Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

3e625f0da3...64.exe

windows7-x64

8

3e625f0da3...64.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    43s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/10/2023, 18:55

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3e625f0da3b4f15a1aa7c71e564fc76de7fe45f604acb0c6e4fb442acacf7a64.exe

  • Size

    2.8MB

  • MD5

    2fa6d506637917428b16063ba0252a37

  • SHA1

    5e37fdbe03eb8fc40cd5478dbb3e5efe06036fd8

  • SHA256

    3e625f0da3b4f15a1aa7c71e564fc76de7fe45f604acb0c6e4fb442acacf7a64

  • SHA512

    0b691daecb84183a79e6b7a59c39dc3b43d1611402f8a0426f12fba2807633ba0d7c7147bf19d029cd4dd266090b0247145b7b01bf198bc6570d4d673287cae6

  • SSDEEP

    49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlKs02gRxXgQS:c+8X9G3vP3AMspxXvS

Score
8/10
persistence

Malware Config

Signatures

  • Modifies Installed Components in the registry 2 TTPs 7 IoCs
    persistence
  • Enumerates connected drives 3 TTPs 14 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 8 IoCs
    adwarespyware
  • Modifies registry class 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 10 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\3e625f0da3b4f15a1aa7c71e564fc76de7fe45f604acb0c6e4fb442acacf7a64.exe
    "C:\Users\Admin\AppData\Local\Temp\3e625f0da3b4f15a1aa7c71e564fc76de7fe45f604acb0c6e4fb442acacf7a64.exe"
    1⤵
      PID:5080
    • C:\Windows\explorer.exe
      explorer.exe
      1⤵
      • Modifies Installed Components in the registry
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      PID:4948
    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
      1⤵
      • Suspicious use of SetWindowsHookEx
      PID:1564
    • C:\Windows\explorer.exe
      explorer.exe
      1⤵
      • Modifies Installed Components in the registry
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      PID:536
    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
      1⤵
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:2912
    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
      1⤵
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:1340
    • C:\Windows\explorer.exe
      explorer.exe
      1⤵
      • Modifies Installed Components in the registry
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of SendNotifyMessage
      PID:3388
    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
      1⤵
      • Suspicious use of SetWindowsHookEx
      PID:2676
    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
      1⤵
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:3612
    • C:\Windows\explorer.exe
      explorer.exe
      1⤵
      • Modifies Installed Components in the registry
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies registry class
      • Suspicious use of SendNotifyMessage
      PID:2692
    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
      1⤵
      • Suspicious use of SetWindowsHookEx
      PID:2448
    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
      1⤵
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:4584
    • C:\Windows\explorer.exe
      explorer.exe
      1⤵
      • Modifies Installed Components in the registry
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies registry class
      PID:1632
    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
      1⤵
      • Suspicious use of SetWindowsHookEx
      PID:3920
    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
      1⤵
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:4124
    • C:\Windows\explorer.exe
      explorer.exe
      1⤵
      • Modifies Installed Components in the registry
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies registry class
      PID:4832
    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
      1⤵
      • Suspicious use of SetWindowsHookEx
      PID:4528
    • C:\Windows\explorer.exe
      explorer.exe
      1⤵
      • Modifies Installed Components in the registry
      • Enumerates connected drives
      • Modifies registry class
      PID:3252
    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
      1⤵
        PID:2020
      • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
        "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
        1⤵
          PID:2292
        • C:\Windows\explorer.exe
          explorer.exe
          1⤵
            PID:4740
          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
            1⤵
              PID:4084
            • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
              "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
              1⤵
                PID:4420
              • C:\Windows\explorer.exe
                explorer.exe
                1⤵
                  PID:864
                • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                  "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                  1⤵
                    PID:2320
                  • C:\Windows\explorer.exe
                    explorer.exe
                    1⤵
                      PID:2176
                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                      1⤵
                        PID:4816
                      • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                        "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                        1⤵
                          PID:2224
                        • C:\Windows\explorer.exe
                          explorer.exe
                          1⤵
                            PID:2436
                          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                            1⤵
                              PID:3088
                            • C:\Windows\explorer.exe
                              explorer.exe
                              1⤵
                                PID:672
                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                1⤵
                                  PID:4256
                                • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                  "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                  1⤵
                                    PID:4516
                                  • C:\Windows\explorer.exe
                                    explorer.exe
                                    1⤵
                                      PID:3268
                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                      1⤵
                                        PID:4104
                                      • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                        "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                        1⤵
                                          PID:2176
                                        • C:\Windows\explorer.exe
                                          explorer.exe
                                          1⤵
                                            PID:4352
                                          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                            1⤵
                                              PID:456
                                            • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                              "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                              1⤵
                                                PID:992
                                              • C:\Windows\explorer.exe
                                                explorer.exe
                                                1⤵
                                                  PID:3720
                                                • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                  "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                  1⤵
                                                    PID:4420
                                                  • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                    "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                    1⤵
                                                      PID:100
                                                    • C:\Windows\explorer.exe
                                                      explorer.exe
                                                      1⤵
                                                        PID:3888
                                                      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                        1⤵
                                                          PID:4780
                                                        • C:\Windows\explorer.exe
                                                          explorer.exe
                                                          1⤵
                                                            PID:1596
                                                          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                            1⤵
                                                              PID:1232
