Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

7dc31d1fc5...e6.exe

windows7-x64

8

7dc31d1fc5...e6.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    20s
  • max time network
    159s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/10/2023, 21:31

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    7dc31d1fc5543ea6a38a2cdc795ae28c2dd91029561fd2e7e10e28a6d30428e6.exe

  • Size

    3.4MB

  • MD5

    7366288de31196a3b7e34c372bce0fd5

  • SHA1

    3b7f2321f9e1ce07262debd3ec7a07a034865405

  • SHA256

    7dc31d1fc5543ea6a38a2cdc795ae28c2dd91029561fd2e7e10e28a6d30428e6

  • SHA512

    53a2f8e7c312f460454dba970d9cdf699cfefcfd0298cb92c316b6e50415988d1e1aec0358c683580827657a037b62c2a16199acbb2e59872d9f67b51ad4203e

  • SSDEEP

    49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlyLMrd6FpNKNsIv2zoWd:c+8X9G3vP3AM+MrcF3q2zoWd

Score
8/10
persistence

Malware Config

Signatures

  • Modifies Installed Components in the registry 2 TTPs 5 IoCs
    persistence
  • Enumerates connected drives 3 TTPs 10 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 2 IoCs
    adwarespyware
  • Modifies registry class 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\7dc31d1fc5543ea6a38a2cdc795ae28c2dd91029561fd2e7e10e28a6d30428e6.exe
    "C:\Users\Admin\AppData\Local\Temp\7dc31d1fc5543ea6a38a2cdc795ae28c2dd91029561fd2e7e10e28a6d30428e6.exe"
    1⤵
      PID:3480
    • C:\Windows\explorer.exe
      explorer.exe
      1⤵
      • Modifies Installed Components in the registry
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      PID:4848
    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
      1⤵
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:1420
    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
      1⤵
      • Suspicious use of SetWindowsHookEx
      PID:4768
    • C:\Windows\explorer.exe
      explorer.exe
      1⤵
      • Modifies Installed Components in the registry
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      PID:3192
    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
      1⤵
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:2808
    • C:\Windows\explorer.exe
      explorer.exe
      1⤵
      • Modifies Installed Components in the registry
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      PID:1484
    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
      1⤵
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:1660
    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
      1⤵
        PID:4108
      • C:\Windows\explorer.exe
        explorer.exe
        1⤵
        • Modifies Installed Components in the registry
        • Enumerates connected drives
        • Checks SCSI registry key(s)
        • Modifies registry class
        • Suspicious use of SendNotifyMessage
        PID:4052
      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
        1⤵
          PID:4924
        • C:\Windows\explorer.exe
          explorer.exe
          1⤵
          • Modifies Installed Components in the registry
          • Enumerates connected drives
          • Modifies registry class
          • Suspicious use of SendNotifyMessage
          PID:1556
        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
          1⤵
            PID:4696
          • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
            "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
            1⤵
              PID:4692
            • C:\Windows\explorer.exe
              explorer.exe
              1⤵
                PID:4924
              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                1⤵
                  PID:4328
                • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                  "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                  1⤵
                    PID:3892
                  • C:\Windows\explorer.exe
                    explorer.exe
                    1⤵
                      PID:2148
                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                      1⤵
                      • Modifies Internet Explorer settings
                      • Modifies registry class
                      • Suspicious use of SetWindowsHookEx
                      PID:4108
                    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                      1⤵
                        PID:1376
                      • C:\Windows\explorer.exe
                        explorer.exe
                        1⤵
                          PID:5116
                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                          1⤵
                            PID:4896
                          • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                            "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                            1⤵
                              PID:808
                            • C:\Windows\explorer.exe
                              explorer.exe
                              1⤵
                                PID:3704
                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                1⤵
                                  PID:4740
                                • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                  "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                  1⤵
                                    PID:3896
                                  • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                    "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                    1⤵
                                      PID:1876
                                    • C:\Windows\explorer.exe
                                      explorer.exe
                                      1⤵
                                        PID:3960
                                      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                        1⤵
                                          PID:3796
                                        • C:\Windows\explorer.exe
                                          explorer.exe
                                          1⤵
                                            PID:4228
                                          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                            1⤵
                                              PID:2556
                                            • C:\Windows\explorer.exe
                                              explorer.exe
                                              1⤵
                                                PID:4904
                                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                1⤵
                                                  PID:5116
                                                • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                  "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                  1⤵
                                                    PID:1108
                                                  • C:\Windows\explorer.exe
                                                    explorer.exe
                                                    1⤵
                                                      PID:652
                                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                      1⤵
                                                        PID:3668
                                                      • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                        "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                        1⤵
                                                          PID:764
                                                        • C:\Windows\explorer.exe
                                                          explorer.exe
                                                          1⤵
                                                            PID:3200
                                                          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                            1⤵
                                                              PID:3064
                                                            • C:\Windows\explorer.exe
                                                              explorer.exe
                                                              1⤵
                                                                PID:1692
                                                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                1⤵
                                                                  PID:3716
                                                                • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                  "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                  1⤵
                                                                    PID:3684
                                                                  • C:\Windows\explorer.exe
                                                                    explorer.exe
                                                                    1⤵
                                                                      PID:2072
                                                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                      1⤵
                                                                        PID:4392
                                                                      • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                        "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                        1⤵
                                                                          PID:4212
                                                                        • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                          "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                          1⤵
                                                                            PID:4152
                                                                          • C:\Windows\explorer.exe
                                                                            explorer.exe
                                                                            1⤵
                                                                              PID:2672
                                                                            • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                              "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                              1⤵
                                                                                PID:4788
                                                                              • C:\Windows\explorer.exe
                                                                                explorer.exe
                                                                                1⤵
                                                                                  PID:4896
                                                                                • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                  "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                  1⤵
                                                                                    PID:3852
                                                                                  • C:\Windows\explorer.exe
                                                                                    explorer.exe
                                                                                    1⤵
                                                                                      PID:2724
                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                      1⤵
                                                                                        PID:3400
                                                                                      • C:\Windows\explorer.exe
                                                                                        explorer.exe
                                                                                        1⤵
                                                                                          PID:4324
                                                                                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                          1⤵
