Overview

overview

8

Static

static

3

b948d800f5...37.exe

windows7-x64

8

b948d800f5...37.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    36s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/10/2023, 18:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b948d800f550a49f53a53f40d2588d49b3ea73151de679c8a53e5dbd6b48bb37.exe

  • Size

    3.5MB

  • MD5

    8855bf6e60a5f45874d443bf8e32c3ca

  • SHA1

    48bbbbc2a1edd54d7c5894ff289c2df79e1ae9ab

  • SHA256

    b948d800f550a49f53a53f40d2588d49b3ea73151de679c8a53e5dbd6b48bb37

  • SHA512

    f5e0483b6d26170b07b6ae909a5bfdf8a37e1223783459caaf692c039f3e5579495e420a19092c0e6b88f7c193ee9139b63df15954bdf852152c25dc394b5d74

  • SSDEEP

    49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTl9Df0EVgKEcj4H5wRTtorna:c+8X9G3vP3AMrDMEgZWu5wpWW

Score
8/10
persistence

Malware Config

Signatures

  • Modifies Installed Components in the registry 2 TTPs 6 IoCs
    persistence
  • Enumerates connected drives 3 TTPs 12 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 6 IoCs
    adwarespyware
  • Modifies registry class 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\b948d800f550a49f53a53f40d2588d49b3ea73151de679c8a53e5dbd6b48bb37.exe
    "C:\Users\Admin\AppData\Local\Temp\b948d800f550a49f53a53f40d2588d49b3ea73151de679c8a53e5dbd6b48bb37.exe"
    1⤵
      PID:1488
    • C:\Windows\explorer.exe
      explorer.exe
      1⤵
      • Modifies Installed Components in the registry
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      PID:832
    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
      1⤵
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:3612
    • C:\Windows\explorer.exe
      explorer.exe
      1⤵
      • Modifies Installed Components in the registry
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      PID:2816
    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
      1⤵
      • Suspicious use of SetWindowsHookEx
      PID:2844
    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
      1⤵
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:3928
    • C:\Windows\explorer.exe
      explorer.exe
      1⤵
      • Modifies Installed Components in the registry
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies registry class
      • Suspicious use of SendNotifyMessage
      PID:2288
    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
      1⤵
      • Suspicious use of SetWindowsHookEx
      PID:4864
    • C:\Windows\explorer.exe
      explorer.exe
      1⤵
      • Modifies Installed Components in the registry
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies registry class
      • Suspicious use of SendNotifyMessage
      PID:2560
    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
      1⤵
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:3548
    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
      1⤵
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:4108
    • C:\Windows\explorer.exe
      explorer.exe
      1⤵
      • Modifies Installed Components in the registry
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies registry class
      PID:3492
    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
      1⤵
        PID:4388
      • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
        "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
        1⤵
          PID:3340
        • C:\Windows\explorer.exe
          explorer.exe
          1⤵
          • Modifies Installed Components in the registry
          • Enumerates connected drives
          • Modifies registry class
          PID:4572
        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
          1⤵
            PID:472
          • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
            "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
            1⤵
              PID:2076
            • C:\Windows\explorer.exe
              explorer.exe
              1⤵
                PID:4852
              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                1⤵
                  PID:3916
                • C:\Windows\explorer.exe
                  explorer.exe
                  1⤵
                    PID:3628
                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                    1⤵
                      PID:4204
                    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                      1⤵
                        PID:2352
                      • C:\Windows\explorer.exe
                        explorer.exe
                        1⤵
                          PID:2368
                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                          1⤵
                            PID:3324
                          • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                            "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                            1⤵
                              PID:3748
                            • C:\Windows\explorer.exe
                              explorer.exe
                              1⤵
                                PID:3216
                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                1⤵
                                  PID:3412
                                • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                  "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                  1⤵
                                    PID:4184
                                  • C:\Windows\explorer.exe
                                    explorer.exe
                                    1⤵
                                      PID:5004
                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                      1⤵
                                        PID:4048
                                      • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                        "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                        1⤵
                                          PID:1080
                                        • C:\Windows\explorer.exe
                                          explorer.exe
                                          1⤵
                                            PID:4552
                                          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                            1⤵
                                              PID:4640
                                            • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                              "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                              1⤵
                                                PID:3512
                                              • C:\Windows\explorer.exe
                                                explorer.exe
                                                1⤵
                                                  PID:3280
                                                • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                  "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                  1⤵
                                                    PID:3268
                                                  • C:\Windows\explorer.exe
                                                    explorer.exe
                                                    1⤵
                                                      PID:3496
                                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                      1⤵
                                                        PID:3992
                                                      • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                        "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                        1⤵
                                                          PID:3980
                                                        • C:\Windows\explorer.exe
                                                          explorer.exe
                                                          1⤵
                                                            PID:2188
                                                          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                            1⤵