                                                            • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                              "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                              1⤵
                                                                PID:3764
                                                              • C:\Windows\explorer.exe
                                                                explorer.exe
                                                                1⤵
                                                                  PID:4336
                                                                • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                  "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                  1⤵
                                                                    PID:1424
                                                                  • C:\Windows\explorer.exe
                                                                    explorer.exe
                                                                    1⤵
                                                                      PID:3880
                                                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                      1⤵
                                                                        PID:3608
                                                                      • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                        "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                        1⤵
                                                                          PID:3400
                                                                        • C:\Windows\explorer.exe
                                                                          explorer.exe
                                                                          1⤵
                                                                            PID:3512
                                                                          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                            1⤵
                                                                              PID:4584
                                                                            • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                              "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                              1⤵
                                                                                PID:4084
                                                                              • C:\Windows\explorer.exe
                                                                                explorer.exe
                                                                                1⤵
                                                                                  PID:4868
                                                                                • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                  "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                  1⤵
                                                                                    PID:3344
                                                                                  • C:\Windows\explorer.exe
                                                                                    explorer.exe
                                                                                    1⤵
                                                                                      PID:3340
                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                      1⤵
                                                                                        PID:4672
                                                                                      • C:\Windows\explorer.exe
                                                                                        explorer.exe
                                                                                        1⤵
                                                                                          PID:3264
                                                                                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                          1⤵
                                                                                            PID:2176
                                                                                          • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                            "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                            1⤵
                                                                                              PID:3920
                                                                                            • C:\Windows\explorer.exe
                                                                                              explorer.exe
                                                                                              1⤵
                                                                                                PID:5004
                                                                                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                1⤵
                                                                                                  PID:3012
                                                                                                • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                  "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                  1⤵
                                                                                                    PID:3340
                                                                                                  • C:\Windows\explorer.exe
                                                                                                    explorer.exe
                                                                                                    1⤵
                                                                                                      PID:3300
                                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                      1⤵
                                                                                                        PID:3248
                                                                                                      • C:\Windows\explorer.exe
                                                                                                        explorer.exe
                                                                                                        1⤵
                                                                                                          PID:992
                                                                                                        • C:\Windows\explorer.exe
                                                                                                          explorer.exe
                                                                                                          1⤵
                                                                                                            PID:3832
                                                                                                          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                            1⤵
                                                                                                              PID:1220
                                                                                                            • C:\Windows\explorer.exe
                                                                                                              explorer.exe
                                                                                                              1⤵
                                                                                                                PID:2908
                                                                                                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                1⤵
                                                                                                                  PID:1416

                                                                                                                Network

                                                                                                                MITRE ATT&CK Enterprise v15

                                                                                                                Replay Monitor

                                                                                                                Loading Replay Monitor...

