID:4832
                                                                  • C:\Windows\explorer.exe
                                                                    explorer.exe
                                                                    1⤵
                                                                      PID:1788
                                                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                      1⤵
                                                                        PID:3960
                                                                      • C:\Windows\explorer.exe
                                                                        explorer.exe
                                                                        1⤵
                                                                          PID:3588
                                                                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                          1⤵
                                                                            PID:2168
                                                                          • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                            "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                            1⤵
                                                                              PID:1032
                                                                            • C:\Windows\explorer.exe
                                                                              explorer.exe
                                                                              1⤵
                                                                                PID:3960
                                                                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                1⤵
                                                                                  PID:4396
                                                                                • C:\Windows\explorer.exe
                                                                                  explorer.exe
                                                                                  1⤵
                                                                                    PID:4444
                                                                                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                    1⤵
                                                                                      PID:1608
                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                      1⤵
                                                                                        PID:5076
                                                                                      • C:\Windows\explorer.exe
                                                                                        explorer.exe
                                                                                        1⤵
                                                                                          PID:5064
                                                                                        • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                          "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                          1⤵
                                                                                            PID:4752
                                                                                          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                            1⤵
                                                                                              PID:3140
                                                                                            • C:\Windows\explorer.exe
                                                                                              explorer.exe
                                                                                              1⤵
                                                                                                PID:3304
                                                                                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                1⤵
                                                                                                  PID:1424
                                                                                                • C:\Windows\explorer.exe
                                                                                                  explorer.exe
                                                                                                  1⤵
                                                                                                    PID:2804
                                                                                                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                    1⤵
                                                                                                      PID:3780
                                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                      1⤵
                                                                                                        PID:1704
                                                                                                      • C:\Windows\explorer.exe
                                                                                                        explorer.exe
                                                                                                        1⤵
                                                                                                          PID:3868
                                                                                                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                          1⤵
                                                                                                            PID:4304
                                                                                                          • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                            "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                            1⤵
                                                                                                              PID:3276
                                                                                                            • C:\Windows\explorer.exe
                                                                                                              explorer.exe
                                                                                                              1⤵
                                                                                                                PID:2676
                                                                                                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                1⤵
                                                                                                                  PID:4896
                                                                                                                • C:\Windows\explorer.exe
                                                                                                                  explorer.exe
                                                                                                                  1⤵
                                                                                                                    PID:4304
                                                                                                                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                    1⤵
                                                                                                                      PID:4524
                                                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                      1⤵
                                                                                                                        PID:2308
                                                                                                                      • C:\Windows\explorer.exe
                                                                                                                        explorer.exe
                                                                                                                        1⤵
                                                                                                                          PID:2616
                                                                                                                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                          1⤵
                                                                                                                            PID:3188
                                                                                                                          • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                            "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                            1⤵
                                                                                                                              PID:4516
                                                                                                                            • C:\Windows\explorer.exe
                                                                                                                              explorer.exe
                                                                                                                              1⤵
                                                                                                                                PID:4272
                                                                                                                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                1⤵
                                                                                                                                  PID:3456
                                                                                                                                • C:\Windows\explorer.exe
                                                                                                                                  explorer.exe
                                                                                                                                  1⤵
                                                                                                                                    PID:3492
                                                                                                                                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                    1⤵
                                                                                                                                      PID:1712

                                                                                                                                    Network

                                                                                                                                          MITRE ATT&CK Enterprise v15

                                                                                                                                          Replay Monitor

                                                                                                                                          Loading Replay Monitor...