                                                              PID:2636
                                                            • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                              "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                              1⤵
                                                                PID:2332
                                                              • C:\Windows\explorer.exe
                                                                explorer.exe
                                                                1⤵
                                                                  PID:2136
                                                                • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                  "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                  1⤵
                                                                    PID:4080
                                                                  • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                    "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                    1⤵
                                                                      PID:3452
                                                                    • C:\Windows\explorer.exe
                                                                      explorer.exe
                                                                      1⤵
                                                                        PID:3724
                                                                      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                        1⤵
                                                                          PID:4392
                                                                        • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                          "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                          1⤵
                                                                            PID:1632
                                                                          • C:\Windows\explorer.exe
                                                                            explorer.exe
                                                                            1⤵
                                                                              PID:212
                                                                            • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                              "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                              1⤵
                                                                                PID:3424
                                                                              • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                1⤵
                                                                                  PID:2764
                                                                                • C:\Windows\explorer.exe
                                                                                  explorer.exe
                                                                                  1⤵
                                                                                    PID:952
                                                                                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                    1⤵
                                                                                      PID:4880
                                                                                    • C:\Windows\explorer.exe
                                                                                      explorer.exe
                                                                                      1⤵
                                                                                        PID:1444
                                                                                      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                        1⤵
                                                                                          PID:2072
                                                                                        • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                          "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                          1⤵
                                                                                            PID:3704
                                                                                          • C:\Windows\explorer.exe
                                                                                            explorer.exe
                                                                                            1⤵
                                                                                              PID:4540
                                                                                            • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                              "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                              1⤵
                                                                                                PID:828
                                                                                              • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                1⤵
                                                                                                  PID:2512
                                                                                                • C:\Windows\explorer.exe
                                                                                                  explorer.exe
                                                                                                  1⤵
                                                                                                    PID:4228
                                                                                                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                    1⤵
                                                                                                      PID:4360
                                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                      1⤵
                                                                                                        PID:5068
                                                                                                      • C:\Windows\explorer.exe
                                                                                                        explorer.exe
                                                                                                        1⤵
                                                                                                          PID:4696
                                                                                                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                          1⤵
                                                                                                            PID:3032
                                                                                                          • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                            "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                            1⤵
                                                                                                              PID:936
                                                                                                            • C:\Windows\explorer.exe
                                                                                                              explorer.exe
                                                                                                              1⤵
                                                                                                                PID:4080