                                                                                                                Downloads

                                                                                                                • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53
                                                                                                                  Filesize

                                                                                                                  471B

                                                                                                                  MD5

                                                                                                                  57aa4764cba6f011da829704a39883af

                                                                                                                  SHA1

                                                                                                                  5a7cdfac29508709bc40f9dcf0442d3da3a12809

                                                                                                                  SHA256

                                                                                                                  bfc22485d2f2687105cb49f081b5d2b254fea6eccf266b8a0d1c6a1398f1df2c

                                                                                                                  SHA512

                                                                                                                  99ecb589764c5df0a94bb5e985ad7b863fe41e95f58daff4c745a41aa582958fd6f3f91ad64d18364a5522b1f927addee0a7e1f2508656f14d79a736f6d33c62

                                                                                                                  Download Submit

                                                                                                                • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53
                                                                                                                  Filesize

                                                                                                                  412B

                                                                                                                  MD5

                                                                                                                  172526090eebd9b82d1d4cb1fb8ab34d

                                                                                                                  SHA1

                                                                                                                  74dfba87b2aba41c75247b41f89664c820fa65cb

                                                                                                                  SHA256

                                                                                                                  282f85145f86bbc91f2e337f2c65b826dcb1f7c4e8bf1ee9605510ec66da3a51

                                                                                                                  SHA512

                                                                                                                  b39dcaa0a89df19e2d4ce2bef381698d492f277a751d9f1aebc40dc0a3fb5b73153a95cba7f51af356850367aee2747ada55957810b05af1ccba0460ee001fcd

                                                                                                                  Download Submit

                                                                                                                • C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\ANTV7B43\microsoft.windows[1].xml
                                                                                                                  Filesize

                                                                                                                  96B

                                                                                                                  MD5

                                                                                                                  4114b63fafc98d9307dc8bfae1c379cd

                                                                                                                  SHA1

                                                                                                                  8959adf99facaf14c6be813470286c448b0e0b44

                                                                                                                  SHA256

                                                                                                                  f93f1cffd4688bc4cd9e3dfb2ee84a1f53f40d966cab8542c5863906faaf197f

                                                                                                                  SHA512

                                                                                                                  51eb95339b914b6674922ad2635a193ae1fb1d008c35f03cc8664c46e4f124389a884d7854268c90ac7883102f9a98483e0019a269070b7d6a96fcc70c937723

                                                                                                                  Download Submit

                                                                                                                • C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_AutoGenerated_{0A6AC72E-ED8C-C16F-38B6-05831557CF24}
                                                                                                                  Filesize

                                                                                                                  36KB

                                                                                                                  MD5

                                                                                                                  8aaad0f4eb7d3c65f81c6e6b496ba889

                                                                                                                  SHA1

                                                                                                                  231237a501b9433c292991e4ec200b25c1589050

                                                                                                                  SHA256

                                                                                                                  813c66ce7dec4cff9c55fb6f809eab909421e37f69ff30e4acaa502365a32bd1

                                                                                                                  SHA512

                                                                                                                  1a83ce732dc47853bf6e8f4249054f41b0dea8505cda73433b37dfa16114f27bfed3b4b3ba580aa9d53c3dcc8d48bf571a45f7c0468e6a0f2a227a7e59e17d62

                                                                                                                  Download Submit

                                                                                                                • C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_charmap_exe
                                                                                                                  Filesize

                                                                                                                  36KB

                                                                                                                  MD5

                                                                                                                  406347732c383e23c3b1af590a47bccd

                                                                                                                  SHA1

                                                                                                                  fae764f62a396f2503dd81eefd3c7f06a5fb8e5f

                                                                                                                  SHA256

                                                                                                                  e0a9f5c75706dc79a44d0c890c841b2b0b25af4ee60d0a16a7356b067210038e

                                                                                                                  SHA512

                                                                                                                  18905eaad8184bb3a7b0fe21ff37ed2ee72a3bd24bb90cbfcad222cf09e2fa74e886d5c687b21d81cd3aec1e6c05891c24f67a8f82bafd2aceb0e0dcb7672ce7

                                                                                                                  Download Submit

                                                                                                                • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\ANTV7B43\microsoft.windows[1].xml
                                                                                                                  Filesize

                                                                                                                  96B

                                                                                                                  MD5

                                                                                                                  4114b63fafc98d9307dc8bfae1c379cd

                                                                                                                  SHA1

                                                                                                                  8959adf99facaf14c6be813470286c448b0e0b44

                                                                                                                  SHA256

                                                                                                                  f93f1cffd4688bc4cd9e3dfb2ee84a1f53f40d966cab8542c5863906faaf197f

                                                                                                                  SHA512

                                                                                                                  51eb95339b914b6674922ad2635a193ae1fb1d008c35f03cc8664c46e4f124389a884d7854268c90ac7883102f9a98483e0019a269070b7d6a96fcc70c937723