                                                                                                                                          Downloads

                                                                                                                                          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53
                                                                                                                                            Filesize

                                                                                                                                            471B

                                                                                                                                            MD5

                                                                                                                                            1a45b85bfabf0ea3977146d124cb7c60

                                                                                                                                            SHA1

                                                                                                                                            47abb6e5700a6b025d33cf276eac625e45f02a58

                                                                                                                                            SHA256

                                                                                                                                            513c25298482ef475b15ab35c2356f91642f6ba9ac95c1a97f379b42055fc0f2

                                                                                                                                            SHA512

                                                                                                                                            fe7f8a397bc4133887e5ea1661b6135b4c2ecfe9faaedac63a50c5795c60771c7050d62e99d66b53465e781f03007b12f49816b3b8a4804bf9fc91e5c1c80bd5

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53
                                                                                                                                            Filesize

                                                                                                                                            412B

                                                                                                                                            MD5

                                                                                                                                            cd2c320e007567c71b290a8bfa5c82ed

                                                                                                                                            SHA1

                                                                                                                                            ebba207b1bb389de52219d502b7e9848783943dd

                                                                                                                                            SHA256

                                                                                                                                            b05bdeb8eeec758d9b6ebed796b21650de1f4cb273162080f5493e717bb3540c

                                                                                                                                            SHA512

                                                                                                                                            4d3edc3dca447507f0fe616c99891e87edb5f1d3061c9df3cb84cf59420f819345d9dde12391ce7f406920b1f60499e1403434aa69e9377e1340c2720e8d8631

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\PR67AA1Y\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            82b066a0c26e9c3c026d421e012a093e

                                                                                                                                            SHA1

                                                                                                                                            2e4493ff239034dd93befa48a286616fa1222526

                                                                                                                                            SHA256

                                                                                                                                            a4c381833e51949fd261b3e7bf72873bddc61d6eaf01a83a89beda5877338d64

                                                                                                                                            SHA512

                                                                                                                                            4fb425137bcab122288af0df6dd2774fb9179f9c178c8c7b738e6e293d8dbe0aff97a879f42670d07c5bbc69935104b8bdcef8fd7efaee48949dd354af626feb

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\PR67AA1Y\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            82b066a0c26e9c3c026d421e012a093e

                                                                                                                                            SHA1

                                                                                                                                            2e4493ff239034dd93befa48a286616fa1222526

                                                                                                                                            SHA256

                                                                                                                                            a4c381833e51949fd261b3e7bf72873bddc61d6eaf01a83a89beda5877338d64

                                                                                                                                            SHA512

                                                                                                                                            4fb425137bcab122288af0df6dd2774fb9179f9c178c8c7b738e6e293d8dbe0aff97a879f42670d07c5bbc69935104b8bdcef8fd7efaee48949dd354af626feb

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\PR67AA1Y\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            82b066a0c26e9c3c026d421e012a093e

                                                                                                                                            SHA1

                                                                                                                                            2e4493ff239034dd93befa48a286616fa1222526

                                                                                                                                            SHA256

                                                                                                                                            a4c381833e51949fd261b3e7bf72873bddc61d6eaf01a83a89beda5877338d64

                                                                                                                                            SHA512

                                                                                                                                            4fb425137bcab122288af0df6dd2774fb9179f9c178c8c7b738e6e293d8dbe0aff97a879f42670d07c5bbc69935104b8bdcef8fd7efaee48949dd354af626feb

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\PR67AA1Y\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            82b066a0c26e9c3c026d421e012a093e

                                                                                                                                            SHA1

                                                                                                                                            2e4493ff239034dd93befa48a286616fa1222526

                                                                                                                                            SHA256

                                                                                                                                            a4c381833e51949fd261b3e7bf72873bddc61d6eaf01a83a89beda5877338d64

                                                                                                                                            SHA512

                                                                                                                                            4fb425137bcab122288af0df6dd2774fb9179f9c178c8c7b738e6e293d8dbe0aff97a879f42670d07c5bbc69935104b8bdcef8fd7efaee48949dd354af626feb

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\PR67AA1Y\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            82b066a0c26e9c3c026d421e012a093e

                                                                                                                                            SHA1

                                                                                                                                            2e4493ff239034dd93befa48a286616fa1222526

                                                                                                                                            SHA256

                                                                                                                                            a4c381833e51949fd261b3e7bf72873bddc61d6eaf01a83a89beda5877338d64

                                                                                                                                            SHA512

                                                                                                                                            4fb425137bcab122288af0df6dd2774fb9179f9c178c8c7b738e6e293d8dbe0aff97a879f42670d07c5bbc69935104b8bdcef8fd7efaee48949dd354af626feb