                                                                                                              Network

                                                                                                              MITRE ATT&CK Enterprise v15

                                                                                                              Replay Monitor

                                                                                                              Loading Replay Monitor...

                                                                                                              Downloads

                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53
                                                                                                                Filesize

                                                                                                                471B

                                                                                                                MD5

                                                                                                                4c89a3253444e3534a8d0804a57ab526

                                                                                                                SHA1

                                                                                                                0b8a68a6f934e1a17b1a78cff5d4d9bb392d22c4

                                                                                                                SHA256

                                                                                                                75254e24703b9eec69f23c9153879875491b3ad72d295d535eacce17025b5ebd

                                                                                                                SHA512

                                                                                                                49f10d7a21100c70b80c4cac6bb8b2ee2af646b5dd385bdc34e564ebee2c2ab49d21575968ecdeed6154682ceba7a02b3c732c7143f741ba8e890ca9dd1ec1c1

                                                                                                                Download Submit

                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53
                                                                                                                Filesize

                                                                                                                412B

                                                                                                                MD5

                                                                                                                4ade528b49e44b89c1a9f63d772f3705

                                                                                                                SHA1

                                                                                                                82e50f7e2673a4446f4eadebae3064a401da3bdd

                                                                                                                SHA256

                                                                                                                d986d4f1a16c7bdc076ad1ff98fe2ff5003eb336df5caac981d0a2b3bc3931a9

                                                                                                                SHA512

                                                                                                                8abc2bccc09ed8590f31048b54ade131ec90bc55bc876050ed76c080ef07d5b5ab8b833ac1830ee3bca46d72ff17129a51397689446932cf7942546ddb3d92e1

                                                                                                                Download Submit

                                                                                                              • C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\46IOJ2Y1\microsoft.windows[1].xml
                                                                                                                Filesize

                                                                                                                96B

                                                                                                                MD5

                                                                                                                132893809ee21f6cc9bd8398d163fde8

                                                                                                                SHA1

                                                                                                                664b895e0f6ae4f8ed96f36dee355d4e554b29eb

                                                                                                                SHA256

                                                                                                                af9f28768de7e7f0f21d52b63003adb8fa1b563ab8e4a38bf361a7f51aa8d8d2

                                                                                                                SHA512

                                                                                                                a540b8cddd2684bf6d11480bc23200200414984b4520842db541e07021520fb6cf356492b7e2517cdd53718f4a8b6002d5268db4c085b5d1ab6ed3cc1973caa8

                                                                                                                Download Submit

                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\46IOJ2Y1\microsoft.windows[1].xml
                                                                                                                Filesize

                                                                                                                96B

                                                                                                                MD5

                                                                                                                132893809ee21f6cc9bd8398d163fde8

                                                                                                                SHA1

                                                                                                                664b895e0f6ae4f8ed96f36dee355d4e554b29eb

                                                                                                                SHA256

                                                                                                                af9f28768de7e7f0f21d52b63003adb8fa1b563ab8e4a38bf361a7f51aa8d8d2

                                                                                                                SHA512

                                                                                                                a540b8cddd2684bf6d11480bc23200200414984b4520842db541e07021520fb6cf356492b7e2517cdd53718f4a8b6002d5268db4c085b5d1ab6ed3cc1973caa8

                                                                                                                Download Submit

                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\46IOJ2Y1\microsoft.windows[1].xml
                                                                                                                Filesize

                                                                                                                96B

                                                                                                                MD5

                                                                                                                132893809ee21f6cc9bd8398d163fde8

                                                                                                                SHA1

                                                                                                                664b895e0f6ae4f8ed96f36dee355d4e554b29eb

                                                                                                                SHA256

                                                                                                                af9f28768de7e7f0f21d52b63003adb8fa1b563ab8e4a38bf361a7f51aa8d8d2

                                                                                                                SHA512

                                                                                                                a540b8cddd2684bf6d11480bc23200200414984b4520842db541e07021520fb6cf356492b7e2517cdd53718f4a8b6002d5268db4c085b5d1ab6ed3cc1973caa8

                                                                                                                Download Submit

                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\46IOJ2Y1\microsoft.windows[1].xml
                                                                                                                Filesize

                                                                                                                96B

                                                                                                                MD5

                                                                                                                132893809ee21f6cc9bd8398d163fde8

                                                                                                                SHA1

                                                                                                                664b895e0f6ae4f8ed96f36dee355d4e554b29eb

                                                                                                                SHA256

                                                                                                                af9f28768de7e7f0f21d52b63003adb8fa1b563ab8e4a38bf361a7f51aa8d8d2

                                                                                                                SHA512

                                                                                                                a540b8cddd2684bf6d11480bc23200200414984b4520842db541e07021520fb6cf356492b7e2517cdd53718f4a8b6002d5268db4c085b5d1ab6ed3cc1973caa8

                                                                                                                Download Submit

                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\46IOJ2Y1\microsoft.windows[1].xml
                                                                                                                Filesize

                                                                                                                96B

                                                                                                                MD5

                                                                                                                132893809ee21f6cc9bd8398d163fde8

                                                                                                                SHA1

                                                                                                                664b895e0f6ae4f8ed96f36dee355d4e554b29eb

                                                                                                                SHA256

                                                                                                                af9f28768de7e7f0f21d52b63003adb8fa1b563ab8e4a38bf361a7f51aa8d8d2

                                                                                                                SHA512

                                                                                                                a540b8cddd2684bf6d11480bc23200200414984b4520842db541e07021520fb6cf356492b7e2517cdd53718f4a8b6002d5268db4c085b5d1ab6ed3cc1973caa8