                                                                                                                  Download Submit

                                                                                                                • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\ANTV7B43\microsoft.windows[1].xml
                                                                                                                  Filesize

                                                                                                                  96B

                                                                                                                  MD5

                                                                                                                  4114b63fafc98d9307dc8bfae1c379cd

                                                                                                                  SHA1

                                                                                                                  8959adf99facaf14c6be813470286c448b0e0b44

                                                                                                                  SHA256

                                                                                                                  f93f1cffd4688bc4cd9e3dfb2ee84a1f53f40d966cab8542c5863906faaf197f

                                                                                                                  SHA512

                                                                                                                  51eb95339b914b6674922ad2635a193ae1fb1d008c35f03cc8664c46e4f124389a884d7854268c90ac7883102f9a98483e0019a269070b7d6a96fcc70c937723

                                                                                                                  Download Submit

                                                                                                                • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\ANTV7B43\microsoft.windows[1].xml
                                                                                                                  Filesize

                                                                                                                  96B

                                                                                                                  MD5

                                                                                                                  4114b63fafc98d9307dc8bfae1c379cd

                                                                                                                  SHA1

                                                                                                                  8959adf99facaf14c6be813470286c448b0e0b44

                                                                                                                  SHA256

                                                                                                                  f93f1cffd4688bc4cd9e3dfb2ee84a1f53f40d966cab8542c5863906faaf197f

                                                                                                                  SHA512

                                                                                                                  51eb95339b914b6674922ad2635a193ae1fb1d008c35f03cc8664c46e4f124389a884d7854268c90ac7883102f9a98483e0019a269070b7d6a96fcc70c937723

                                                                                                                  Download Submit

                                                                                                                • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\ANTV7B43\microsoft.windows[1].xml
                                                                                                                  Filesize

                                                                                                                  96B

                                                                                                                  MD5

                                                                                                                  4114b63fafc98d9307dc8bfae1c379cd

                                                                                                                  SHA1

                                                                                                                  8959adf99facaf14c6be813470286c448b0e0b44

                                                                                                                  SHA256

                                                                                                                  f93f1cffd4688bc4cd9e3dfb2ee84a1f53f40d966cab8542c5863906faaf197f

                                                                                                                  SHA512

                                                                                                                  51eb95339b914b6674922ad2635a193ae1fb1d008c35f03cc8664c46e4f124389a884d7854268c90ac7883102f9a98483e0019a269070b7d6a96fcc70c937723

                                                                                                                  Download Submit

                                                                                                                • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\ANTV7B43\microsoft.windows[1].xml
                                                                                                                  Filesize

                                                                                                                  96B

                                                                                                                  MD5

                                                                                                                  4114b63fafc98d9307dc8bfae1c379cd

                                                                                                                  SHA1

                                                                                                                  8959adf99facaf14c6be813470286c448b0e0b44

                                                                                                                  SHA256

                                                                                                                  f93f1cffd4688bc4cd9e3dfb2ee84a1f53f40d966cab8542c5863906faaf197f

                                                                                                                  SHA512

                                                                                                                  51eb95339b914b6674922ad2635a193ae1fb1d008c35f03cc8664c46e4f124389a884d7854268c90ac7883102f9a98483e0019a269070b7d6a96fcc70c937723

                                                                                                                  Download Submit

                                                                                                                • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\ANTV7B43\microsoft.windows[1].xml
                                                                                                                  Filesize

                                                                                                                  96B

                                                                                                                  MD5

                                                                                                                  4114b63fafc98d9307dc8bfae1c379cd

                                                                                                                  SHA1

                                                                                                                  8959adf99facaf14c6be813470286c448b0e0b44

                                                                                                                  SHA256

                                                                                                                  f93f1cffd4688bc4cd9e3dfb2ee84a1f53f40d966cab8542c5863906faaf197f

                                                                                                                  SHA512

                                                                                                                  51eb95339b914b6674922ad2635a193ae1fb1d008c35f03cc8664c46e4f124389a884d7854268c90ac7883102f9a98483e0019a269070b7d6a96fcc70c937723