                                                                                            PID:3260
                                                                                          • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                            "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                            1⤵
                                                                                              PID:4404
                                                                                            • C:\Windows\explorer.exe
                                                                                              explorer.exe
                                                                                              1⤵
                                                                                                PID:1520
                                                                                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                1⤵
                                                                                                  PID:2972
                                                                                                • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                  "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                  1⤵
                                                                                                    PID:3700
                                                                                                  • C:\Windows\explorer.exe
                                                                                                    explorer.exe
                                                                                                    1⤵
                                                                                                      PID:1272
                                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                      1⤵
                                                                                                        PID:2604
                                                                                                      • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                        "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                        1⤵
                                                                                                          PID:3984
                                                                                                        • C:\Windows\explorer.exe
                                                                                                          explorer.exe
                                                                                                          1⤵
                                                                                                            PID:3428
                                                                                                          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                            1⤵
                                                                                                              PID:4308
                                                                                                            • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                              "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                              1⤵
                                                                                                                PID:4840
                                                                                                              • C:\Windows\explorer.exe
                                                                                                                explorer.exe
                                                                                                                1⤵
                                                                                                                  PID:5088
                                                                                                                • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                  "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                  1⤵
                                                                                                                    PID:3324
                                                                                                                  • C:\Windows\explorer.exe
                                                                                                                    explorer.exe
                                                                                                                    1⤵
                                                                                                                      PID:4760
                                                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                      1⤵
                                                                                                                        PID:648
                                                                                                                      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                        1⤵
                                                                                                                          PID:2520
                                                                                                                        • C:\Windows\explorer.exe
                                                                                                                          explorer.exe
                                                                                                                          1⤵
                                                                                                                            PID:4588
                                                                                                                          • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                            "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                            1⤵
                                                                                                                              PID:888
                                                                                                                            • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                              "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                              1⤵
                                                                                                                                PID:3992
                                                                                                                              • C:\Windows\system32\rundll32.exe
                                                                                                                                "C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe
                                                                                                                                1⤵
                                                                                                                                  PID:1132
                                                                                                                                • C:\Windows\System32\svchost.exe
                                                                                                                                  C:\Windows\System32\svchost.exe -k UnistackSvcGroup
                                                                                                                                  1⤵
                                                                                                                                    PID:1476
                                                                                                                                  • C:\Windows\explorer.exe
                                                                                                                                    explorer.exe
                                                                                                                                    1⤵
                                                                                                                                      PID:5764
                                                                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                                      1⤵
                                                                                                                                        PID:6024
                                                                                                                                      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                        1⤵
                                                                                                                                          PID:6060
                                                                                                                                        • C:\Windows\explorer.exe
                                                                                                                                          explorer.exe
                                                                                                                                          1⤵
                                                                                                                                            PID:1408
                                                                                                                                          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                            1⤵
                                                                                                                                              PID:4468
                                                                                                                                            • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                                              "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                                              1⤵
                                                                                                                                                PID:5984
                                                                                                                                              • C:\Windows\explorer.exe
                                                                                                                                                explorer.exe
                                                                                                                                                1⤵
                                                                                                                                                  PID:2936
                                                                                                                                                • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                                  "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                                  1⤵
                                                                                                                                                    PID:6064
                                                                                                                                                  • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                                                    "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                                                    1⤵
                                                                                                                                                      PID:2604