                                                                                                                Download Submit

                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\46IOJ2Y1\microsoft.windows[1].xml
                                                                                                                Filesize

                                                                                                                96B

                                                                                                                MD5

                                                                                                                132893809ee21f6cc9bd8398d163fde8

                                                                                                                SHA1

                                                                                                                664b895e0f6ae4f8ed96f36dee355d4e554b29eb

                                                                                                                SHA256

                                                                                                                af9f28768de7e7f0f21d52b63003adb8fa1b563ab8e4a38bf361a7f51aa8d8d2

                                                                                                                SHA512

                                                                                                                a540b8cddd2684bf6d11480bc23200200414984b4520842db541e07021520fb6cf356492b7e2517cdd53718f4a8b6002d5268db4c085b5d1ab6ed3cc1973caa8

                                                                                                                Download Submit

                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\46IOJ2Y1\microsoft.windows[1].xml
                                                                                                                Filesize

                                                                                                                96B

                                                                                                                MD5

                                                                                                                132893809ee21f6cc9bd8398d163fde8

                                                                                                                SHA1

                                                                                                                664b895e0f6ae4f8ed96f36dee355d4e554b29eb

                                                                                                                SHA256

                                                                                                                af9f28768de7e7f0f21d52b63003adb8fa1b563ab8e4a38bf361a7f51aa8d8d2

                                                                                                                SHA512

                                                                                                                a540b8cddd2684bf6d11480bc23200200414984b4520842db541e07021520fb6cf356492b7e2517cdd53718f4a8b6002d5268db4c085b5d1ab6ed3cc1973caa8

                                                                                                                Download Submit

                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\46IOJ2Y1\microsoft.windows[1].xml
                                                                                                                Filesize

                                                                                                                96B

                                                                                                                MD5

                                                                                                                132893809ee21f6cc9bd8398d163fde8

                                                                                                                SHA1

                                                                                                                664b895e0f6ae4f8ed96f36dee355d4e554b29eb

                                                                                                                SHA256

                                                                                                                af9f28768de7e7f0f21d52b63003adb8fa1b563ab8e4a38bf361a7f51aa8d8d2

                                                                                                                SHA512

                                                                                                                a540b8cddd2684bf6d11480bc23200200414984b4520842db541e07021520fb6cf356492b7e2517cdd53718f4a8b6002d5268db4c085b5d1ab6ed3cc1973caa8

                                                                                                                Download Submit

                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\46IOJ2Y1\microsoft.windows[1].xml
                                                                                                                Filesize

                                                                                                                96B

                                                                                                                MD5

                                                                                                                132893809ee21f6cc9bd8398d163fde8

                                                                                                                SHA1

                                                                                                                664b895e0f6ae4f8ed96f36dee355d4e554b29eb

                                                                                                                SHA256

                                                                                                                af9f28768de7e7f0f21d52b63003adb8fa1b563ab8e4a38bf361a7f51aa8d8d2

                                                                                                                SHA512

                                                                                                                a540b8cddd2684bf6d11480bc23200200414984b4520842db541e07021520fb6cf356492b7e2517cdd53718f4a8b6002d5268db4c085b5d1ab6ed3cc1973caa8

                                                                                                                Download Submit

                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\46IOJ2Y1\microsoft.windows[1].xml
                                                                                                                Filesize

                                                                                                                96B

                                                                                                                MD5

                                                                                                                132893809ee21f6cc9bd8398d163fde8

                                                                                                                SHA1

                                                                                                                664b895e0f6ae4f8ed96f36dee355d4e554b29eb

                                                                                                                SHA256

                                                                                                                af9f28768de7e7f0f21d52b63003adb8fa1b563ab8e4a38bf361a7f51aa8d8d2

                                                                                                                SHA512

                                                                                                                a540b8cddd2684bf6d11480bc23200200414984b4520842db541e07021520fb6cf356492b7e2517cdd53718f4a8b6002d5268db4c085b5d1ab6ed3cc1973caa8

                                                                                                                Download Submit

                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\46IOJ2Y1\microsoft.windows[1].xml
                                                                                                                Filesize