                                                                                                                  Download Submit

                                                                                                                • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\ANTV7B43\microsoft.windows[1].xml
                                                                                                                  Filesize

                                                                                                                  96B

                                                                                                                  MD5

                                                                                                                  4114b63fafc98d9307dc8bfae1c379cd

                                                                                                                  SHA1

                                                                                                                  8959adf99facaf14c6be813470286c448b0e0b44

                                                                                                                  SHA256

                                                                                                                  f93f1cffd4688bc4cd9e3dfb2ee84a1f53f40d966cab8542c5863906faaf197f

                                                                                                                  SHA512

                                                                                                                  51eb95339b914b6674922ad2635a193ae1fb1d008c35f03cc8664c46e4f124389a884d7854268c90ac7883102f9a98483e0019a269070b7d6a96fcc70c937723

                                                                                                                  Download Submit

                                                                                                                • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\ANTV7B43\microsoft.windows[1].xml
                                                                                                                  Filesize

                                                                                                                  96B

                                                                                                                  MD5

                                                                                                                  4114b63fafc98d9307dc8bfae1c379cd

                                                                                                                  SHA1

                                                                                                                  8959adf99facaf14c6be813470286c448b0e0b44

                                                                                                                  SHA256

                                                                                                                  f93f1cffd4688bc4cd9e3dfb2ee84a1f53f40d966cab8542c5863906faaf197f

                                                                                                                  SHA512

                                                                                                                  51eb95339b914b6674922ad2635a193ae1fb1d008c35f03cc8664c46e4f124389a884d7854268c90ac7883102f9a98483e0019a269070b7d6a96fcc70c937723

                                                                                                                  Download Submit

                                                                                                                • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\ANTV7B43\microsoft.windows[1].xml
                                                                                                                  Filesize

                                                                                                                  96B

                                                                                                                  MD5

                                                                                                                  4114b63fafc98d9307dc8bfae1c379cd

                                                                                                                  SHA1

                                                                                                                  8959adf99facaf14c6be813470286c448b0e0b44

                                                                                                                  SHA256

                                                                                                                  f93f1cffd4688bc4cd9e3dfb2ee84a1f53f40d966cab8542c5863906faaf197f

                                                                                                                  SHA512

                                                                                                                  51eb95339b914b6674922ad2635a193ae1fb1d008c35f03cc8664c46e4f124389a884d7854268c90ac7883102f9a98483e0019a269070b7d6a96fcc70c937723

                                                                                                                  Download Submit

                                                                                                                • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\ANTV7B43\microsoft.windows[1].xml
                                                                                                                  Filesize

                                                                                                                  96B

                                                                                                                  MD5

                                                                                                                  4114b63fafc98d9307dc8bfae1c379cd

                                                                                                                  SHA1

                                                                                                                  8959adf99facaf14c6be813470286c448b0e0b44

                                                                                                                  SHA256

                                                                                                                  f93f1cffd4688bc4cd9e3dfb2ee84a1f53f40d966cab8542c5863906faaf197f

                                                                                                                  SHA512

                                                                                                                  51eb95339b914b6674922ad2635a193ae1fb1d008c35f03cc8664c46e4f124389a884d7854268c90ac7883102f9a98483e0019a269070b7d6a96fcc70c937723

                                                                                                                  Download Submit

                                                                                                                • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\ANTV7B43\microsoft.windows[1].xml
                                                                                                                  Filesize

                                                                                                                  96B

                                                                                                                  MD5

                                                                                                                  4114b63fafc98d9307dc8bfae1c379cd

                                                                                                                  SHA1

                                                                                                                  8959adf99facaf14c6be813470286c448b0e0b44

                                                                                                                  SHA256

                                                                                                                  f93f1cffd4688bc4cd9e3dfb2ee84a1f53f40d966cab8542c5863906faaf197f

                                                                                                                  SHA512

                                                                                                                  51eb95339b914b6674922ad2635a193ae1fb1d008c35f03cc8664c46e4f124389a884d7854268c90ac7883102f9a98483e0019a269070b7d6a96fcc70c937723

                                                                                                                  Download Submit

                                                                                                                • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\ANTV7B43\microsoft.windows[1].xml
                                                                                                                  Filesize

