Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

3d7eea6616...6a.exe

windows7-x64

8

3d7eea6616...6a.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    28s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/10/2023, 00:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3d7eea66162c2809c6677b47fef7b5dfa520c31106f2961474f2e7d0927c4c6a.exe

  • Size

    3.0MB

  • MD5

    75a43a2121e7226b51c4ee528787c07d

  • SHA1

    db4913c7082af6c4542fb9e2efcf583678d92186

  • SHA256

    3d7eea66162c2809c6677b47fef7b5dfa520c31106f2961474f2e7d0927c4c6a

  • SHA512

    2ca7935b14436ac44cef71bf8254b2b4d7c4537ee131f0d09ca881a69fa8b9341ca2a9a9787cf280b73aa64c726801455061e285fba8038eb12c048e197638a8

  • SSDEEP

    49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlBKh2/KO28Y0jmSqIvXeq:Q+8X9G3vP3AMo2/L28Y0jTqgV

Score
8/10
persistence

Malware Config

Signatures

  • Modifies Installed Components in the registry 2 TTPs 6 IoCs
    persistence
  • Enumerates connected drives 3 TTPs 12 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 6 IoCs
    adwarespyware
  • Modifies registry class 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 9 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\3d7eea66162c2809c6677b47fef7b5dfa520c31106f2961474f2e7d0927c4c6a.exe
    "C:\Users\Admin\AppData\Local\Temp\3d7eea66162c2809c6677b47fef7b5dfa520c31106f2961474f2e7d0927c4c6a.exe"
    1⤵
      PID:952
    • C:\Windows\explorer.exe
      explorer.exe
      1⤵
      • Modifies Installed Components in the registry
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      PID:4676
    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
      1⤵
      • Modifies registry class
      • Suspicious use of SetWindowsHookEx
      PID:8
    • C:\Windows\explorer.exe
      explorer.exe
      1⤵
        PID:3796
      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
        1⤵
        • Modifies registry class
        • Suspicious use of SetWindowsHookEx
        PID:4024
      • C:\Windows\explorer.exe
        explorer.exe
        1⤵
        • Modifies Installed Components in the registry
        • Enumerates connected drives
        • Checks SCSI registry key(s)
        • Modifies registry class
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        PID:3252
      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
        1⤵
        • Modifies registry class
        • Suspicious use of SetWindowsHookEx
        PID:4952
      • C:\Windows\explorer.exe
        explorer.exe
        1⤵
        • Modifies Installed Components in the registry
        • Enumerates connected drives
        • Checks SCSI registry key(s)
        • Modifies registry class
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        PID:2720
      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
        1⤵
        • Modifies registry class
        • Suspicious use of SetWindowsHookEx
        PID:3352
      • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
        "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
        1⤵
          PID:5052
        • C:\Windows\explorer.exe
          explorer.exe
          1⤵
          • Modifies Installed Components in the registry
          • Enumerates connected drives
          • Checks SCSI registry key(s)
          • Modifies registry class
          • Suspicious use of SendNotifyMessage
          PID:2240
        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
          1⤵
          • Modifies Installed Components in the registry
          • Enumerates connected drives
          • Checks SCSI registry key(s)
          • Modifies registry class
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of SetWindowsHookEx
          PID:3796
        • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
          "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
          1⤵
          • Modifies Internet Explorer settings
          • Modifies registry class
          • Suspicious use of SetWindowsHookEx
          PID:1304
        • C:\Windows\explorer.exe
          explorer.exe
          1⤵
          • Modifies Installed Components in the registry
          • Enumerates connected drives
          • Checks SCSI registry key(s)
          • Modifies registry class
          PID:3940
        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
          1⤵
          • Modifies registry class
          • Suspicious use of SetWindowsHookEx
          PID:1928
        • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
          "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
          1⤵
          • Modifies Internet Explorer settings
          • Modifies registry class
          • Suspicious use of SetWindowsHookEx
          PID:4756
        • C:\Windows\explorer.exe
          explorer.exe
          1⤵
            PID:1520
          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
            1⤵
              PID:372
            • C:\Windows\explorer.exe
              explorer.exe
              1⤵
                PID:2128
              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                1⤵
                  PID:3876
                • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                  "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                  1⤵
                    PID:632
                  • C:\Windows\explorer.exe
                    explorer.exe
                    1⤵
                      PID:220
                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                      1⤵
                        PID:1548
                      • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                        "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                        1⤵
                          PID:2472
                        • C:\Windows\explorer.exe
                          explorer.exe
                          1⤵
                            PID:5016
                          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                            1⤵
                              PID:3300
                            • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                              "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                              1⤵
                                PID:3932
                              • C:\Windows\explorer.exe
                                explorer.exe
                                1⤵
                                  PID:232
                                • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                  "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                  1⤵
                                    PID:4588
                                  • C:\Windows\explorer.exe
                                    explorer.exe
                                    1⤵
                                    • Modifies Internet Explorer settings
                                    • Modifies registry class
                                    • Suspicious use of SetWindowsHookEx
                                    PID:5052
                                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                    1⤵
                                      PID:3440
                                    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                      1⤵
                                        PID:3880
                                      • C:\Windows\explorer.exe
                                        explorer.exe
                                        1⤵
                                          PID:2796
                                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                          1⤵
                                            PID:5088
                                          • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                            "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                            1⤵
                                              PID:2792
                                            • C:\Windows\explorer.exe
                                              explorer.exe
                                              1⤵
                                                PID:4352
                                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                1⤵
                                                  PID:1996
                                                • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                  "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                  1⤵
                                                    PID:4896
                                                  • C:\Windows\explorer.exe
                                                    explorer.exe
                                                    1⤵
                                                      PID:2228
                                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                      1⤵
                                                        PID:3288
                                                      • C:\Windows\explorer.exe
                                                        explorer.exe
                                                        1⤵
                                                          PID:4004
                                                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                          1⤵
                                                            PID:4420
                                                          • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                            "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                            1⤵
                                                              PID:392
                                                            • C:\Windows\explorer.exe
                                                              explorer.exe
                                                              1⤵
                                                                PID:1104
                                                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                1⤵
                                                                  PID:4884
                                                                • C:\Windows\explorer.exe
                                                                  explorer.exe
                                                                  1⤵
                                                                    PID:3172
                                                                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                    1⤵
                                                                      PID:1808
                                                                    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                      1⤵
                                                                        PID:1208
                                                                      • C:\Windows\explorer.exe
                                                                        explorer.exe
                                                                        1⤵
                                                                          PID:3824
                                                                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                          1⤵
                                                                            PID:4548
                                                                          • C:\Windows\explorer.exe
                                                                            explorer.exe
                                                                            1⤵
                                                                              PID:3504