                                                                                                                96B

                                                                                                                MD5

                                                                                                                132893809ee21f6cc9bd8398d163fde8

                                                                                                                SHA1

                                                                                                                664b895e0f6ae4f8ed96f36dee355d4e554b29eb

                                                                                                                SHA256

                                                                                                                af9f28768de7e7f0f21d52b63003adb8fa1b563ab8e4a38bf361a7f51aa8d8d2

                                                                                                                SHA512

                                                                                                                a540b8cddd2684bf6d11480bc23200200414984b4520842db541e07021520fb6cf356492b7e2517cdd53718f4a8b6002d5268db4c085b5d1ab6ed3cc1973caa8

                                                                                                                Download Submit

                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\46IOJ2Y1\microsoft.windows[1].xml
                                                                                                                Filesize

                                                                                                                96B

                                                                                                                MD5

                                                                                                                132893809ee21f6cc9bd8398d163fde8

                                                                                                                SHA1

                                                                                                                664b895e0f6ae4f8ed96f36dee355d4e554b29eb

                                                                                                                SHA256

                                                                                                                af9f28768de7e7f0f21d52b63003adb8fa1b563ab8e4a38bf361a7f51aa8d8d2

                                                                                                                SHA512

                                                                                                                a540b8cddd2684bf6d11480bc23200200414984b4520842db541e07021520fb6cf356492b7e2517cdd53718f4a8b6002d5268db4c085b5d1ab6ed3cc1973caa8

                                                                                                                Download Submit

                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\46IOJ2Y1\microsoft.windows[1].xml
                                                                                                                Filesize

                                                                                                                96B

                                                                                                                MD5

                                                                                                                132893809ee21f6cc9bd8398d163fde8

                                                                                                                SHA1

                                                                                                                664b895e0f6ae4f8ed96f36dee355d4e554b29eb

                                                                                                                SHA256

                                                                                                                af9f28768de7e7f0f21d52b63003adb8fa1b563ab8e4a38bf361a7f51aa8d8d2

                                                                                                                SHA512

                                                                                                                a540b8cddd2684bf6d11480bc23200200414984b4520842db541e07021520fb6cf356492b7e2517cdd53718f4a8b6002d5268db4c085b5d1ab6ed3cc1973caa8

                                                                                                                Download Submit

                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\46IOJ2Y1\microsoft.windows[1].xml
                                                                                                                Filesize

                                                                                                                96B

                                                                                                                MD5

                                                                                                                132893809ee21f6cc9bd8398d163fde8

                                                                                                                SHA1

                                                                                                                664b895e0f6ae4f8ed96f36dee355d4e554b29eb

                                                                                                                SHA256

                                                                                                                af9f28768de7e7f0f21d52b63003adb8fa1b563ab8e4a38bf361a7f51aa8d8d2

                                                                                                                SHA512

                                                                                                                a540b8cddd2684bf6d11480bc23200200414984b4520842db541e07021520fb6cf356492b7e2517cdd53718f4a8b6002d5268db4c085b5d1ab6ed3cc1973caa8

                                                                                                                Download Submit

                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\46IOJ2Y1\microsoft.windows[1].xml
                                                                                                                Filesize

                                                                                                                96B

                                                                                                                MD5

                                                                                                                132893809ee21f6cc9bd8398d163fde8

                                                                                                                SHA1

                                                                                                                664b895e0f6ae4f8ed96f36dee355d4e554b29eb

                                                                                                                SHA256

                                                                                                                af9f28768de7e7f0f21d52b63003adb8fa1b563ab8e4a38bf361a7f51aa8d8d2

                                                                                                                SHA512

                                                                                                                a540b8cddd2684bf6d11480bc23200200414984b4520842db541e07021520fb6cf356492b7e2517cdd53718f4a8b6002d5268db4c085b5d1ab6ed3cc1973caa8

                                                                                                                Download Submit

                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\46IOJ2Y1\microsoft.windows[1].xml
                                                                                                                Filesize