                                                                                                                  96B

                                                                                                                  MD5

                                                                                                                  4114b63fafc98d9307dc8bfae1c379cd

                                                                                                                  SHA1

                                                                                                                  8959adf99facaf14c6be813470286c448b0e0b44

                                                                                                                  SHA256

                                                                                                                  f93f1cffd4688bc4cd9e3dfb2ee84a1f53f40d966cab8542c5863906faaf197f

                                                                                                                  SHA512

                                                                                                                  51eb95339b914b6674922ad2635a193ae1fb1d008c35f03cc8664c46e4f124389a884d7854268c90ac7883102f9a98483e0019a269070b7d6a96fcc70c937723

                                                                                                                  Download Submit

                                                                                                                • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\ANTV7B43\microsoft.windows[1].xml
                                                                                                                  Filesize

                                                                                                                  96B

                                                                                                                  MD5

                                                                                                                  4114b63fafc98d9307dc8bfae1c379cd

                                                                                                                  SHA1

                                                                                                                  8959adf99facaf14c6be813470286c448b0e0b44

                                                                                                                  SHA256

                                                                                                                  f93f1cffd4688bc4cd9e3dfb2ee84a1f53f40d966cab8542c5863906faaf197f

                                                                                                                  SHA512

                                                                                                                  51eb95339b914b6674922ad2635a193ae1fb1d008c35f03cc8664c46e4f124389a884d7854268c90ac7883102f9a98483e0019a269070b7d6a96fcc70c937723

                                                                                                                  Download Submit

                                                                                                                • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\ANTV7B43\microsoft.windows[1].xml
                                                                                                                  Filesize

                                                                                                                  96B

                                                                                                                  MD5

                                                                                                                  4114b63fafc98d9307dc8bfae1c379cd

                                                                                                                  SHA1

                                                                                                                  8959adf99facaf14c6be813470286c448b0e0b44

                                                                                                                  SHA256

                                                                                                                  f93f1cffd4688bc4cd9e3dfb2ee84a1f53f40d966cab8542c5863906faaf197f

                                                                                                                  SHA512

                                                                                                                  51eb95339b914b6674922ad2635a193ae1fb1d008c35f03cc8664c46e4f124389a884d7854268c90ac7883102f9a98483e0019a269070b7d6a96fcc70c937723

                                                                                                                  Download Submit

                                                                                                                • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\ANTV7B43\microsoft.windows[1].xml
                                                                                                                  Filesize

                                                                                                                  96B

                                                                                                                  MD5

                                                                                                                  4114b63fafc98d9307dc8bfae1c379cd

                                                                                                                  SHA1

                                                                                                                  8959adf99facaf14c6be813470286c448b0e0b44

                                                                                                                  SHA256

                                                                                                                  f93f1cffd4688bc4cd9e3dfb2ee84a1f53f40d966cab8542c5863906faaf197f

                                                                                                                  SHA512

                                                                                                                  51eb95339b914b6674922ad2635a193ae1fb1d008c35f03cc8664c46e4f124389a884d7854268c90ac7883102f9a98483e0019a269070b7d6a96fcc70c937723

                                                                                                                  Download Submit

                                                                                                                • memory/100-249-0x00000196FB650000-0x00000196FB670000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/100-247-0x00000196FB690000-0x00000196FB6B0000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/100-251-0x00000196FBA60000-0x00000196FBA80000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/536-7-0x00000000048A0000-0x00000000048A1000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  4KB

                                                                                                                  Download

                                                                                                                • memory/672-171-0x0000000002820000-0x0000000002821000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  4KB

                                                                                                                  Download

                                                                                                                • memory/992-224-0x0000021BA6240000-0x0000021BA6260000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/992-228-0x0000021BA6610000-0x0000021BA6630000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/992-226-0x0000021BA6200000-0x0000021BA6220000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/1340-16-0x000002C246530000-0x000002C246550000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/1340-14-0x000002C246570000-0x000002C246590000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/1340-17-0x000002C246B40000-0x000002C246B60000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/1596-263-0x00000000042D0000-0x00000000042D1000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  4KB

                                                                                                                  Download

                                                                                                                • memory/1632-76-0x00000000048E0000-0x00000000048E1000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  4KB

                                                                                                                  Download

                                                                                                                • memory/2176-207-0x000002670AD40000-0x000002670AD60000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/2176-146-0x00000000041F0000-0x00000000041F1000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  4KB