                                                                                                                                                    Network

                                                                                                                                                    MITRE ATT&CK Enterprise v15

                                                                                                                                                    Replay Monitor

                                                                                                                                                    Loading Replay Monitor...

                                                                                                                                                    Downloads

                                                                                                                                                    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53
                                                                                                                                                      Filesize

                                                                                                                                                      471B

                                                                                                                                                      MD5

                                                                                                                                                      f3409bd91920eb99f49a4db4bb6b755d

                                                                                                                                                      SHA1

                                                                                                                                                      e3e407489814c8945f0a127b1b2063ab2bc85105

                                                                                                                                                      SHA256

                                                                                                                                                      0f060af0d7f6005d221c3d36eea835f58f86f85eb0884b1a50409a1de3874868

                                                                                                                                                      SHA512

                                                                                                                                                      1834cc4bba00c96c3228b8f1624c4c57fb901503401b14073d73305a9a9cb5789abe1191646c480f42452958d2aec5ae43642c7b5c6a90aab59e52a9ae6f85e9

                                                                                                                                                      Download Submit

                                                                                                                                                    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53
                                                                                                                                                      Filesize

                                                                                                                                                      412B

                                                                                                                                                      MD5

                                                                                                                                                      240b379763718c98be8bff6f630e8bdd

                                                                                                                                                      SHA1

                                                                                                                                                      5e3645916235e4f13eb4a56d8df469cc13649701

                                                                                                                                                      SHA256

                                                                                                                                                      693f4ffb119594a7ec9c76913173de0355f3b5ce481704587a5e7ae90c516a59

                                                                                                                                                      SHA512

                                                                                                                                                      2f7e805e8c3b5a2057508448498c045c188a0a80b3cc9da53c1d121024ffdc17ab9803ecc5e1a087968892602a86817395cff94a1c02267def752dfd5288f098

                                                                                                                                                      Download Submit

                                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                                      Filesize

                                                                                                                                                      97B

                                                                                                                                                      MD5

                                                                                                                                                      100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                                      SHA1

                                                                                                                                                      f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                                      SHA256

                                                                                                                                                      f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                                      SHA512

                                                                                                                                                      b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                                      Download Submit

                                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat
                                                                                                                                                      Filesize

                                                                                                                                                      22KB

                                                                                                                                                      MD5

                                                                                                                                                      b63a0181eeff138a2604be9819fde681

                                                                                                                                                      SHA1

                                                                                                                                                      56fcbeb8a4b2f3abac9d9850bfd3337c0fff01c0

                                                                                                                                                      SHA256

                                                                                                                                                      e28c2cdf8137250594383780d7ef29f5e3a777c1e8f0e7a4aed70f64322a3626

                                                                                                                                                      SHA512

                                                                                                                                                      2099ebfd2cf0f9017f666500da05bceb3f2c18167fef5bd9ff650a4ae3e99157d44b8652a922cef2a68bd85300b1d01af0d59aff51bf1054a4e2712a7d2ab4d3

                                                                                                                                                      Download Submit

                                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                                      Filesize

                                                                                                                                                      97B

                                                                                                                                                      MD5

                                                                                                                                                      100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                                      SHA1

                                                                                                                                                      f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                                      SHA256

                                                                                                                                                      f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                                      SHA512

                                                                                                                                                      b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                                      Download Submit

                                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                                      Filesize

                                                                                                                                                      97B

                                                                                                                                                      MD5

                                                                                                                                                      100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                                      SHA1

                                                                                                                                                      f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                                      SHA256

                                                                                                                                                      f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                                      SHA512

                                                                                                                                                      b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                                      Download Submit

                                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                                      Filesize

                                                                                                                                                      97B

                                                                                                                                                      MD5

                                                                                                                                                      100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                                      SHA1

                                                                                                                                                      f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                                      SHA256

                                                                                                                                                      f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                                      SHA512