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\PR67AA1Y\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            82b066a0c26e9c3c026d421e012a093e

                                                                                                                                            SHA1

                                                                                                                                            2e4493ff239034dd93befa48a286616fa1222526

                                                                                                                                            SHA256

                                                                                                                                            a4c381833e51949fd261b3e7bf72873bddc61d6eaf01a83a89beda5877338d64

                                                                                                                                            SHA512

                                                                                                                                            4fb425137bcab122288af0df6dd2774fb9179f9c178c8c7b738e6e293d8dbe0aff97a879f42670d07c5bbc69935104b8bdcef8fd7efaee48949dd354af626feb

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\PR67AA1Y\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            82b066a0c26e9c3c026d421e012a093e

                                                                                                                                            SHA1

                                                                                                                                            2e4493ff239034dd93befa48a286616fa1222526

                                                                                                                                            SHA256

                                                                                                                                            a4c381833e51949fd261b3e7bf72873bddc61d6eaf01a83a89beda5877338d64

                                                                                                                                            SHA512

                                                                                                                                            4fb425137bcab122288af0df6dd2774fb9179f9c178c8c7b738e6e293d8dbe0aff97a879f42670d07c5bbc69935104b8bdcef8fd7efaee48949dd354af626feb

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\PR67AA1Y\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            82b066a0c26e9c3c026d421e012a093e

                                                                                                                                            SHA1

                                                                                                                                            2e4493ff239034dd93befa48a286616fa1222526

                                                                                                                                            SHA256

                                                                                                                                            a4c381833e51949fd261b3e7bf72873bddc61d6eaf01a83a89beda5877338d64

                                                                                                                                            SHA512

                                                                                                                                            4fb425137bcab122288af0df6dd2774fb9179f9c178c8c7b738e6e293d8dbe0aff97a879f42670d07c5bbc69935104b8bdcef8fd7efaee48949dd354af626feb

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\PR67AA1Y\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            82b066a0c26e9c3c026d421e012a093e

                                                                                                                                            SHA1

                                                                                                                                            2e4493ff239034dd93befa48a286616fa1222526

                                                                                                                                            SHA256

                                                                                                                                            a4c381833e51949fd261b3e7bf72873bddc61d6eaf01a83a89beda5877338d64

                                                                                                                                            SHA512

                                                                                                                                            4fb425137bcab122288af0df6dd2774fb9179f9c178c8c7b738e6e293d8dbe0aff97a879f42670d07c5bbc69935104b8bdcef8fd7efaee48949dd354af626feb

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\PR67AA1Y\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            82b066a0c26e9c3c026d421e012a093e

                                                                                                                                            SHA1

                                                                                                                                            2e4493ff239034dd93befa48a286616fa1222526

                                                                                                                                            SHA256

                                                                                                                                            a4c381833e51949fd261b3e7bf72873bddc61d6eaf01a83a89beda5877338d64

                                                                                                                                            SHA512

                                                                                                                                            4fb425137bcab122288af0df6dd2774fb9179f9c178c8c7b738e6e293d8dbe0aff97a879f42670d07c5bbc69935104b8bdcef8fd7efaee48949dd354af626feb

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\PR67AA1Y\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            82b066a0c26e9c3c026d421e012a093e

                                                                                                                                            SHA1

                                                                                                                                            2e4493ff239034dd93befa48a286616fa1222526

                                                                                                                                            SHA256

                                                                                                                                            a4c381833e51949fd261b3e7bf72873bddc61d6eaf01a83a89beda5877338d64

                                                                                                                                            SHA512

                                                                                                                                            4fb425137bcab122288af0df6dd2774fb9179f9c178c8c7b738e6e293d8dbe0aff97a879f42670d07c5bbc69935104b8bdcef8fd7efaee48949dd354af626feb

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\PR67AA1Y\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            82b066a0c26e9c3c026d421e012a093e