                                                                                                                  Download

                                                                                                                • memory/2176-201-0x000002670A970000-0x000002670A990000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/2176-204-0x000002670A930000-0x000002670A950000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/2224-156-0x00000244B0160000-0x00000244B0180000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/2224-158-0x00000244B0570000-0x00000244B0590000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/2224-154-0x00000244B01A0000-0x00000244B01C0000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/2292-109-0x000002D876A90000-0x000002D876AB0000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/2292-111-0x000002D876EA0000-0x000002D876EC0000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/2292-107-0x000002D876AD0000-0x000002D876AF0000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/2692-52-0x0000000004530000-0x0000000004531000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  4KB

                                                                                                                  Download

                                                                                                                • memory/3252-99-0x0000000004830000-0x0000000004831000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  4KB

                                                                                                                  Download

                                                                                                                • memory/3264-332-0x0000000004BD0000-0x0000000004BD1000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  4KB

                                                                                                                  Download

                                                                                                                • memory/3268-193-0x0000000004E00000-0x0000000004E01000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  4KB

                                                                                                                  Download

                                                                                                                • memory/3340-363-0x0000024AE9B70000-0x0000024AE9B90000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/3340-365-0x0000024AE9B30000-0x0000024AE9B50000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/3340-368-0x0000024AE9F40000-0x0000024AE9F60000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/3388-30-0x00000000047F0000-0x00000000047F1000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  4KB

                                                                                                                  Download

                                                                                                                • memory/3400-292-0x00000257095F0000-0x0000025709610000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/3400-294-0x00000257095B0000-0x00000257095D0000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/3400-296-0x00000257099C0000-0x00000257099E0000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/3512-307-0x00000000041F0000-0x00000000041F1000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  4KB

                                                                                                                  Download

                                                                                                                • memory/3612-37-0x000001C08EE00000-0x000001C08EE20000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/3612-39-0x000001C08EBC0000-0x000001C08EBE0000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/3612-41-0x000001C08F1D0000-0x000001C08F1F0000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/3720-239-0x00000000040A0000-0x00000000040A1000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  4KB

                                                                                                                  Download

                                                                                                                • memory/3764-271-0x00000154C3260000-0x00000154C3280000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/3764-273-0x00000154C3220000-0x00000154C3240000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/3764-275-0x00000154C3620000-0x00000154C3640000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/3880-284-0x0000000004320000-0x0000000004321000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  4KB

                                                                                                                  Download

                                                                                                                • memory/3920-346-0x00000135488E0000-0x0000013548900000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/3920-340-0x0000013548310000-0x0000013548330000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/3920-343-0x00000135482D0000-0x00000135482F0000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/4084-315-0x0000020120760000-0x0000020120780000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/4084-318-0x0000020120720000-0x0000020120740000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/4084-321-0x0000020120B30000-0x0000020120B50000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/4124-83-0x000001EB6CC80000-0x000001EB6CCA0000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/4124-87-0x000001EB6D050000-0x000001EB6D070000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/4124-85-0x000001EB6CC40000-0x000001EB6CC60000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/4352-217-0x00000000042E0000-0x00000000042E1000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  4KB

                                                                                                                  Download

                                                                                                                • memory/4420-130-0x000001CE13A00000-0x000001CE13A20000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/4420-134-0x000001CE13DC0000-0x000001CE13DE0000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/4420-132-0x000001CE137B0000-0x000001CE137D0000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/4516-178-0x000001F943800000-0x000001F943820000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/4516-180-0x000001F9435B0000-0x000001F9435D0000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/4516-182-0x000001F943BC0000-0x000001F943BE0000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/4584-65-0x0000029B4DC60000-0x0000029B4DC80000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/4584-63-0x0000029B4D850000-0x0000029B4D870000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/4584-60-0x0000029B4D890000-0x0000029B4D8B0000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  128KB

                                                                                                                  Download

                                                                                                                • memory/4740-122-0x0000000002D20000-0x0000000002D21000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  4KB

                                                                                                                  Download

                                                                                                                • memory/5004-356-0x0000000002B20000-0x0000000002B21000-memory.dmp

                                                                                                                  Filesize

                                                                                                                  4KB

                                                                                                                  Download