                                                                            • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                              "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                              1⤵
                                                                                PID:2580
                                                                              • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                1⤵
                                                                                  PID:3264
                                                                                • C:\Windows\explorer.exe
                                                                                  explorer.exe
                                                                                  1⤵
                                                                                    PID:2044
                                                                                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                    1⤵
                                                                                      PID:3816
                                                                                    • C:\Windows\explorer.exe
                                                                                      explorer.exe
                                                                                      1⤵
                                                                                        PID:4816
                                                                                      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                        1⤵
                                                                                          PID:2320
                                                                                        • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                          "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                          1⤵
                                                                                            PID:4504
                                                                                          • C:\Windows\explorer.exe
                                                                                            explorer.exe
                                                                                            1⤵
                                                                                              PID:1340
                                                                                            • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                              "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                              1⤵
                                                                                                PID:3236
                                                                                              • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                1⤵
                                                                                                  PID:5024
                                                                                                • C:\Windows\explorer.exe
                                                                                                  explorer.exe
                                                                                                  1⤵
                                                                                                    PID:2368
                                                                                                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                    1⤵
                                                                                                      PID:2320
                                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                      1⤵
                                                                                                        PID:1684
                                                                                                      • C:\Windows\explorer.exe
                                                                                                        explorer.exe
                                                                                                        1⤵
                                                                                                          PID:664
                                                                                                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                          1⤵
                                                                                                            PID:4436
                                                                                                          • C:\Windows\explorer.exe
                                                                                                            explorer.exe
                                                                                                            1⤵
                                                                                                              PID:440
                                                                                                            • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                              "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                              1⤵
                                                                                                                PID:4740
                                                                                                              • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                1⤵
                                                                                                                  PID:2188
                                                                                                                • C:\Windows\explorer.exe
                                                                                                                  explorer.exe
                                                                                                                  1⤵
                                                                                                                    PID:4452
                                                                                                                  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                    1⤵
                                                                                                                      PID:4328
                                                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                      1⤵
                                                                                                                        PID:1808
                                                                                                                      • C:\Windows\explorer.exe
                                                                                                                        explorer.exe
                                                                                                                        1⤵
                                                                                                                          PID:1532
                                                                                                                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                          1⤵
                                                                                                                            PID:3696
                                                                                                                          • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                            "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                            1⤵
                                                                                                                              PID:4848
                                                                                                                            • C:\Windows\explorer.exe
                                                                                                                              explorer.exe
                                                                                                                              1⤵
                                                                                                                                PID:3468
                                                                                                                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                1⤵
                                                                                                                                  PID:4568
                                                                                                                                • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                                  "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                                  1⤵
                                                                                                                                    PID:4760
                                                                                                                                  • C:\Windows\explorer.exe
                                                                                                                                    explorer.exe
                                                                                                                                    1⤵
                                                                                                                                      PID:3388
                                                                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                      1⤵
                                                                                                                                        PID:3376
                                                                                                                                      • C:\Windows\explorer.exe
                                                                                                                                        explorer.exe
                                                                                                                                        1⤵
                                                                                                                                          PID:4764
                                                                                                                                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                          1⤵
                                                                                                                                            PID:2856
                                                                                                                                          • C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
                                                                                                                                            "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
                                                                                                                                            1⤵
                                                                                                                                              PID:1424