                                                                                                                                                      b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                                      Download Submit

                                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                                      Filesize

                                                                                                                                                      97B

                                                                                                                                                      MD5

                                                                                                                                                      100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                                      SHA1

                                                                                                                                                      f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                                      SHA256

                                                                                                                                                      f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                                      SHA512

                                                                                                                                                      b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                                      Download Submit

                                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                                      Filesize

                                                                                                                                                      97B

                                                                                                                                                      MD5

                                                                                                                                                      100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                                      SHA1

                                                                                                                                                      f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                                      SHA256

                                                                                                                                                      f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                                      SHA512

                                                                                                                                                      b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                                      Download Submit

                                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                                      Filesize

                                                                                                                                                      97B

                                                                                                                                                      MD5

                                                                                                                                                      100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                                      SHA1

                                                                                                                                                      f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                                      SHA256

                                                                                                                                                      f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                                      SHA512

                                                                                                                                                      b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                                      Download Submit

                                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                                      Filesize

                                                                                                                                                      97B

                                                                                                                                                      MD5

                                                                                                                                                      100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                                      SHA1

                                                                                                                                                      f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                                      SHA256

                                                                                                                                                      f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                                      SHA512

                                                                                                                                                      b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                                      Download Submit

                                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                                      Filesize

                                                                                                                                                      97B

                                                                                                                                                      MD5

                                                                                                                                                      100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                                      SHA1

                                                                                                                                                      f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                                      SHA256

                                                                                                                                                      f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                                      SHA512

                                                                                                                                                      b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                                      Download Submit

                                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                                      Filesize

                                                                                                                                                      97B

                                                                                                                                                      MD5

                                                                                                                                                      100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                                      SHA1

                                                                                                                                                      f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                                      SHA256

                                                                                                                                                      f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                                      SHA512

                                                                                                                                                      b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                                      Download Submit

                                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                                      Filesize

                                                                                                                                                      97B

                                                                                                                                                      MD5

                                                                                                                                                      100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                                      SHA1

                                                                                                                                                      f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                                      SHA256

                                                                                                                                                      f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                                      SHA512

                                                                                                                                                      b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                                      Download Submit

                                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                                      Filesize

                                                                                                                                                      97B

                                                                                                                                                      MD5

                                                                                                                                                      100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                                      SHA1

                                                                                                                                                      f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                                      SHA256

                                                                                                                                                      f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                                      SHA512

                                                                                                                                                      b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                                      Download Submit

                                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                                      Filesize

                                                                                                                                                      97B

                                                                                                                                                      MD5

                                                                                                                                                      100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                                      SHA1

                                                                                                                                                      f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                                      SHA256

                                                                                                                                                      f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                                      SHA512

                                                                                                                                                      b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                                      Download Submit

                                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                                      Filesize

                                                                                                                                                      97B

                                                                                                                                                      MD5

                                                                                                                                                      100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                                      SHA1

                                                                                                                                                      f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                                      SHA256

                                                                                                                                                      f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                                      SHA512

                                                                                                                                                      b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                                      Download Submit

                                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                                      Filesize

                                                                                                                                                      97B

                                                                                                                                                      MD5

                                                                                                                                                      100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                                      SHA1

                                                                                                                                                      f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                                      SHA256

                                                                                                                                                      f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                                      SHA512

                                                                                                                                                      b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                                      Download Submit

                                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                                      Filesize

                                                                                                                                                      97B

                                                                                                                                                      MD5

                                                                                                                                                      100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                                      SHA1

                                                                                                                                                      f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                                      SHA256

                                                                                                                                                      f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                                      SHA512

                                                                                                                                                      b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                                      Download Submit

                                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                                      Filesize

                                                                                                                                                      97B

                                                                                                                                                      MD5

                                                                                                                                                      100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                                      SHA1

                                                                                                                                                      f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                                      SHA256

                                                                                                                                                      f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                                      SHA512

                                                                                                                                                      b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                                      Download Submit

                                                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                                      Filesize

                                                                                                                                                      97B

                                                                                                                                                      MD5

                                                                                                                                                      100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                                      SHA1

                                                                                                                                                      f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                                      SHA256

                                                                                                                                                      f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                                      SHA512

                                                                                                                                                      b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                                      Download Submit