                                                                                                                                            SHA1

                                                                                                                                            2e4493ff239034dd93befa48a286616fa1222526

                                                                                                                                            SHA256

                                                                                                                                            a4c381833e51949fd261b3e7bf72873bddc61d6eaf01a83a89beda5877338d64

                                                                                                                                            SHA512

                                                                                                                                            4fb425137bcab122288af0df6dd2774fb9179f9c178c8c7b738e6e293d8dbe0aff97a879f42670d07c5bbc69935104b8bdcef8fd7efaee48949dd354af626feb

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\PR67AA1Y\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            82b066a0c26e9c3c026d421e012a093e

                                                                                                                                            SHA1

                                                                                                                                            2e4493ff239034dd93befa48a286616fa1222526

                                                                                                                                            SHA256

                                                                                                                                            a4c381833e51949fd261b3e7bf72873bddc61d6eaf01a83a89beda5877338d64

                                                                                                                                            SHA512

                                                                                                                                            4fb425137bcab122288af0df6dd2774fb9179f9c178c8c7b738e6e293d8dbe0aff97a879f42670d07c5bbc69935104b8bdcef8fd7efaee48949dd354af626feb

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\PR67AA1Y\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            82b066a0c26e9c3c026d421e012a093e

                                                                                                                                            SHA1

                                                                                                                                            2e4493ff239034dd93befa48a286616fa1222526

                                                                                                                                            SHA256

                                                                                                                                            a4c381833e51949fd261b3e7bf72873bddc61d6eaf01a83a89beda5877338d64

                                                                                                                                            SHA512

                                                                                                                                            4fb425137bcab122288af0df6dd2774fb9179f9c178c8c7b738e6e293d8dbe0aff97a879f42670d07c5bbc69935104b8bdcef8fd7efaee48949dd354af626feb

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\PR67AA1Y\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            82b066a0c26e9c3c026d421e012a093e

                                                                                                                                            SHA1

                                                                                                                                            2e4493ff239034dd93befa48a286616fa1222526

                                                                                                                                            SHA256

                                                                                                                                            a4c381833e51949fd261b3e7bf72873bddc61d6eaf01a83a89beda5877338d64

                                                                                                                                            SHA512

                                                                                                                                            4fb425137bcab122288af0df6dd2774fb9179f9c178c8c7b738e6e293d8dbe0aff97a879f42670d07c5bbc69935104b8bdcef8fd7efaee48949dd354af626feb

                                                                                                                                            Download Submit

                                                                                                                                          • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\PR67AA1Y\microsoft.windows[1].xml
                                                                                                                                            Filesize

                                                                                                                                            97B

                                                                                                                                            MD5

                                                                                                                                            82b066a0c26e9c3c026d421e012a093e

                                                                                                                                            SHA1

                                                                                                                                            2e4493ff239034dd93befa48a286616fa1222526

                                                                                                                                            SHA256

                                                                                                                                            a4c381833e51949fd261b3e7bf72873bddc61d6eaf01a83a89beda5877338d64

                                                                                                                                            SHA512

                                                                                                                                            4fb425137bcab122288af0df6dd2774fb9179f9c178c8c7b738e6e293d8dbe0aff97a879f42670d07c5bbc69935104b8bdcef8fd7efaee48949dd354af626feb

                                                                                                                                            Download Submit

                                                                                                                                          • memory/732-17-0x000001EA6F5E0000-0x000001EA6F600000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/732-14-0x000001EA6F920000-0x000001EA6F940000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/732-20-0x000001EA6FDC0000-0x000001EA6FDE0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/828-161-0x00000000046B0000-0x00000000046B1000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download

                                                                                                                                          • memory/1032-243-0x000001775B630000-0x000001775B650000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/1032-245-0x000001775BA40000-0x000001775BA60000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/1032-240-0x000001775B670000-0x000001775B690000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/1704-312-0x0000027272890000-0x00000272728B0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/1704-307-0x0000027272440000-0x0000027272460000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/1704-309-0x0000027272400000-0x0000027272420000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/1888-139-0x0000000002980000-0x0000000002981000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download

                                                                                                                                          • memory/2028-7-0x0000000004890000-0x0000000004891000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download