                                                                                                                                            Network

                                                                                                                                            MITRE ATT&CK Enterprise v15

                                                                                                                                            Replay Monitor

                                                                                                                                            Loading Replay Monitor...

                                                                                                                                            Downloads

                                                                                                                                            • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53
                                                                                                                                              Filesize

                                                                                                                                              471B

                                                                                                                                              MD5

                                                                                                                                              f3409bd91920eb99f49a4db4bb6b755d

                                                                                                                                              SHA1

                                                                                                                                              e3e407489814c8945f0a127b1b2063ab2bc85105

                                                                                                                                              SHA256

                                                                                                                                              0f060af0d7f6005d221c3d36eea835f58f86f85eb0884b1a50409a1de3874868

                                                                                                                                              SHA512

                                                                                                                                              1834cc4bba00c96c3228b8f1624c4c57fb901503401b14073d73305a9a9cb5789abe1191646c480f42452958d2aec5ae43642c7b5c6a90aab59e52a9ae6f85e9

                                                                                                                                              Download Submit

                                                                                                                                            • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53
                                                                                                                                              Filesize

                                                                                                                                              412B

                                                                                                                                              MD5

                                                                                                                                              24c4f492d8abf9dda3e8d1ecd3a7df06

                                                                                                                                              SHA1

                                                                                                                                              9d5a800f52a4b075cb17b34a6fc5496f29187a64

                                                                                                                                              SHA256

                                                                                                                                              b8dbcc05e168c55aa54ef14ad1c082fe8cb8cef4097d30cba0194f4664d6b60f

                                                                                                                                              SHA512

                                                                                                                                              203a036f7425f570187f171ea6adc1f5f3aa86a0865058d9805a06c3f52b0f9674b6de6fc08db559fb58e941cfa0e818ca96cd0dfad52bd903f67b7daf900ebb

                                                                                                                                              Download Submit

                                                                                                                                            • C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                              Filesize

                                                                                                                                              97B

                                                                                                                                              MD5

                                                                                                                                              100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                              SHA1

                                                                                                                                              f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                              SHA256

                                                                                                                                              f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                              SHA512

                                                                                                                                              b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                              Download Submit

                                                                                                                                            • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                              Filesize

                                                                                                                                              97B

                                                                                                                                              MD5

                                                                                                                                              100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                              SHA1

                                                                                                                                              f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                              SHA256

                                                                                                                                              f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                              SHA512

                                                                                                                                              b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                              Download Submit

                                                                                                                                            • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                              Filesize

                                                                                                                                              97B

                                                                                                                                              MD5

                                                                                                                                              100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                              SHA1

                                                                                                                                              f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                              SHA256

                                                                                                                                              f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                              SHA512

                                                                                                                                              b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                              Download Submit

                                                                                                                                            • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                              Filesize

                                                                                                                                              97B

                                                                                                                                              MD5

                                                                                                                                              100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                              SHA1

                                                                                                                                              f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                              SHA256

                                                                                                                                              f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                              SHA512

                                                                                                                                              b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                              Download Submit

                                                                                                                                            • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                              Filesize

                                                                                                                                              97B

                                                                                                                                              MD5

                                                                                                                                              100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                              SHA1

                                                                                                                                              f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                              SHA256

                                                                                                                                              f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                              SHA512

                                                                                                                                              b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                              Download Submit

                                                                                                                                            • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                              Filesize

                                                                                                                                              97B

                                                                                                                                              MD5

                                                                                                                                              100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                              SHA1

                                                                                                                                              f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                              SHA256

                                                                                                                                              f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                              SHA512

                                                                                                                                              b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                              Download Submit