                                                                                                                                                    • memory/652-187-0x0000000004C40000-0x0000000004C41000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      4KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/764-195-0x0000029590D20000-0x0000029590D40000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/764-197-0x00000295909E0000-0x0000029590A00000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/764-199-0x00000295910F0000-0x0000029591110000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/808-105-0x000001EB3C930000-0x000001EB3C950000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/808-109-0x000001EB3CF00000-0x000001EB3CF20000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/808-107-0x000001EB3C8F0000-0x000001EB3C910000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/1108-177-0x0000023E37370000-0x0000023E37390000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/1108-175-0x0000023E36F60000-0x0000023E36F80000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/1108-172-0x0000023E36FA0000-0x0000023E36FC0000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/1272-325-0x0000000002340000-0x0000000002341000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      4KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/1376-86-0x00000226DF0E0000-0x00000226DF100000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/1376-82-0x00000226DED10000-0x00000226DED30000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/1376-84-0x00000226DECD0000-0x00000226DECF0000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/1484-8-0x0000000002270000-0x0000000002271000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      4KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/1520-303-0x0000000002A20000-0x0000000002A21000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      4KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/1556-31-0x0000000004C60000-0x0000000004C61000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      4KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/1692-211-0x00000000046E0000-0x00000000046E1000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      4KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/1876-148-0x00000232BA220000-0x00000232BA240000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/1876-154-0x00000232BA5F0000-0x00000232BA610000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/1876-150-0x00000232B9FE0000-0x00000232BA000000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/2072-231-0x0000000004B00000-0x0000000004B01000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      4KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/2148-74-0x0000000003F80000-0x0000000003F81000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      4KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/3428-348-0x0000000004A70000-0x0000000004A71000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      4KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/3684-219-0x000001C7CAAF0000-0x000001C7CAB10000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/3684-224-0x000001C7CAEC0000-0x000001C7CAEE0000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/3684-222-0x000001C7CAAB0000-0x000001C7CAAD0000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/3700-316-0x0000028762820000-0x0000028762840000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/3700-313-0x0000028762420000-0x0000028762440000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/3700-310-0x0000028762460000-0x0000028762480000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/3704-117-0x0000000004B20000-0x0000000004B21000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      4KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/3892-64-0x0000025CD1FA0000-0x0000025CD1FC0000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/3892-59-0x0000025CD1BD0000-0x0000025CD1BF0000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/3892-62-0x0000025CD1B90000-0x0000025CD1BB0000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/3896-125-0x00000264B0DA0000-0x00000264B0DC0000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/3896-130-0x00000264B1170000-0x00000264B1190000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/3896-127-0x00000264B0D60000-0x00000264B0D80000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/3960-140-0x00000000046A0000-0x00000000046A1000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      4KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/3984-338-0x00000261C2990000-0x00000261C29B0000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/3984-335-0x00000261C2540000-0x00000261C2560000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/3984-333-0x00000261C2580000-0x00000261C25A0000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/4108-15-0x000001CADBC20000-0x000001CADBC40000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/4108-17-0x000001CADB9D0000-0x000001CADB9F0000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/4108-19-0x000001CADBFE0000-0x000001CADC000000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/4152-266-0x000002D4184D0000-0x000002D4184F0000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/4152-268-0x000002D418AE0000-0x000002D418B00000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/4152-263-0x000002D418510000-0x000002D418530000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/4212-243-0x0000020A371A0000-0x0000020A371C0000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/4212-239-0x0000020A36DD0000-0x0000020A36DF0000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/4212-241-0x0000020A36D90000-0x0000020A36DB0000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/4324-279-0x0000000004290000-0x0000000004291000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      4KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/4404-291-0x0000017529360000-0x0000017529380000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/4404-289-0x0000017528F40000-0x0000017528F60000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/4404-287-0x0000017528F80000-0x0000017528FA0000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/4692-39-0x00000206980C0000-0x00000206980E0000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/4692-41-0x0000020698080000-0x00000206980A0000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/4692-43-0x00000206986A0000-0x00000206986C0000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/4840-356-0x00000271DA080000-0x00000271DA0A0000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/4840-359-0x00000271DA040000-0x00000271DA060000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/4840-361-0x00000271DA450000-0x00000271DA470000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      128KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/4896-256-0x0000000004A50000-0x0000000004A51000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      4KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/4904-164-0x00000000033A0000-0x00000000033A1000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      4KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/4924-51-0x0000000003440000-0x0000000003441000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      4KB

                                                                                                                                                      Download

                                                                                                                                                    • memory/5116-98-0x0000000004CE0000-0x0000000004CE1000-memory.dmp

                                                                                                                                                      Filesize

                                                                                                                                                      4KB

                                                                                                                                                      Download