                                                                                                                96B

                                                                                                                MD5

                                                                                                                132893809ee21f6cc9bd8398d163fde8

                                                                                                                SHA1

                                                                                                                664b895e0f6ae4f8ed96f36dee355d4e554b29eb

                                                                                                                SHA256

                                                                                                                af9f28768de7e7f0f21d52b63003adb8fa1b563ab8e4a38bf361a7f51aa8d8d2

                                                                                                                SHA512

                                                                                                                a540b8cddd2684bf6d11480bc23200200414984b4520842db541e07021520fb6cf356492b7e2517cdd53718f4a8b6002d5268db4c085b5d1ab6ed3cc1973caa8

                                                                                                                Download Submit

                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\46IOJ2Y1\microsoft.windows[1].xml
                                                                                                                Filesize

                                                                                                                96B

                                                                                                                MD5

                                                                                                                132893809ee21f6cc9bd8398d163fde8

                                                                                                                SHA1

                                                                                                                664b895e0f6ae4f8ed96f36dee355d4e554b29eb

                                                                                                                SHA256

                                                                                                                af9f28768de7e7f0f21d52b63003adb8fa1b563ab8e4a38bf361a7f51aa8d8d2

                                                                                                                SHA512

                                                                                                                a540b8cddd2684bf6d11480bc23200200414984b4520842db541e07021520fb6cf356492b7e2517cdd53718f4a8b6002d5268db4c085b5d1ab6ed3cc1973caa8

                                                                                                                Download Submit

                                                                                                              • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\46IOJ2Y1\microsoft.windows[1].xml
                                                                                                                Filesize

                                                                                                                96B

                                                                                                                MD5

                                                                                                                132893809ee21f6cc9bd8398d163fde8

                                                                                                                SHA1

                                                                                                                664b895e0f6ae4f8ed96f36dee355d4e554b29eb

                                                                                                                SHA256

                                                                                                                af9f28768de7e7f0f21d52b63003adb8fa1b563ab8e4a38bf361a7f51aa8d8d2

                                                                                                                SHA512

                                                                                                                a540b8cddd2684bf6d11480bc23200200414984b4520842db541e07021520fb6cf356492b7e2517cdd53718f4a8b6002d5268db4c085b5d1ab6ed3cc1973caa8

                                                                                                                Download Submit

                                                                                                              • memory/212-299-0x00000000045A0000-0x00000000045A1000-memory.dmp

                                                                                                                Filesize

                                                                                                                4KB

                                                                                                                Download

                                                                                                              • memory/1080-173-0x000002B58F050000-0x000002B58F070000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/1080-171-0x000002B58F090000-0x000002B58F0B0000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/1080-175-0x000002B58F660000-0x000002B58F680000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/1444-323-0x0000000004350000-0x0000000004351000-memory.dmp

                                                                                                                Filesize

                                                                                                                4KB

                                                                                                                Download

                                                                                                              • memory/1632-283-0x00000279EAD40000-0x00000279EAD60000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/1632-287-0x00000279EB110000-0x00000279EB130000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/1632-285-0x00000279EAD00000-0x00000279EAD20000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/2076-85-0x00000205EC700000-0x00000205EC720000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/2076-81-0x00000205EC340000-0x00000205EC360000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/2076-83-0x00000205EC300000-0x00000205EC320000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/2136-257-0x00000000049D0000-0x00000000049D1000-memory.dmp

                                                                                                                Filesize

                                                                                                                4KB

                                                                                                                Download

                                                                                                              • memory/2188-234-0x0000000004910000-0x0000000004911000-memory.dmp

                                                                                                                Filesize

                                                                                                                4KB

                                                                                                                Download

                                                                                                              • memory/2332-244-0x00000286B8BD0000-0x00000286B8BF0000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/2332-241-0x00000286B8E20000-0x00000286B8E40000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/2332-246-0x00000286B91E0000-0x00000286B9200000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/2352-112-0x000001D29DA30000-0x000001D29DA50000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/2352-108-0x000001D29D3E0000-0x000001D29D400000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/2352-105-0x000001D29D620000-0x000001D29D640000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/2368-121-0x0000000003190000-0x0000000003191000-memory.dmp

                                                                                                                Filesize

                                                                                                                4KB

                                                                                                                Download

                                                                                                              • memory/2512-353-0x00000234D6F60000-0x00000234D6F80000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/2512-355-0x00000234D6F20000-0x00000234D6F40000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/2512-357-0x00000234D7330000-0x00000234D7350000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/2560-30-0x0000000004430000-0x0000000004431000-memory.dmp