                                                                                                                                            • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                              Filesize

                                                                                                                                              97B

                                                                                                                                              MD5

                                                                                                                                              100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                              SHA1

                                                                                                                                              f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                              SHA256

                                                                                                                                              f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                              SHA512

                                                                                                                                              b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                              Download Submit

                                                                                                                                            • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                              Filesize

                                                                                                                                              97B

                                                                                                                                              MD5

                                                                                                                                              100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                              SHA1

                                                                                                                                              f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                              SHA256

                                                                                                                                              f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                              SHA512

                                                                                                                                              b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                              Download Submit

                                                                                                                                            • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                              Filesize

                                                                                                                                              97B

                                                                                                                                              MD5

                                                                                                                                              100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                              SHA1

                                                                                                                                              f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                              SHA256

                                                                                                                                              f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                              SHA512

                                                                                                                                              b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                              Download Submit

                                                                                                                                            • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                              Filesize

                                                                                                                                              97B

                                                                                                                                              MD5

                                                                                                                                              100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                              SHA1

                                                                                                                                              f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                              SHA256

                                                                                                                                              f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                              SHA512

                                                                                                                                              b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                              Download Submit

                                                                                                                                            • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                              Filesize

                                                                                                                                              97B

                                                                                                                                              MD5

                                                                                                                                              100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                              SHA1

                                                                                                                                              f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                              SHA256

                                                                                                                                              f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                              SHA512

                                                                                                                                              b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                              Download Submit

                                                                                                                                            • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                              Filesize

                                                                                                                                              97B

                                                                                                                                              MD5

                                                                                                                                              100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                              SHA1

                                                                                                                                              f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                              SHA256

                                                                                                                                              f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                              SHA512

                                                                                                                                              b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                              Download Submit

                                                                                                                                            • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                              Filesize

                                                                                                                                              97B

                                                                                                                                              MD5

                                                                                                                                              100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                              SHA1

                                                                                                                                              f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                              SHA256

                                                                                                                                              f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                              SHA512

                                                                                                                                              b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                              Download Submit

                                                                                                                                            • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                              Filesize

                                                                                                                                              97B

                                                                                                                                              MD5

                                                                                                                                              100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                              SHA1

                                                                                                                                              f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                              SHA256

                                                                                                                                              f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                              SHA512

                                                                                                                                              b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                              Download Submit

                                                                                                                                            • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                              Filesize

                                                                                                                                              97B

                                                                                                                                              MD5

                                                                                                                                              100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                              SHA1

                                                                                                                                              f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                              SHA256

                                                                                                                                              f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                              SHA512

                                                                                                                                              b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                              Download Submit

                                                                                                                                            • C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\9DNZSKKP\microsoft.windows[1].xml
                                                                                                                                              Filesize

                                                                                                                                              97B

                                                                                                                                              MD5

                                                                                                                                              100b85d03c9a92f5de53e1f210dbd426

                                                                                                                                              SHA1

                                                                                                                                              f8f4f1693dd0158a5d715a6104cf88d5d8b2097b

                                                                                                                                              SHA256

                                                                                                                                              f42a921438bdea6baa25de36a2f4e7a25d21880514a0cecdd5e70914de65a630

                                                                                                                                              SHA512

                                                                                                                                              b66c1ef7b555cdc27afa1b62e618945ed41d2e32671b7155f05a81dcdf81d9c5b42d55fd993eaf3b83c60ff7a41198a3db8207367513f524f65ee37112405d91

                                                                                                                                              Download Submit

                                                                                                                                            • memory/220-102-0x0000000004BF0000-0x0000000004BF1000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              4KB

                                                                                                                                              Download

                                                                                                                                            • memory/392-231-0x0000020E990E0000-0x0000020E99100000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/392-229-0x0000020E98AD0000-0x0000020E98AF0000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/392-227-0x0000020E98B10000-0x0000020E98B30000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/440-361-0x0000000004280000-0x0000000004281000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              4KB

                                                                                                                                              Download

                                                                                                                                            • memory/632-91-0x000002166EA60000-0x000002166EA80000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/632-89-0x000002166E650000-0x000002166E670000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/632-87-0x000002166E690000-0x000002166E6B0000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/1208-254-0x0000029798230000-0x0000029798250000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/1208-257-0x0000029798640000-0x0000029798660000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/1208-251-0x0000029798270000-0x0000029798290000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/1304-44-0x00000211038A0000-0x00000211038C0000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/1304-42-0x0000021103290000-0x00000211032B0000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/1304-40-0x00000211032D0000-0x00000211032F0000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/1340-314-0x00000000043B0000-0x00000000043B1000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              4KB