                                                                                                                                          • memory/2176-123-0x000001FF79DC0000-0x000001FF79DE0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/2176-126-0x000001FF79D80000-0x000001FF79DA0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/2176-129-0x000001FF7A190000-0x000001FF7A1B0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/2308-355-0x00000282421B0000-0x00000282421D0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/2308-358-0x0000028242170000-0x0000028242190000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/2308-360-0x0000028242580000-0x00000282425A0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/2324-112-0x000001CF132C0000-0x000001CF132E0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/2324-107-0x000001CF12C70000-0x000001CF12C90000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/2324-105-0x000001CF12CB0000-0x000001CF12CD0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/2356-192-0x000001DABF4A0000-0x000001DABF4C0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/2356-194-0x000001DABF460000-0x000001DABF480000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/2356-196-0x000001DABFA80000-0x000001DABFAA0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/2804-299-0x0000000004690000-0x0000000004691000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download

                                                                                                                                          • memory/2916-97-0x0000000004290000-0x0000000004291000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download

                                                                                                                                          • memory/2932-169-0x000001EAD1270000-0x000001EAD1290000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/2932-172-0x000001EAD1230000-0x000001EAD1250000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/2932-176-0x000001EAD1640000-0x000001EAD1660000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/3148-88-0x000002C34CDE0000-0x000002C34CE00000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/3148-85-0x000002C34D120000-0x000002C34D140000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/3148-90-0x000002C34D590000-0x000002C34D5B0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/3276-334-0x0000023BEED70000-0x0000023BEED90000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/3276-331-0x0000023BEEDB0000-0x0000023BEEDD0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/3276-336-0x0000023BEF380000-0x0000023BEF3A0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/3304-277-0x0000000004520000-0x0000000004521000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download

                                                                                                                                          • memory/3588-233-0x0000000004B90000-0x0000000004B91000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download

                                                                                                                                          • memory/3592-31-0x0000000004E50000-0x0000000004E51000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download

                                                                                                                                          • memory/3868-324-0x0000000004490000-0x0000000004491000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download

                                                                                                                                          • memory/4028-208-0x0000000002D80000-0x0000000002D81000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download

                                                                                                                                          • memory/4304-348-0x0000000003E60000-0x0000000003E61000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download

                                                                                                                                          • memory/4340-62-0x0000020410DA0000-0x0000020410DC0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/4340-64-0x0000020410D60000-0x0000020410D80000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/4340-66-0x0000020411170000-0x0000020411190000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/4444-256-0x0000000004340000-0x0000000004341000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download

                                                                                                                                          • memory/4536-149-0x000001D955440000-0x000001D955460000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/4536-38-0x0000026CAE020000-0x0000026CAE040000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/4536-41-0x0000026CADDD0000-0x0000026CADDF0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/4536-43-0x0000026CAE3E0000-0x0000026CAE400000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/4536-152-0x000001D955850000-0x000001D955870000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/4536-146-0x000001D955480000-0x000001D9554A0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/4752-288-0x000002B8FEA80000-0x000002B8FEAA0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/4752-286-0x000002B8FE3E0000-0x000002B8FE400000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/4752-284-0x000002B8FE420000-0x000002B8FE440000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/4832-219-0x000002683E7E0000-0x000002683E800000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/4832-216-0x000002683E820000-0x000002683E840000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/4832-221-0x000002683EC30000-0x000002683EC50000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/4928-54-0x0000000004790000-0x0000000004791000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download

                                                                                                                                          • memory/5064-185-0x0000000004550000-0x0000000004551000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download

                                                                                                                                          • memory/5076-264-0x00000286B57F0000-0x00000286B5810000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/5076-266-0x00000286B57B0000-0x00000286B57D0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/5076-77-0x0000000004A10000-0x0000000004A11000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download

                                                                                                                                          • memory/5076-270-0x00000286B5DC0000-0x00000286B5DE0000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            128KB

                                                                                                                                            Download

                                                                                                                                          • memory/5096-116-0x0000000002B70000-0x0000000002B71000-memory.dmp

                                                                                                                                            Filesize

                                                                                                                                            4KB

                                                                                                                                            Download