                                                                                                                Filesize

                                                                                                                4KB

                                                                                                                Download

                                                                                                              • memory/2764-310-0x000001C4ED3F0000-0x000001C4ED410000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/2764-308-0x000001C4ECDE0000-0x000001C4ECE00000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/2764-306-0x000001C4ED020000-0x000001C4ED040000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/2816-7-0x00000000047C0000-0x00000000047C1000-memory.dmp

                                                                                                                Filesize

                                                                                                                4KB

                                                                                                                Download

                                                                                                              • memory/3216-140-0x00000000045C0000-0x00000000045C1000-memory.dmp

                                                                                                                Filesize

                                                                                                                4KB

                                                                                                                Download

                                                                                                              • memory/3340-63-0x00000293FAC80000-0x00000293FACA0000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/3340-61-0x00000293FACC0000-0x00000293FACE0000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/3340-65-0x00000293FB2A0000-0x00000293FB2C0000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/3452-264-0x000002A2BF0A0000-0x000002A2BF0C0000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/3452-268-0x000002A2BF680000-0x000002A2BF6A0000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/3452-266-0x000002A2BF060000-0x000002A2BF080000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/3492-54-0x0000000004B20000-0x0000000004B21000-memory.dmp

                                                                                                                Filesize

                                                                                                                4KB

                                                                                                                Download

                                                                                                              • memory/3496-210-0x0000000004C20000-0x0000000004C21000-memory.dmp

                                                                                                                Filesize

                                                                                                                4KB

                                                                                                                Download

                                                                                                              • memory/3512-194-0x000001AFC1770000-0x000001AFC1790000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/3512-196-0x000001AFC1730000-0x000001AFC1750000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/3512-199-0x000001AFC1B40000-0x000001AFC1B60000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/3628-98-0x0000000004490000-0x0000000004491000-memory.dmp

                                                                                                                Filesize

                                                                                                                4KB

                                                                                                                Download

                                                                                                              • memory/3704-330-0x0000020C5EB10000-0x0000020C5EB30000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/3704-336-0x0000020C5F0E0000-0x0000020C5F100000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/3704-334-0x0000020C5EAD0000-0x0000020C5EAF0000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/3724-275-0x0000000004220000-0x0000000004221000-memory.dmp

                                                                                                                Filesize

                                                                                                                4KB

                                                                                                                Download

                                                                                                              • memory/3748-130-0x0000015614930000-0x0000015614950000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/3748-128-0x0000015614970000-0x0000015614990000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/3748-134-0x0000015614D40000-0x0000015614D60000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/3928-14-0x0000017A745C0000-0x0000017A745E0000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/3928-18-0x0000017A74580000-0x0000017A745A0000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/3928-20-0x0000017A74990000-0x0000017A749B0000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/3980-220-0x000002C9C1B50000-0x000002C9C1B70000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/3980-218-0x000002C9C1B90000-0x000002C9C1BB0000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/3980-222-0x000002C9C1F60000-0x000002C9C1F80000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/4108-42-0x000001FB03290000-0x000001FB032B0000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/4108-38-0x000001FB032D0000-0x000001FB032F0000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/4108-44-0x000001FB038A0000-0x000001FB038C0000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/4184-153-0x0000021671F20000-0x0000021671F40000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/4184-148-0x0000021671B60000-0x0000021671B80000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/4184-150-0x0000021671B20000-0x0000021671B40000-memory.dmp

                                                                                                                Filesize

                                                                                                                128KB

                                                                                                                Download

                                                                                                              • memory/4540-345-0x0000000004B20000-0x0000000004B21000-memory.dmp

                                                                                                                Filesize

                                                                                                                4KB

                                                                                                                Download

                                                                                                              • memory/4552-187-0x0000000002490000-0x0000000002491000-memory.dmp

                                                                                                                Filesize

                                                                                                                4KB

                                                                                                                Download

                                                                                                              • memory/4572-73-0x0000000004710000-0x0000000004711000-memory.dmp

                                                                                                                Filesize

                                                                                                                4KB

                                                                                                                Download

                                                                                                              • memory/5004-163-0x0000000004CE0000-0x0000000004CE1000-memory.dmp

                                                                                                                Filesize

                                                                                                                4KB

                                                                                                                Download