                                                                                                                                              Download

                                                                                                                                            • memory/1684-345-0x000001C4DE5C0000-0x000001C4DE5E0000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/1684-347-0x000001C4DE580000-0x000001C4DE5A0000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/1684-351-0x000001C4DE990000-0x000001C4DE9B0000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/2128-79-0x00000000043A0000-0x00000000043A1000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              4KB

                                                                                                                                              Download

                                                                                                                                            • memory/2188-371-0x00000207B0900000-0x00000207B0920000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/2188-369-0x00000207B0940000-0x00000207B0960000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/2188-374-0x00000207B0D10000-0x00000207B0D30000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/2240-32-0x0000000004950000-0x0000000004951000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              4KB

                                                                                                                                              Download

                                                                                                                                            • memory/2368-338-0x0000000004A80000-0x0000000004A81000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              4KB

                                                                                                                                              Download

                                                                                                                                            • memory/2472-115-0x00000213155E0000-0x0000021315600000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/2472-112-0x00000213151D0000-0x00000213151F0000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/2472-110-0x0000021315210000-0x0000021315230000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/2720-10-0x0000000004930000-0x0000000004931000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              4KB

                                                                                                                                              Download

                                                                                                                                            • memory/2792-183-0x000002ED8E5E0000-0x000002ED8E600000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/2792-185-0x000002ED8EBF0000-0x000002ED8EC10000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/2792-180-0x000002ED8E820000-0x000002ED8E840000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/2796-172-0x0000000004D60000-0x0000000004D61000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              4KB

                                                                                                                                              Download

                                                                                                                                            • memory/3172-243-0x00000000045E0000-0x00000000045E1000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              4KB

                                                                                                                                              Download

                                                                                                                                            • memory/3264-279-0x0000023F3D930000-0x0000023F3D950000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/3264-277-0x0000023F3D520000-0x0000023F3D540000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/3264-275-0x0000023F3D560000-0x0000023F3D580000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/3504-267-0x00000000042D0000-0x00000000042D1000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              4KB

                                                                                                                                              Download

                                                                                                                                            • memory/3880-157-0x000001B209B60000-0x000001B209B80000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/3880-161-0x000001B209F30000-0x000001B209F50000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/3880-159-0x000001B209B20000-0x000001B209B40000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/3932-135-0x0000019496470000-0x0000019496490000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/3932-137-0x0000019496880000-0x00000194968A0000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/3932-133-0x00000194964B0000-0x00000194964D0000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/3940-55-0x00000000040D0000-0x00000000040D1000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              4KB

                                                                                                                                              Download

                                                                                                                                            • memory/4004-219-0x0000000004BB0000-0x0000000004BB1000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              4KB

                                                                                                                                              Download

                                                                                                                                            • memory/4352-196-0x00000000040A0000-0x00000000040A1000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              4KB

                                                                                                                                              Download

                                                                                                                                            • memory/4504-299-0x000001D133510000-0x000001D133530000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/4504-301-0x000001D1334D0000-0x000001D1334F0000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/4504-304-0x000001D133AE0000-0x000001D133B00000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/4756-66-0x000002EA3C370000-0x000002EA3C390000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/4756-68-0x000002EA3C780000-0x000002EA3C7A0000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/4756-63-0x000002EA3C3B0000-0x000002EA3C3D0000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/4816-291-0x00000000048B0000-0x00000000048B1000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              4KB

                                                                                                                                              Download

                                                                                                                                            • memory/4896-207-0x0000020816AA0000-0x0000020816AC0000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/4896-205-0x0000020816480000-0x00000208164A0000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/4896-203-0x00000208164C0000-0x00000208164E0000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/5016-125-0x0000000004EA0000-0x0000000004EA1000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              4KB

                                                                                                                                              Download

                                                                                                                                            • memory/5024-326-0x000001B96E330000-0x000001B96E350000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/5024-324-0x000001B96DF20000-0x000001B96DF40000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/5024-322-0x000001B96DF60000-0x000001B96DF80000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/5052-20-0x000001D239DA0000-0x000001D239DC0000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/5052-17-0x000001D239DE0000-0x000001D239E00000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/5052-22-0x000001D23A1B0000-0x000001D23A1D0000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              128KB

                                                                                                                                              Download

                                                                                                                                            • memory/5052-150-0x0000000004CD0000-0x0000000004CD1000-memory.dmp

                                                                                                                                              Filesize

                                                                                                                                              4KB

                                                                                                                                              Download